This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json) Hash identifier: /dzFx44OUukRwGBffmPBlIJrDneg22i8bPVklrjcbI4= Subject key identifier: D6:30:9B:0F:85:A0:CC:9B:FE:69:88:08:50:6F:97:C7:1D:4A:9E:C7 Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Certificate serial: 019C2216CFC78F76CF198C67A590E22E0EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft Manifest number: 05FA Signing time: Tue 03 Feb 2026 06:00:46 +0000 Manifest this update: Tue 03 Feb 2026 06:00:46 +0000 Manifest next update: Wed 04 Feb 2026 06:00:46 +0000 Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=) 2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: /zUDZGiMSaLDr44OW9w75OKA7q0AkYNUvmHTA6J8vc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:16:cf:c7:8f:76:cf:19:8c:67:a5:90:e2:2e:0e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Validity Not Before: Feb 3 06:00:46 2026 GMT Not After : Feb 4 06:00:46 2026 GMT Subject: CN=d6309b0f85a0cc9bfe698808506f97c71d4a9ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:67:ba:da:37:bf:b8:1a:a6:a2:5d:be:e9: 48:b3:6b:0e:da:29:7d:00:bb:c6:de:e5:65:7d:d8: 0e:66:f0:c2:38:5e:f0:bf:25:1e:93:ec:e9:c7:d7: c2:0f:8f:dd:f2:5f:a3:f5:da:1c:77:e4:63:49:be: c6:e4:c5:bf:29:95:60:fb:2d:ef:ac:b3:72:83:1f: d9:79:4a:d2:e5:38:b0:4a:f9:fd:22:09:7d:5e:b1: c7:7e:f3:9c:09:7b:04:94:97:00:74:33:18:96:8f: 88:71:6c:31:ac:3c:e8:d4:a6:dd:3b:bd:e5:b7:a1: c4:b9:12:6e:8b:d5:64:cc:4c:33:58:29:30:78:29: d1:17:d1:ff:01:1b:c4:43:8e:ea:ef:65:7a:fd:f7: cb:df:01:d7:4a:62:a9:c0:a4:03:49:47:d7:a5:48: f5:74:21:34:82:36:28:35:8d:29:cd:a0:fe:18:80: e0:1a:26:d9:ef:ee:4f:83:9c:85:1e:7c:93:e4:37: 57:fc:68:f2:77:de:00:15:fb:1c:ff:3a:01:31:87: c7:5d:3d:6b:de:fc:47:04:35:06:4c:74:87:7b:83: 07:bd:83:ba:fb:e7:ab:73:8d:55:07:4e:4a:f1:71: bb:dd:d6:f8:12:0b:cf:9a:7a:ae:07:7d:a7:f4:8e: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:9B:0F:85:A0:CC:9B:FE:69:88:08:50:6F:97:C7:1D:4A:9E:C7 X509v3 Authority Key Identifier: keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:57:8a:a5:9d:d0:d0:39:6b:f2:2c:e8:60:cb:de:17:d0:d1: 2a:6a:18:80:a7:79:8b:98:c1:ce:52:98:ab:b1:78:5e:a0:32: 12:ae:18:ab:53:89:ef:d8:ed:56:7a:fb:1d:61:63:dd:83:48: 55:15:d4:86:0b:98:49:c5:25:66:56:f6:e9:b1:21:05:f8:3e: 6d:17:34:c3:cd:0d:f3:56:a5:54:f5:bb:61:b4:b7:85:86:e9: de:07:da:91:3f:ba:cd:15:a6:5d:22:29:ba:8e:b4:89:c0:41: c2:30:73:8b:01:22:dc:47:b4:28:d7:aa:2a:02:a9:2a:42:94: 65:de:da:18:1e:44:5d:60:d4:03:4c:d5:b6:b1:c6:27:fe:97: f5:52:6d:8d:c4:26:14:cc:56:b2:6f:63:c5:4c:f3:59:7a:8c: 88:b9:dd:48:65:d2:89:e7:34:c8:2a:a7:e8:54:cc:aa:c6:a0: e5:de:76:cc:5f:2b:13:4b:08:4d:1d:02:0a:46:e8:7f:d7:3e: 8a:af:cb:67:7b:5e:a4:1d:18:f0:d8:95:5b:94:99:16:f3:33: 97:e4:17:bb:e3:c9:4c:d2:b5:fd:ff:ae:66:04:e2:19:0a:dc: 1f:bf:73:35:f3:3d:7e:39:80:ba:b7:1d:db:68:e5:ff:20:f4: b7:c5:ef:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwiFs/Hj3bPGYxnpZDiLg76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl NGM5MzEwHhcNMjYwMjAzMDYwMDQ2WhcNMjYwMjA0MDYwMDQ2WjAzMTEwLwYDVQQD EyhkNjMwOWIwZjg1YTBjYzliZmU2OTg4MDg1MDZmOTdjNzFkNGE5ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37Fnuto3v7gapqJdvulIs2sO2il9 ALvG3uVlfdgOZvDCOF7wvyUek+zpx9fCD4/d8l+j9docd+RjSb7G5MW/KZVg+y3v rLNygx/ZeUrS5TiwSvn9Igl9XrHHfvOcCXsElJcAdDMYlo+IcWwxrDzo1KbdO73l t6HEuRJui9VkzEwzWCkweCnRF9H/ARvEQ47q72V6/ffL3wHXSmKpwKQDSUfXpUj1 dCE0gjYoNY0pzaD+GIDgGibZ7+5Pg5yFHnyT5DdX/Gjyd94AFfsc/zoBMYfHXT1r 3vxHBDUGTHSHe4MHvYO6++erc41VB05K8XG73db4EgvPmnquB32n9I6EdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYwmw+FoMyb/mmICFBvl8cdSp7HMB8GA1UdIwQY MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFeKpZ3Q 0Dlr8izoYMveF9DRKmoYgKd5i5jBzlKYq7F4XqAyEq4Yq1OJ79jtVnr7HWFj3YNI VRXUhguYScUlZlb26bEhBfg+bRc0w80N81alVPW7YbS3hYbp3gfakT+6zRWmXSIp uo60icBBwjBziwEi3Ee0KNeqKgKpKkKUZd7aGB5EXWDUA0zVtrHGJ/6X9VJtjcQm FMxWsm9jxUzzWXqMiLndSGXSiec0yCqn6FTMqsag5d52zF8rE0sITR0CCkbof9c+ iq/LZ3tepB0Y8NiVW5SZFvMzl+QXu+PJTNK1/f+uZgTiGQrcH79zNfM9fjmAurcd 22jl/yD0t8XvMw== -----END CERTIFICATE-----Generated at Tue Feb 3 08:14:10 2026 by rpki-client