This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: vrdvdMLDJZ2mE4p2VoSfHQgCouIOPhcccTNPNb5K0l0= Subject key identifier: 24:EC:81:BF:27:2F:98:3B:B6:1E:60:4D:1A:DB:2F:24:E3:03:DA:59 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019C25BCD341AD3FA0FD0DE47058DAB089A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 1019 Signing time: Tue 03 Feb 2026 23:00:57 +0000 Manifest this update: Tue 03 Feb 2026 23:00:57 +0000 Manifest next update: Wed 04 Feb 2026 23:00:57 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: F0yBqDMqCNM0pe9rWG8uj3CbYkc.roa (hash: XCZ0JTvoTGZ62Q11PauRxwPTiRMvREV2N/LHqEFLe2w=) 4: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 5: GyehNP3GNMAkeXlLJEWyWCcQtzU.roa (hash: IpYqqZa4sTN+dmYx8FkURhFjGrU2UAuArFl+utDihPQ=) 6: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 7: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: HYyQTF9OQ6P5BLw1eqCgewDN4QvDaZVsC4UpdCZ6ENU=) 8: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 9: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 10: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 11: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:bc:d3:41:ad:3f:a0:fd:0d:e4:70:58:da:b0:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Feb 3 23:00:57 2026 GMT Not After : Feb 4 23:00:57 2026 GMT Subject: CN=24ec81bf272f983bb61e604d1adb2f24e303da59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:10:22:b0:4c:27:70:69:25:73:4b:7b:6e: 5f:07:5c:f5:4c:38:18:68:6f:73:30:8b:f7:84:d5: 74:44:d9:ef:91:de:8f:65:8c:a0:a3:8a:87:fa:b9: 7e:cb:d7:2c:43:dd:11:19:f3:0d:5d:18:f9:82:07: 55:89:ea:dd:df:ac:90:2c:05:51:8b:6f:6e:c5:92: 09:d9:5c:08:1a:08:3d:8a:f4:cb:b1:39:1f:f4:57: 51:26:f8:76:24:fb:b3:d1:5e:12:02:f1:a7:56:51: 92:eb:ac:47:28:10:bd:6c:82:84:fe:29:de:38:e1: 7f:30:1e:78:68:71:fd:75:7a:b2:11:b6:86:2d:63: 82:f3:2d:de:ba:59:0c:8c:52:c5:25:16:4e:d2:6d: 97:ad:4b:67:28:e0:1e:33:b8:e5:6f:79:73:68:dc: 01:26:67:bc:ee:5e:6f:6f:8d:13:dd:72:b8:0a:20: 4f:c9:28:39:eb:56:85:c4:21:df:c5:fc:0d:7b:f3: f0:85:54:d3:64:da:91:db:32:eb:6b:be:c4:58:57: 00:be:42:42:f9:ed:65:08:8a:7d:1a:58:d7:3a:29: 62:47:7f:62:dc:2f:54:88:ba:68:e8:7c:34:24:bd: 9e:54:b1:b8:79:99:d4:8c:cf:5e:a9:c5:2e:c7:a0: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EC:81:BF:27:2F:98:3B:B6:1E:60:4D:1A:DB:2F:24:E3:03:DA:59 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:4b:ae:4a:e9:d9:72:67:73:e7:11:c3:71:b6:6c:be:1a: 29:b4:65:fe:ed:d2:fa:c6:88:51:69:04:b1:74:a5:de:36:97: b4:69:7c:11:3f:44:bf:6a:52:97:2f:04:9c:c9:a1:72:74:7a: ca:fd:d1:5e:9f:ad:ee:10:81:c1:fe:c2:a1:89:bc:2d:44:4e: 85:57:26:57:36:1f:2e:8a:34:b4:7e:94:bf:1b:c2:f2:e1:c3: 6e:0d:52:51:b7:3b:3d:32:08:34:e7:0d:ad:5a:77:fd:95:18: 94:b9:5f:db:6e:8b:1b:d1:a5:ab:ce:90:71:78:74:e7:92:65: 30:1f:4f:f5:67:55:4d:16:39:e0:80:ee:94:96:1b:9b:ef:ac: 28:44:24:86:74:34:1c:6a:58:70:a2:c5:7c:61:68:c6:db:f3: 1d:6c:a7:aa:10:dd:19:26:aa:6f:53:93:f2:ff:a6:e9:24:04: fd:74:6c:31:94:4e:1e:ea:3c:49:50:20:62:5b:4c:28:8a:89: e2:f8:53:25:75:19:c2:a9:93:34:42:2a:93:b9:30:a1:eb:7f: 49:7b:83:3c:83:3a:cb:30:b5:e7:c5:52:72:21:f1:14:8e:77: c3:44:d7:e5:89:ea:74:a1:7f:18:ea:53:06:17:b1:34:18:1c: 31:d3:ef:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlvNNBrT+g/Q3kcFjasImnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwMjAzMjMwMDU3WhcNMjYwMjA0MjMwMDU3WjAzMTEwLwYDVQQD EygyNGVjODFiZjI3MmY5ODNiYjYxZTYwNGQxYWRiMmYyNGUzMDNkYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1UQIrBMJ3BpJXNLe25fB1z1TDgY aG9zMIv3hNV0RNnvkd6PZYygo4qH+rl+y9csQ90RGfMNXRj5ggdVierd36yQLAVR i29uxZIJ2VwIGgg9ivTLsTkf9FdRJvh2JPuz0V4SAvGnVlGS66xHKBC9bIKE/ine OOF/MB54aHH9dXqyEbaGLWOC8y3eulkMjFLFJRZO0m2XrUtnKOAeM7jlb3lzaNwB Jme87l5vb40T3XK4CiBPySg561aFxCHfxfwNe/PwhVTTZNqR2zLra77EWFcAvkJC +e1lCIp9GljXOiliR39i3C9UiLpo6Hw0JL2eVLG4eZnUjM9eqcUux6CC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTsgb8nL5g7th5gTRrbLyTjA9pZMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+JLrkrp 2XJnc+cRw3G2bL4aKbRl/u3S+saIUWkEsXSl3jaXtGl8ET9Ev2pSly8EnMmhcnR6 yv3RXp+t7hCBwf7CoYm8LUROhVcmVzYfLoo0tH6UvxvC8uHDbg1SUbc7PTIINOcN rVp3/ZUYlLlf226LG9Glq86QcXh055JlMB9P9WdVTRY54IDulJYbm++sKEQkhnQ0 HGpYcKLFfGFoxtvzHWynqhDdGSaqb1OT8v+m6SQE/XRsMZROHuo8SVAgYltMKIqJ 4vhTJXUZwqmTNEIqk7kwoet/SXuDPIM6yzC158VSciHxFI53w0TX5YnqdKF/GOpT BhexNBgcMdPv8w== -----END CERTIFICATE-----Generated at Wed Feb 4 03:49:49 2026 by rpki-client