This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json) Hash identifier: xm4G3q4ZDNI2fyxLIwYKx2tVcIebx41rloNr1VEzr2s= Subject key identifier: 9A:B7:B9:7F:6F:7B:B3:D8:72:27:F1:11:61:54:85:A9:AC:4A:6A:DE Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Certificate serial: 019C27AB4AACD2D03062E3A320332EF6991A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft Manifest number: 0987 Signing time: Wed 04 Feb 2026 08:01:03 +0000 Manifest this update: Wed 04 Feb 2026 08:01:03 +0000 Manifest next update: Thu 05 Feb 2026 08:01:03 +0000 Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: llXa0KCTuX5Fs+GJP/riGXa/E97816jDVKZL3/wRD5A=) 2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=) 3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=) 4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=) 5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=) 6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:ab:4a:ac:d2:d0:30:62:e3:a3:20:33:2e:f6:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Validity Not Before: Feb 4 08:01:03 2026 GMT Not After : Feb 5 08:01:03 2026 GMT Subject: CN=9ab7b97f6f7bb3d87227f111615485a9ac4a6ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:ee:39:00:0d:57:0e:50:c4:43:a7:70:08: af:39:20:56:13:92:72:43:af:96:48:7d:94:db:05: 33:cd:36:84:6c:5f:42:c1:d2:e0:47:ba:c8:ef:ea: 9d:5a:a6:3f:0e:5a:d5:08:14:b7:6d:c2:da:7e:5e: 9e:3f:68:bc:a3:77:29:63:82:9b:29:60:e7:14:20: a7:cb:79:fc:4f:b5:13:16:98:5c:ca:0b:e4:e5:7e: 11:90:38:2b:38:f6:fc:15:f6:db:5e:b6:27:c3:4c: 52:e3:e3:54:69:28:ba:1c:5e:c7:5a:20:89:2f:f0: a1:3b:11:5d:ce:2c:1a:cb:da:5e:77:1e:f8:28:9b: 48:c2:d4:56:8b:52:a5:04:85:0a:c9:d2:f1:97:90: c2:c6:a5:69:76:92:f4:9f:70:a9:20:c7:48:b8:81: 02:b7:e2:47:cd:48:8e:9c:6b:1a:0d:3f:a4:98:f2: 24:b9:f8:c5:53:41:01:f4:44:82:16:02:ab:fd:7c: 60:d2:b6:9b:65:5c:59:77:9f:51:b0:f5:7c:de:cc: a9:de:f0:ee:ad:2b:39:ff:b4:be:d4:fc:b1:44:d7: 49:b4:17:3e:d3:2f:5b:1a:1d:86:dc:96:5c:a2:c0: e4:6f:e4:a1:ab:17:86:f6:00:da:61:40:8e:4e:a5: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B7:B9:7F:6F:7B:B3:D8:72:27:F1:11:61:54:85:A9:AC:4A:6A:DE X509v3 Authority Key Identifier: keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:68:eb:48:aa:2f:b1:14:e4:12:0d:72:ac:23:80:69:1f:87: 8f:a0:89:7f:86:27:5b:93:7a:7a:5c:17:04:be:0f:3d:99:51: a6:d6:39:b3:33:6c:ca:e8:79:ec:d8:83:3f:f2:5f:c8:8b:81: 75:c7:b5:a4:f8:48:df:8d:1c:13:1d:3c:3a:b5:cf:7b:13:02: 07:91:53:9f:52:e0:ef:5a:3d:28:bc:34:3d:57:f8:f8:41:a5: b3:be:fd:b1:b2:90:cb:ce:b6:bd:08:2e:fa:e0:ef:42:a4:f3: a6:5b:1f:37:88:f7:74:40:d8:f0:64:4b:36:92:a8:6f:71:8c: c1:d2:a2:b6:b5:b0:e4:01:e1:3c:18:c2:ad:54:c0:8c:86:41: b6:ff:a6:14:5b:5e:c0:6c:5d:26:d5:ad:75:0d:af:de:c2:95: 71:7c:90:87:8b:5b:25:84:e4:f5:e4:35:99:b7:9d:3e:4a:79: 06:87:b8:be:38:57:e5:60:2c:d7:3e:47:d5:a9:34:a1:91:97: 2b:7c:7e:4f:4a:ef:da:81:23:ed:e9:e7:e9:a9:bc:89:41:d0: fb:86:28:74:1a:36:73:9e:cb:31:2a:4d:18:66:1a:25:09:fe: 2a:5c:fe:b9:50:8a:67:72:f6:5b:df:68:60:04:1d:79:74:61: 5f:4f:e9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwnq0qs0tAwYuOjIDMu9pkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk MDc1YjEwHhcNMjYwMjA0MDgwMTAzWhcNMjYwMjA1MDgwMTAzWjAzMTEwLwYDVQQD Eyg5YWI3Yjk3ZjZmN2JiM2Q4NzIyN2YxMTE2MTU0ODVhOWFjNGE2YWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6juOQANVw5QxEOncAivOSBWE5Jy Q6+WSH2U2wUzzTaEbF9CwdLgR7rI7+qdWqY/DlrVCBS3bcLafl6eP2i8o3cpY4Kb KWDnFCCny3n8T7UTFphcygvk5X4RkDgrOPb8FfbbXrYnw0xS4+NUaSi6HF7HWiCJ L/ChOxFdziway9pedx74KJtIwtRWi1KlBIUKydLxl5DCxqVpdpL0n3CpIMdIuIEC t+JHzUiOnGsaDT+kmPIkufjFU0EB9ESCFgKr/Xxg0rabZVxZd59RsPV83syp3vDu rSs5/7S+1PyxRNdJtBc+0y9bGh2G3JZcosDkb+ShqxeG9gDaYUCOTqXZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq3uX9ve7PYcifxEWFUhamsSmreMB8GA1UdIwQY MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2jrSKov sRTkEg1yrCOAaR+Hj6CJf4YnW5N6elwXBL4PPZlRptY5szNsyuh57NiDP/JfyIuB dce1pPhI340cEx08OrXPexMCB5FTn1Lg71o9KLw0PVf4+EGls779sbKQy862vQgu +uDvQqTzplsfN4j3dEDY8GRLNpKob3GMwdKitrWw5AHhPBjCrVTAjIZBtv+mFFte wGxdJtWtdQ2v3sKVcXyQh4tbJYTk9eQ1mbedPkp5Boe4vjhX5WAs1z5H1ak0oZGX K3x+T0rv2oEj7enn6am8iUHQ+4YodBo2c57LMSpNGGYaJQn+Klz+uVCKZ3L2W99o YAQdeXRhX0/p4g== -----END CERTIFICATE-----Generated at Wed Feb 4 15:09:46 2026 by rpki-client