This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: MvpIyOUQu8dMTRKVxa0YIPvoimFcUsDZDoUk1iDwzVk= Subject key identifier: 61:1C:B8:EC:DF:A9:01:AD:AC:D3:8F:2D:AB:E1:1E:87:D8:55:C9:04 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019C217287D6C1F51B7E165BBB7842782BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0BEA Signing time: Tue 03 Feb 2026 03:01:19 +0000 Manifest this update: Tue 03 Feb 2026 03:01:19 +0000 Manifest next update: Wed 04 Feb 2026 03:01:19 +0000 Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: lBgfGdfEdGMASlwW9kCUk6GVIqmhO4MNEclkSudAChQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:21:72:87:d6:c1:f5:1b:7e:16:5b:bb:78:42:78:2b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Feb 3 03:01:19 2026 GMT Not After : Feb 4 03:01:19 2026 GMT Subject: CN=611cb8ecdfa901adacd38f2dabe11e87d855c904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:f4:30:5d:57:4a:7e:07:17:57:78:29:e3: 06:7f:bd:d1:a7:17:f3:79:b7:14:80:cd:a1:46:06: 8f:00:48:f5:0e:65:1b:27:40:93:14:4a:63:28:32: 68:99:55:07:81:0e:f6:5b:1b:f7:68:11:35:d0:74: ba:95:9f:33:89:13:c9:ae:53:76:26:0c:06:ea:3b: ea:ff:0f:f6:2e:7d:30:39:d1:62:88:19:f5:ae:cb: b7:6a:72:ec:ea:22:19:7c:82:13:06:7d:fa:31:2b: d5:1b:7e:57:db:08:67:dc:83:7b:2b:0e:4e:0b:c2: 8a:c9:4f:cc:3b:f5:23:ec:b7:aa:ea:74:40:c4:d8: 43:b8:2d:4c:aa:df:19:48:ae:04:54:50:5f:f1:99: 82:82:3b:0e:73:c5:48:59:95:5c:82:69:1b:67:08: 6d:2e:c9:ef:bb:b4:4d:be:2d:35:f1:10:7d:30:29: f6:57:0e:42:db:c6:bb:48:f9:1a:f3:bb:89:9b:f5: 63:d2:d5:2b:ac:65:45:e8:8c:8a:aa:0f:7f:f3:dd: 2c:b7:cc:1a:24:13:86:4f:9d:78:e5:73:c5:b1:b0: 52:b8:66:41:58:0c:f1:a2:25:e4:59:f0:27:0d:d6: d9:39:4d:db:bb:2a:e0:81:af:64:15:e2:ed:33:55: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:B8:EC:DF:A9:01:AD:AC:D3:8F:2D:AB:E1:1E:87:D8:55:C9:04 X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:85:bf:aa:b6:3d:0e:f3:ea:ef:f2:3f:e6:3a:19:83:64:af: fc:f7:7f:91:cb:8e:fd:e8:39:91:18:02:4c:f8:d6:24:42:0d: 08:26:c8:d8:43:75:3f:5e:70:1e:c2:e3:f2:ca:93:02:85:fd: ef:25:fb:b1:0b:92:55:b7:74:f2:3d:6c:7a:93:64:cc:c5:b3: 03:70:23:58:ed:37:1c:b7:1d:06:06:70:1e:3d:83:5c:88:eb: 45:a6:2c:04:56:0d:35:e8:b3:d6:7f:8b:b5:7c:6c:25:30:00: c2:e6:93:41:41:4e:73:3c:31:68:37:15:d0:0e:7e:e6:0a:8a: 3d:e3:b4:b8:4d:01:63:f0:58:06:51:c6:8e:30:6d:69:f5:e6: ba:ab:12:20:b8:7e:18:0e:14:39:5d:00:82:6b:2e:b3:82:71: a3:40:a1:b3:34:a5:98:64:84:b0:e6:fb:37:0a:15:d3:3c:7c: f6:f6:80:dd:56:78:4f:50:62:0a:74:63:82:13:73:b1:7f:70: 4f:8d:63:d8:07:c4:e4:4d:1d:ca:32:e8:54:2c:c5:da:6a:17: 54:88:92:84:82:48:71:3f:98:72:81:3c:a1:7d:2c:50:1e:dd: 7d:9f:e7:e0:a0:e7:ae:16:b5:fe:ff:02:83:37:ec:73:73:6d: b7:f8:e2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwhcofWwfUbfhZbu3hCeCv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjYwMjAzMDMwMTE5WhcNMjYwMjA0MDMwMTE5WjAzMTEwLwYDVQQD Eyg2MTFjYjhlY2RmYTkwMWFkYWNkMzhmMmRhYmUxMWU4N2Q4NTVjOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHr0MF1XSn4HF1d4KeMGf73Rpxfz ebcUgM2hRgaPAEj1DmUbJ0CTFEpjKDJomVUHgQ72Wxv3aBE10HS6lZ8ziRPJrlN2 JgwG6jvq/w/2Ln0wOdFiiBn1rsu3anLs6iIZfIITBn36MSvVG35X2whn3IN7Kw5O C8KKyU/MO/Uj7Leq6nRAxNhDuC1Mqt8ZSK4EVFBf8ZmCgjsOc8VIWZVcgmkbZwht Lsnvu7RNvi018RB9MCn2Vw5C28a7SPka87uJm/Vj0tUrrGVF6IyKqg9/890st8wa JBOGT5145XPFsbBSuGZBWAzxoiXkWfAnDdbZOU3buyrgga9kFeLtM1WbZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEcuOzfqQGtrNOPLavhHofYVckEMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4W/qrY9 DvPq7/I/5joZg2Sv/Pd/kcuO/eg5kRgCTPjWJEINCCbI2EN1P15wHsLj8sqTAoX9 7yX7sQuSVbd08j1sepNkzMWzA3AjWO03HLcdBgZwHj2DXIjrRaYsBFYNNeiz1n+L tXxsJTAAwuaTQUFOczwxaDcV0A5+5gqKPeO0uE0BY/BYBlHGjjBtafXmuqsSILh+ GA4UOV0Agmsus4Jxo0ChszSlmGSEsOb7NwoV0zx89vaA3VZ4T1BiCnRjghNzsX9w T41j2AfE5E0dyjLoVCzF2moXVIiShIJIcT+YcoE8oX0sUB7dfZ/n4KDnrha1/v8C gzfsc3Ntt/jiwQ== -----END CERTIFICATE-----Generated at Tue Feb 3 08:56:32 2026 by rpki-client