This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: iD2UnrCpvFrsrjn/Yeo+3Yy8qr2/zvgy3xDYv1Saw+U= Subject key identifier: E4:30:D4:3B:6B:62:E0:03:36:8C:9F:36:C4:8D:36:83:5D:50:43:79 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019C2E1AFFEA8CF49FE84B428EF7CFF0AEDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 13E0 Signing time: Thu 05 Feb 2026 14:00:47 +0000 Manifest this update: Thu 05 Feb 2026 14:00:47 +0000 Manifest next update: Fri 06 Feb 2026 14:00:47 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: 7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa (hash: J9SJjSKqLYuFsUDjJoCt3JIVxoO5phlJCjXL8OymbCw=) 3: 7R5n93dmInVIhZo2ySnmSXNzAWI.roa (hash: i6QWAb1/llyvXfpufic5ZRyG2DfPoHNYLgosjpBJkgE=) 4: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 5: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: l5FsumYYj0yVZbZuzDlbRbgF/ita1pUflUcLaNT+BO4=) 8: euBDK0teiudHQhrJi2_JfLpHbIo.roa (hash: 9Ch3Z5Y1YUurOyFvZ1PubLvXMBKJAt06gWqZgpWHSfM=) 9: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 11: q0DtQiqbRO1kiEzIVX5k6xXoq10.roa (hash: VGW6dfujXrAz0Uz3C08uLwMIn29nKSm2vfftvsO0bU8=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:1a:ff:ea:8c:f4:9f:e8:4b:42:8e:f7:cf:f0:ae:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Feb 5 14:00:47 2026 GMT Not After : Feb 6 14:00:47 2026 GMT Subject: CN=e430d43b6b62e003368c9f36c48d36835d504379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:bc:26:f4:69:14:ad:01:56:b1:a4:d9:1a: 72:be:24:ef:bf:d4:57:89:81:8c:d4:b9:9b:03:d0: ca:74:d5:0b:2e:30:7e:30:63:20:9e:7d:f9:0f:d1: 86:65:6f:d5:7a:28:97:db:0b:58:33:e6:64:d2:17: 10:fb:7b:87:a9:b5:8b:ab:b9:25:31:3b:fa:c3:30: 45:20:4a:fa:09:f8:ec:ed:67:13:e2:4c:bb:f2:0f: 17:e5:b1:c3:8c:83:17:f3:e7:84:7b:e7:eb:e7:7f: ab:1c:02:5d:78:0e:97:61:0f:54:34:c2:9e:85:aa: ee:08:68:98:0b:37:a2:1a:79:ac:eb:95:d6:54:72: b4:27:9e:3a:6c:4b:c8:bc:c1:d0:6a:b9:99:d0:f1: 54:30:00:5e:86:e4:f6:4d:53:45:0c:cb:cf:fa:4a: 8e:6a:60:f8:4a:c2:20:ef:bb:0c:f9:70:aa:14:e0: 49:10:5d:8c:99:35:75:4b:c7:42:12:3d:2d:03:91: b6:d3:31:d6:fc:e5:32:49:28:6c:0f:3c:cc:ae:92: 23:b0:da:41:a3:68:1c:e2:a9:39:2f:42:48:06:51: 90:fb:e3:19:89:75:fc:1e:6d:f3:97:d8:09:bd:53: 6a:c4:67:b3:26:72:50:35:2e:18:03:d7:6b:58:a7: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:D4:3B:6B:62:E0:03:36:8C:9F:36:C4:8D:36:83:5D:50:43:79 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:22:ef:5a:d5:d9:9a:9c:16:75:07:e0:ea:1c:8c:8e:ab:00: b4:5f:46:d5:98:29:4e:f3:e4:99:93:dd:0d:5b:49:01:0d:30: 28:3e:24:53:55:4f:97:2a:89:82:4e:87:a1:bf:d0:4d:a3:0a: be:8a:88:d7:bd:c4:c5:e1:56:e8:59:79:9d:8a:36:d7:3a:f1: 9a:e9:ff:f8:e9:26:48:e2:86:e8:7b:7c:1d:3d:ff:34:87:a0: 81:50:ba:33:3f:50:2a:8f:29:4b:4a:89:32:30:89:27:92:af: 8f:be:68:5c:01:bc:29:76:9f:90:21:b1:90:16:25:22:d6:70: 73:05:ce:7a:79:c2:d4:81:ef:7f:5c:dd:53:0f:19:36:b6:f5: 60:45:7a:bb:02:bc:98:08:51:8b:62:04:bd:a4:49:1c:31:10: 59:23:c6:c3:fc:7c:6d:83:00:0a:f4:f5:e4:be:65:b9:7d:bb: 49:d7:5b:d6:ea:85:bb:31:77:fa:e7:c4:d4:56:b3:87:1a:c9: 20:be:ad:ca:6b:08:4b:d6:ec:b9:5d:d8:50:00:c8:91:79:77: cb:86:b1:a5:59:0c:36:5c:11:d6:aa:d3:ca:00:59:7b:0a:d4: 13:d2:a1:81:23:2a:4a:96:39:c4:e5:0b:fb:cd:fd:ff:f1:eb: e8:ad:38:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuGv/qjPSf6EtCjvfP8K7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMjA1MTQwMDQ3WhcNMjYwMjA2MTQwMDQ3WjAzMTEwLwYDVQQD EyhlNDMwZDQzYjZiNjJlMDAzMzY4YzlmMzZjNDhkMzY4MzVkNTA0Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwa8JvRpFK0BVrGk2RpyviTvv9RX iYGM1LmbA9DKdNULLjB+MGMgnn35D9GGZW/VeiiX2wtYM+Zk0hcQ+3uHqbWLq7kl MTv6wzBFIEr6Cfjs7WcT4ky78g8X5bHDjIMX8+eEe+fr53+rHAJdeA6XYQ9UNMKe haruCGiYCzeiGnms65XWVHK0J546bEvIvMHQarmZ0PFUMABehuT2TVNFDMvP+kqO amD4SsIg77sM+XCqFOBJEF2MmTV1S8dCEj0tA5G20zHW/OUySShsDzzMrpIjsNpB o2gc4qk5L0JIBlGQ++MZiXX8Hm3zl9gJvVNqxGezJnJQNS4YA9drWKdhOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQw1DtrYuADNoyfNsSNNoNdUEN5MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSLvWtXZ mpwWdQfg6hyMjqsAtF9G1ZgpTvPkmZPdDVtJAQ0wKD4kU1VPlyqJgk6Hob/QTaMK voqI173ExeFW6Fl5nYo21zrxmun/+OkmSOKG6Ht8HT3/NIeggVC6Mz9QKo8pS0qJ MjCJJ5Kvj75oXAG8KXafkCGxkBYlItZwcwXOennC1IHvf1zdUw8ZNrb1YEV6uwK8 mAhRi2IEvaRJHDEQWSPGw/x8bYMACvT15L5luX27Sddb1uqFuzF3+ufE1FazhxrJ IL6tymsIS9bsuV3YUADIkXl3y4axpVkMNlwR1qrTygBZewrUE9KhgSMqSpY5xOUL +839//Hr6K04cA== -----END CERTIFICATE-----Generated at Thu Feb 5 20:51:09 2026 by rpki-client