This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json) Hash identifier: pm8XtfntcAIryUP0gs6szEduHrgCvdW7ddJU4877M8g= Subject key identifier: 25:F5:18:90:92:50:DC:35:F5:84:37:F1:2A:CE:92:6D:B9:75:94:84 Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Certificate serial: 019BF8E40CBA664E5F793663FA2CB82F825C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft Manifest number: 0BD5 Signing time: Mon 26 Jan 2026 06:00:53 +0000 Manifest this update: Mon 26 Jan 2026 06:00:53 +0000 Manifest next update: Tue 27 Jan 2026 06:00:53 +0000 Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=) 2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: NE7DUT6eMZaqMz9ikikI/v/qVBUQ5V47TAdZp7o2spU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:0c:ba:66:4e:5f:79:36:63:fa:2c:b8:2f:82:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6 Validity Not Before: Jan 26 06:00:53 2026 GMT Not After : Jan 27 06:00:53 2026 GMT Subject: CN=25f518909250dc35f58437f12ace926db9759484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:c4:d4:3b:9f:d9:71:26:8f:b3:93:60:19: 18:19:1a:6f:3c:dc:d9:00:d2:83:2a:c1:b4:b7:f4: f1:2a:53:c5:ac:bb:74:11:6d:d3:c6:b1:8d:68:25: c6:5d:1d:8b:07:31:e6:cc:70:fc:48:6b:d9:68:c1: b4:1a:ea:a5:1f:3d:d8:65:87:f7:c8:b3:59:88:a3: 0d:23:f9:ae:5e:2b:91:9c:fd:22:8b:af:3c:60:de: 34:b9:79:cc:a2:be:8b:5c:b8:3a:77:19:00:c1:ba: 32:4e:83:ad:8d:9d:c7:f3:ea:85:1d:33:75:1b:d5: 05:81:74:5a:0f:5b:34:0c:b8:05:2a:02:45:ae:35: fa:2d:83:77:91:2a:25:4e:6a:1d:60:8b:11:e9:47: e0:e8:30:91:9f:b1:42:06:48:fd:3e:f4:4f:7e:34: 1f:00:f3:d1:08:9b:43:1f:3e:2f:fe:5a:70:f2:76: 01:62:f0:b8:85:04:8b:06:fa:2a:ae:42:47:fb:c2: 37:7a:94:df:52:81:7d:d1:dd:a5:94:4c:54:58:04: b9:34:55:b1:3e:5e:b4:f6:6c:ad:ac:32:86:1a:48: 20:1a:10:60:b7:8d:2b:d3:b2:09:10:74:75:1f:8c: 9b:87:64:34:70:af:e4:74:1a:05:ef:5b:82:c8:b4: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F5:18:90:92:50:DC:35:F5:84:37:F1:2A:CE:92:6D:B9:75:94:84 X509v3 Authority Key Identifier: keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fe:67:91:7e:65:54:5e:56:39:67:a1:28:44:db:78:1a:3e: 0d:d8:0c:95:e2:f1:b3:9c:aa:ad:ad:c7:92:96:5d:28:d9:42: ae:15:88:3a:8a:40:6f:58:79:e5:2b:05:7b:05:d1:89:34:b1: 28:bb:e2:92:35:93:be:db:99:76:ec:08:54:b6:2a:1d:a8:55: b3:29:cf:00:28:be:ce:94:fa:45:a7:cc:9e:1f:d4:02:34:75: 06:b8:f5:c1:14:de:53:43:f9:4e:5b:d7:58:f6:a4:2f:b5:18: 71:8a:8d:88:6d:75:10:47:ea:1b:31:19:7f:02:49:ba:f6:4c: 14:38:8d:73:d5:28:4f:23:64:29:86:ca:3e:66:52:25:46:42: 78:03:fe:66:e5:5e:a9:b4:51:a8:21:91:6d:a8:4c:52:15:b4: aa:e2:19:c3:12:6a:8a:e4:7f:db:8e:48:99:83:be:c1:51:b3: 5c:a6:88:e1:54:ff:f2:d7:f3:25:eb:72:aa:39:77:64:3f:b9: ef:e5:33:d5:4a:ee:bb:f8:b7:f5:5a:fd:94:46:65:7a:a2:f4: 7a:3c:54:1c:8f:6b:c4:c6:2a:a4:18:0f:79:92:b5:9a:5d:57: 0b:91:d8:f6:ac:55:ce:5d:6a:04:bf:7d:af:8b:dc:7e:98:bd: 3c:43:18:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45Ay6Zk5feTZj+iy4L4JcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk NTAzYzYwHhcNMjYwMTI2MDYwMDUzWhcNMjYwMTI3MDYwMDUzWjAzMTEwLwYDVQQD EygyNWY1MTg5MDkyNTBkYzM1ZjU4NDM3ZjEyYWNlOTI2ZGI5NzU5NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmPE1Duf2XEmj7OTYBkYGRpvPNzZ ANKDKsG0t/TxKlPFrLt0EW3TxrGNaCXGXR2LBzHmzHD8SGvZaMG0GuqlHz3YZYf3 yLNZiKMNI/muXiuRnP0ii688YN40uXnMor6LXLg6dxkAwboyToOtjZ3H8+qFHTN1 G9UFgXRaD1s0DLgFKgJFrjX6LYN3kSolTmodYIsR6Ufg6DCRn7FCBkj9PvRPfjQf APPRCJtDHz4v/lpw8nYBYvC4hQSLBvoqrkJH+8I3epTfUoF90d2llExUWAS5NFWx Pl609mytrDKGGkggGhBgt40r07IJEHR1H4ybh2Q0cK/kdBoF71uCyLQgsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX1GJCSUNw19YQ38SrOkm25dZSEMB8GA1UdIwQY MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/5nkX5l VF5WOWehKETbeBo+DdgMleLxs5yqra3HkpZdKNlCrhWIOopAb1h55SsFewXRiTSx KLvikjWTvtuZduwIVLYqHahVsynPACi+zpT6RafMnh/UAjR1Brj1wRTeU0P5TlvX WPakL7UYcYqNiG11EEfqGzEZfwJJuvZMFDiNc9UoTyNkKYbKPmZSJUZCeAP+ZuVe qbRRqCGRbahMUhW0quIZwxJqiuR/245ImYO+wVGzXKaI4VT/8tfzJetyqjl3ZD+5 7+Uz1Uruu/i39Vr9lEZleqL0ejxUHI9rxMYqpBgPeZK1ml1XC5HY9qxVzl1qBL99 r4vcfpi9PEMYXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:03:32 2026 by rpki-client