This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json) Hash identifier: rc6T7uAA9uSy9aTQwYXgN6JF3QvlxslKz/bfcNf7K50= Subject key identifier: 64:9D:24:73:31:D3:AB:91:B1:3C:35:FB:7B:78:F1:D7:F7:BD:38:E2 Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Certificate serial: 019C43C7480999D9E1F173B2AA4466464727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft Manifest number: 0D85 Signing time: Mon 09 Feb 2026 19:00:59 +0000 Manifest this update: Mon 09 Feb 2026 19:00:59 +0000 Manifest next update: Tue 10 Feb 2026 19:00:59 +0000 Files and hashes: 1: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: bwGdM6mTad0VsKS9VaLNDzZdk3/8cdTnQf0msbR559g=) 2: xhCelkdkFdTsIHpEDmjN2bruQr8.roa (hash: +AqQAgHYDXWjRd+5q4R8GrL4JFr5uaVtEUtnJ3XI5Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:48:09:99:d9:e1:f1:73:b2:aa:44:66:46:47:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Validity Not Before: Feb 9 19:00:59 2026 GMT Not After : Feb 10 19:00:59 2026 GMT Subject: CN=649d247331d3ab91b13c35fb7b78f1d7f7bd38e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:07:64:81:2e:53:16:e7:6b:fd:f7:7c:69: ed:93:47:d0:1f:cc:b1:ff:69:7c:9a:6a:86:45:1d: f9:67:0b:c0:c2:90:b6:1e:c1:be:2c:75:c2:d6:89: bd:c3:ca:12:e2:03:e4:64:af:64:2e:ce:ea:af:7f: ff:f0:b9:13:05:03:a2:eb:bb:89:a8:e0:89:c2:e4: ac:06:c4:aa:1d:a4:ce:8f:b0:b8:95:f5:e4:53:4a: ce:31:5f:b5:3e:43:b2:42:67:3a:f9:94:07:f8:dd: ec:29:58:93:c6:64:29:a9:3d:e7:20:b1:66:a8:a9: 2f:22:22:69:ac:cd:09:a6:7a:59:1c:fb:e3:ca:18: 44:08:c9:48:c7:0f:2d:d6:bc:b5:68:a6:4f:25:33: cc:7d:5c:ae:7d:f4:9a:f5:47:fc:f6:a6:89:ed:05: b8:a3:0e:cc:0d:e8:ce:18:e7:39:98:db:ae:7e:cd: 2f:fc:23:78:01:c0:51:19:f8:48:8f:31:6d:2d:9c: da:d6:6f:b6:bb:85:83:dc:2e:d3:9c:21:cf:30:73: 4b:77:43:76:af:a3:10:0c:10:9b:80:de:89:a7:94: 36:89:86:68:35:05:5b:a3:02:70:1d:e0:cd:80:42: f8:44:da:30:86:09:32:07:cc:08:e1:97:43:e2:bc: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9D:24:73:31:D3:AB:91:B1:3C:35:FB:7B:78:F1:D7:F7:BD:38:E2 X509v3 Authority Key Identifier: keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dc:3d:d8:ad:bb:0c:af:90:4d:c3:0a:46:54:5b:eb:7a:72: e3:4b:60:8d:7c:3d:88:83:95:3b:4e:7e:0d:6a:4b:90:87:1e: cb:23:2e:41:1c:56:15:40:2c:d0:b9:07:de:ba:29:de:5b:80: 28:d3:01:97:7c:32:38:05:75:3d:4a:ab:66:c0:53:b6:af:10: ca:14:13:44:29:1a:61:dc:e4:92:2f:cf:f1:33:0a:9c:f2:9b: 61:64:6a:b7:50:3d:25:0a:5f:e5:8b:a2:99:8f:16:99:75:a4: 03:97:f8:44:52:f4:92:e8:c8:0a:f6:e8:91:fe:15:45:b9:74: 8b:80:6d:e7:6c:a3:f8:23:2a:d6:7d:38:a6:69:36:95:2c:3a: 7d:58:49:46:54:14:7d:2e:7b:2c:aa:c9:a4:1b:95:66:58:2e: 3b:3e:dc:99:4d:ef:fc:d6:60:f8:3b:9e:08:61:32:f2:3a:f9: 42:25:33:45:d3:d9:29:e8:f9:9f:42:9d:15:37:62:f4:ef:85: 17:5e:06:42:09:6c:0d:ab:82:1d:ba:94:b5:07:3c:db:f1:00: b2:e9:88:93:2e:85:b0:c7:9b:cc:b1:d8:bf:1d:c9:7b:a8:69: 17:53:83:01:87:ea:05:83:c6:34:1f:21:20:d8:db:8d:b6:54: a7:43:33:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0gJmdnh8XOyqkRmRkcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2 OWJkZGYwHhcNMjYwMjA5MTkwMDU5WhcNMjYwMjEwMTkwMDU5WjAzMTEwLwYDVQQD Eyg2NDlkMjQ3MzMxZDNhYjkxYjEzYzM1ZmI3Yjc4ZjFkN2Y3YmQzOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwHZIEuUxbna/33fGntk0fQH8yx /2l8mmqGRR35ZwvAwpC2HsG+LHXC1om9w8oS4gPkZK9kLs7qr3//8LkTBQOi67uJ qOCJwuSsBsSqHaTOj7C4lfXkU0rOMV+1PkOyQmc6+ZQH+N3sKViTxmQpqT3nILFm qKkvIiJprM0JpnpZHPvjyhhECMlIxw8t1ry1aKZPJTPMfVyuffSa9Uf89qaJ7QW4 ow7MDejOGOc5mNuufs0v/CN4AcBRGfhIjzFtLZza1m+2u4WD3C7TnCHPMHNLd0N2 r6MQDBCbgN6Jp5Q2iYZoNQVbowJwHeDNgEL4RNowhgkyB8wI4ZdD4rzYyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSdJHMx06uRsTw1+3t48df3vTjiMB8GA1UdIwQY MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0 LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdw92K27 DK+QTcMKRlRb63py40tgjXw9iIOVO05+DWpLkIceyyMuQRxWFUAs0LkH3rop3luA KNMBl3wyOAV1PUqrZsBTtq8QyhQTRCkaYdzkki/P8TMKnPKbYWRqt1A9JQpf5Yui mY8WmXWkA5f4RFL0kujICvbokf4VRbl0i4Bt52yj+CMq1n04pmk2lSw6fVhJRlQU fS57LKrJpBuVZlguOz7cmU3v/NZg+DueCGEy8jr5QiUzRdPZKej5n0KdFTdi9O+F F14GQglsDauCHbqUtQc82/EAsumIky6FsMebzLHYvx3Je6hpF1ODAYfqBYPGNB8h INjbjbZUp0MzUg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:24 2026 by rpki-client