This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json) Hash identifier: 9zn0ntM+HICAeFNGwaEBT6ds1j/3r9HhXBGD2baY86Q= Subject key identifier: A3:E4:60:5F:2E:1B:FC:00:14:40:7E:F9:0C:58:53:32:D2:ED:2A:65 Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82 Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82 Certificate serial: 019C43223E9EB696C25A1982A2702C1AB3D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft Manifest number: 02E3 Signing time: Mon 09 Feb 2026 16:00:43 +0000 Manifest this update: Mon 09 Feb 2026 16:00:43 +0000 Manifest next update: Tue 10 Feb 2026 16:00:43 +0000 Files and hashes: 1: B0AwT1AxvZConXxpfYlz8S5oSuI.roa (hash: /ba96dMiwiLgM5bGs3qQwa8ZJcQUvwrwpVlv05ryZOI=) 2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: 13JHd26yCrFJt62Kx6A1AyH8XjJFFjD3Qx7r4Ijehe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:3e:9e:b6:96:c2:5a:19:82:a2:70:2c:1a:b3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82 Validity Not Before: Feb 9 16:00:43 2026 GMT Not After : Feb 10 16:00:43 2026 GMT Subject: CN=a3e4605f2e1bfc0014407ef90c585332d2ed2a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:6f:76:21:ec:39:2f:fe:cd:9a:cb:25:05: 4c:72:3d:63:01:8c:fb:4a:40:1b:7f:b4:e3:ee:ed: c4:1d:63:a5:c5:cd:3c:7d:ba:d6:b7:6d:d2:21:27: c4:ca:62:ff:60:3b:20:bb:75:7d:7b:7b:58:e1:47: 0a:ea:96:8a:6a:f0:52:aa:ad:76:3c:c8:5f:f1:92: ca:51:42:0d:d7:f4:08:ce:a4:e3:19:d9:ec:b9:20: ed:2b:d5:cb:1c:aa:fe:81:e4:84:fc:96:7f:99:00: 18:d9:e5:ed:3c:2b:16:b5:c9:79:92:01:81:d1:0e: 6d:0a:af:c8:1f:1c:a4:8c:5d:80:c8:5d:d7:04:21: 74:eb:e2:60:3b:87:9c:28:4c:4c:cb:5b:1f:a0:94: 81:1e:d3:4e:9b:91:39:85:e5:f4:37:3b:e8:9b:61: a3:90:46:47:e6:de:d4:13:20:87:03:a6:95:78:fd: be:55:a3:f6:c6:31:09:65:d9:c1:d2:1e:bb:91:d9: 64:b9:54:02:c1:6a:d2:55:00:ad:24:a2:39:8b:65: c0:41:cc:91:3f:9f:57:f3:d1:f7:97:40:a7:b8:2f: 51:f4:31:54:f8:08:0a:e9:92:01:7f:5b:71:2a:09: d3:9d:50:4a:d3:54:a4:1b:30:60:79:70:d8:11:d3: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E4:60:5F:2E:1B:FC:00:14:40:7E:F9:0C:58:53:32:D2:ED:2A:65 X509v3 Authority Key Identifier: keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6c:13:56:3b:1f:37:83:51:0d:15:87:49:38:95:bb:af:19: 48:72:b7:e1:80:63:52:57:38:bc:81:99:84:1f:24:e8:08:bd: 12:b0:5e:ff:e5:34:6a:22:a1:ca:fe:92:86:82:33:7a:fb:96: 05:68:e8:d9:68:d1:52:08:42:cb:f5:0e:dc:1d:11:ee:e9:98: 73:4b:e8:bd:f4:00:ab:42:61:15:40:a5:96:bb:f8:cd:2c:77: 34:ec:9a:21:17:cc:3a:fb:e7:55:3f:88:4b:8f:25:06:65:f2: 96:53:ad:71:60:7f:bf:dd:41:30:e6:9c:28:6d:0b:fe:1d:70: 1c:56:65:91:11:95:38:9f:15:bc:0a:b4:4d:5f:da:7a:fd:15: 73:7b:55:08:74:7c:5f:8b:16:03:6d:72:af:ac:78:0e:5b:9e: 59:46:de:20:e4:3f:12:00:bd:dc:0f:ab:0c:77:fd:93:7a:6b: c5:13:67:44:ca:66:a8:48:d4:32:b9:80:05:90:64:39:a2:b6: 57:34:9f:82:86:24:07:21:11:c6:3a:fa:cb:b2:4b:b8:94:da: 59:83:36:e1:d8:28:c3:a3:bf:14:a0:59:29:9c:f9:f0:e2:20: 77:f6:a7:ec:1c:69:64:19:0c:4e:6f:c0:fe:b6:a6:cc:4c:a4: 7f:05:86:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIj6etpbCWhmConAsGrPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzE5NmRjNWY0MGY5NmQyZGU2Nzk5ZGM3NzFiYWEzYjUz ZGNkODIwHhcNMjYwMjA5MTYwMDQzWhcNMjYwMjEwMTYwMDQzWjAzMTEwLwYDVQQD EyhhM2U0NjA1ZjJlMWJmYzAwMTQ0MDdlZjkwYzU4NTMzMmQyZWQyYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQRvdiHsOS/+zZrLJQVMcj1jAYz7 SkAbf7Tj7u3EHWOlxc08fbrWt23SISfEymL/YDsgu3V9e3tY4UcK6paKavBSqq12 PMhf8ZLKUUIN1/QIzqTjGdnsuSDtK9XLHKr+geSE/JZ/mQAY2eXtPCsWtcl5kgGB 0Q5tCq/IHxykjF2AyF3XBCF06+JgO4ecKExMy1sfoJSBHtNOm5E5heX0Nzvom2Gj kEZH5t7UEyCHA6aVeP2+VaP2xjEJZdnB0h67kdlkuVQCwWrSVQCtJKI5i2XAQcyR P59X89H3l0CnuC9R9DFU+AgK6ZIBf1txKgnTnVBK01SkGzBgeXDYEdPzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPkYF8uG/wAFEB++QxYUzLS7SplMB8GA1UdIwQY MBaAFFxxltxfQPltLeZ5ncdxuqO1Pc2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMt YzUyYjVkZDBlN2FjLzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMtYzUyYjVkZDBlN2Fj LzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmwTVjsf N4NRDRWHSTiVu68ZSHK34YBjUlc4vIGZhB8k6Ai9ErBe/+U0aiKhyv6ShoIzevuW BWjo2WjRUghCy/UO3B0R7umYc0vovfQAq0JhFUCllrv4zSx3NOyaIRfMOvvnVT+I S48lBmXyllOtcWB/v91BMOacKG0L/h1wHFZlkRGVOJ8VvAq0TV/aev0Vc3tVCHR8 X4sWA21yr6x4DlueWUbeIOQ/EgC93A+rDHf9k3prxRNnRMpmqEjUMrmABZBkOaK2 VzSfgoYkByERxjr6y7JLuJTaWYM24dgow6O/FKBZKZz58OIgd/an7BxpZBkMTm/A /ramzEykfwWGDw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:19 2026 by rpki-client