This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json) Hash identifier: OWSqe1LMJtlb2+VP1lTVf4nZgq6OUpjRbOmDNSDiP8w= Subject key identifier: 10:45:AE:BB:0E:04:76:DC:0D:82:0E:88:68:AC:5D:81:FC:47:4E:E9 Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c Certificate serial: 019C438FD86538F93DEA4ECCA9142671CF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft Manifest number: 174A Signing time: Mon 09 Feb 2026 18:00:26 +0000 Manifest this update: Mon 09 Feb 2026 18:00:26 +0000 Manifest next update: Tue 10 Feb 2026 18:00:26 +0000 Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: w5tWImd2FvlYwJ3Aj1GiI4tavQhz1HPssQjLoY89j5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d8:65:38:f9:3d:ea:4e:cc:a9:14:26:71:cf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c Validity Not Before: Feb 9 18:00:26 2026 GMT Not After : Feb 10 18:00:26 2026 GMT Subject: CN=1045aebb0e0476dc0d820e8868ac5d81fc474ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:47:51:bc:6b:d5:53:54:22:bd:2a:87:25: bb:9c:6c:c4:a1:57:e4:bc:ea:b7:ce:4e:2d:70:70: 5c:fc:af:1d:eb:0e:03:db:19:6d:7f:89:41:22:bf: 17:2e:55:ca:76:ca:39:2d:9d:19:c4:f0:f4:7e:c1: d6:0c:88:6b:1a:18:43:bb:67:a5:a6:d0:09:b8:ed: 6d:ff:d5:09:2e:18:2e:89:4e:3f:75:a4:f1:60:3e: db:45:b5:de:81:80:ea:0b:f2:56:2c:8c:36:06:e1: 86:69:17:ca:fe:47:a2:c2:d2:57:36:fb:89:e7:be: 11:bf:5e:b3:ab:53:29:2d:53:59:0a:1a:c2:9f:7d: ef:57:70:53:51:11:6a:1f:6c:25:68:ab:15:28:b3: 7c:c1:53:40:d3:66:71:fc:58:cb:88:48:43:71:6e: a6:01:64:56:4b:92:e3:37:20:df:c3:23:b4:55:59: 69:65:59:6a:f5:10:16:ff:0e:ff:45:6f:1f:72:f8: b3:d2:83:61:35:d0:1e:ea:ca:c4:20:07:0d:bf:10: f0:1b:8d:79:23:4e:c5:9a:58:e9:e8:25:fb:43:86: fc:dc:e4:97:95:d8:77:09:42:6b:ac:53:c9:33:06: 42:04:f9:57:ce:3b:08:95:a2:e2:7a:62:4e:7d:b5: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:45:AE:BB:0E:04:76:DC:0D:82:0E:88:68:AC:5D:81:FC:47:4E:E9 X509v3 Authority Key Identifier: keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:46:3c:a9:78:4f:5a:52:fb:74:64:3c:2a:a3:32:a4:88:05: 19:32:aa:c6:33:b9:14:22:9c:9c:14:09:ab:d7:33:08:f8:e2: 6d:27:35:d2:21:2e:a1:fb:43:c9:d9:7b:ef:98:a5:5a:36:b5: 7f:48:e1:71:a1:67:8f:25:7f:28:9e:67:a0:bf:65:d5:93:60: 11:2a:8c:04:49:10:81:11:3a:38:c4:39:5d:cc:80:7b:7b:95: d2:27:8e:8d:a7:0c:a9:c4:aa:f5:08:86:18:67:81:aa:e8:e9: dd:b0:10:cf:bd:79:5d:8a:51:e8:fa:f0:65:77:16:64:40:cd: 7b:0e:03:c2:ba:32:90:0c:70:ce:85:33:52:c8:19:fd:c0:8a: eb:78:c5:0c:d5:cf:fc:38:f1:ca:e5:5b:81:3f:65:bb:03:3a: 42:c7:40:df:0d:55:9f:af:da:f3:5f:7d:73:9a:04:eb:68:c4: 8c:52:0f:7a:41:79:3f:56:17:6c:2c:2b:4e:41:b2:a4:cb:99: 4b:72:fc:d4:40:52:5a:f7:97:ff:53:c6:dc:71:38:bb:04:50: 00:29:ab:f5:5a:e2:c5:e8:3c:69:ce:04:88:6e:a1:69:a0:b8: 0c:ce:fa:c9:2f:9f:3f:4e:cb:45:4a:05:8f:0c:43:fb:7e:be: 3d:0b:20:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9hlOPk96k7MqRQmcc+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDcxZWIxZmVmNjM1MjA4YWM3MGU2ZmUyYzU2YjAwNDc3 ZjBiOGMwHhcNMjYwMjA5MTgwMDI2WhcNMjYwMjEwMTgwMDI2WjAzMTEwLwYDVQQD EygxMDQ1YWViYjBlMDQ3NmRjMGQ4MjBlODg2OGFjNWQ4MWZjNDc0ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlHUbxr1VNUIr0qhyW7nGzEoVfk vOq3zk4tcHBc/K8d6w4D2xltf4lBIr8XLlXKdso5LZ0ZxPD0fsHWDIhrGhhDu2el ptAJuO1t/9UJLhguiU4/daTxYD7bRbXegYDqC/JWLIw2BuGGaRfK/keiwtJXNvuJ 574Rv16zq1MpLVNZChrCn33vV3BTURFqH2wlaKsVKLN8wVNA02Zx/FjLiEhDcW6m AWRWS5LjNyDfwyO0VVlpZVlq9RAW/w7/RW8fcviz0oNhNdAe6srEIAcNvxDwG415 I07Fmljp6CX7Q4b83OSXldh3CUJrrFPJMwZCBPlXzjsIlaLiemJOfbWUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBFrrsOBHbcDYIOiGisXYH8R07pMB8GA1UdIwQY MBaAFF9HHrH+9jUgiscOb+LFawBHfwuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYt OTZjN2NiODMzM2M4LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYtOTZjN2NiODMzM2M4 LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0Y8qXhP WlL7dGQ8KqMypIgFGTKqxjO5FCKcnBQJq9czCPjibSc10iEuoftDydl775ilWja1 f0jhcaFnjyV/KJ5noL9l1ZNgESqMBEkQgRE6OMQ5XcyAe3uV0ieOjacMqcSq9QiG GGeBqujp3bAQz715XYpR6PrwZXcWZEDNew4DwroykAxwzoUzUsgZ/cCK63jFDNXP /DjxyuVbgT9luwM6QsdA3w1Vn6/a8199c5oE62jEjFIPekF5P1YXbCwrTkGypMuZ S3L81EBSWveX/1PG3HE4uwRQACmr9Vrixeg8ac4EiG6haaC4DM76yS+fP07LRUoF jwxD+36+PQsglA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:34 2026 by rpki-client