This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json) Hash identifier: 2xkhOtEY/uErXgsfpyTYG49r2iRqVpUS+Lk45+XYEjY= Subject key identifier: E4:58:63:DF:57:0A:2B:E8:6F:6C:6C:31:83:C4:99:C7:2A:59:DE:2F Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Certificate serial: 019C427D368EC78A78C607082ED3DEFBDF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft Manifest number: 12BF Signing time: Mon 09 Feb 2026 13:00:27 +0000 Manifest this update: Mon 09 Feb 2026 13:00:27 +0000 Manifest next update: Tue 10 Feb 2026 13:00:27 +0000 Files and hashes: 1: mTu4D2NDzTOT8K2goxWO28e3uHs.roa (hash: GvYWUuN8wULXb3KaEycrU3j4EUGrHZPXFPqLCC21It8=) 2: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: XttfBHpBzSMkix4LkYV70YavCFYduND6cycsd1+UPc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:36:8e:c7:8a:78:c6:07:08:2e:d3:de:fb:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Validity Not Before: Feb 9 13:00:27 2026 GMT Not After : Feb 10 13:00:27 2026 GMT Subject: CN=e45863df570a2be86f6c6c3183c499c72a59de2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:06:17:81:aa:62:48:13:56:35:71:b9:d9: 67:ee:01:40:e4:c4:83:c1:63:58:15:dc:a1:96:a4: 5d:c0:c7:96:69:03:d2:78:2a:ef:42:72:15:28:0c: f8:7c:aa:fc:a4:92:7e:db:f0:52:c6:b5:89:73:9a: 6e:a1:59:f0:96:e5:b2:02:bb:e0:8c:ea:64:3d:17: be:c7:e5:0e:27:72:52:98:d6:49:6f:6d:50:1b:73: cc:5e:f5:55:e3:e2:ba:5a:54:fc:01:3e:90:b4:b3: a4:a7:e5:79:39:ac:5a:a5:54:6b:13:b7:60:52:9e: a9:fc:74:86:68:ab:9e:89:af:19:39:5e:3e:4d:74: 01:7e:24:71:fa:a2:b4:ab:6d:3b:09:b9:f3:62:2d: 90:73:e2:25:45:da:55:ca:8a:0c:74:f7:39:ec:84: e4:3f:db:51:b2:0e:ee:1f:5a:88:6d:07:4d:5d:e6: d2:ee:7e:7f:72:d5:a3:43:c5:fa:83:2b:01:3c:7a: 85:4c:c5:d5:9b:1c:a1:c7:13:77:c3:82:60:1f:ad: 68:14:75:b2:03:11:df:f0:af:4a:61:05:2f:df:12: d8:3d:56:74:d8:b0:60:55:07:12:f1:55:8c:62:2e: a4:5a:15:74:a1:73:ad:dc:e0:af:f1:b7:cb:54:e1: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:63:DF:57:0A:2B:E8:6F:6C:6C:31:83:C4:99:C7:2A:59:DE:2F X509v3 Authority Key Identifier: keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8c:af:17:1e:3f:18:21:de:40:2a:55:5d:a5:98:b2:f6:44: 35:73:2e:75:70:01:58:b7:03:86:e4:3d:82:13:1e:75:40:e1: 88:4f:99:c4:40:15:60:f2:40:00:4c:56:8b:4a:9b:2c:1e:a0: b7:da:b3:b2:2b:3b:c3:b5:d7:c0:72:09:57:c1:fd:78:ae:a0: 37:b1:c1:c4:d6:11:62:b5:9d:d7:87:cb:03:1e:5b:5b:22:e6: 26:98:91:3d:37:eb:d4:5b:20:68:5b:20:9f:3b:04:b9:62:47: 37:40:bf:04:c6:9b:aa:be:d0:26:78:58:a3:ab:ac:ab:13:78: a1:37:75:7b:5a:33:32:4d:af:96:cd:0c:15:15:f5:bd:df:9d: 2f:55:8f:69:85:d5:8c:b8:55:56:de:4f:69:8b:14:05:29:63: c4:3e:3f:87:24:3c:9c:40:1d:60:39:42:09:5e:59:05:1f:1b: f9:a3:c4:2f:78:36:b7:77:32:46:0d:53:29:14:e2:03:d0:6e: 1b:33:5b:18:0e:14:d9:57:b2:2c:6f:8b:88:0b:59:e9:0c:b4: ae:41:09:a3:cd:08:6b:a9:d7:3b:51:54:97:14:d3:fb:80:2d: 39:d0:89:fa:22:a1:5a:8d:c5:14:4c:2b:67:1d:16:ce:cd:fa: d2:59:56:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTaOx4p4xgcILtPe+99gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk OGM2MGYwHhcNMjYwMjA5MTMwMDI3WhcNMjYwMjEwMTMwMDI3WjAzMTEwLwYDVQQD EyhlNDU4NjNkZjU3MGEyYmU4NmY2YzZjMzE4M2M0OTljNzJhNTlkZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZMGF4GqYkgTVjVxudln7gFA5MSD wWNYFdyhlqRdwMeWaQPSeCrvQnIVKAz4fKr8pJJ+2/BSxrWJc5puoVnwluWyArvg jOpkPRe+x+UOJ3JSmNZJb21QG3PMXvVV4+K6WlT8AT6QtLOkp+V5OaxapVRrE7dg Up6p/HSGaKueia8ZOV4+TXQBfiRx+qK0q207CbnzYi2Qc+IlRdpVyooMdPc57ITk P9tRsg7uH1qIbQdNXebS7n5/ctWjQ8X6gysBPHqFTMXVmxyhxxN3w4JgH61oFHWy AxHf8K9KYQUv3xLYPVZ02LBgVQcS8VWMYi6kWhV0oXOt3OCv8bfLVOFeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORYY99XCivob2xsMYPEmccqWd4vMB8GA1UdIwQY MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct MDczNjM5OTM4NDM3LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3 LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoyvFx4/ GCHeQCpVXaWYsvZENXMudXABWLcDhuQ9ghMedUDhiE+ZxEAVYPJAAExWi0qbLB6g t9qzsis7w7XXwHIJV8H9eK6gN7HBxNYRYrWd14fLAx5bWyLmJpiRPTfr1FsgaFsg nzsEuWJHN0C/BMabqr7QJnhYo6usqxN4oTd1e1ozMk2vls0MFRX1vd+dL1WPaYXV jLhVVt5PaYsUBSljxD4/hyQ8nEAdYDlCCV5ZBR8b+aPEL3g2t3cyRg1TKRTiA9Bu GzNbGA4U2VeyLG+LiAtZ6Qy0rkEJo80Ia6nXO1FUlxTT+4AtOdCJ+iKhWo3FFEwr Zx0Wzs360llWAw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:17 2026 by rpki-client