This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json) Hash identifier: X08uImbsBWaJfrRjm6CHhbcv5E/Wi6kmIij1gneotgY= Subject key identifier: D9:C1:9C:BD:74:D0:A2:59:56:35:CA:40:AB:E1:56:98:83:8C:69:F4 Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Certificate serial: 019C44DA4D5435E8B7640FB6386A745AD2E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft Manifest number: 13CF Signing time: Tue 10 Feb 2026 00:01:23 +0000 Manifest this update: Tue 10 Feb 2026 00:01:23 +0000 Manifest next update: Wed 11 Feb 2026 00:01:23 +0000 Files and hashes: 1: JA3YuaJEsqvd9eusygyCJH9iklY.roa (hash: 9CJlUPdmf0qr6MJ6TlKKLBohMPRtzMpsz+bJMGO5jMQ=) 2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: 4z1r9J7hPV4shUAIqmcy6EBp+nLhotLN8MFikx7SjqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:4d:54:35:e8:b7:64:0f:b6:38:6a:74:5a:d2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Validity Not Before: Feb 10 00:01:23 2026 GMT Not After : Feb 11 00:01:23 2026 GMT Subject: CN=d9c19cbd74d0a2595635ca40abe15698838c69f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:56:9d:18:c2:1f:af:49:28:1c:50:78:65: ad:c3:a7:64:82:42:63:9b:4b:e9:59:5b:1a:42:27: fe:37:86:7b:b3:04:75:01:ed:40:e0:cf:f6:28:f5: 72:4b:9f:e7:8e:ca:fe:e7:dc:7e:06:55:57:73:68: 69:f1:5d:ef:b0:65:a3:38:69:7d:5f:dc:ee:29:93: 22:17:6f:74:b2:56:7e:0a:25:2c:8b:f1:5a:e0:9e: 55:95:eb:eb:c3:d7:c5:4b:c1:48:94:57:6b:3e:55: 5a:f7:31:f9:03:42:f7:42:b6:55:43:c1:c1:af:71: f1:7a:d6:9b:8f:6f:a0:2a:f7:b5:a1:59:ad:54:17: 2f:5c:0f:36:3e:65:da:94:e0:65:2e:f8:a5:c5:eb: 1e:36:62:7b:ae:c6:4f:e2:6f:49:56:c7:f1:5e:e3: 35:19:3f:64:7f:06:9e:27:c4:28:8c:78:b9:d3:6b: f6:ea:2a:9c:5f:da:4e:d6:13:a8:b4:4e:bc:8c:17: 37:8c:46:57:34:78:66:af:40:1f:3c:59:18:fd:bd: 5d:cf:3a:9d:a4:cb:19:c3:ca:db:d6:d6:88:e0:57: 54:68:fe:f8:03:d4:d9:fb:af:d3:15:65:dd:e0:ea: 9c:90:86:b9:d0:7c:54:b3:6a:be:f7:cd:a4:65:2b: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:9C:BD:74:D0:A2:59:56:35:CA:40:AB:E1:56:98:83:8C:69:F4 X509v3 Authority Key Identifier: keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d7:ca:2b:0f:af:2a:87:ce:71:7b:10:09:55:0b:98:d7:b3: 03:bd:f8:34:9e:7b:bd:98:23:84:6f:21:68:1e:da:8e:88:0d: c5:16:c6:4e:4e:96:83:ae:5f:7f:64:c1:a8:ed:c9:c1:a6:b4: 3d:e0:5c:5b:05:aa:47:ca:eb:0d:0c:88:6a:b6:7b:cc:d0:69: 39:9c:0f:a2:fc:96:a2:d6:fc:b4:e0:21:0a:80:88:0d:84:e5: e6:28:95:84:97:ed:49:40:cb:c9:94:1c:92:66:a5:71:0a:c2: de:0b:63:f9:80:44:5e:5f:12:c6:ef:e7:99:6c:7f:04:08:c4: d1:3a:44:ea:08:01:c0:ab:3c:86:06:3f:e0:01:82:86:60:dc: df:7d:55:f9:5c:dc:f9:ef:49:39:30:3d:22:ef:0e:6a:df:69: 87:ff:78:c7:bf:56:8f:73:16:c7:ca:e1:eb:83:13:88:71:1e: e3:40:a9:6d:5c:9b:3a:fd:7c:1a:b8:fc:4b:2c:c1:e0:ab:2b: 34:2c:5a:58:62:9b:78:31:22:44:f3:50:92:3e:3a:6f:d6:48: 06:1b:b3:9b:0b:5f:11:14:22:0c:af:7f:52:75:83:47:fc:ef: 8a:bf:e3:15:38:3f:df:11:65:93:d4:56:7a:c2:fb:f1:24:03: 12:46:67:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2k1UNei3ZA+2OGp0WtLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1 MDhkNTcwHhcNMjYwMjEwMDAwMTIzWhcNMjYwMjExMDAwMTIzWjAzMTEwLwYDVQQD EyhkOWMxOWNiZDc0ZDBhMjU5NTYzNWNhNDBhYmUxNTY5ODgzOGM2OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBdWnRjCH69JKBxQeGWtw6dkgkJj m0vpWVsaQif+N4Z7swR1Ae1A4M/2KPVyS5/njsr+59x+BlVXc2hp8V3vsGWjOGl9 X9zuKZMiF290slZ+CiUsi/Fa4J5Vlevrw9fFS8FIlFdrPlVa9zH5A0L3QrZVQ8HB r3Hxetabj2+gKve1oVmtVBcvXA82PmXalOBlLvilxeseNmJ7rsZP4m9JVsfxXuM1 GT9kfwaeJ8QojHi502v26iqcX9pO1hOotE68jBc3jEZXNHhmr0AfPFkY/b1dzzqd pMsZw8rb1taI4FdUaP74A9TZ+6/TFWXd4OqckIa50HxUs2q+982kZStO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnBnL100KJZVjXKQKvhVpiDjGn0MB8GA1UdIwQY MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtfKKw+v KofOcXsQCVULmNezA734NJ57vZgjhG8haB7ajogNxRbGTk6Wg65ff2TBqO3Jwaa0 PeBcWwWqR8rrDQyIarZ7zNBpOZwPovyWotb8tOAhCoCIDYTl5iiVhJftSUDLyZQc kmalcQrC3gtj+YBEXl8Sxu/nmWx/BAjE0TpE6ggBwKs8hgY/4AGChmDc331V+Vzc +e9JOTA9Iu8Oat9ph/94x79Wj3MWx8rh64MTiHEe40CpbVybOv18Grj8SyzB4Ksr NCxaWGKbeDEiRPNQkj46b9ZIBhuzmwtfERQiDK9/UnWDR/zvir/jFTg/3xFlk9RW esL78SQDEkZniQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:26 2026 by rpki-client