This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json) Hash identifier: 7xrfZDAgBwVpgcumiSzCZ8DsDspBPqcFwwoybVs+IoM= Subject key identifier: 8E:91:5F:66:EF:22:30:EC:63:18:84:B0:6C:81:CB:A9:D9:E4:1D:FE Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019C2A74D96D99812A95FD953D997B73EF74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft Manifest number: 0820 Signing time: Wed 04 Feb 2026 21:00:26 +0000 Manifest this update: Wed 04 Feb 2026 21:00:26 +0000 Manifest next update: Thu 05 Feb 2026 21:00:26 +0000 Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 52RUNqlJ5cLPmxV2E19Eo5+1p1B9gMGCQHjaCMF4AZ0=) 2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:74:d9:6d:99:81:2a:95:fd:95:3d:99:7b:73:ef:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Feb 4 21:00:26 2026 GMT Not After : Feb 5 21:00:26 2026 GMT Subject: CN=8e915f66ef2230ec631884b06c81cba9d9e41dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:de:de:dd:af:26:87:8f:e9:23:bc:32:de: 27:3b:3d:29:05:06:45:1f:99:91:3b:d1:dc:3b:bd: 1d:86:4c:47:42:de:45:ce:50:c7:9d:ed:65:63:43: f9:fc:82:46:ff:9b:b9:72:2a:9a:46:8d:25:2c:31: ac:c2:09:bd:a7:2b:81:74:c0:7e:e4:5a:09:3b:73: 67:09:7f:78:a8:55:3e:b2:51:20:0f:4b:8d:bd:b6: 79:79:81:11:6d:ea:99:5b:5d:63:88:d2:4d:3e:52: d4:13:54:ed:2f:8e:19:7e:0a:dd:9c:20:02:45:2b: 71:45:15:eb:28:b4:19:b7:da:a6:c7:b0:74:0d:f3: b4:77:79:f6:b3:9b:3e:6c:9b:48:05:86:a4:c5:78: 07:b7:01:9b:af:36:fb:97:bb:ab:d3:30:8c:b2:bf: 9c:cd:79:d9:26:ab:3f:f3:d4:3e:a5:1c:58:4a:c6: 11:5f:e6:5e:9b:cc:43:7c:a9:87:ba:67:f1:04:67: c2:93:b4:09:cc:1c:38:4c:d9:ef:c6:b5:67:7b:73: f7:71:af:8b:58:e1:ac:75:64:0e:7b:5c:4d:1b:2d: ca:a4:f3:15:25:b8:03:30:03:11:3f:b2:92:9b:b8: 77:49:41:80:47:1e:c0:31:94:91:2d:31:25:c3:09: 67:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:91:5F:66:EF:22:30:EC:63:18:84:B0:6C:81:CB:A9:D9:E4:1D:FE X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8c:0c:2b:b7:b3:22:4f:6d:d2:dc:e6:d9:a2:30:b7:b8:a6: 29:33:ea:5a:48:cf:ac:ec:55:68:9a:bd:0a:47:1c:c3:76:17: 98:b3:73:d8:97:9f:fa:0f:e7:2f:87:5a:11:f8:5b:f8:e9:0a: a3:04:68:b3:72:0c:c8:7b:b0:00:60:e6:e2:2f:6b:04:5d:53: 33:ec:a1:3d:2c:5d:01:69:e8:28:3e:3c:3a:55:a8:12:c7:ac: 31:49:7c:e0:c0:47:71:1a:64:e1:38:cd:2d:07:c6:ae:b9:e6: 43:7b:70:b5:42:87:9e:a0:cd:27:b1:88:35:45:5d:b7:93:a6: 4e:04:41:00:29:71:c4:a3:9f:ce:eb:a7:3f:69:a6:c3:a9:1a: 45:cc:16:82:05:ef:4b:c8:e5:03:c3:a7:91:35:90:76:23:aa: 29:9a:98:07:e3:bd:4f:5d:e9:0c:ef:ff:3f:91:e5:8e:c4:10: 87:a8:0d:58:f0:3f:ab:84:18:06:a4:98:8a:37:8e:00:1a:ad: ba:b2:fa:90:c4:35:6d:7d:ff:f3:ee:7c:47:a9:73:e6:20:c9: 07:ee:b9:4b:0c:de:b6:ac:d5:27:74:bf:1c:d9:8f:3a:f1:b5: ad:a0:92:5e:85:a3:f7:2f:03:7b:4f:d7:e1:bd:69:41:04:6e: c8:d2:2c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwqdNltmYEqlf2VPZl7c+90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjYwMjA0MjEwMDI2WhcNMjYwMjA1MjEwMDI2WjAzMTEwLwYDVQQD Eyg4ZTkxNWY2NmVmMjIzMGVjNjMxODg0YjA2YzgxY2JhOWQ5ZTQxZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscfe3t2vJoeP6SO8Mt4nOz0pBQZF H5mRO9HcO70dhkxHQt5FzlDHne1lY0P5/IJG/5u5ciqaRo0lLDGswgm9pyuBdMB+ 5FoJO3NnCX94qFU+slEgD0uNvbZ5eYERbeqZW11jiNJNPlLUE1TtL44ZfgrdnCAC RStxRRXrKLQZt9qmx7B0DfO0d3n2s5s+bJtIBYakxXgHtwGbrzb7l7ur0zCMsr+c zXnZJqs/89Q+pRxYSsYRX+Zem8xDfKmHumfxBGfCk7QJzBw4TNnvxrVne3P3ca+L WOGsdWQOe1xNGy3KpPMVJbgDMAMRP7KSm7h3SUGARx7AMZSRLTElwwlnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6RX2bvIjDsYxiEsGyBy6nZ5B3+MB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhowMK7ez Ik9t0tzm2aIwt7imKTPqWkjPrOxVaJq9Ckccw3YXmLNz2Jef+g/nL4daEfhb+OkK owRos3IMyHuwAGDm4i9rBF1TM+yhPSxdAWnoKD48OlWoEsesMUl84MBHcRpk4TjN LQfGrrnmQ3twtUKHnqDNJ7GINUVdt5OmTgRBAClxxKOfzuunP2mmw6kaRcwWggXv S8jlA8OnkTWQdiOqKZqYB+O9T13pDO//P5HljsQQh6gNWPA/q4QYBqSYijeOABqt urL6kMQ1bX3/8+58R6lz5iDJB+65SwzetqzVJ3S/HNmPOvG1raCSXoWj9y8De0/X 4b1pQQRuyNIsWQ== -----END CERTIFICATE-----Generated at Thu Feb 5 04:27:54 2026 by rpki-client