This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json) Hash identifier: tjVJev4xxVCLk4G6GONFbHjFUJPgGU0wvOHHlGnb8Gc= Subject key identifier: DF:8C:0C:A3:16:51:4A:0B:A9:25:83:D5:A5:FB:BA:9C:55:6C:A9:29 Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Certificate serial: 019C438FBF0AE3D068DA4420B5002192D61B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft Manifest number: 0353 Signing time: Mon 09 Feb 2026 18:00:19 +0000 Manifest this update: Mon 09 Feb 2026 18:00:19 +0000 Manifest next update: Tue 10 Feb 2026 18:00:19 +0000 Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: ThYL0Lv6sINLOykT1d5DAZsoWhK0zbel5O+x09PMjpk=) 2: me98_wsRR7Dre8BQObFIjOvSk10.roa (hash: IWaVGy6xlS7+7awuDuk9s6GrzSOf2jIVIAxnChH+pBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:bf:0a:e3:d0:68:da:44:20:b5:00:21:92:d6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Validity Not Before: Feb 9 18:00:19 2026 GMT Not After : Feb 10 18:00:19 2026 GMT Subject: CN=df8c0ca316514a0ba92583d5a5fbba9c556ca929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:93:45:ca:01:2f:8a:0d:2e:75:7c:ad:71: bc:29:46:8b:dc:4d:37:e1:a0:9a:9a:63:f0:ed:9d: 50:c4:af:cd:8e:4f:a4:28:9f:92:b2:79:16:47:40: 67:c1:cc:18:29:61:98:7c:5a:fa:6d:36:dd:bc:7d: 97:f2:06:c9:d0:9d:ae:6a:ed:86:59:20:3c:f7:8d: a2:12:5b:95:50:21:d9:29:f0:f0:38:37:4b:95:a3: 64:82:82:15:19:af:8a:bc:5b:f2:0b:ef:f1:ad:c1: 61:a8:b6:41:a9:0c:7d:21:56:7d:fb:7f:cf:5e:44: 24:cd:fc:57:8c:b4:86:00:3c:de:69:81:41:50:d0: 9a:23:15:aa:a7:f7:f7:fa:eb:8d:aa:98:cd:96:67: f7:92:a8:6f:04:5a:d1:94:80:98:86:88:85:29:51: d4:e1:45:89:63:de:ca:fa:df:4d:e0:85:86:ff:f8: d9:3a:83:ef:f2:b2:5b:5c:c1:f6:a1:a0:6c:31:7a: 54:d9:2e:34:16:64:6d:16:e8:17:c1:3d:21:c1:0e: 78:d2:70:3c:5e:00:94:c5:e6:33:32:d1:44:c4:04: 33:8a:a9:c2:4d:45:b1:31:b7:0d:1a:e9:27:44:67: ed:c6:63:36:db:05:d0:d6:45:e9:55:72:13:81:a0: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8C:0C:A3:16:51:4A:0B:A9:25:83:D5:A5:FB:BA:9C:55:6C:A9:29 X509v3 Authority Key Identifier: keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:32:3d:a7:d4:87:8d:4a:5e:31:9f:5e:15:65:df:aa:cb:d8: 48:aa:e9:35:00:4b:67:f9:a2:a3:2a:04:2b:46:3f:b0:c0:fc: a6:bc:12:7a:f7:b7:c8:fb:40:93:78:76:d0:80:ec:26:87:a6: fb:cf:85:5d:28:aa:7d:0f:87:f1:ca:9e:27:f7:53:36:e0:5c: c1:fb:ed:20:98:9a:b2:7c:e2:19:ba:ac:89:b1:d1:af:1f:51: 48:af:2e:55:3c:7c:5b:ce:98:68:64:95:50:f0:fc:f7:51:da: 5e:3b:3d:65:74:29:38:12:b5:26:8a:e0:e2:ce:44:40:2b:7d: 71:e2:27:f4:65:e6:22:8b:80:9c:ec:29:80:e9:4e:f1:e2:07: 72:69:dd:97:81:a9:27:ff:b5:ba:01:68:3e:3c:f3:f3:93:d0: 1a:ca:34:9d:46:a8:50:4f:02:86:32:84:aa:04:69:35:ce:bf: 32:5b:d9:2c:20:be:fa:c8:32:90:a3:a4:53:8f:a4:96:43:3a: 46:46:b3:c1:4e:30:d8:9f:8a:78:db:43:b3:63:fe:59:14:8a: 7d:bd:87:1b:5e:5d:68:8f:92:5f:b4:e6:cc:9f:3b:f4:27:6d: 72:07:77:b2:ab:51:2f:f0:f1:68:66:f0:06:3f:cd:9e:e9:20: 62:14:b7:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj78K49Bo2kQgtQAhktYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOGVkYTZmZWE2YjE4ZjEwZGZkNmFmYzBkODNiZWZiYWE2 OWMxMzQwHhcNMjYwMjA5MTgwMDE5WhcNMjYwMjEwMTgwMDE5WjAzMTEwLwYDVQQD EyhkZjhjMGNhMzE2NTE0YTBiYTkyNTgzZDVhNWZiYmE5YzU1NmNhOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFiTRcoBL4oNLnV8rXG8KUaL3E03 4aCammPw7Z1QxK/Njk+kKJ+SsnkWR0BnwcwYKWGYfFr6bTbdvH2X8gbJ0J2uau2G WSA8942iEluVUCHZKfDwODdLlaNkgoIVGa+KvFvyC+/xrcFhqLZBqQx9IVZ9+3/P XkQkzfxXjLSGADzeaYFBUNCaIxWqp/f3+uuNqpjNlmf3kqhvBFrRlICYhoiFKVHU 4UWJY97K+t9N4IWG//jZOoPv8rJbXMH2oaBsMXpU2S40FmRtFugXwT0hwQ540nA8 XgCUxeYzMtFExAQziqnCTUWxMbcNGuknRGftxmM22wXQ1kXpVXITgaDj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+MDKMWUUoLqSWD1aX7upxVbKkpMB8GA1UdIwQY MBaAFFyO2m/qaxjxDf1q/A2DvvuqacE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAt MzExMWI2MmQyZmJkLzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAtMzExMWI2MmQyZmJk LzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDI9p9SH jUpeMZ9eFWXfqsvYSKrpNQBLZ/mioyoEK0Y/sMD8prwSeve3yPtAk3h20IDsJoem +8+FXSiqfQ+H8cqeJ/dTNuBcwfvtIJiasnziGbqsibHRrx9RSK8uVTx8W86YaGSV UPD891HaXjs9ZXQpOBK1Jorg4s5EQCt9ceIn9GXmIouAnOwpgOlO8eIHcmndl4Gp J/+1ugFoPjzz85PQGso0nUaoUE8ChjKEqgRpNc6/MlvZLCC++sgykKOkU4+klkM6 RkazwU4w2J+KeNtDs2P+WRSKfb2HG15daI+SX7TmzJ879Cdtcgd3sqtRL/DxaGbw Bj/NnukgYhS3pQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:10 2026 by rpki-client