This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json) Hash identifier: zG4FMXYl5BJMgk4ubOo1kz6RAXOSIYwaUOoCMoojE9E= Subject key identifier: AB:3C:29:34:57:A4:85:64:5A:BD:78:0E:99:F0:BB:EB:B7:D3:2A:FA Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c Certificate serial: 019C446B5E017E34215884F3E2E0F4E76BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft Manifest number: 1430 Signing time: Mon 09 Feb 2026 22:00:12 +0000 Manifest this update: Mon 09 Feb 2026 22:00:12 +0000 Manifest next update: Tue 10 Feb 2026 22:00:12 +0000 Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 8zOMXoZ/n3tU30TrMZtsO7oWYcpo2/w7MJOjKJdXOfI=) 2: z3YhbfGJKz0n1N9-q-WqwEE57pE.roa (hash: HPGr92xFtSHh/56bmu7RXnry6DCCpjl7s7L94VoQwsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:5e:01:7e:34:21:58:84:f3:e2:e0:f4:e7:6b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c Validity Not Before: Feb 9 22:00:12 2026 GMT Not After : Feb 10 22:00:12 2026 GMT Subject: CN=ab3c293457a485645abd780e99f0bbebb7d32afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:c8:30:b2:a7:ba:a0:8b:9a:4c:9f:18:af: fa:f9:67:5c:09:e4:f0:72:7c:1c:6e:2a:11:db:c5: a8:68:66:de:df:3d:8f:67:19:7a:68:3c:72:80:f1: 47:20:fc:52:85:2b:7f:0b:e8:c4:da:15:47:35:36: ef:25:8f:24:8c:4a:ea:b7:28:55:a7:32:00:8a:9c: 2a:3b:1c:ba:70:d4:48:b1:12:4f:86:11:35:47:bb: 53:dc:57:95:98:41:b1:03:5f:1d:57:1c:71:0e:2d: 42:07:52:05:cb:db:d2:4f:7f:d8:f4:99:10:6e:30: 28:ee:2b:5a:ea:8d:61:93:29:61:e3:d2:6e:fa:2a: 13:00:12:90:db:5b:ae:f8:5c:75:a1:99:2c:2b:6f: c0:ab:fc:a0:0a:51:fa:70:ff:59:89:59:26:f8:06: cc:71:0c:1c:33:fc:a8:01:4e:8e:88:00:2f:10:56: e7:6a:e2:bd:95:d2:03:b3:51:63:24:6a:e2:34:61: ec:14:e6:e1:8d:b1:63:3f:91:1c:68:a3:95:de:e3: e3:5d:d5:0e:b0:e5:38:ab:68:1d:9e:e4:b4:35:8c: de:8f:98:86:6a:35:b4:9a:e5:1f:fd:b6:36:06:b3: 2b:48:c0:5a:f3:07:f7:33:bf:35:eb:38:64:02:c0: 67:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3C:29:34:57:A4:85:64:5A:BD:78:0E:99:F0:BB:EB:B7:D3:2A:FA X509v3 Authority Key Identifier: keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:aa:eb:96:a4:3a:23:42:d9:45:fe:2a:e5:66:cb:ce:99:1f: 96:21:6a:ea:e8:df:75:ff:48:37:34:fa:c8:57:75:32:94:f7: 86:e8:03:a6:15:55:52:e1:8f:61:2a:40:eb:6e:46:59:b1:6f: 73:46:28:92:4b:48:a4:e7:db:f2:3d:ac:2b:db:5a:14:f5:e7: 1c:39:e2:1a:b9:4c:37:23:a8:c9:19:36:6f:93:00:fd:27:dc: 14:f4:bb:fa:7c:2a:79:b2:71:49:2f:b7:02:37:d8:70:5b:8b: 37:4c:c6:08:7f:68:75:42:6b:f3:ae:f2:f0:61:28:e0:b6:74: e1:76:ff:cb:ee:7c:2f:31:56:45:81:ea:c5:14:b8:3c:b0:64: 89:e4:bf:e1:ea:a1:c1:4e:6d:0d:30:6e:7c:68:d9:7b:25:77: 48:64:bb:e4:5e:e6:ea:ed:ef:4e:64:87:c6:93:39:e9:c9:d6: 45:6e:38:27:db:26:4a:b3:fc:a9:57:b7:2e:3f:ca:34:9c:d3: c0:a5:83:09:b9:9b:be:93:2b:b4:b4:f3:b1:21:af:6a:a6:17: ba:dd:2f:07:38:0c:22:2b:6a:9d:76:f1:ff:a1:44:90:63:b5: 41:fe:ac:c9:1b:00:eb:6d:d9:90:7f:04:fe:c7:e7:d3:d5:b6: 9b:fa:f4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa14BfjQhWITz4uD052vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGZjMWU0ZGVmYzQ3MWM5ZmRiN2ZkYWRiOTg5NTU2M2Rh Zjk5OWMwHhcNMjYwMjA5MjIwMDEyWhcNMjYwMjEwMjIwMDEyWjAzMTEwLwYDVQQD EyhhYjNjMjkzNDU3YTQ4NTY0NWFiZDc4MGU5OWYwYmJlYmI3ZDMyYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEHIMLKnuqCLmkyfGK/6+WdcCeTw cnwcbioR28WoaGbe3z2PZxl6aDxygPFHIPxShSt/C+jE2hVHNTbvJY8kjErqtyhV pzIAipwqOxy6cNRIsRJPhhE1R7tT3FeVmEGxA18dVxxxDi1CB1IFy9vST3/Y9JkQ bjAo7ita6o1hkylh49Ju+ioTABKQ21uu+Fx1oZksK2/Aq/ygClH6cP9ZiVkm+AbM cQwcM/yoAU6OiAAvEFbnauK9ldIDs1FjJGriNGHsFObhjbFjP5EcaKOV3uPjXdUO sOU4q2gdnuS0NYzej5iGajW0muUf/bY2BrMrSMBa8wf3M7816zhkAsBn0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs8KTRXpIVkWr14Dpnwu+u30yr6MB8GA1UdIwQY MBaAFFxPweTe/Eccn9t/2tuYlVY9r5mcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQt N2QwZWUyZTk5MGY1LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQtN2QwZWUyZTk5MGY1 LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqrrlqQ6 I0LZRf4q5WbLzpkfliFq6ujfdf9INzT6yFd1MpT3hugDphVVUuGPYSpA625GWbFv c0YokktIpOfb8j2sK9taFPXnHDniGrlMNyOoyRk2b5MA/SfcFPS7+nwqebJxSS+3 AjfYcFuLN0zGCH9odUJr867y8GEo4LZ04Xb/y+58LzFWRYHqxRS4PLBkieS/4eqh wU5tDTBufGjZeyV3SGS75F7m6u3vTmSHxpM56cnWRW44J9smSrP8qVe3Lj/KNJzT wKWDCbmbvpMrtLTzsSGvaqYXut0vBzgMIitqnXbx/6FEkGO1Qf6syRsA623ZkH8E /sfn09W2m/r0RA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:54 2026 by rpki-client