This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json) Hash identifier: TR5gNZOEEZ1FYXfCcPeRER5FtqlKzupN+1QHnVYcnWI= Subject key identifier: 2E:F4:DB:73:A7:B0:96:A2:75:E7:F4:2C:11:C0:3F:BE:9C:84:BC:36 Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5 Certificate serial: 019C427DE1900B98110AB4CFBE19C169BE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: grgC47iwv_yPcU0PK-57zcrhx3w.roa (hash: Byu89q/FbONyFmYfNVRxv0Nw5EmOQBEB3SRiUqdLOKE=) 2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: 7BMdvGJgfP6Nm7Ic9hi9Hb0KAADI5OO7D6bP3exWXvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e1:90:0b:98:11:0a:b4:cf:be:19:c1:69:be:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=2ef4db73a7b096a275e7f42c11c03fbe9c84bc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:74:e7:23:8f:4e:d3:c0:71:0d:21:ce:df: 96:bb:e5:71:7c:0d:60:e6:59:fa:41:d1:1d:5d:93: 11:b2:40:b2:62:53:79:74:15:35:a4:d9:d4:ec:0e: b5:84:5e:85:3a:bc:02:ad:44:be:48:15:8c:20:e0: 62:52:d7:29:a5:cb:1a:e5:b1:0d:ab:76:86:ad:e7: 2e:b4:d1:8e:09:6f:e0:ea:8f:a3:c4:12:35:7b:e0: c3:41:3a:75:b7:e7:d4:a1:02:19:45:10:77:d3:72: ba:8d:6b:88:99:0d:ca:c3:42:79:44:8d:e0:dc:b2: 11:98:9a:b2:c1:3d:89:73:d6:50:7e:73:49:d9:3d: 94:d8:b2:a1:9e:6f:41:f2:2a:13:81:2d:47:38:f0: 4f:68:16:bc:e8:d7:a3:63:42:93:1f:ac:44:d4:4a: 02:b9:a5:bb:bb:34:bf:b7:d5:53:18:12:df:17:36: 93:95:77:23:7b:e1:c8:53:d7:61:ac:5e:50:8b:56: 18:fe:0d:76:1b:54:c9:60:40:f2:53:51:24:22:65: d1:96:ec:85:77:3b:0d:1f:0d:e8:e8:32:8e:2b:32: 10:33:af:14:d2:c2:ff:90:be:4e:dd:25:a1:01:44: b0:ad:d4:d0:f2:70:e2:04:aa:92:28:d9:3d:e6:ad: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F4:DB:73:A7:B0:96:A2:75:E7:F4:2C:11:C0:3F:BE:9C:84:BC:36 X509v3 Authority Key Identifier: keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a8:65:97:74:ba:ec:5a:e8:06:36:a5:ae:38:a4:34:cc:1c: aa:95:b7:33:f5:93:63:b3:58:80:b0:8a:76:51:bd:5b:b6:e5: d5:f9:95:b2:10:7f:5a:b6:78:fa:48:06:5c:fe:2a:3d:9b:75: c1:db:31:35:79:24:d0:92:9d:eb:de:7c:bb:5b:86:60:1e:65: c6:2c:f8:65:de:f6:cb:71:39:a6:ae:8b:1d:41:bb:57:1e:8b: 94:07:dc:07:ec:e8:32:72:f9:63:23:e4:da:c8:93:ce:bf:ee: 2d:8a:ba:7d:2a:25:ba:bd:94:fd:f5:5a:c2:41:30:c8:b9:53: fc:12:44:1f:83:2e:a4:b7:92:ed:bd:da:c8:cf:44:67:c9:eb: ec:57:f5:e2:e5:6d:62:56:40:61:bc:5a:95:d4:fb:18:27:40: 43:c2:33:ad:1d:6b:64:bc:8a:5d:0d:fe:09:1b:31:77:2c:a9: 16:0f:cc:73:c1:25:87:65:01:d7:8b:5d:4a:f5:6d:83:4d:11: ef:fb:26:72:85:72:bb:66:25:78:39:42:b9:e6:05:3a:30:e4: d5:45:65:a1:cb:9f:69:9d:6b:89:02:85:24:9a:73:da:95:09: 40:c1:82:8e:87:ed:43:da:75:20:ac:57:66:3f:2f:eb:d2:f5: 8b:38:df:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeGQC5gRCrTPvhnBab49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjIyMDNiYzAyODY3MDIzNDVhYzQ2NTUwMGI0NDg4YzAz MWM2YjUwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EygyZWY0ZGI3M2E3YjA5NmEyNzVlN2Y0MmMxMWMwM2ZiZTljODRiYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/d05yOPTtPAcQ0hzt+Wu+VxfA1g 5ln6QdEdXZMRskCyYlN5dBU1pNnU7A61hF6FOrwCrUS+SBWMIOBiUtcppcsa5bEN q3aGrecutNGOCW/g6o+jxBI1e+DDQTp1t+fUoQIZRRB303K6jWuImQ3Kw0J5RI3g 3LIRmJqywT2Jc9ZQfnNJ2T2U2LKhnm9B8ioTgS1HOPBPaBa86NejY0KTH6xE1EoC uaW7uzS/t9VTGBLfFzaTlXcje+HIU9dhrF5Qi1YY/g12G1TJYEDyU1EkImXRluyF dzsNHw3o6DKOKzIQM68U0sL/kL5O3SWhAUSwrdTQ8nDiBKqSKNk95q3ylQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7023OnsJaidef0LBHAP76chLw2MB8GA1UdIwQY MBaAFMXyIDvAKGcCNFrEZVALRIjAMca1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYt MjQ0NWY2MzRlOTI4LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYtMjQ0NWY2MzRlOTI4 LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsahll3S6 7FroBjalrjikNMwcqpW3M/WTY7NYgLCKdlG9W7bl1fmVshB/WrZ4+kgGXP4qPZt1 wdsxNXkk0JKd6958u1uGYB5lxiz4Zd72y3E5pq6LHUG7Vx6LlAfcB+zoMnL5YyPk 2siTzr/uLYq6fSolur2U/fVawkEwyLlT/BJEH4MupLeS7b3ayM9EZ8nr7Ff14uVt YlZAYbxaldT7GCdAQ8IzrR1rZLyKXQ3+CRsxdyypFg/Mc8Elh2UB14tdSvVtg00R 7/smcoVyu2YleDlCueYFOjDk1UVlocufaZ1riQKFJJpz2pUJQMGCjoftQ9p1IKxX Zj8v69L1izjfEw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:17 2026 by rpki-client