This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json) Hash identifier: V5m20mXeQqDuCXldRNzZbedKyDvlIyBW8z5Z9G2jlT0= Subject key identifier: 23:D0:32:F3:1C:B5:8A:A2:70:B9:14:2A:BD:91:73:40:44:14:B3:9E Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c Certificate serial: 019C42B48679D4A7AC8AF11BF16F4C9963CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft Manifest number: 0F33 Signing time: Mon 09 Feb 2026 14:00:52 +0000 Manifest this update: Mon 09 Feb 2026 14:00:52 +0000 Manifest next update: Tue 10 Feb 2026 14:00:52 +0000 Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: gOJq4cEoDZz7Ecu8wDZyw2rVb5sUpFgU8Yl/KGQUWzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:86:79:d4:a7:ac:8a:f1:1b:f1:6f:4c:99:63:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c Validity Not Before: Feb 9 14:00:52 2026 GMT Not After : Feb 10 14:00:52 2026 GMT Subject: CN=23d032f31cb58aa270b9142abd9173404414b39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:62:25:3a:fb:02:89:1d:9a:89:02:ea:d1: 5f:13:45:b1:22:ec:38:7f:3f:17:dc:bf:24:9b:a9: df:35:1f:2c:cf:14:e6:d2:30:b5:dc:a7:f4:9b:6d: 29:a7:e9:b4:1c:24:d6:b6:56:84:a9:2e:f7:a8:ce: 95:4a:ac:15:cc:65:f1:de:6c:5f:0f:1a:5c:f9:90: c7:76:6d:30:bd:05:65:66:97:42:b6:33:c5:fb:c2: 03:05:95:b2:6e:0c:42:14:c4:f7:62:cf:e2:a4:3e: 4b:18:21:09:92:e3:14:31:66:c3:98:97:19:0e:d1: 27:32:47:10:83:e5:bc:9d:04:df:e6:f7:50:46:38: 85:14:44:04:5c:e5:7e:bd:91:88:4f:0f:af:b1:51: 66:73:2d:4f:b0:7e:09:63:4c:a5:5a:a0:c6:cc:be: 43:39:e4:b2:1d:00:b5:e9:92:68:d6:da:4a:5b:98: 8f:38:64:3e:69:34:e5:01:87:a6:ef:98:35:bc:03: f8:8a:5d:1e:5a:c1:d0:33:80:b1:e3:44:f2:38:4e: ac:a2:f0:cc:89:2a:c0:6f:99:ef:fe:96:17:2c:6e: 2a:b6:0d:48:f6:d6:fd:a4:f4:14:56:e5:02:48:21: 01:5f:1b:e8:65:7e:0f:61:a6:0c:10:19:5e:ad:43: 23:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:32:F3:1C:B5:8A:A2:70:B9:14:2A:BD:91:73:40:44:14:B3:9E X509v3 Authority Key Identifier: keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:bb:4e:fe:3b:79:9c:50:0f:ab:c4:97:5f:ff:6d:3e:b5: 23:00:1f:94:11:e5:c3:b3:50:2f:5c:32:d8:3c:27:40:56:bd: 1e:c5:6f:20:f2:73:ee:d9:44:84:a6:b9:c2:fc:61:70:ed:89: 89:ff:8a:74:ed:fe:0f:d3:f7:a4:4e:2a:c9:a1:9d:3e:41:34: 58:76:e1:c7:4c:47:15:dd:24:2f:2c:44:07:9f:0c:ac:32:a1: 5c:57:4e:f3:45:bb:ce:62:38:bd:f5:81:91:93:ac:a6:a5:07: c2:e7:de:99:4a:33:cf:25:2f:78:76:0f:57:fb:3f:40:ff:9a: b6:67:77:6f:2e:94:85:53:9c:f1:59:18:f2:b6:e2:84:9f:23: da:c6:de:0a:89:37:d7:f4:c5:9b:62:ab:40:36:ec:d1:74:a0: 8c:17:ca:0a:f7:59:40:32:8a:0b:07:9b:34:86:1a:5e:50:26: 73:d5:20:4a:5b:e2:b0:da:21:1b:3d:68:55:02:7f:29:10:e5: c3:5d:d5:1a:0a:0b:38:72:2f:26:8e:38:45:da:1b:fd:52:6d: cd:a6:6d:b2:85:c3:7b:5b:6a:bb:8c:ac:37:a6:fe:b8:41:64: c3:37:68:3e:1a:e0:62:dc:cd:c6:cf:7e:3d:a1:18:29:c4:5e: 39:fb:b4:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIZ51KesivEb8W9MmWPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTgzYjFiNjE1YTcwZDc5N2MyNzdjZmM4NDBiOTBhMzJk OTY5NmMwHhcNMjYwMjA5MTQwMDUyWhcNMjYwMjEwMTQwMDUyWjAzMTEwLwYDVQQD EygyM2QwMzJmMzFjYjU4YWEyNzBiOTE0MmFiZDkxNzM0MDQ0MTRiMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsudiJTr7AokdmokC6tFfE0WxIuw4 fz8X3L8km6nfNR8szxTm0jC13Kf0m20pp+m0HCTWtlaEqS73qM6VSqwVzGXx3mxf Dxpc+ZDHdm0wvQVlZpdCtjPF+8IDBZWybgxCFMT3Ys/ipD5LGCEJkuMUMWbDmJcZ DtEnMkcQg+W8nQTf5vdQRjiFFEQEXOV+vZGITw+vsVFmcy1PsH4JY0ylWqDGzL5D OeSyHQC16ZJo1tpKW5iPOGQ+aTTlAYem75g1vAP4il0eWsHQM4Cx40TyOE6sovDM iSrAb5nv/pYXLG4qtg1I9tb9pPQUVuUCSCEBXxvoZX4PYaYMEBlerUMjFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPQMvMctYqicLkUKr2Rc0BEFLOeMB8GA1UdIwQY MBaAFMUYOxthWnDXl8J3z8hAuQoy2WlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMt NjU2ZTJlYjgwNGM3LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMtNjU2ZTJlYjgwNGM3 LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfS7Tv47 eZxQD6vEl1//bT61IwAflBHlw7NQL1wy2DwnQFa9HsVvIPJz7tlEhKa5wvxhcO2J if+KdO3+D9P3pE4qyaGdPkE0WHbhx0xHFd0kLyxEB58MrDKhXFdO80W7zmI4vfWB kZOspqUHwufemUozzyUveHYPV/s/QP+atmd3by6UhVOc8VkY8rbihJ8j2sbeCok3 1/TFm2KrQDbs0XSgjBfKCvdZQDKKCwebNIYaXlAmc9UgSlvisNohGz1oVQJ/KRDl w13VGgoLOHIvJo44Rdob/VJtzaZtsoXDe1tqu4ysN6b+uEFkwzdoPhrgYtzNxs9+ PaEYKcReOfu09Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:24 2026 by rpki-client