This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json) Hash identifier: L7ztMB0Mc7Cr3c82gtdv+B3BnUePValfAQruL+ERM6Q= Subject key identifier: ED:56:40:DE:E6:E1:6B:1A:B9:74:9C:5A:F5:4D:03:5F:53:EE:54:5A Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Certificate serial: 019C438FE723E41873994E82D5EE9247C010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft Manifest number: 182D Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=) 2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: 2d4C2Bbtzs8XHosIJHAOmowFknMpwraOM5gYu7Nf0iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e7:23:e4:18:73:99:4e:82:d5:ee:92:47:c0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=ed5640dee6e16b1ab9749c5af54d035f53ee545a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:86:9c:31:ff:a4:58:65:0a:6e:4e:07:0f: a8:76:b7:12:c1:6b:43:f9:23:24:e4:18:2d:16:28: ea:5c:fb:7a:9a:f3:c3:f6:6d:84:1d:11:44:15:21: d5:26:50:bf:8e:fa:65:6e:16:f4:2f:1d:2e:48:f3: 2a:23:2a:94:ed:01:1f:40:7e:0b:d1:a6:ee:d2:ad: 63:88:75:69:3d:32:ed:cd:d2:cf:05:e3:d9:a0:c1: a2:1a:79:37:d0:21:1d:6c:57:6f:dd:d2:30:31:78: 8d:58:7c:04:48:6e:4e:b4:57:c5:88:f9:da:5e:d5: 00:d4:fc:fa:2a:09:48:9d:b2:3a:4d:69:af:bc:c0: 88:ef:8c:98:5f:e8:95:c6:a2:50:c6:79:65:44:34: b6:80:e9:49:4c:87:9f:75:8d:35:d1:37:6e:f0:fe: cc:f7:f2:76:de:75:42:6a:e5:ff:35:7a:4a:be:59: cd:d8:f8:59:50:c6:96:2f:ab:96:98:9e:c0:92:2b: c1:15:60:fe:14:53:d4:44:59:e1:d0:e6:85:31:62: de:ec:b4:d0:59:2b:43:e9:bd:66:01:a8:cf:ff:19: fe:1f:0a:07:22:40:9c:a8:c3:ec:93:5d:04:43:d6: 6a:7b:ba:52:f4:44:d8:64:33:6b:ba:40:75:2b:b2: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:56:40:DE:E6:E1:6B:1A:B9:74:9C:5A:F5:4D:03:5F:53:EE:54:5A X509v3 Authority Key Identifier: keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c2:6c:c0:be:05:e8:38:f6:8a:f5:29:e1:17:f7:7b:16:84: 29:67:8b:69:91:e1:a1:37:95:cf:a3:75:ba:d3:a8:0d:b0:7d: e4:da:93:5a:2b:52:48:93:f1:03:3f:47:93:d2:de:cc:7b:ef: e2:bb:fb:d6:be:14:da:cc:0b:d0:fc:1e:0b:05:18:f6:a9:4c: eb:f8:1d:04:16:1b:72:70:8b:ad:89:0a:65:56:60:3c:35:74: 08:17:9f:5a:b8:1a:e0:81:89:d6:29:73:23:44:37:ba:a6:86: 58:48:d2:fa:1a:3f:88:93:ea:f5:27:38:82:3e:b5:fa:68:3c: be:0c:e1:2e:8f:49:9a:f3:fc:25:c4:2c:72:38:6c:a1:79:7a: d5:c3:c4:d1:73:95:bf:84:75:2f:c6:8a:2e:f2:9d:8d:68:15: 4b:de:6f:2c:08:9a:c3:24:4e:14:7d:6a:6a:14:a0:c7:7a:46: 35:77:13:55:40:68:a4:6f:12:69:e2:25:32:84:ab:ed:26:0d: ab:97:90:d0:df:88:ff:d8:3e:ae:f9:63:19:5b:52:33:c6:21: e7:86:26:68:fe:fd:ad:7c:aa:5b:c8:ed:ec:08:20:68:2e:a0: 5c:f3:4b:35:9d:56:6f:a1:a6:ac:e5:4f:b5:95:7e:79:55:01: 78:ae:fd:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+cj5BhzmU6C1e6SR8AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm NmQwMzAwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD EyhlZDU2NDBkZWU2ZTE2YjFhYjk3NDljNWFmNTRkMDM1ZjUzZWU1NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoemGnDH/pFhlCm5OBw+odrcSwWtD +SMk5BgtFijqXPt6mvPD9m2EHRFEFSHVJlC/jvplbhb0Lx0uSPMqIyqU7QEfQH4L 0abu0q1jiHVpPTLtzdLPBePZoMGiGnk30CEdbFdv3dIwMXiNWHwESG5OtFfFiPna XtUA1Pz6KglInbI6TWmvvMCI74yYX+iVxqJQxnllRDS2gOlJTIefdY010Tdu8P7M 9/J23nVCauX/NXpKvlnN2PhZUMaWL6uWmJ7AkivBFWD+FFPURFnh0OaFMWLe7LTQ WStD6b1mAajP/xn+HwoHIkCcqMPsk10EQ9Zqe7pS9ETYZDNrukB1K7LpWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1WQN7m4WsauXScWvVNA19T7lRaMB8GA1UdIwQY MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMJswL4F 6Dj2ivUp4Rf3exaEKWeLaZHhoTeVz6N1utOoDbB95NqTWitSSJPxAz9Hk9LezHvv 4rv71r4U2swL0PweCwUY9qlM6/gdBBYbcnCLrYkKZVZgPDV0CBefWrga4IGJ1ilz I0Q3uqaGWEjS+ho/iJPq9Sc4gj61+mg8vgzhLo9JmvP8JcQscjhsoXl61cPE0XOV v4R1L8aKLvKdjWgVS95vLAiawyROFH1qahSgx3pGNXcTVUBopG8SaeIlMoSr7SYN q5eQ0N+I/9g+rvljGVtSM8Yh54YmaP79rXyqW8jt7AggaC6gXPNLNZ1Wb6GmrOVP tZV+eVUBeK79gA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:41 2026 by rpki-client