This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft File: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft (raw, json) Hash identifier: 1FsfTI8245QoH8up4XrTRXnuMmUTjkjc96ljnig5mKc= Subject key identifier: D8:58:09:F5:D6:A8:77:E2:49:80:59:50:4F:FE:AA:B7:EC:68:92:CB Authority key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 Certificate issuer: /CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Certificate serial: 019C4133D0277F2F544AD52D665FA6B15B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft Manifest number: 020D Signing time: Mon 09 Feb 2026 07:00:40 +0000 Manifest this update: Mon 09 Feb 2026 07:00:40 +0000 Manifest next update: Tue 10 Feb 2026 07:00:40 +0000 Files and hashes: 1: _H_5tniV6dHbOCPwrDiKfNRDtb8.roa (hash: jskBF4cI11f70k6sJJHhYYqgxXe9m3wOfO7FgPOCe8k=) 2: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl (hash: VumFWybd+kAyg8vJZlbhfQKszB5eUBLyaUeD/RLSEls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:d0:27:7f:2f:54:4a:d5:2d:66:5f:a6:b1:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Validity Not Before: Feb 9 07:00:40 2026 GMT Not After : Feb 10 07:00:40 2026 GMT Subject: CN=d85809f5d6a877e2498059504ffeaab7ec6892cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:eb:f5:c7:bd:38:69:d1:e6:57:5a:d3:eb: fe:6f:d6:2c:b4:1b:e0:68:a7:e3:d0:ce:5f:32:b2: 6a:d0:04:8e:11:8e:85:08:d5:a6:64:21:fa:a8:85: 4f:d3:67:19:cf:94:e8:39:5f:65:a0:48:21:be:66: 3e:6a:f7:2c:5c:6c:ce:cb:0e:aa:cb:a6:a8:11:28: 79:ed:70:2f:52:4e:0a:97:74:eb:5a:26:a0:7d:e1: 31:89:44:7e:d4:1c:1b:b4:f2:ac:69:84:2f:2e:f5: 10:9e:b7:59:ee:8a:20:e8:61:a6:3a:56:9f:5d:2e: e0:f7:0a:f8:55:fd:7a:85:39:9f:c2:68:f6:2a:83: 1e:bd:5f:52:71:8f:ff:d5:90:8f:11:a2:a0:f4:68: 64:df:78:5b:19:1c:c0:47:07:7f:3d:05:5a:7f:9f: 6b:d2:c1:a9:b1:c5:89:93:ae:7b:d0:ff:62:7a:7b: a8:92:ec:a5:f1:ec:e7:cf:a5:48:cf:7a:08:e4:39: 4e:25:b5:80:99:6c:2a:4b:47:cb:f8:25:fd:14:27: be:e7:c5:ce:e4:08:8a:7f:96:15:07:ab:01:db:82: 37:d1:cb:3a:98:24:63:41:ad:7f:1c:ed:9c:a7:eb: f9:63:e8:a9:b3:36:a0:56:de:58:cb:9e:c9:b7:32: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:09:F5:D6:A8:77:E2:49:80:59:50:4F:FE:AA:B7:EC:68:92:CB X509v3 Authority Key Identifier: keyid:C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:48:18:33:44:7f:da:ef:ec:19:0c:a3:c3:1b:35:42:51:00: ee:1c:91:a8:8b:ae:c7:6a:0a:d7:00:50:36:57:47:2f:ab:7c: b0:c0:b5:0c:68:91:df:55:9f:b5:a9:11:5c:42:19:88:7a:4d: 43:f0:7a:a9:82:d6:ae:c3:be:37:34:ba:e7:be:94:1a:54:fb: 98:f1:f7:11:1d:e6:4d:58:f1:33:c2:63:7e:e8:5e:ce:f1:b2: a6:2a:a5:5a:df:3e:1e:54:69:b8:3f:48:98:f3:f6:1f:f0:b3: 51:cb:02:1d:4f:f5:e2:51:83:2e:65:d9:e2:43:ad:ca:15:4d: b0:62:11:6e:b3:9b:61:aa:b3:3d:9a:ec:73:e0:79:56:87:59: 90:4e:66:23:f6:8c:28:88:f3:46:c4:8c:8d:4a:92:a1:65:74: 5f:dc:ee:ff:40:cf:0a:ce:c9:43:a1:07:d8:b1:e3:fc:33:4f: 53:a1:ca:e8:74:1e:6a:75:17:2d:82:4e:34:db:ef:b5:e3:94: 62:48:76:37:9f:98:80:0d:54:c3:d4:6a:ba:7e:8e:81:ae:1e: 98:9e:35:b6:39:63:09:1b:45:02:e7:49:70:d5:59:a0:b0:1d: 90:0d:00:88:33:6f:39:93:55:30:1d:81:95:f6:1d:8e:90:d5: 55:89:ea:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9Anfy9UStUtZl+msVtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGY4ODI0ZDQ4ZjQzZjY2ZTU0YmE0YTQyZTZkMTBlZDE1 YTRlNDUwHhcNMjYwMjA5MDcwMDQwWhcNMjYwMjEwMDcwMDQwWjAzMTEwLwYDVQQD EyhkODU4MDlmNWQ2YTg3N2UyNDk4MDU5NTA0ZmZlYWFiN2VjNjg5MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iLr9ce9OGnR5lda0+v+b9YstBvg aKfj0M5fMrJq0ASOEY6FCNWmZCH6qIVP02cZz5ToOV9loEghvmY+avcsXGzOyw6q y6aoESh57XAvUk4Kl3TrWiagfeExiUR+1BwbtPKsaYQvLvUQnrdZ7oog6GGmOlaf XS7g9wr4Vf16hTmfwmj2KoMevV9ScY//1ZCPEaKg9Ghk33hbGRzARwd/PQVaf59r 0sGpscWJk6570P9ienuokuyl8eznz6VIz3oI5DlOJbWAmWwqS0fL+CX9FCe+58XO 5AiKf5YVB6sB24I30cs6mCRjQa1/HO2cp+v5Y+ipszagVt5Yy57JtzLHJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhYCfXWqHfiSYBZUE/+qrfsaJLLMB8GA1UdIwQY MBaAFMdPiCTUj0P2blS6SkLm0Q7RWk5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEt YWM3NjdkNGM0YzhmLzEveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEtYWM3NjdkNGM0Yzhm LzEveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0gYM0R/ 2u/sGQyjwxs1QlEA7hyRqIuux2oK1wBQNldHL6t8sMC1DGiR31WftakRXEIZiHpN Q/B6qYLWrsO+NzS6576UGlT7mPH3ER3mTVjxM8JjfuhezvGypiqlWt8+HlRpuD9I mPP2H/CzUcsCHU/14lGDLmXZ4kOtyhVNsGIRbrObYaqzPZrsc+B5VodZkE5mI/aM KIjzRsSMjUqSoWV0X9zu/0DPCs7JQ6EH2LHj/DNPU6HK6HQeanUXLYJONNvvteOU Ykh2N5+YgA1Uw9Rqun6Oga4emJ41tjljCRtFAudJcNVZoLAdkA0AiDNvOZNVMB2B lfYdjpDVVYnq7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:28 2026 by rpki-client