This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json) Hash identifier: f3ic/0/4PC28HtqFhiwkVIyWkG6e1IPjR2F+05HY+Xg= Subject key identifier: B4:41:3C:B4:6C:89:7F:40:D2:61:29:FD:F8:26:B1:F5:E1:5D:CF:A3 Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16 Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416 Certificate serial: 019C427DA02D6DACFADE26CEFCEB31720718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft Manifest number: 0A8C Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: Le8K7qSkEZ1_FmI_JNvcQwDT3kM.roa (hash: YPGYe40UQA7fHzeXPlUUiQ7ZZraM1bL1CPz1T+qTDdY=) 2: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: cpM/MFQTv5ricGVzS9qdNzQSIBzIFPDFFwaid0Iak/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a0:2d:6d:ac:fa:de:26:ce:fc:eb:31:72:07:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7319007a28ade0781d312d8d49472db367670416 Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=b4413cb46c897f40d26129fdf826b1f5e15dcfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:34:0b:ba:26:43:1d:cd:e6:d6:6d:85:35: 59:48:a4:0d:c4:dd:67:d2:52:da:4d:dc:16:7c:f5: bf:91:0c:f4:71:77:51:12:3f:e3:33:65:4a:41:a7: 08:25:df:d7:df:45:ab:62:3f:8a:08:80:d3:8a:1a: b2:c5:6a:1f:18:5e:47:0c:e3:fd:2b:44:d6:41:f7: 49:51:31:07:27:50:a2:7a:e3:4b:25:7a:d8:66:f9: e3:20:bc:92:06:12:2f:11:01:26:bd:a1:06:9f:c0: 22:9b:17:cf:5f:67:b7:17:c6:ca:a7:7f:cd:d1:aa: c1:5c:78:46:d5:ed:ba:93:e8:f5:f8:fb:83:40:1b: dc:ae:90:84:92:ee:23:a6:05:ac:f5:34:e9:1a:80: 92:3b:00:5d:68:c8:50:a2:28:fa:c7:cb:e3:07:2d: a4:76:b7:e7:bc:7c:50:bf:b1:23:cb:86:94:02:6e: 51:ad:75:e7:5c:90:a4:36:1a:c9:f8:a7:a3:91:ab: b2:63:47:2b:63:a1:23:9f:61:cd:a4:62:46:91:71: c7:f7:03:40:80:b8:90:cc:bc:8c:98:ee:b1:95:42: 32:cb:84:a9:c5:d4:69:d0:c7:66:b1:ed:74:e0:1a: 53:bd:44:75:b7:9a:ff:0b:8f:2d:e7:3a:8c:2e:2e: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:3C:B4:6C:89:7F:40:D2:61:29:FD:F8:26:B1:F5:E1:5D:CF:A3 X509v3 Authority Key Identifier: keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:20:e0:41:51:9c:6a:86:c4:12:b3:ae:9e:c5:7d:88:0f:82: c7:18:05:75:1a:16:4c:33:3e:a9:ea:00:d6:6c:a5:98:86:e7: 06:95:a7:07:e0:52:65:a5:31:60:5d:16:96:c0:e1:29:07:ba: 4d:40:49:24:37:78:30:db:8c:23:24:d2:69:a6:39:61:19:ee: 62:2f:1f:7f:54:ae:60:31:be:83:05:d5:76:91:e4:4c:35:21: 9d:07:89:bf:c0:81:5a:cf:16:29:81:29:dc:ec:e6:6c:bf:6b: 71:8b:56:20:de:24:2d:36:8f:88:97:c2:5d:0e:fd:06:43:ef: 74:43:1f:02:a0:0b:24:7c:ca:ff:e9:4a:a4:1c:73:f9:fd:1b: db:18:00:18:fe:8a:41:32:70:0a:25:0f:cf:34:6d:e6:2a:14: 80:9e:a7:e5:36:c0:df:d3:36:3b:45:29:0a:92:80:82:7a:f5: 00:74:84:56:bc:3b:c1:d4:98:6f:7a:87:43:7a:32:18:3d:51: b9:e5:30:de:85:e6:99:06:d3:79:ab:20:8b:d9:2e:30:39:44: c0:cb:6f:ff:a9:2f:c9:f7:f2:42:a6:84:7d:34:87:13:8b:e2: 06:a4:10:50:af:f4:cf:87:e5:23:53:ea:4e:64:cd:82:18:e5: ca:bd:2b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaAtbaz63ibO/OsxcgcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMTkwMDdhMjhhZGUwNzgxZDMxMmQ4ZDQ5NDcyZGIzNjc2 NzA0MTYwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD EyhiNDQxM2NiNDZjODk3ZjQwZDI2MTI5ZmRmODI2YjFmNWUxNWRjZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Y0C7omQx3N5tZthTVZSKQNxN1n 0lLaTdwWfPW/kQz0cXdREj/jM2VKQacIJd/X30WrYj+KCIDTihqyxWofGF5HDOP9 K0TWQfdJUTEHJ1CieuNLJXrYZvnjILySBhIvEQEmvaEGn8AimxfPX2e3F8bKp3/N 0arBXHhG1e26k+j1+PuDQBvcrpCEku4jpgWs9TTpGoCSOwBdaMhQoij6x8vjBy2k drfnvHxQv7Ejy4aUAm5RrXXnXJCkNhrJ+KejkauyY0crY6Ejn2HNpGJGkXHH9wNA gLiQzLyMmO6xlUIyy4SpxdRp0Mdmse104BpTvUR1t5r/C48t5zqMLi4GLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRBPLRsiX9A0mEp/fgmsfXhXc+jMB8GA1UdIwQY MBaAFHMZAHooreB4HTEtjUlHLbNnZwQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgt OWY5NDk0OTY2YzU0LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mOGM3ZTItMzI4Mi00ZWJiLTg1MDgtOWY5NDk0OTY2YzU0 LzEvY3hrQWVpaXQ0SGdkTVMyTlNVY3RzMmRuQkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSDgQVGc aobEErOunsV9iA+CxxgFdRoWTDM+qeoA1mylmIbnBpWnB+BSZaUxYF0WlsDhKQe6 TUBJJDd4MNuMIyTSaaY5YRnuYi8ff1SuYDG+gwXVdpHkTDUhnQeJv8CBWs8WKYEp 3OzmbL9rcYtWIN4kLTaPiJfCXQ79BkPvdEMfAqALJHzK/+lKpBxz+f0b2xgAGP6K QTJwCiUPzzRt5ioUgJ6n5TbA39M2O0UpCpKAgnr1AHSEVrw7wdSYb3qHQ3oyGD1R ueUw3oXmmQbTeasgi9kuMDlEwMtv/6kvyffyQqaEfTSHE4viBqQQUK/0z4flI1Pq TmTNghjlyr0rtg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:24 2026 by rpki-client