This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json) Hash identifier: OiBfkGYZ+vcNtgRjglp1HdOdkifhtrVHIg83dLDBSq4= Subject key identifier: E7:3F:D5:BC:7B:52:51:38:CC:C8:A8:61:04:FF:47:77:E4:7E:95:44 Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Certificate serial: 019C42EB3E9E293AE8D552E96990F409B309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft Manifest number: 0B3F Signing time: Mon 09 Feb 2026 15:00:39 +0000 Manifest this update: Mon 09 Feb 2026 15:00:39 +0000 Manifest next update: Tue 10 Feb 2026 15:00:39 +0000 Files and hashes: 1: Hi_yIbXB_AqEZvECw_6A2niKbbY.roa (hash: V9KwW6TEefSi+Nbg4IOw24z7gPz8KPWyVOeCLVyS3EY=) 2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: dAWxiC4rfgYStGHa60QOTLjTEAZTNBV2CdPi8aIt5DI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:3e:9e:29:3a:e8:d5:52:e9:69:90:f4:09:b3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Validity Not Before: Feb 9 15:00:39 2026 GMT Not After : Feb 10 15:00:39 2026 GMT Subject: CN=e73fd5bc7b525138ccc8a86104ff4777e47e9544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:95:b8:2f:b1:cc:a2:d6:0f:28:e2:5c:36: 2e:eb:c6:f5:c3:b0:39:3f:46:fb:02:f1:03:e7:f6: d7:50:ec:9a:42:12:5a:f2:bd:bc:d5:ef:db:c5:2c: c3:d2:4b:50:eb:bf:86:4d:99:ad:9d:71:7f:aa:97: 22:ed:b9:dd:be:b3:f0:c6:41:ef:f6:a5:3e:d2:bc: 63:29:1f:a3:5b:49:3f:e1:c3:99:3e:e3:23:b7:c0: 08:0a:af:8a:6b:67:d8:58:6d:ee:05:83:f1:29:0f: ec:77:34:c4:08:85:ce:9d:5d:23:81:38:a5:1b:56: 0f:a3:ed:df:30:bd:36:40:d9:b9:1b:01:98:bb:20: 86:94:35:db:83:f2:6c:96:eb:70:28:ae:b0:25:30: 3f:8e:76:73:6d:f3:d7:b5:aa:21:db:4f:26:e8:83: fd:5a:05:8c:72:a5:8f:e5:0a:13:4d:06:6d:55:d5: dc:b2:bf:a8:51:96:69:80:fc:cd:aa:52:45:e1:af: cc:dc:ba:f5:f9:96:9a:d9:89:3b:1c:2f:ea:98:28: 03:b5:37:11:21:61:f4:b9:02:08:f5:f4:6a:80:94: 10:91:20:92:22:a3:7c:8f:e7:2f:1b:53:1a:c7:67: 3d:91:5b:64:09:f4:73:4d:eb:0d:58:2e:a2:62:bc: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:D5:BC:7B:52:51:38:CC:C8:A8:61:04:FF:47:77:E4:7E:95:44 X509v3 Authority Key Identifier: keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:46:03:9c:46:9c:32:89:3d:cb:ff:23:c4:43:06:9b:5a:93: 47:3c:cc:c9:66:08:ab:e8:03:94:6a:f3:de:4d:5d:d1:d6:76: 18:67:66:84:6e:f1:e9:ea:66:f2:40:c2:8a:f4:34:fd:2d:dd: 4c:d4:0c:bc:12:22:ae:8e:15:5f:3f:0d:b0:9e:22:9b:31:b0: 31:7e:7c:98:5a:a5:0b:b8:0d:96:3e:ee:d5:8f:cd:b9:55:6e: df:96:5f:4f:fa:50:6d:33:8c:79:7c:d5:36:0b:34:e0:86:e0: 99:87:b7:be:f2:ea:29:a8:56:fb:ec:64:80:eb:58:39:f5:22: c0:5f:5a:03:c6:ed:6e:83:44:db:7c:0f:63:a8:02:7d:fe:4b: ed:40:73:1d:74:0b:a8:c3:d9:e2:41:12:55:c2:b4:31:38:5a: 4e:21:32:d7:a0:51:19:f0:57:ac:fc:24:70:51:69:a3:8c:7d: 8c:1e:a8:65:55:34:7b:6c:85:10:cf:eb:3e:eb:17:6c:70:77: ea:a1:b6:7b:25:02:17:ba:d2:54:d2:df:89:91:14:8d:80:cd: df:6e:17:e0:4e:df:ff:40:bf:9f:22:3d:83:54:d4:0c:55:f5: 02:e7:17:b6:34:62:81:af:56:ff:8a:4b:4a:a5:72:64:57:9c: 9a:ed:f5:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6z6eKTro1VLpaZD0CbMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3 MDFhNDgwHhcNMjYwMjA5MTUwMDM5WhcNMjYwMjEwMTUwMDM5WjAzMTEwLwYDVQQD EyhlNzNmZDViYzdiNTI1MTM4Y2NjOGE4NjEwNGZmNDc3N2U0N2U5NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm+VuC+xzKLWDyjiXDYu68b1w7A5 P0b7AvED5/bXUOyaQhJa8r281e/bxSzD0ktQ67+GTZmtnXF/qpci7bndvrPwxkHv 9qU+0rxjKR+jW0k/4cOZPuMjt8AICq+Ka2fYWG3uBYPxKQ/sdzTECIXOnV0jgTil G1YPo+3fML02QNm5GwGYuyCGlDXbg/JslutwKK6wJTA/jnZzbfPXtaoh208m6IP9 WgWMcqWP5QoTTQZtVdXcsr+oUZZpgPzNqlJF4a/M3Lr1+Zaa2Yk7HC/qmCgDtTcR IWH0uQII9fRqgJQQkSCSIqN8j+cvG1Max2c9kVtkCfRzTesNWC6iYrxv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc/1bx7UlE4zMioYQT/R3fkfpVEMB8GA1UdIwQY MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5 LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUYDnEac Mok9y/8jxEMGm1qTRzzMyWYIq+gDlGrz3k1d0dZ2GGdmhG7x6epm8kDCivQ0/S3d TNQMvBIiro4VXz8NsJ4imzGwMX58mFqlC7gNlj7u1Y/NuVVu35ZfT/pQbTOMeXzV Ngs04IbgmYe3vvLqKahW++xkgOtYOfUiwF9aA8btboNE23wPY6gCff5L7UBzHXQL qMPZ4kESVcK0MThaTiEy16BRGfBXrPwkcFFpo4x9jB6oZVU0e2yFEM/rPusXbHB3 6qG2eyUCF7rSVNLfiZEUjYDN324X4E7f/0C/nyI9g1TUDFX1AucXtjRiga9W/4pL SqVyZFecmu31lg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:37 2026 by rpki-client