This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft File: xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json) Hash identifier: 79CweauoiDV85kmh9+hPAprhThPHnhwsvCGp6SkSEys= Subject key identifier: 76:53:26:72:7D:B4:BE:D2:8D:C2:75:91:6C:69:5F:38:3D:90:7E:01 Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7 Certificate issuer: /CN=c4729af13d3d156f411976b176e554fa671d76f7 Certificate serial: 019C4435092EB685FC2715C337BA760B372F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft Manifest number: 1555 Signing time: Mon 09 Feb 2026 21:00:52 +0000 Manifest this update: Mon 09 Feb 2026 21:00:52 +0000 Manifest next update: Tue 10 Feb 2026 21:00:52 +0000 Files and hashes: 1: 5bGOVGgpUSjx1uwMkRS9oqXlCJM.roa (hash: gEd4SfTflxW3Gsgz2afT2mctC6KsEwsMe5axMz0injA=) 2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: LGiei4mbq52C/NorfAvNIMLi0KHS5tN7DdSRbIy33fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:09:2e:b6:85:fc:27:15:c3:37:ba:76:0b:37:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7 Validity Not Before: Feb 9 21:00:52 2026 GMT Not After : Feb 10 21:00:52 2026 GMT Subject: CN=765326727db4bed28dc275916c695f383d907e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:91:0c:00:1e:bc:02:d1:84:8a:70:75:2a: 7c:a8:d1:6c:a5:28:01:69:aa:01:0a:c4:5d:9e:84: 1b:88:bc:be:48:9a:71:72:20:f1:4e:2b:f9:55:91: 1d:64:52:11:8a:2f:72:13:67:c0:b6:8d:63:3f:92: 1a:cd:30:c0:43:dc:b3:a4:f9:ce:48:6f:c2:7e:0c: 41:e8:b2:66:e9:da:58:3c:3a:33:e2:89:5e:97:c8: d3:46:b0:fc:25:bf:25:51:b3:f3:54:35:83:3c:25: 0f:be:3e:4e:7b:6d:9c:48:be:2d:36:91:73:45:e2: a8:c8:05:1a:92:1e:f5:53:ce:52:b2:48:02:1d:c0: 20:65:52:2b:eb:4d:d1:67:7e:97:56:78:ab:06:16: 72:3e:91:7f:4b:1f:26:82:f9:bf:98:1d:0b:40:04: 8d:c7:fe:42:e3:ca:2a:5c:dc:19:61:c1:ac:bf:73: 24:d9:7e:a6:6d:73:56:ad:b7:43:3d:ea:ac:43:3b: 59:d1:4a:59:a5:c0:2f:50:c6:1e:28:27:6b:70:13: a8:0d:b0:3a:f1:99:56:6f:e3:f4:b4:53:1e:02:50: 34:29:b7:65:27:93:2c:46:a2:f9:70:83:c9:c5:ba: ea:7f:ff:8e:c8:f3:b2:d6:e3:b9:ee:5e:f5:6c:19: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:26:72:7D:B4:BE:D2:8D:C2:75:91:6C:69:5F:38:3D:90:7E:01 X509v3 Authority Key Identifier: keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a6:40:85:32:ef:e0:80:fa:27:36:c5:d5:38:95:6a:76:50: 82:b9:8d:97:71:ae:7c:dd:27:43:e6:0e:59:99:85:46:5c:77: 46:f2:01:f9:11:c8:2f:3d:c4:52:bf:00:e2:e4:0c:27:4a:00: 5e:d5:a0:9a:49:87:a5:05:b4:a3:fe:72:8d:01:9b:b3:b7:56: 88:64:29:de:db:90:64:0b:d4:80:b5:09:df:04:d5:4f:12:16: 77:b8:75:28:3b:04:d0:e7:d5:05:83:7d:96:76:3a:73:a1:2f: c0:92:ae:eb:8f:f4:47:2e:af:ea:4e:a6:17:d6:bf:9b:bc:8c: 01:62:c5:1f:9a:c3:28:56:3f:9e:a3:07:c0:f9:b4:82:8c:25: 0b:70:4f:d5:fb:b1:17:a9:dd:ff:b1:a2:db:96:44:85:f0:8d: 79:8b:04:fa:65:27:1c:6e:6a:2c:fc:85:48:ad:53:9b:08:00: 01:be:3a:56:ff:31:40:16:f8:78:28:ea:88:7e:dc:ed:eb:ec: d7:f8:cc:be:80:2f:af:64:1f:a5:fc:24:80:1e:2e:d3:16:6e: 90:8f:f9:31:56:b4:6e:a6:d8:22:57:85:21:a5:de:0d:11:f3: 2c:f1:be:89:80:fb:c8:c4:2d:31:17:7d:a0:fc:7c:90:3b:ad: ee:9b:62:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENQkutoX8JxXDN7p2CzcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NzI5YWYxM2QzZDE1NmY0MTE5NzZiMTc2ZTU1NGZhNjcx ZDc2ZjcwHhcNMjYwMjA5MjEwMDUyWhcNMjYwMjEwMjEwMDUyWjAzMTEwLwYDVQQD Eyg3NjUzMjY3MjdkYjRiZWQyOGRjMjc1OTE2YzY5NWYzODNkOTA3ZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGORDAAevALRhIpwdSp8qNFspSgB aaoBCsRdnoQbiLy+SJpxciDxTiv5VZEdZFIRii9yE2fAto1jP5IazTDAQ9yzpPnO SG/CfgxB6LJm6dpYPDoz4olel8jTRrD8Jb8lUbPzVDWDPCUPvj5Oe22cSL4tNpFz ReKoyAUakh71U85SskgCHcAgZVIr603RZ36XVnirBhZyPpF/Sx8mgvm/mB0LQASN x/5C48oqXNwZYcGsv3Mk2X6mbXNWrbdDPeqsQztZ0UpZpcAvUMYeKCdrcBOoDbA6 8ZlWb+P0tFMeAlA0KbdlJ5MsRqL5cIPJxbrqf/+OyPOy1uO57l71bBl+JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZTJnJ9tL7SjcJ1kWxpXzg9kH4BMB8GA1UdIwQY MBaAFMRymvE9PRVvQRl2sXblVPpnHXb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEhLYThUMDlGVzlCR1hheGR1VlUtbWNkZHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NWUwNjAtZmEyYS00MDU3LTk1Nzgt YjA4OThmYmIxY2FiLzEveEhLYThUMDlGVzlCR1hheGR1VlUtbWNkZHZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NWUwNjAtZmEyYS00MDU3LTk1NzgtYjA4OThmYmIxY2Fi LzEveEhLYThUMDlGVzlCR1hheGR1VlUtbWNkZHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6ZAhTLv 4ID6JzbF1TiVanZQgrmNl3GufN0nQ+YOWZmFRlx3RvIB+RHILz3EUr8A4uQMJ0oA XtWgmkmHpQW0o/5yjQGbs7dWiGQp3tuQZAvUgLUJ3wTVTxIWd7h1KDsE0OfVBYN9 lnY6c6EvwJKu64/0Ry6v6k6mF9a/m7yMAWLFH5rDKFY/nqMHwPm0gowlC3BP1fux F6nd/7Gi25ZEhfCNeYsE+mUnHG5qLPyFSK1TmwgAAb46Vv8xQBb4eCjqiH7c7evs 1/jMvoAvr2QfpfwkgB4u0xZukI/5MVa0bqbYIleFIaXeDRHzLPG+iYD7yMQtMRd9 oPx8kDut7ptimg== -----END CERTIFICATE-----Generated at Tue Feb 10 07:50:33 2026 by rpki-client