This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json) Hash identifier: yNke88HMpJf3obmExiIvGhBoYpdmf73m7WYqc5FIPKM= Subject key identifier: D9:F5:A9:FF:6A:8B:AD:21:EF:0C:D8:30:04:A9:2C:0A:8F:7E:64:AB Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93 Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893 Certificate serial: 019C42EB0DD7862E538D0ED654A967C80065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: G5J2lxH4olfc5p0N9668gVzLWiZvEbkYX4KkuyyP6uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0d:d7:86:2e:53:8d:0e:d6:54:a9:67:c8:00:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893 Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=d9f5a9ff6a8bad21ef0cd83004a92c0a8f7e64ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:59:2b:c3:07:a3:14:5e:aa:e5:fa:92:bf: 0d:30:18:38:7d:20:5d:fa:7d:04:ba:f1:3b:de:f9: 6f:0f:45:bb:e6:f8:89:5a:e5:da:16:d2:d3:26:b4: 4e:4a:61:df:2f:3f:e6:ef:f0:46:2f:42:f5:51:e8: ba:5c:54:c9:ee:23:1d:53:6f:50:19:81:62:5d:eb: 3b:79:28:2a:3e:67:1f:b4:2c:e2:10:06:92:93:7c: 80:ee:42:be:42:f6:99:cb:83:e5:e9:f2:62:81:9d: 0e:ed:0a:c9:62:f9:80:0f:bd:b4:c0:63:5c:53:65: 5c:f4:00:c8:dd:db:0f:4e:43:20:3c:43:c5:d3:8c: 46:c9:5f:b2:a9:72:11:38:1f:b5:54:31:fc:c9:c2: 9b:35:35:81:79:cf:a4:e3:ef:10:ac:bb:1d:d7:b7: 4d:b4:93:ad:a6:e2:dc:89:b2:5b:3c:1b:f8:32:f8: fd:c7:7e:43:2f:69:ff:fc:b6:88:fa:a7:e3:3a:69: 99:b9:dd:9c:41:9b:6e:b5:81:b6:1c:62:4b:cd:36: c2:af:4a:91:2c:a9:d8:1d:11:67:be:a0:59:1c:94: ca:d1:b7:cf:a8:38:2c:bc:b2:10:82:f9:e1:12:60: bf:d7:51:93:78:d6:bb:05:3f:6b:59:1b:8f:8e:b7: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F5:A9:FF:6A:8B:AD:21:EF:0C:D8:30:04:A9:2C:0A:8F:7E:64:AB X509v3 Authority Key Identifier: keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:8f:6f:79:49:20:9f:c9:5e:be:49:af:19:c2:51:ac:d3: 63:81:db:72:e0:06:53:77:be:7a:bc:eb:24:6c:fd:fd:fb:bf: 09:2b:f1:36:ef:0f:16:0f:14:af:b9:ad:e8:08:78:bb:7e:5d: 83:b6:a1:1f:f6:06:9e:33:2f:fe:1e:b6:54:90:08:e4:9d:28: 13:b3:ca:17:e4:01:81:af:e5:a3:ba:66:b1:6f:32:c9:42:8c: 28:83:33:54:9c:74:e1:5a:f2:74:f7:c0:36:7b:2f:83:b9:97: 45:f3:26:3f:f1:76:78:8c:f4:ec:d2:1c:1a:66:b2:19:d6:94: dd:50:1d:c5:35:f2:46:3f:6b:f7:ec:9f:c5:95:ba:88:39:fd: 00:ae:60:ae:0f:34:45:aa:ce:29:41:f2:c1:10:7d:eb:bd:09: 2e:67:36:6f:76:21:37:20:c4:5e:8f:c0:da:73:25:d4:59:c0: cf:07:0e:68:40:a2:d3:2a:9a:b4:50:9a:d8:a7:40:3e:7e:48: 5b:8e:0f:46:77:33:d6:d2:a2:5e:a5:a7:2a:09:2e:68:48:8e: c3:49:61:ce:18:0d:83:e2:d2:6e:ad:a1:86:d6:e8:f4:92:82: 75:96:7d:1a:35:61:93:41:b6:21:a8:fc:e8:d4:4e:67:fc:60: bd:c4:2f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w3Xhi5TjQ7WVKlnyABlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjI4ZjA1Y2NhOGM4N2Q1OTNlNzFlOWRkMjFiMGU3Zjg5 ZDU4OTMwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD EyhkOWY1YTlmZjZhOGJhZDIxZWYwY2Q4MzAwNGE5MmMwYThmN2U2NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxJZK8MHoxRequX6kr8NMBg4fSBd +n0EuvE73vlvD0W75viJWuXaFtLTJrROSmHfLz/m7/BGL0L1Uei6XFTJ7iMdU29Q GYFiXes7eSgqPmcftCziEAaSk3yA7kK+QvaZy4Pl6fJigZ0O7QrJYvmAD720wGNc U2Vc9ADI3dsPTkMgPEPF04xGyV+yqXIROB+1VDH8ycKbNTWBec+k4+8QrLsd17dN tJOtpuLcibJbPBv4Mvj9x35DL2n//LaI+qfjOmmZud2cQZtutYG2HGJLzTbCr0qR LKnYHRFnvqBZHJTK0bfPqDgsvLIQgvnhEmC/11GTeNa7BT9rWRuPjrdEkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn1qf9qi60h7wzYMASpLAqPfmSrMB8GA1UdIwQY MBaAFF9ijwXMqMh9WT5x6d0hsOf4nViTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMt OWZiZTg5MTlkYjkwLzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMtOWZiZTg5MTlkYjkw LzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja2Pb3lJ IJ/JXr5JrxnCUazTY4HbcuAGU3e+erzrJGz9/fu/CSvxNu8PFg8Ur7mt6Ah4u35d g7ahH/YGnjMv/h62VJAI5J0oE7PKF+QBga/lo7pmsW8yyUKMKIMzVJx04VrydPfA Nnsvg7mXRfMmP/F2eIz07NIcGmayGdaU3VAdxTXyRj9r9+yfxZW6iDn9AK5grg80 RarOKUHywRB9670JLmc2b3YhNyDEXo/A2nMl1FnAzwcOaECi0yqatFCa2KdAPn5I W44PRncz1tKiXqWnKgkuaEiOw0lhzhgNg+LSbq2hhtbo9JKCdZZ9GjVhk0G2Iaj8 6NROZ/xgvcQvPA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:50 2026 by rpki-client