This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json) Hash identifier: fntf8kRpeHIoCzEQPNoM5jnm1ES8g5qkDSYaQNHsT60= Subject key identifier: A1:94:2A:68:63:85:17:25:26:9C:81:41:51:CA:7E:80:2E:1D:81:D6 Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f Certificate serial: 019C420F90A81D1E600C6B5F5F35BD471FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft Manifest number: 1733 Signing time: Mon 09 Feb 2026 11:00:42 +0000 Manifest this update: Mon 09 Feb 2026 11:00:42 +0000 Manifest next update: Tue 10 Feb 2026 11:00:42 +0000 Files and hashes: 1: emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (hash: J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=) 2: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: w6h3mHKFPtfxVZRhMe+ami+Sni9cWxE81qbPDp69mcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:90:a8:1d:1e:60:0c:6b:5f:5f:35:bd:47:1f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f Validity Not Before: Feb 9 11:00:42 2026 GMT Not After : Feb 10 11:00:42 2026 GMT Subject: CN=a1942a6863851725269c814151ca7e802e1d81d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:e8:21:2a:97:0a:8c:83:07:bf:e6:5f:78: e4:a3:ea:2b:22:ae:7d:2d:b8:85:57:25:1c:3d:aa: ae:09:37:7d:b6:b2:d8:e3:2b:fd:3e:aa:e4:1b:5b: 05:18:bf:4a:1f:ab:17:b6:ba:a7:46:62:68:2a:f6: 4b:db:f8:a3:86:b6:ea:33:7c:80:8f:e4:eb:d6:11: 2c:1e:52:67:08:bc:48:de:9b:18:93:b2:03:e8:09: 5d:e9:da:87:66:57:d9:68:f1:3c:ed:14:24:05:d4: 51:30:c2:e5:d1:fc:eb:bb:5d:40:94:dd:71:a7:ec: 05:2a:80:38:bf:b6:cc:68:97:d4:60:b2:d4:90:da: f4:e6:a8:fc:c5:83:c6:de:c5:ca:f8:2d:e1:c5:cc: 7a:5d:13:c8:86:08:cb:fd:4a:d1:22:f7:75:6b:fe: 1f:7a:c6:08:aa:dd:0e:2f:45:e4:a3:bc:7d:6f:9f: 6e:96:22:ad:62:e4:c5:ef:06:ad:da:c6:db:ad:32: d5:d9:dd:9a:0f:78:65:0e:0e:89:85:10:b5:3a:f7: cc:d7:96:27:22:86:bd:eb:08:a6:32:a3:f1:7e:4b: ab:02:80:8b:e0:f3:9a:ff:6a:5e:9f:7e:d4:52:c7: d1:6d:fa:94:e2:09:6a:c9:17:68:bf:02:48:6e:0b: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:2A:68:63:85:17:25:26:9C:81:41:51:CA:7E:80:2E:1D:81:D6 X509v3 Authority Key Identifier: keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cc:d9:31:19:6b:df:d2:8c:ff:21:dc:9c:ce:22:95:87:b8: 9f:de:ea:66:07:9d:b0:3f:0e:9e:9d:7c:48:51:21:9c:5c:a7: 3e:51:27:e6:37:b0:dc:bd:2c:dd:37:49:26:79:e9:39:a4:f0: ef:59:7a:09:28:b1:31:60:58:8e:2c:5f:50:fe:46:c1:80:ff: 08:11:c2:c0:3d:69:27:b8:29:a1:30:70:70:73:e5:c7:52:21: db:25:54:1d:d2:5b:13:4e:df:4d:06:7b:1c:24:71:ff:4a:63: a9:7b:aa:8c:fc:fe:52:1a:c2:2b:76:a0:26:1c:58:44:94:77: 45:e1:d7:01:cf:d3:e2:cd:5e:32:ed:f9:7e:bc:f2:0a:63:fa: b4:3e:e6:03:7c:8e:2a:e2:6b:93:1e:f2:02:f3:e6:5c:ed:13: 06:8d:32:cc:42:9c:69:c0:c6:e5:dc:df:25:eb:a8:c9:ef:47: 87:4a:3b:6d:23:03:ab:d1:f6:a7:8f:eb:28:43:58:99:c4:05: 4f:0b:f0:b3:18:89:9e:7d:a8:6e:b6:a3:63:28:8e:9f:3c:21: 7a:44:3a:ba:71:21:2e:fb:d9:a9:fa:93:18:3d:20:50:a0:49: 5b:f7:39:55:04:e7:c6:5a:94:8c:0b:0a:a5:1d:28:68:44:24: ef:5e:d2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5CoHR5gDGtfXzW9Rx/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1 OWIzN2YwHhcNMjYwMjA5MTEwMDQyWhcNMjYwMjEwMTEwMDQyWjAzMTEwLwYDVQQD EyhhMTk0MmE2ODYzODUxNzI1MjY5YzgxNDE1MWNhN2U4MDJlMWQ4MWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tnoISqXCoyDB7/mX3jko+orIq59 LbiFVyUcPaquCTd9trLY4yv9PqrkG1sFGL9KH6sXtrqnRmJoKvZL2/ijhrbqM3yA j+Tr1hEsHlJnCLxI3psYk7ID6Ald6dqHZlfZaPE87RQkBdRRMMLl0fzru11AlN1x p+wFKoA4v7bMaJfUYLLUkNr05qj8xYPG3sXK+C3hxcx6XRPIhgjL/UrRIvd1a/4f esYIqt0OL0Xko7x9b59uliKtYuTF7wat2sbbrTLV2d2aD3hlDg6JhRC1OvfM15Yn Ioa96wimMqPxfkurAoCL4POa/2pen37UUsfRbfqU4glqyRdovwJIbgug4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGUKmhjhRclJpyBQVHKfoAuHYHWMB8GA1UdIwQY MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4 LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMzZMRlr 39KM/yHcnM4ilYe4n97qZgedsD8Onp18SFEhnFynPlEn5jew3L0s3TdJJnnpOaTw 71l6CSixMWBYjixfUP5GwYD/CBHCwD1pJ7gpoTBwcHPlx1Ih2yVUHdJbE07fTQZ7 HCRx/0pjqXuqjPz+UhrCK3agJhxYRJR3ReHXAc/T4s1eMu35frzyCmP6tD7mA3yO KuJrkx7yAvPmXO0TBo0yzEKcacDG5dzfJeuoye9Hh0o7bSMDq9H2p4/rKENYmcQF TwvwsxiJnn2obrajYyiOnzwhekQ6unEhLvvZqfqTGD0gUKBJW/c5VQTnxlqUjAsK pR0oaEQk717SRA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:58 2026 by rpki-client