This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json) Hash identifier: S3SXoNbYPeYDsClcfQjSOQBB77aYrSf0Y5Z0U6FdMnY= Subject key identifier: 4A:D7:EA:28:3B:0F:27:34:7C:94:A7:AB:70:D5:4D:1A:D8:54:86:7D Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Certificate serial: 019C420F5EE6ABB9ED333E3979E28517354E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 11:00:29 +0000 Manifest this update: Mon 09 Feb 2026 11:00:29 +0000 Manifest next update: Tue 10 Feb 2026 11:00:29 +0000 Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: wrWY/TDQayNLIeLheV75UZ8uHg2GYnDt+MgoW7ZaXP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:5e:e6:ab:b9:ed:33:3e:39:79:e2:85:17:35:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Validity Not Before: Feb 9 11:00:29 2026 GMT Not After : Feb 10 11:00:29 2026 GMT Subject: CN=4ad7ea283b0f27347c94a7ab70d54d1ad854867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:65:a4:f7:26:57:86:dd:6a:bb:36:2c:f1: cf:f3:86:08:9c:74:8c:f4:b4:56:98:6e:79:c0:d9: 91:91:af:43:70:83:4c:b3:0c:7d:97:f1:d0:e0:c5: 2d:a1:b3:3a:08:43:11:de:96:b8:45:c8:79:bd:52: 7b:d4:f2:d2:6b:7c:3a:fc:ad:03:89:4a:41:93:28: 95:be:54:8d:39:6c:60:c7:68:bf:86:fd:63:8b:92: 62:f2:22:7e:b6:63:f1:e1:16:ef:b7:12:b5:11:c4: 15:72:e2:2d:51:f3:8e:52:1d:04:6a:2f:31:11:c5: ae:6e:ef:a8:f6:8f:83:95:28:6c:7f:b1:7e:d0:c3: c4:bc:a0:1d:6a:88:08:0f:b6:fa:93:e3:df:ef:7e: cd:be:4b:2f:64:17:d9:5f:6f:37:a2:18:84:18:bf: 51:d5:93:fc:8c:5d:85:52:53:cc:79:ab:10:cb:2d: 89:b9:eb:c8:e4:8f:7a:52:03:cc:05:1f:16:23:a2: bc:b7:e1:e2:b7:3b:4e:26:00:fd:c3:82:20:e1:73: 9a:17:0c:23:61:22:30:73:91:eb:cc:80:d7:a1:ef: d0:15:fc:d7:27:d7:62:55:14:79:7c:9f:96:e1:c2: 26:00:36:5e:3b:2b:7c:c2:cd:11:bd:07:26:db:c2: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:EA:28:3B:0F:27:34:7C:94:A7:AB:70:D5:4D:1A:D8:54:86:7D X509v3 Authority Key Identifier: keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2e:c6:45:d5:c4:a9:a8:36:a6:ba:46:cc:db:3f:de:65:9a: 48:28:04:ec:6c:d3:32:a7:00:89:41:2a:7e:a6:e2:c4:d9:d3: 15:f5:d8:f0:06:f5:36:b4:8a:ab:40:93:94:37:bc:76:4f:6c: 21:d5:3d:33:a5:ed:61:e3:f5:27:d6:dc:7a:4c:54:36:aa:52: 9f:11:57:24:38:15:59:ae:7d:22:9a:6f:44:1d:8c:dc:53:32: 39:88:e4:4e:8f:1e:dd:c4:6b:87:ed:c0:b7:6c:ee:52:3b:2a: f7:43:8d:c9:81:f4:55:f6:31:73:8c:41:6d:4c:15:a5:4d:a8: 74:29:d9:39:c8:38:dd:3b:c5:fc:29:c3:67:83:0f:32:f1:b9: a3:f9:b1:b8:50:39:19:8f:6f:fe:4d:61:30:ee:ab:49:20:9b: a5:54:54:6a:ae:c3:cd:16:12:39:f7:8f:0d:c9:1d:84:99:3d: 22:04:28:78:d8:30:a5:1d:f7:36:e6:e6:2f:13:65:2a:b0:a1: c2:17:a5:90:5d:76:83:05:98:d1:95:3a:9a:37:c1:b4:82:da: 89:8e:9b:78:4e:2a:71:89:97:ea:ca:20:5d:25:af:67:ee:67: 83:92:05:f7:31:30:a8:10:89:f2:c1:29:10:09:3e:e9:7a:71: 2e:8a:d7:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD17mq7ntMz45eeKFFzVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmYxMDBmMjBlNzllMmI4Mjc4N2ZlNjQ1YTUzZjRjMjg2 NDJhZjYwHhcNMjYwMjA5MTEwMDI5WhcNMjYwMjEwMTEwMDI5WjAzMTEwLwYDVQQD Eyg0YWQ3ZWEyODNiMGYyNzM0N2M5NGE3YWI3MGQ1NGQxYWQ4NTQ4NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R5lpPcmV4bdars2LPHP84YInHSM 9LRWmG55wNmRka9DcINMswx9l/HQ4MUtobM6CEMR3pa4Rch5vVJ71PLSa3w6/K0D iUpBkyiVvlSNOWxgx2i/hv1ji5Ji8iJ+tmPx4RbvtxK1EcQVcuItUfOOUh0Eai8x EcWubu+o9o+DlShsf7F+0MPEvKAdaogID7b6k+Pf737NvksvZBfZX283ohiEGL9R 1ZP8jF2FUlPMeasQyy2JuevI5I96UgPMBR8WI6K8t+HitztOJgD9w4Ig4XOaFwwj YSIwc5HrzIDXoe/QFfzXJ9diVRR5fJ+W4cImADZeOyt8ws0RvQcm28KupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErX6ig7Dyc0fJSnq3DVTRrYVIZ9MB8GA1UdIwQY MBaAFF+/EA8g554rgnh/5kWlP0woZCr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEt MzNmM2M2YjM0NjAyLzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEtMzNmM2M2YjM0NjAy LzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAES7GRdXE qag2prpGzNs/3mWaSCgE7GzTMqcAiUEqfqbixNnTFfXY8Ab1NrSKq0CTlDe8dk9s IdU9M6XtYeP1J9bcekxUNqpSnxFXJDgVWa59IppvRB2M3FMyOYjkTo8e3cRrh+3A t2zuUjsq90ONyYH0VfYxc4xBbUwVpU2odCnZOcg43TvF/CnDZ4MPMvG5o/mxuFA5 GY9v/k1hMO6rSSCbpVRUaq7DzRYSOfePDckdhJk9IgQoeNgwpR33NubmLxNlKrCh whelkF12gwWY0ZU6mjfBtILaiY6beE4qcYmX6sogXSWvZ+5ng5IF9zEwqBCJ8sEp EAk+6XpxLorXiw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:58 2026 by rpki-client