This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json) Hash identifier: s/nnGlyR3zD/evQ6gbNH4a+U2+ciPBQKPDOAR595Ma0= Subject key identifier: ED:87:F9:04:23:7E:AF:4C:B5:6D:FE:26:C2:C2:3B:30:9F:12:5A:96 Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d Certificate serial: 019C4358BAFA7F0643798C5D810B6A1A1C68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft Manifest number: 1430 Signing time: Mon 09 Feb 2026 17:00:14 +0000 Manifest this update: Mon 09 Feb 2026 17:00:14 +0000 Manifest next update: Tue 10 Feb 2026 17:00:14 +0000 Files and hashes: 1: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: iJjCGuQXiDf28T895fVJxR1ZlrfVNPz8cgucxW5nkL0=) 2: fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa (hash: xi+aWZFnVHDnRFBiu1WZojI31+OjhpCl/iLDjILOSEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:ba:fa:7f:06:43:79:8c:5d:81:0b:6a:1a:1c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d Validity Not Before: Feb 9 17:00:14 2026 GMT Not After : Feb 10 17:00:14 2026 GMT Subject: CN=ed87f904237eaf4cb56dfe26c2c23b309f125a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:60:a0:c9:e8:9a:b2:a8:10:fc:50:41:48: 89:68:1d:ff:4f:1c:5f:3e:56:47:1a:d1:5d:c2:6f: 87:66:5d:d0:af:1c:35:6a:0d:f7:6d:2e:b3:f7:e3: 65:91:0e:4e:6c:4a:82:42:dd:32:f5:6f:92:4e:af: 06:71:d4:ac:78:a1:63:35:b3:0f:2c:68:2b:c0:0e: ef:37:b5:00:b1:6e:66:6d:af:86:60:51:4d:b4:5b: d0:53:fa:20:ca:5d:93:60:0b:51:a0:b1:c9:f3:7c: bd:1e:06:35:9a:1c:e1:c6:21:d3:cc:4e:e4:e3:a7: 96:55:27:ce:90:a2:93:3f:bc:0f:bb:be:70:62:a5: c8:92:dd:47:98:01:38:b0:1c:6f:df:36:95:95:ab: 4c:79:35:d6:97:d7:7f:53:95:9e:52:78:71:7e:97: 1c:34:05:3d:f1:46:92:72:5f:5e:71:a7:2a:ad:f7: b8:69:ec:48:97:a6:2a:b0:24:d8:89:28:d6:73:fe: 0d:03:a8:be:b2:f7:a4:75:af:6c:60:29:15:f5:55: 25:f6:b1:38:e2:41:4b:0b:ee:8e:bc:d8:70:44:12: a5:a3:40:15:9f:59:d7:2a:ae:c4:2d:9f:80:36:95: cc:5f:20:e1:c6:83:a5:10:24:cb:f6:16:20:5c:90: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:F9:04:23:7E:AF:4C:B5:6D:FE:26:C2:C2:3B:30:9F:12:5A:96 X509v3 Authority Key Identifier: keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:10:c4:06:96:b7:74:41:23:02:77:1e:6e:e8:75:6e:e0: 36:22:4e:e8:d9:26:6d:5e:58:f2:f6:81:ce:20:04:f7:6d:9b: 67:34:52:2c:57:9a:49:57:b6:31:55:ab:d5:6c:04:f6:a5:a4: b7:db:ff:eb:66:74:fc:07:51:fc:7f:93:9f:ae:2c:74:4f:d0: aa:d4:82:28:36:84:3c:eb:66:c2:3a:45:44:60:f9:88:98:c8: 68:3f:d2:ba:f0:88:bc:72:44:00:e4:e3:bf:ef:1b:2b:48:0c: 50:a9:58:fb:ef:14:0a:31:04:fb:c8:77:55:54:a7:70:57:65: df:07:13:7c:cc:93:35:eb:05:be:1f:3e:40:15:49:d8:de:f2: 16:c8:4d:53:ed:8f:ae:50:d4:37:6d:aa:66:25:b8:d8:fe:f1: d3:a9:a2:87:a4:1d:18:13:ba:a7:09:14:d7:0c:d4:64:8c:5a: e1:cd:16:8a:72:38:f0:e4:7a:8c:a8:45:38:b7:de:d8:9b:a5: 43:e4:a1:85:2e:61:75:0d:6f:63:53:c1:b7:06:d6:d8:3f:56: 9e:26:1f:eb:b4:ea:c9:f2:56:c7:28:90:8d:0f:51:a6:0f:3f: 9e:f6:3c:43:db:2a:54:3a:d9:8a:13:04:fe:f5:56:79:d1:e4: 3b:80:2e:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLr6fwZDeYxdgQtqGhxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODAzYjY2YjMwNjAwOGZiMTcyYzJkZmQ1MjJiNTY1NTA1 NzM2MGQwHhcNMjYwMjA5MTcwMDE0WhcNMjYwMjEwMTcwMDE0WjAzMTEwLwYDVQQD EyhlZDg3ZjkwNDIzN2VhZjRjYjU2ZGZlMjZjMmMyM2IzMDlmMTI1YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQlgoMnomrKoEPxQQUiJaB3/Txxf PlZHGtFdwm+HZl3Qrxw1ag33bS6z9+NlkQ5ObEqCQt0y9W+STq8GcdSseKFjNbMP LGgrwA7vN7UAsW5mba+GYFFNtFvQU/ogyl2TYAtRoLHJ83y9HgY1mhzhxiHTzE7k 46eWVSfOkKKTP7wPu75wYqXIkt1HmAE4sBxv3zaVlatMeTXWl9d/U5WeUnhxfpcc NAU98UaScl9ecacqrfe4aexIl6YqsCTYiSjWc/4NA6i+svekda9sYCkV9VUl9rE4 4kFLC+6OvNhwRBKlo0AVn1nXKq7ELZ+ANpXMXyDhxoOlECTL9hYgXJDMIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2H+QQjfq9MtW3+JsLCOzCfElqWMB8GA1UdIwQY MBaAFF6AO2azBgCPsXLC39UitWVQVzYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9BN1pyTUdBSS14Y3NMZjFTSzFaVkJYTmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85ZDM0MmMtN2NlNy00YzY5LWFlY2Ut OTM4NTA2YTlmMmE3LzEvWG9BN1pyTUdBSS14Y3NMZjFTSzFaVkJYTmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85ZDM0MmMtN2NlNy00YzY5LWFlY2UtOTM4NTA2YTlmMmE3 LzEvWG9BN1pyTUdBSS14Y3NMZjFTSzFaVkJYTmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGQQxAaW t3RBIwJ3Hm7odW7gNiJO6NkmbV5Y8vaBziAE922bZzRSLFeaSVe2MVWr1WwE9qWk t9v/62Z0/AdR/H+Tn64sdE/QqtSCKDaEPOtmwjpFRGD5iJjIaD/SuvCIvHJEAOTj v+8bK0gMUKlY++8UCjEE+8h3VVSncFdl3wcTfMyTNesFvh8+QBVJ2N7yFshNU+2P rlDUN22qZiW42P7x06mih6QdGBO6pwkU1wzUZIxa4c0WinI48OR6jKhFOLfe2Jul Q+ShhS5hdQ1vY1PBtwbW2D9WniYf67TqyfJWxyiQjQ9Rpg8/nvY8Q9sqVDrZihME /vVWedHkO4Auaw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:14 2026 by rpki-client