This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json) Hash identifier: ANVUoTb9TQEUQtfIBuYzU00lEjSPP/yF3HxLpZ5wfHE= Subject key identifier: 98:24:EE:63:47:80:F3:35:76:51:CA:11:9C:FC:B7:A5:B2:52:37:29 Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2 Certificate serial: 019C420F6590B3F9FBB3C87ED0ACD04B640C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft Manifest number: 14FE Signing time: Mon 09 Feb 2026 11:00:31 +0000 Manifest this update: Mon 09 Feb 2026 11:00:31 +0000 Manifest next update: Tue 10 Feb 2026 11:00:31 +0000 Files and hashes: 1: cIW1NaRR4MnpEAYWVEYRn3myJ7A.roa (hash: 2eOp6aCZfu2yFIk/ZDyv7dqr0KWAjWjEtDLzMW5xaqg=) 2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: P19F4JyPmiiRZq7UVihBsHzfouRBwqBJsjDREl8p81w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:65:90:b3:f9:fb:b3:c8:7e:d0:ac:d0:4b:64:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2 Validity Not Before: Feb 9 11:00:31 2026 GMT Not After : Feb 10 11:00:31 2026 GMT Subject: CN=9824ee634780f3357651ca119cfcb7a5b2523729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8b:1a:61:84:f9:8a:bf:68:20:0a:cd:11:c3: c7:f2:2d:a4:2c:51:d8:67:4d:19:5f:74:6d:07:75: e9:d6:5f:19:37:2e:2d:47:1f:75:49:bb:c0:0d:cd: 2f:59:bf:0e:6a:e0:d0:cd:f1:1c:58:9e:31:4e:6f: c1:d5:7d:d3:c9:86:e9:bc:bf:35:e1:90:f4:36:74: da:1d:f7:a8:75:1f:63:b6:82:ac:91:a4:b1:c8:2b: 9b:5d:3c:49:46:3c:c2:19:6c:ec:ef:c2:2b:28:2e: 81:0a:83:ed:b7:31:03:b0:59:c3:f3:da:2f:6e:0b: 75:92:ce:fa:e8:90:bf:e0:c9:f3:e6:fa:c6:a0:2c: e7:b3:54:e3:0c:e6:0b:c0:8c:65:46:6f:03:04:45: 6b:c0:c5:60:90:ff:2d:68:6f:4e:40:3e:de:29:79: a4:7d:6f:91:ae:07:4d:92:26:3f:d7:62:b3:56:22: d3:5d:61:29:7a:71:f4:6d:b3:bc:f8:5c:be:51:53: bd:f1:33:0f:94:d7:5b:26:e7:7b:ce:65:05:52:71: c4:42:14:c0:df:7e:f4:cc:df:e5:6a:70:a2:15:42: ab:6a:7d:21:09:86:65:68:51:00:e4:4a:e3:b6:5f: 82:26:53:74:34:f9:7f:89:70:fd:8e:ff:88:26:86: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:EE:63:47:80:F3:35:76:51:CA:11:9C:FC:B7:A5:B2:52:37:29 X509v3 Authority Key Identifier: keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ec:4b:31:5b:34:63:6c:b7:f5:11:ed:fb:24:00:ee:44:e2: 88:2e:98:64:97:34:ba:f4:3c:c7:fa:0d:89:fe:e2:44:56:36: eb:5f:1b:c7:54:02:31:72:b3:47:82:10:44:a9:f0:ed:bd:73: d3:70:d0:a4:da:3d:11:12:b2:32:36:c1:8d:80:b0:0d:f8:35: 79:1c:b0:3c:50:a6:73:fb:aa:9d:86:56:9b:df:ba:52:45:a0: 66:1a:8b:0a:b2:6a:73:f1:70:86:12:24:f5:b2:19:2c:ec:95: d1:2e:b8:91:8d:4b:6a:2e:13:be:bb:96:ff:63:be:6c:6a:81: d9:7d:17:2a:2f:85:c5:56:ed:3d:0d:37:f2:f5:d2:43:ba:43: d3:14:19:c8:42:c8:6a:a4:bf:00:36:a9:88:7e:4f:05:f8:a1: 8c:d1:35:0e:31:33:df:16:97:22:fc:d6:7f:09:8f:97:eb:bb: 50:9d:6d:e2:1d:3a:a0:2c:37:df:fe:06:3a:5a:7f:7e:05:26: 15:75:d9:ce:fd:8a:e2:e6:fe:53:d4:17:d7:08:02:22:ac:b0: 1d:09:ac:60:9d:60:ab:99:6a:87:d3:0b:bd:6b:5b:37:4a:c4: e0:be:8a:44:67:8e:25:7e:c7:19:59:1f:fc:65:96:92:6f:c5: 43:a4:d3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2WQs/n7s8h+0KzQS2QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm NTc4YjIwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD Eyg5ODI0ZWU2MzQ3ODBmMzM1NzY1MWNhMTE5Y2ZjYjdhNWIyNTIzNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmosaYYT5ir9oIArNEcPH8i2kLFHY Z00ZX3RtB3Xp1l8ZNy4tRx91SbvADc0vWb8OauDQzfEcWJ4xTm/B1X3TyYbpvL81 4ZD0NnTaHfeodR9jtoKskaSxyCubXTxJRjzCGWzs78IrKC6BCoPttzEDsFnD89ov bgt1ks766JC/4Mnz5vrGoCzns1TjDOYLwIxlRm8DBEVrwMVgkP8taG9OQD7eKXmk fW+RrgdNkiY/12KzViLTXWEpenH0bbO8+Fy+UVO98TMPlNdbJud7zmUFUnHEQhTA 3370zN/lanCiFUKran0hCYZlaFEA5Erjtl+CJlN0NPl/iXD9jv+IJobPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgk7mNHgPM1dlHKEZz8t6WyUjcpMB8GA1UdIwQY MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3 LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArexLMVs0 Y2y39RHt+yQA7kTiiC6YZJc0uvQ8x/oNif7iRFY2618bx1QCMXKzR4IQRKnw7b1z 03DQpNo9ERKyMjbBjYCwDfg1eRywPFCmc/uqnYZWm9+6UkWgZhqLCrJqc/FwhhIk 9bIZLOyV0S64kY1Lai4TvruW/2O+bGqB2X0XKi+FxVbtPQ038vXSQ7pD0xQZyELI aqS/ADapiH5PBfihjNE1DjEz3xaXIvzWfwmPl+u7UJ1t4h06oCw33/4GOlp/fgUm FXXZzv2K4ub+U9QX1wgCIqywHQmsYJ1gq5lqh9MLvWtbN0rE4L6KRGeOJX7HGVkf /GWWkm/FQ6TT6w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:27 2026 by rpki-client