This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json) Hash identifier: eiylFpMIAU7ZpVsMny1BhtdPD6Tq26gBr1sYZaO1cFU= Subject key identifier: 4B:15:E8:6C:03:D5:F3:21:CE:04:6B:0A:B6:E7:15:EE:C3:F4:57:34 Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc Certificate serial: 019C446C407FDB07773C396D066B7FA0F657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft Manifest number: 0CA1 Signing time: Mon 09 Feb 2026 22:01:10 +0000 Manifest this update: Mon 09 Feb 2026 22:01:10 +0000 Manifest next update: Tue 10 Feb 2026 22:01:10 +0000 Files and hashes: 1: Cj5zwQGWSYblCJRXKaQKctud0XU.roa (hash: xmUDvaYQWawK9zhBWUIaHZpPsBr12uVNC2m3+pJz1gA=) 2: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: DJ1JcbcOqcH7iKAYuQ5LG4Blg1aS4CToi55OrGtb+Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:40:7f:db:07:77:3c:39:6d:06:6b:7f:a0:f6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc Validity Not Before: Feb 9 22:01:10 2026 GMT Not After : Feb 10 22:01:10 2026 GMT Subject: CN=4b15e86c03d5f321ce046b0ab6e715eec3f45734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:dd:a3:5a:3b:fa:8b:be:17:87:b0:98:23: 89:5a:2c:c5:55:9c:a7:79:24:16:40:86:58:d8:d7: 5b:c5:5a:77:02:f1:6b:d2:cc:0d:97:bb:8f:98:87: ad:51:83:45:52:54:9d:b4:0c:a4:b5:c4:00:0e:6c: c9:d0:02:1d:52:85:fa:7b:b2:f3:2c:f4:15:6b:0d: 09:07:1f:fb:6e:a2:7a:c2:1d:87:bf:e7:30:04:9e: 54:a3:9b:58:32:39:b7:5d:2c:87:62:31:4b:ed:69: 29:56:52:2d:5b:6d:5a:3e:e1:89:11:63:de:b0:0b: 9c:ce:b7:1d:3b:58:ed:8d:e1:08:64:21:28:9d:5a: 99:6c:2b:8f:64:76:3e:7d:c5:cb:fa:92:d8:81:95: e0:8c:85:6c:46:ba:b6:69:82:1f:8c:1e:73:c4:cc: 5c:11:37:e7:56:aa:b1:56:f4:70:27:74:d2:93:ff: 0c:bc:3d:27:d6:2c:ef:58:6d:5e:08:3f:2c:ef:b8: c1:b4:64:8c:32:e1:92:5b:e2:f7:8d:7f:00:dd:14: 5b:9f:80:40:6a:02:1a:15:6d:27:ca:99:0d:8b:73: b4:94:4d:f3:85:a8:56:b1:b7:84:02:73:8e:34:42: 6e:16:02:f8:68:40:39:40:26:63:c4:6c:09:77:dc: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:15:E8:6C:03:D5:F3:21:CE:04:6B:0A:B6:E7:15:EE:C3:F4:57:34 X509v3 Authority Key Identifier: keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:05:61:97:15:d6:a8:b8:6a:3b:61:09:b5:dd:44:a9:f8:f8: 4d:43:04:6b:9a:57:e0:8d:14:bd:86:b1:f9:21:c7:ad:62:f7: 02:aa:c6:44:5e:bd:f9:f0:14:1b:bc:9e:4f:b9:61:d4:72:b7: 96:f4:c0:01:2b:1f:1c:63:a5:13:82:fb:95:17:1e:3b:0e:73: d5:ec:1c:05:88:27:23:f2:ea:10:dc:90:9d:4a:3d:38:8c:f2: df:63:2e:33:f8:1a:c2:c0:7a:33:85:3a:c2:32:46:0e:10:ae: 3e:9b:3f:d1:cb:52:a8:1f:e8:c2:27:b7:75:2f:bb:37:68:10: e6:ea:80:29:e9:79:bf:ba:f3:c6:1c:4a:2d:ca:0b:68:99:1f: 15:11:77:8f:da:9d:4d:34:26:cc:42:54:e7:08:09:26:6b:40: 6d:23:38:d3:a8:14:25:f6:27:ac:70:f0:30:c7:b5:c4:52:28: 37:43:5b:1a:9e:b9:64:a3:c2:a1:52:27:07:f0:f3:2d:76:b0: 01:3d:df:6e:4f:63:76:b3:cf:20:15:55:c0:0d:04:e1:5c:09: cf:06:c1:99:c1:3c:0a:d5:5d:bc:14:cb:bd:70:da:7f:56:65: 1b:2a:c3:5e:c5:a9:dd:75:6f:74:36:b3:18:e0:93:f3:b2:1a: 18:d3:83:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEB/2wd3PDltBmt/oPZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTE2NTNlMTc3YWEyOTU1NDAwODA1YzhjNzViZDBkNjg1 ODNhZmMwHhcNMjYwMjA5MjIwMTEwWhcNMjYwMjEwMjIwMTEwWjAzMTEwLwYDVQQD Eyg0YjE1ZTg2YzAzZDVmMzIxY2UwNDZiMGFiNmU3MTVlZWMzZjQ1NzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl77do1o7+ou+F4ewmCOJWizFVZyn eSQWQIZY2NdbxVp3AvFr0swNl7uPmIetUYNFUlSdtAyktcQADmzJ0AIdUoX6e7Lz LPQVaw0JBx/7bqJ6wh2Hv+cwBJ5Uo5tYMjm3XSyHYjFL7WkpVlItW21aPuGJEWPe sAuczrcdO1jtjeEIZCEonVqZbCuPZHY+fcXL+pLYgZXgjIVsRrq2aYIfjB5zxMxc ETfnVqqxVvRwJ3TSk/8MvD0n1izvWG1eCD8s77jBtGSMMuGSW+L3jX8A3RRbn4BA agIaFW0nypkNi3O0lE3zhahWsbeEAnOONEJuFgL4aEA5QCZjxGwJd9zdmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsV6GwD1fMhzgRrCrbnFe7D9Fc0MB8GA1UdIwQY MBaAFF6hZT4XeqKVVACAXIx1vQ1oWDr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzIt MWRmOGZhMjBmYTllLzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzItMWRmOGZhMjBmYTll LzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQVhlxXW qLhqO2EJtd1Eqfj4TUMEa5pX4I0UvYax+SHHrWL3AqrGRF69+fAUG7yeT7lh1HK3 lvTAASsfHGOlE4L7lRceOw5z1ewcBYgnI/LqENyQnUo9OIzy32MuM/gawsB6M4U6 wjJGDhCuPps/0ctSqB/owie3dS+7N2gQ5uqAKel5v7rzxhxKLcoLaJkfFRF3j9qd TTQmzEJU5wgJJmtAbSM406gUJfYnrHDwMMe1xFIoN0NbGp65ZKPCoVInB/DzLXaw AT3fbk9jdrPPIBVVwA0E4VwJzwbBmcE8CtVdvBTLvXDaf1ZlGyrDXsWp3XVvdDaz GOCT87IaGNODww== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:01 2026 by rpki-client