This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json) Hash identifier: fmdWRZb2rX/pQNA5kpSpaJvI7JJqcsIJSz2Q/ed44O0= Subject key identifier: 63:7A:B1:6A:39:F8:C7:0F:8D:CD:CE:B3:80:EF:BB:30:86:68:98:74 Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Certificate serial: 019C42EB7B5CE3362A1961E4A247710B14BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft Manifest number: 154B Signing time: Mon 09 Feb 2026 15:00:54 +0000 Manifest this update: Mon 09 Feb 2026 15:00:54 +0000 Manifest next update: Tue 10 Feb 2026 15:00:54 +0000 Files and hashes: 1: HIhz8pdIXgjK-XvqEHJKRiDVUZU.roa (hash: 9IgTkOouc4NOjiZYiPyRk/fd3ULM88kb+ZAbPFTN9oU=) 2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: Qx0MRxooRGdOzPqa82qQoMAiaERg4irhQrpO7hLX8/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:7b:5c:e3:36:2a:19:61:e4:a2:47:71:0b:14:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Validity Not Before: Feb 9 15:00:54 2026 GMT Not After : Feb 10 15:00:54 2026 GMT Subject: CN=637ab16a39f8c70f8dcdceb380efbb3086689874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:30:46:48:e4:03:67:08:20:63:33:24:3b: 41:54:20:11:11:d8:90:2e:19:dc:70:9d:d1:20:0e: 10:6e:a0:b5:5c:94:b1:93:1d:db:14:4a:dc:d8:7b: 80:1d:66:30:08:8d:e1:fc:00:db:4e:d6:94:99:a2: ba:80:02:ab:4d:38:42:07:4d:35:45:ea:25:15:f4: 2b:fe:49:c9:e2:c6:77:4e:82:64:11:c0:ea:f4:64: fe:49:1d:9d:80:ed:5c:1e:b0:1f:1c:1a:b9:07:6a: e9:cd:3d:8d:3b:4f:6a:2a:61:1f:12:a3:7e:2a:21: 12:1c:8d:4e:2d:10:8d:df:a4:44:fc:35:5e:74:cc: ba:4f:87:37:15:ea:3d:44:74:b7:63:7f:0a:18:c1: 68:98:8c:80:d1:0e:51:6e:16:25:f5:43:48:a4:c1: 61:c4:af:5f:d5:89:57:10:bb:a1:83:a0:f1:77:b5: c0:23:7f:ec:a8:d3:39:22:49:fd:91:b8:90:98:3e: 8f:59:44:2d:6e:4c:f7:cb:bd:1f:5a:bc:d9:a5:ea: a7:2b:32:ec:fe:15:6e:89:c2:ee:5b:4e:c2:04:05: a8:7a:3c:8e:7c:ea:1b:df:07:2f:79:7f:d3:02:43: 1b:27:9f:e9:b2:01:2a:72:62:ff:9e:b5:36:e3:63: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:B1:6A:39:F8:C7:0F:8D:CD:CE:B3:80:EF:BB:30:86:68:98:74 X509v3 Authority Key Identifier: keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:53:e1:30:50:0a:49:c6:6a:4c:2c:85:27:85:30:b8:4f: 89:ad:bc:9a:94:92:c8:c2:66:11:d8:69:5b:ae:b7:e5:99:d0: 29:4d:30:02:9d:94:0a:fc:7d:a8:0e:7c:0b:ea:cb:a2:be:10: e5:d7:0f:ba:4c:ea:26:54:33:7e:87:ae:17:c9:18:9a:83:85: 93:f2:16:5b:c2:21:35:d3:4e:b5:7e:0d:88:a7:20:20:37:52: 16:7f:0f:2f:7e:5e:e0:d9:37:2b:07:7a:61:90:f7:4f:7a:d3: a9:62:00:10:0b:94:f8:2e:c9:ae:06:21:26:c4:fe:bf:c0:23: 10:e0:00:6d:19:8d:da:63:d6:f6:26:06:db:c6:1f:f8:e2:2d: 94:4c:1d:b0:0e:cf:dd:f6:fd:45:07:74:2f:87:9a:e0:18:7d: 66:47:0c:a1:74:aa:be:cb:e6:40:51:60:c8:bc:53:2f:1f:9b: 1a:1c:0a:37:07:43:85:0e:8d:50:38:17:c7:ad:6b:08:fd:a3: 00:43:98:7b:a0:8a:74:5b:84:03:0d:c7:40:e9:1f:ec:76:1a: b1:03:b3:86:89:2d:33:f7:ef:ed:16:49:23:5d:97:ac:f2:f9: 32:4b:d6:df:71:5b:5f:41:e2:5e:30:16:05:8a:47:33:30:4f: a1:39:5c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63tc4zYqGWHkokdxCxS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzA0NGI0Yjk2ZjIxZmE5YTg0NjQ1YmQ1ZTNhOWUxOTcy MzA4MmQwHhcNMjYwMjA5MTUwMDU0WhcNMjYwMjEwMTUwMDU0WjAzMTEwLwYDVQQD Eyg2MzdhYjE2YTM5ZjhjNzBmOGRjZGNlYjM4MGVmYmIzMDg2Njg5ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOUwRkjkA2cIIGMzJDtBVCAREdiQ LhnccJ3RIA4QbqC1XJSxkx3bFErc2HuAHWYwCI3h/ADbTtaUmaK6gAKrTThCB001 ReolFfQr/knJ4sZ3ToJkEcDq9GT+SR2dgO1cHrAfHBq5B2rpzT2NO09qKmEfEqN+ KiESHI1OLRCN36RE/DVedMy6T4c3Feo9RHS3Y38KGMFomIyA0Q5RbhYl9UNIpMFh xK9f1YlXELuhg6Dxd7XAI3/sqNM5Ikn9kbiQmD6PWUQtbkz3y70fWrzZpeqnKzLs /hVuicLuW07CBAWoejyOfOob3wcveX/TAkMbJ5/psgEqcmL/nrU242PHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN6sWo5+McPjc3Os4DvuzCGaJh0MB8GA1UdIwQY MBaAFF7ARLS5byH6moRkW9XjqeGXIwgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2It NjFlNGViZjY3MWFiLzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2ItNjFlNGViZjY3MWFi LzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9RT4TBQ CknGakwshSeFMLhPia28mpSSyMJmEdhpW6635ZnQKU0wAp2UCvx9qA58C+rLor4Q 5dcPukzqJlQzfoeuF8kYmoOFk/IWW8IhNdNOtX4NiKcgIDdSFn8PL35e4Nk3Kwd6 YZD3T3rTqWIAEAuU+C7JrgYhJsT+v8AjEOAAbRmN2mPW9iYG28Yf+OItlEwdsA7P 3fb9RQd0L4ea4Bh9ZkcMoXSqvsvmQFFgyLxTLx+bGhwKNwdDhQ6NUDgXx61rCP2j AEOYe6CKdFuEAw3HQOkf7HYasQOzhoktM/fv7RZJI12XrPL5MkvW33FbX0HiXjAW BYpHMzBPoTlc+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:30 2026 by rpki-client