This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json) Hash identifier: GHu1p7gMPFg9ataWANRSvL7ZuzmDGZIDv2g/Fe8iREM= Subject key identifier: 41:F8:99:4C:F5:E6:4B:4E:04:FE:5E:BA:63:E8:76:DE:B6:C0:B7:DF Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b Certificate serial: 019C4321D6C127532CBE3421B47222C186D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: kkBfHO9gyOuZtOi8Xt5lvQshqBthjqAGuarEuhHVIE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d6:c1:27:53:2c:be:34:21:b4:72:22:c1:86:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=41f8994cf5e64b4e04fe5eba63e876deb6c0b7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:4d:04:07:ad:0e:b9:f0:7e:f2:b3:1c:13: 44:c9:56:d2:c0:72:e1:1c:5e:d5:cb:df:1a:e8:32: 8f:93:71:ec:93:0d:9b:6e:31:31:93:96:4d:c4:fa: fc:b9:d9:68:82:50:be:af:6e:54:20:f1:b9:94:10: 1d:60:67:52:85:e1:7f:cb:b2:9b:8d:e5:c9:8d:0a: c9:8f:47:54:c4:b5:b7:3f:2f:67:14:8c:a6:4a:23: 6f:f8:c4:23:5e:fd:72:7f:07:32:6c:e4:29:63:ff: fd:f5:6b:29:15:7b:c4:86:f3:c9:87:73:24:68:f2: d2:e5:2d:92:79:69:38:7a:86:98:d9:6d:79:bf:46: d8:12:6c:75:b5:f8:1b:3b:6b:04:cb:61:3e:00:87: 50:17:60:4d:d3:0c:83:8b:a8:52:33:e8:da:5b:52: 5f:31:b1:9e:91:be:23:63:ba:25:92:f2:8a:eb:10: 04:80:eb:34:be:23:12:03:72:08:f5:83:e6:9a:18: 48:e5:64:8a:e8:b6:7b:ac:a3:56:ba:61:19:d2:89: da:38:d2:e9:34:17:0c:70:e9:db:b6:25:26:0f:1f: 77:d7:be:11:96:45:85:5c:7b:f9:77:43:0c:03:70: 68:1c:41:d5:bb:04:c4:15:5d:7b:20:4b:c4:82:0f: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F8:99:4C:F5:E6:4B:4E:04:FE:5E:BA:63:E8:76:DE:B6:C0:B7:DF X509v3 Authority Key Identifier: keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:53:a7:9a:4a:05:18:6a:a3:1e:95:d4:d5:40:c6:07:da: e9:a0:b1:be:4e:d3:e3:1a:82:9a:5d:0b:3a:90:b6:a2:e8:00: 58:b2:25:1d:b2:4b:6a:00:14:d4:9f:c7:d2:5f:9a:1f:fa:3f: 7d:53:ec:03:c3:60:b3:cf:ae:44:71:4d:36:4f:eb:21:fd:41: f2:a5:b5:8d:b1:16:f7:51:d8:33:b6:7b:1b:5e:3a:6e:93:07: 30:6b:c8:c6:13:04:5d:f7:21:41:3f:c6:c2:c1:18:29:08:46: 47:ee:74:9d:70:cd:a9:d0:7c:97:f5:17:45:5e:8c:19:a6:0a: 87:e9:db:55:a4:4b:75:0e:a2:a9:ad:ad:f4:44:38:17:19:b0: b5:e6:be:c0:02:39:1b:ae:5a:ac:ac:b8:5a:36:01:76:ba:09: 28:7e:0c:21:e3:44:0e:8f:8e:e6:20:b2:6c:b1:61:ec:23:9c: 47:14:ee:aa:9c:d0:fb:47:7f:26:88:67:ba:c3:c5:05:5c:fe: 68:20:9a:b8:71:5c:8a:5e:42:dc:48:03:b9:56:12:42:81:93: ea:51:7d:31:f4:05:54:b7:79:4a:5b:f0:b6:2c:5e:e1:d7:93: 0c:be:de:8a:ad:ac:e6:58:12:a4:f4:7e:5e:93:d7:50:fc:8b: 14:8c:28:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdbBJ1MsvjQhtHIiwYbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWNmZGI5ODAzY2UwNTcxNDJkMTg3Zjg2YmM0ZjU2NzFk N2ViN2IwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD Eyg0MWY4OTk0Y2Y1ZTY0YjRlMDRmZTVlYmE2M2U4NzZkZWI2YzBiN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrVNBAetDrnwfvKzHBNEyVbSwHLh HF7Vy98a6DKPk3Hskw2bbjExk5ZNxPr8udloglC+r25UIPG5lBAdYGdSheF/y7Kb jeXJjQrJj0dUxLW3Py9nFIymSiNv+MQjXv1yfwcybOQpY//99WspFXvEhvPJh3Mk aPLS5S2SeWk4eoaY2W15v0bYEmx1tfgbO2sEy2E+AIdQF2BN0wyDi6hSM+jaW1Jf MbGekb4jY7olkvKK6xAEgOs0viMSA3II9YPmmhhI5WSK6LZ7rKNWumEZ0onaONLp NBcMcOnbtiUmDx93174RlkWFXHv5d0MMA3BoHEHVuwTEFV17IEvEgg/KlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH4mUz15ktOBP5eumPodt62wLffMB8GA1UdIwQY MBaAFMRc/bmAPOBXFC0Yf4a8T1Zx1+t7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQt ZDVhMTc3MTc4ZjRhLzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQtZDVhMTc3MTc4ZjRh LzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiJTp5pK BRhqox6V1NVAxgfa6aCxvk7T4xqCml0LOpC2ougAWLIlHbJLagAU1J/H0l+aH/o/ fVPsA8Ngs8+uRHFNNk/rIf1B8qW1jbEW91HYM7Z7G146bpMHMGvIxhMEXfchQT/G wsEYKQhGR+50nXDNqdB8l/UXRV6MGaYKh+nbVaRLdQ6iqa2t9EQ4Fxmwtea+wAI5 G65arKy4WjYBdroJKH4MIeNEDo+O5iCybLFh7COcRxTuqpzQ+0d/JohnusPFBVz+ aCCauHFcil5C3EgDuVYSQoGT6lF9MfQFVLd5Slvwtixe4deTDL7eiq2s5lgSpPR+ XpPXUPyLFIwowA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:32 2026 by rpki-client