This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json) Hash identifier: Wkqu76M2kr1yA6DT/j0tQOyyWAqKCXipKmwAD0MMyEw= Subject key identifier: 24:16:66:14:4A:52:29:37:97:F9:A0:2F:A3:5B:F4:FC:95:C2:11:88 Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e Certificate serial: 019C42466848B0025505CE11806EF4B346E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft Manifest number: 0EA7 Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=) 2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: l9En6vibDikwAQcZv5NtWK2rs4DSd5VUCMmrE8GUdAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:68:48:b0:02:55:05:ce:11:80:6e:f4:b3:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=241666144a52293797f9a02fa35bf4fc95c21188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:c7:b1:b8:4f:a0:94:37:65:c4:1d:bc:21: 30:7d:18:1e:d6:d2:31:0b:a5:d2:bf:5b:9a:a0:65: 19:11:bc:eb:6f:92:c6:ac:4a:0a:c5:fb:51:d9:7f: 8f:2d:88:15:a5:3b:a4:ba:7b:53:5d:e1:32:ca:aa: 25:cc:aa:79:71:a2:7b:97:d1:07:37:35:e6:eb:eb: 5f:37:38:ab:56:fe:c7:05:a2:76:2b:5b:4a:6c:5a: c6:7d:b5:26:0d:16:80:ea:b0:b0:1c:86:36:dd:a8: 7e:8d:8f:bd:13:37:25:13:3d:81:f9:00:20:1d:04: 59:bc:45:09:10:30:7f:81:02:44:46:41:7f:55:c1: 4b:8b:d5:8e:98:b2:a3:9f:70:ef:40:91:d4:4d:05: 23:a7:5b:ea:9c:28:ac:cf:b6:21:12:d7:1c:36:7f: cc:1f:de:96:d6:7b:5a:af:6b:f2:da:da:be:4b:07: 12:ee:02:ed:3d:a9:b4:b7:83:ea:1c:31:9a:76:b6: ac:07:ce:1e:1a:e8:1f:06:3c:49:7f:07:a7:dd:5a: be:ce:84:20:8f:dd:f3:cc:56:e7:56:87:68:00:4c: d8:27:fb:9c:5e:09:a6:53:6e:62:c1:a3:a8:2f:90: 30:3e:35:8f:64:dc:a1:13:de:14:b6:3b:f4:db:2e: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:16:66:14:4A:52:29:37:97:F9:A0:2F:A3:5B:F4:FC:95:C2:11:88 X509v3 Authority Key Identifier: keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3b:0b:3e:1f:f0:25:d2:a2:74:39:ff:44:d2:f5:15:a2:ac: 33:15:6b:26:44:cc:a7:ba:cb:7d:8e:2f:d7:9a:89:a7:2e:c4: ac:92:86:2f:03:a4:28:28:05:2d:dd:bf:e2:e5:0f:1a:33:23: 99:03:44:e6:6d:bf:32:71:7e:4e:9b:38:80:6d:f7:73:57:9a: 88:5f:c8:72:b9:9e:ce:28:a1:be:42:6e:59:42:1f:4c:f2:e4: 78:aa:9a:23:b0:b4:62:9c:ed:6c:94:b9:8e:d4:03:5e:92:ca: 9a:e7:1c:72:9b:ad:dd:ad:fb:cf:17:93:ba:07:9d:0c:69:ed: 09:11:13:1d:d1:1e:66:9e:0d:25:90:b6:71:79:5f:54:d2:fb: 53:8c:25:61:28:71:97:64:25:c5:b5:cc:74:1a:7c:8a:5a:29: 49:14:12:01:68:a7:da:df:cc:b3:f8:f9:54:a5:f3:54:bf:d5: e1:1d:de:41:ce:d8:e5:8a:da:a7:4e:52:64:7c:59:54:93:1e: 4b:78:ed:02:65:b4:9f:fb:38:2c:8e:67:1a:ed:4b:e5:ec:2d: 80:16:9f:42:c2:33:68:e0:cd:b8:ff:30:fc:09:c3:c1:8e:c3: d2:a3:90:88:0c:92:01:44:65:25:a3:6a:5f:61:45:95:80:47: 2a:a9:3a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmhIsAJVBc4RgG70s0bgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm OTc3M2UwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EygyNDE2NjYxNDRhNTIyOTM3OTdmOWEwMmZhMzViZjRmYzk1YzIxMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly/HsbhPoJQ3ZcQdvCEwfRge1tIx C6XSv1uaoGUZEbzrb5LGrEoKxftR2X+PLYgVpTukuntTXeEyyqolzKp5caJ7l9EH NzXm6+tfNzirVv7HBaJ2K1tKbFrGfbUmDRaA6rCwHIY23ah+jY+9EzclEz2B+QAg HQRZvEUJEDB/gQJERkF/VcFLi9WOmLKjn3DvQJHUTQUjp1vqnCisz7YhEtccNn/M H96W1ntar2vy2tq+SwcS7gLtPam0t4PqHDGadrasB84eGugfBjxJfwen3Vq+zoQg j93zzFbnVodoAEzYJ/ucXgmmU25iwaOoL5AwPjWPZNyhE94Utjv02y7COwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQWZhRKUik3l/mgL6Nb9PyVwhGIMB8GA1UdIwQY MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjsLPh/w JdKidDn/RNL1FaKsMxVrJkTMp7rLfY4v15qJpy7ErJKGLwOkKCgFLd2/4uUPGjMj mQNE5m2/MnF+Tps4gG33c1eaiF/IcrmeziihvkJuWUIfTPLkeKqaI7C0YpztbJS5 jtQDXpLKmucccput3a37zxeTugedDGntCRETHdEeZp4NJZC2cXlfVNL7U4wlYShx l2QlxbXMdBp8ilopSRQSAWin2t/Ms/j5VKXzVL/V4R3eQc7Y5Yrap05SZHxZVJMe S3jtAmW0n/s4LI5nGu1L5ewtgBafQsIzaODNuP8w/AnDwY7D0qOQiAySAURlJaNq X2FFlYBHKqk67A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:36 2026 by rpki-client