This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json) Hash identifier: pKWDgTlhV1KrzHiIong02hlc483rNgEODAd7lfBdMwE= Subject key identifier: F6:3C:38:6E:C7:6E:3C:46:8F:92:AC:19:AF:CF:0B:E0:C9:D4:15:7F Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37 Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37 Certificate serial: 019C42462E5485468568412E3FD51519A602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 12:00:21 +0000 Manifest this update: Mon 09 Feb 2026 12:00:21 +0000 Manifest next update: Tue 10 Feb 2026 12:00:21 +0000 Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: BtBb+Wq1JBE5KAL2m5MIM7pTWZ58XV00iqr+a1R+NBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2e:54:85:46:85:68:41:2e:3f:d5:15:19:a6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37 Validity Not Before: Feb 9 12:00:21 2026 GMT Not After : Feb 10 12:00:21 2026 GMT Subject: CN=f63c386ec76e3c468f92ac19afcf0be0c9d4157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:7e:d4:b5:34:52:0a:65:ca:97:79:ef:c1: e5:9d:e2:97:e1:bc:62:eb:75:ee:61:bc:2d:25:5a: e1:86:3a:24:64:06:db:7a:6e:86:ea:d3:43:73:b7: 30:4a:ae:a9:ac:f0:fc:cb:4f:91:8d:68:a8:60:72: 0e:1b:b5:33:30:09:33:65:7d:7d:09:cc:4b:d2:87: 75:66:d8:f2:2e:7a:5b:03:cc:16:97:80:bc:dd:81: ed:a0:86:62:2a:79:93:54:88:f4:65:e7:03:99:fc: ea:eb:d5:22:a5:b2:a9:50:76:af:58:90:f5:62:ab: 0d:f2:af:ce:34:c0:60:7a:2f:bd:b2:3c:d8:de:e0: 8f:91:a1:6a:e8:0f:90:96:d2:24:33:7f:7c:05:3b: 9e:49:77:fe:3f:ba:8c:0b:71:b9:51:20:55:15:38: b6:bc:2c:bf:cd:28:6e:d2:11:0e:bb:cc:6d:2b:11: c8:6a:79:de:76:c3:82:1c:7e:1a:d8:77:36:3f:e6: 96:e3:72:be:7c:4b:45:c0:66:96:f8:b3:8e:af:4e: f5:12:c3:9d:31:f2:bc:1c:eb:31:f6:b8:7b:37:d2: 3f:25:55:f6:4c:ff:4c:6c:f9:31:19:86:43:8b:ff: df:25:e6:53:48:57:d8:22:7c:b1:d2:da:42:13:ba: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:38:6E:C7:6E:3C:46:8F:92:AC:19:AF:CF:0B:E0:C9:D4:15:7F X509v3 Authority Key Identifier: keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2c:43:bd:9d:f2:a6:87:ba:93:9a:31:31:2d:e2:e0:96:92: 42:89:a4:55:ef:25:fa:9f:9d:a4:44:64:33:2a:4a:36:6b:76: 39:82:07:ea:33:b9:6b:fb:09:24:4f:05:af:2e:8c:15:1c:45: 12:07:74:15:b3:33:0b:c1:38:9c:87:7a:05:ce:7f:62:9b:1c: aa:11:ba:e3:c4:86:54:58:47:20:90:4c:12:90:b5:2c:17:88: 9d:12:75:b9:e1:0a:4d:0b:dd:64:0b:87:c1:5d:4d:e0:f2:49: 86:1a:d3:ba:fe:db:7e:bd:11:d2:8b:41:1f:02:92:20:a3:7c: 7e:df:60:41:46:0c:39:75:7c:d0:de:73:23:7c:f8:7e:00:ff: 4d:aa:13:4d:34:a1:c9:14:11:8b:1a:03:74:6d:36:ae:74:33: ba:c5:fc:47:0b:d3:37:e4:d0:bb:d4:57:8f:c6:c5:f1:14:ba: b7:91:f6:40:ad:a1:c9:b8:dc:ba:6e:48:39:0b:4b:15:a4:90: c1:9c:1b:82:a8:90:de:17:11:52:58:d4:8b:3e:d5:7e:76:f7: 54:12:90:e1:fb:43:d5:44:da:04:1b:7c:ac:c2:85:4a:11:a4: 02:f3:a5:2a:0f:09:96:4a:3e:0b:53:ef:2b:8e:70:36:b3:d1: 7c:ab:d3:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRi5UhUaFaEEuP9UVGaYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MWIzZDYyOGE2Mjk2OTFlYmE5MmE3Mzg0M2VkNDUzZjcy ODdhMzcwHhcNMjYwMjA5MTIwMDIxWhcNMjYwMjEwMTIwMDIxWjAzMTEwLwYDVQQD EyhmNjNjMzg2ZWM3NmUzYzQ2OGY5MmFjMTlhZmNmMGJlMGM5ZDQxNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMd+1LU0Ugplypd578HlneKX4bxi 63XuYbwtJVrhhjokZAbbem6G6tNDc7cwSq6prPD8y0+RjWioYHIOG7UzMAkzZX19 CcxL0od1ZtjyLnpbA8wWl4C83YHtoIZiKnmTVIj0ZecDmfzq69UipbKpUHavWJD1 YqsN8q/ONMBgei+9sjzY3uCPkaFq6A+QltIkM398BTueSXf+P7qMC3G5USBVFTi2 vCy/zShu0hEOu8xtKxHIannedsOCHH4a2Hc2P+aW43K+fEtFwGaW+LOOr071EsOd MfK8HOsx9rh7N9I/JVX2TP9MbPkxGYZDi//fJeZTSFfYInyx0tpCE7qqIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY8OG7HbjxGj5KsGa/PC+DJ1BV/MB8GA1UdIwQY MBaAFMYbPWKKYpaR66kqc4Q+1FP3KHo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjIt N2RjYzRlZDFjZGJjLzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjItN2RjYzRlZDFjZGJj LzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyxDvZ3y poe6k5oxMS3i4JaSQomkVe8l+p+dpERkMypKNmt2OYIH6jO5a/sJJE8Fry6MFRxF Egd0FbMzC8E4nId6Bc5/YpscqhG648SGVFhHIJBMEpC1LBeInRJ1ueEKTQvdZAuH wV1N4PJJhhrTuv7bfr0R0otBHwKSIKN8ft9gQUYMOXV80N5zI3z4fgD/TaoTTTSh yRQRixoDdG02rnQzusX8RwvTN+TQu9RXj8bF8RS6t5H2QK2hybjcum5IOQtLFaSQ wZwbgqiQ3hcRUljUiz7Vfnb3VBKQ4ftD1UTaBBt8rMKFShGkAvOlKg8Jlko+C1Pv K45wNrPRfKvT2A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:43 2026 by rpki-client