This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json) Hash identifier: ytrEDQ7YRnN/0XlB4tAOknswU2zJdCm2VX+gOID8ris= Subject key identifier: EF:A1:CE:36:36:4A:56:24:E0:58:7E:91:27:F3:24:D0:81:22:31:42 Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Certificate serial: 019C427E18EC8165C997CEF3B999AE4888C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: 1ZYXmJOrMeMc_d7Mkc1TagHI2yQ.roa (hash: qeka0m7QmqNt2z/3WOdknE3KXx1vrYZ3br+BR0VNMV8=) 2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 4k9mpCFWuUxCMm+l5q+Pg0EvvCziVVYfIICwGHuMHI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:18:ec:81:65:c9:97:ce:f3:b9:99:ae:48:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=efa1ce36364a5624e0587e9127f324d081223142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:13:90:a1:49:22:b5:6c:d5:b8:38:b4:ca: 47:fc:d7:81:21:80:cc:6f:de:23:b3:8b:66:c6:2a: f6:4d:e3:0d:1f:f2:3d:3e:13:c2:fc:62:34:c4:46: 17:cb:49:8e:8f:6c:d0:e3:5f:d5:f9:1f:88:24:5b: 98:45:ff:0a:f3:e7:ab:bb:db:83:61:b1:81:6f:61: 88:e5:e7:49:c8:85:ac:20:99:0e:b5:77:1b:1b:d2: 3f:3f:70:a8:3d:1c:49:85:2d:af:88:30:85:87:e2: 34:c3:cb:bf:f4:f9:10:43:f9:4f:c2:c3:4a:9e:73: 43:ef:8d:57:f6:00:a1:cd:a7:8f:c7:8e:8a:1c:14: a6:9f:6f:99:f6:47:07:9b:4f:6b:60:9c:03:50:20: ed:be:98:48:d7:45:cb:f0:7a:b7:92:04:82:a7:de: fe:53:1f:ea:2f:6f:27:3f:c1:31:ef:d6:d9:8d:32: 84:7a:87:64:c4:5e:96:77:33:4f:d0:93:b7:ae:49: f5:ad:e7:5f:af:cc:07:35:87:b6:0d:10:05:9c:4d: 43:32:61:c2:f3:c1:7a:18:c1:fa:77:a7:9f:1a:d4: 34:f8:72:00:19:90:ac:a3:bb:02:87:13:36:74:b8: cf:84:8c:25:11:29:92:55:6e:ae:91:44:bc:27:cc: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A1:CE:36:36:4A:56:24:E0:58:7E:91:27:F3:24:D0:81:22:31:42 X509v3 Authority Key Identifier: keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:93:dd:f5:0b:bf:75:91:50:44:58:59:49:dd:4a:df:d1:4f: 7c:3a:19:24:f4:2e:5e:62:e4:fd:78:a2:31:a7:e9:39:f0:bb: 4b:b7:74:d8:b7:e1:ca:1e:2a:9b:77:06:33:c2:71:44:e0:21: 11:50:24:f0:1f:da:17:d8:02:a6:b0:04:fd:a6:f8:ec:76:32: 53:d2:a7:f0:80:3d:fa:99:65:a3:40:89:64:53:0f:c5:43:5b: aa:76:f1:f2:57:49:a0:01:36:9e:ea:07:cb:10:1a:29:50:cc: 72:43:5c:b5:08:45:6d:1f:bc:84:20:54:52:83:e9:d5:df:46: 1c:fa:0e:26:d2:d7:05:0e:b0:57:06:0d:34:12:1b:5b:7e:30: 07:79:62:e2:4b:49:14:79:8e:e7:60:c1:60:bf:ad:27:68:9d: 86:a2:70:5d:7a:3d:8a:05:04:1e:23:a8:ec:0a:0f:ff:b9:11: 31:f0:b6:48:89:72:18:74:fc:4f:f9:b9:71:21:62:57:49:73: 69:36:12:1f:9d:48:08:0e:2b:e3:36:7f:69:5a:90:c1:3b:6b: 9d:ce:c8:48:7d:4b:ed:65:1e:4a:eb:f4:ca:5e:b4:fd:a4:65: 88:a3:07:1e:39:bb:5a:eb:4a:88:1d:4b:df:41:c9:99:49:f1: fa:27:53:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfhjsgWXJl87zuZmuSIjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi NGI4Y2IwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD EyhlZmExY2UzNjM2NGE1NjI0ZTA1ODdlOTEyN2YzMjRkMDgxMjIzMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIUTkKFJIrVs1bg4tMpH/NeBIYDM b94js4tmxir2TeMNH/I9PhPC/GI0xEYXy0mOj2zQ41/V+R+IJFuYRf8K8+eru9uD YbGBb2GI5edJyIWsIJkOtXcbG9I/P3CoPRxJhS2viDCFh+I0w8u/9PkQQ/lPwsNK nnND741X9gChzaePx46KHBSmn2+Z9kcHm09rYJwDUCDtvphI10XL8Hq3kgSCp97+ Ux/qL28nP8Ex79bZjTKEeodkxF6WdzNP0JO3rkn1redfr8wHNYe2DRAFnE1DMmHC 88F6GMH6d6efGtQ0+HIAGZCso7sChxM2dLjPhIwlESmSVW6ukUS8J8yrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+hzjY2SlYk4Fh+kSfzJNCBIjFCMB8GA1UdIwQY MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJPd9Qu/ dZFQRFhZSd1K39FPfDoZJPQuXmLk/XiiMafpOfC7S7d02Lfhyh4qm3cGM8JxROAh EVAk8B/aF9gCprAE/ab47HYyU9Kn8IA9+pllo0CJZFMPxUNbqnbx8ldJoAE2nuoH yxAaKVDMckNctQhFbR+8hCBUUoPp1d9GHPoOJtLXBQ6wVwYNNBIbW34wB3li4ktJ FHmO52DBYL+tJ2idhqJwXXo9igUEHiOo7AoP/7kRMfC2SIlyGHT8T/m5cSFiV0lz aTYSH51ICA4r4zZ/aVqQwTtrnc7ISH1L7WUeSuv0yl60/aRliKMHHjm7WutKiB1L 30HJmUnx+idTRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:19 2026 by rpki-client