This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json) Hash identifier: 0b3EnmoS9iUnYKM8iNccuuxmVJSPHVQ6tiDZ3q63Obg= Subject key identifier: D6:C0:8A:3F:11:B7:A3:3B:08:74:53:41:8A:C7:78:8E:CF:42:6A:8D Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Certificate serial: 019C43FE62B65C48EE453A8B473488BB6F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft Manifest number: 01F2 Signing time: Mon 09 Feb 2026 20:01:10 +0000 Manifest this update: Mon 09 Feb 2026 20:01:10 +0000 Manifest next update: Tue 10 Feb 2026 20:01:10 +0000 Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=) 2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: L819Dn3CA9279k2biKQM2sAE5YVnUMjFCri0hjhOg60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:62:b6:5c:48:ee:45:3a:8b:47:34:88:bb:6f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c Validity Not Before: Feb 9 20:01:10 2026 GMT Not After : Feb 10 20:01:10 2026 GMT Subject: CN=d6c08a3f11b7a33b087453418ac7788ecf426a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:3b:0f:03:a7:cc:6a:a7:2a:67:a8:0a:2f: 46:41:9a:66:89:82:a7:bc:a8:8d:18:36:d3:0f:a3: 82:7b:e8:c9:92:3a:03:8a:03:7e:81:60:ad:29:97: 3c:37:e6:09:85:1d:7c:61:ca:c2:e8:ff:2a:e5:bc: f9:2a:4b:92:78:b5:22:d0:be:f9:ec:80:8f:88:e1: 67:6b:37:b1:05:00:e6:f3:f4:7d:e9:36:00:43:cc: dd:d1:66:24:81:02:64:00:58:60:5f:e8:00:6b:f0: f5:63:49:24:dc:02:ad:4b:4c:4a:5e:01:90:7a:61: da:d1:18:7f:86:b7:26:31:5f:27:0c:22:b3:72:1c: 49:43:53:da:d8:17:86:7c:3e:4b:00:d0:9a:85:d6: 0d:a8:4e:03:32:f6:93:cd:0a:77:9a:61:3a:8c:39: bb:0c:f3:49:ef:c8:c9:ff:00:64:e8:a0:67:6b:52: 06:06:89:99:66:5e:da:dc:de:8d:e2:ce:8c:1b:32: db:fe:6e:6f:83:42:d3:00:45:cc:1e:77:ee:12:9b: 9e:48:28:c9:ce:97:9e:b4:2c:39:f7:2f:a1:46:e7: e2:30:11:0f:ec:03:8c:e0:fd:f8:d7:a0:ba:a9:97: cf:d6:d4:7e:b7:5e:35:b0:15:75:68:4c:7d:e8:3d: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:8A:3F:11:B7:A3:3B:08:74:53:41:8A:C7:78:8E:CF:42:6A:8D X509v3 Authority Key Identifier: keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e0:b1:4e:14:f5:f9:b0:94:6e:b5:15:21:74:a5:61:40:37: 52:df:7d:ca:94:84:58:b8:d2:45:78:8e:d6:e8:e4:6d:ad:93: 7d:16:6a:2d:27:7c:78:6a:45:3f:3c:9a:8e:56:14:ba:af:8d: 07:62:ad:c1:a4:d9:46:10:dd:1a:f8:37:7f:2a:c9:77:30:85: 75:5f:7e:97:17:44:49:b7:b0:6d:fe:18:65:c4:1c:77:d8:98: 46:19:74:4a:39:64:a0:66:89:40:70:c0:4d:11:8b:e9:e9:a2: 37:66:0f:78:35:f8:3c:b2:11:f2:ad:56:83:63:93:a9:20:01: 03:f0:15:49:6c:21:2a:95:9e:cf:6f:31:c2:5a:fe:d9:c5:1e: 1c:24:13:38:a5:cb:da:14:e1:35:c7:30:03:52:ef:39:11:0d: c2:81:64:cd:c3:4e:61:16:9e:38:4c:ce:b2:55:d0:b8:6a:72: cf:3f:2c:c9:27:81:9c:65:f3:68:5c:da:26:12:a6:37:8d:00: 97:8e:90:19:46:39:95:dd:02:f9:39:34:f5:86:89:94:fa:34: ea:5e:6f:35:c1:d7:38:bb:22:8f:36:7d:56:e5:79:b7:37:d1: 76:bf:da:a0:e9:8d:a6:a0:63:cf:88:13:da:51:94:e9:f9:19: 12:f1:e0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mK2XEjuRTqLRzSIu282MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MGYzMjQ2ZmRkNjFiYTFiNTc5MmZlMWFlYzRhZGNhOThk NzVhNWMwHhcNMjYwMjA5MjAwMTEwWhcNMjYwMjEwMjAwMTEwWjAzMTEwLwYDVQQD EyhkNmMwOGEzZjExYjdhMzNiMDg3NDUzNDE4YWM3Nzg4ZWNmNDI2YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj07DwOnzGqnKmeoCi9GQZpmiYKn vKiNGDbTD6OCe+jJkjoDigN+gWCtKZc8N+YJhR18YcrC6P8q5bz5KkuSeLUi0L75 7ICPiOFnazexBQDm8/R96TYAQ8zd0WYkgQJkAFhgX+gAa/D1Y0kk3AKtS0xKXgGQ emHa0Rh/hrcmMV8nDCKzchxJQ1Pa2BeGfD5LANCahdYNqE4DMvaTzQp3mmE6jDm7 DPNJ78jJ/wBk6KBna1IGBomZZl7a3N6N4s6MGzLb/m5vg0LTAEXMHnfuEpueSCjJ zpeetCw59y+hRufiMBEP7AOM4P3416C6qZfP1tR+t141sBV1aEx96D1fhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbAij8Rt6M7CHRTQYrHeI7PQmqNMB8GA1UdIwQY MBaAFMYPMkb91huhtXkv4a7ErcqY11pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUt MTc5NzkyNzY4ZGFlLzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yYTY1NmEtOTMyMy00NDI0LThmYjUtMTc5NzkyNzY4ZGFl LzEveGc4eVJ2M1dHNkcxZVNfaHJzU3R5cGpYV2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOCxThT1 +bCUbrUVIXSlYUA3Ut99ypSEWLjSRXiO1ujkba2TfRZqLSd8eGpFPzyajlYUuq+N B2KtwaTZRhDdGvg3fyrJdzCFdV9+lxdESbewbf4YZcQcd9iYRhl0SjlkoGaJQHDA TRGL6emiN2YPeDX4PLIR8q1Wg2OTqSABA/AVSWwhKpWez28xwlr+2cUeHCQTOKXL 2hThNccwA1LvORENwoFkzcNOYRaeOEzOslXQuGpyzz8sySeBnGXzaFzaJhKmN40A l46QGUY5ld0C+Tk09YaJlPo06l5vNcHXOLsijzZ9VuV5tzfRdr/aoOmNpqBjz4gT 2lGU6fkZEvHgjA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:26:54 2026 by rpki-client