This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json) Hash identifier: xNuyNgsiKN7oVx9cFUlDsbTrYWH+fTq9b5TnHgb0Nrs= Subject key identifier: 70:0A:4A:55:80:F7:4F:01:11:E9:03:44:AE:CE:A5:BF:EE:68:2D:EC Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Certificate serial: 019C43222CC9FAB1F57EB6D6FDC51E64BEBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft Manifest number: 0711 Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: Sp-Rp44m3Zt8RuuF6n5097S4ock.roa (hash: Lz4ywdxNN6CBi6o+N2fbgHtT/99fDk01I1Om7/73lR4=) 2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: tehbIPwIMOu9ai5KGzdRZvuxCKeztw2gf13pQ+AKZs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2c:c9:fa:b1:f5:7e:b6:d6:fd:c5:1e:64:be:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=700a4a5580f74f0111e90344aecea5bfee682dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:c2:15:09:a9:f8:c2:a5:a0:0e:84:d9:63: c2:8d:16:2c:db:f4:a0:9b:12:b8:7d:87:bc:05:08: 07:54:24:65:9d:e1:f1:cd:06:d5:e1:c7:dd:7d:10: b5:d9:a3:19:45:da:1b:f9:25:71:aa:46:e4:c4:6a: 46:84:a8:23:7b:da:49:26:91:1c:7c:e4:cf:a4:e5: 64:54:01:63:72:20:44:40:72:a8:c7:b7:38:23:f1: 38:fb:21:78:a3:53:b5:6e:aa:f3:d8:33:a0:80:6a: af:f6:79:c0:6b:61:77:eb:27:08:b2:cb:5a:00:2e: 11:19:5e:a0:8a:b5:39:27:ab:5e:7b:9c:a0:fa:d8: 3f:2f:b2:af:5e:6e:21:eb:26:d2:c6:29:d4:5c:f1: a4:4f:6d:da:05:3c:cd:a5:e4:f8:db:15:81:14:b4: a7:1b:52:8a:e0:13:0a:b1:b8:4e:23:91:c4:77:49: 84:fc:3b:0d:b1:1b:10:08:ad:46:0a:eb:0c:08:67: 31:f3:d4:15:ae:bf:d3:38:a4:9d:1e:75:d5:bf:3e: 62:1c:c2:bf:e3:0a:62:a8:b9:ff:2e:7e:1e:38:64: 4e:e7:92:ba:43:c5:0e:96:0b:12:84:ab:9b:19:51: 84:ce:05:41:76:5d:60:1f:0f:66:06:48:f7:b0:a4: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:4A:55:80:F7:4F:01:11:E9:03:44:AE:CE:A5:BF:EE:68:2D:EC X509v3 Authority Key Identifier: keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:e9:52:85:1a:6d:0d:a9:a9:7e:31:b9:f7:74:90:ef:2e: 4c:85:04:7c:ae:32:63:4b:33:93:b5:44:5b:74:97:a0:8c:cb: 63:91:59:13:c8:dd:1a:05:8e:36:58:38:e1:53:cb:3c:2a:bf: be:59:bd:be:7a:ed:57:6e:65:16:c3:dc:7a:af:71:71:ea:a5: c9:17:21:c9:41:b9:5d:71:70:c9:61:e2:22:30:3e:6e:37:bf: 0d:c5:42:25:73:48:8f:d4:b6:b5:72:73:45:d5:1c:11:9f:5d: 12:9a:88:d0:88:ce:6f:30:52:8b:70:b4:aa:67:98:50:16:09: 3b:b3:f3:10:b5:06:a9:21:1a:46:b4:c7:cf:dd:0f:60:a4:41: 34:b9:d8:cc:b3:2a:6b:48:e8:69:06:04:de:8b:35:ec:de:47: 12:a0:61:e2:a7:09:49:dc:ca:63:19:06:eb:37:aa:09:42:f6: 34:58:e5:84:c6:0e:3b:73:35:cd:07:a3:0b:67:82:03:97:59: 94:7f:b2:4c:54:81:11:02:6f:18:0a:7b:73:33:a0:e7:b0:82: 19:c1:d4:a2:70:ef:74:09:1d:66:b7:74:57:bc:81:1a:d5:03: fa:38:ed:72:48:11:b9:a0:45:4a:18:b3:5f:de:1f:f1:17:cd: 2c:62:41:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIizJ+rH1frbW/cUeZL6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk NDQwODkwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD Eyg3MDBhNGE1NTgwZjc0ZjAxMTFlOTAzNDRhZWNlYTViZmVlNjgyZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv/CFQmp+MKloA6E2WPCjRYs2/Sg mxK4fYe8BQgHVCRlneHxzQbV4cfdfRC12aMZRdob+SVxqkbkxGpGhKgje9pJJpEc fOTPpOVkVAFjciBEQHKox7c4I/E4+yF4o1O1bqrz2DOggGqv9nnAa2F36ycIssta AC4RGV6girU5J6tee5yg+tg/L7KvXm4h6ybSxinUXPGkT23aBTzNpeT42xWBFLSn G1KK4BMKsbhOI5HEd0mE/DsNsRsQCK1GCusMCGcx89QVrr/TOKSdHnXVvz5iHMK/ 4wpiqLn/Ln4eOGRO55K6Q8UOlgsShKubGVGEzgVBdl1gHw9mBkj3sKQUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAKSlWA908BEekDRK7Opb/uaC3sMB8GA1UdIwQY MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFXpUoUa bQ2pqX4xufd0kO8uTIUEfK4yY0szk7VEW3SXoIzLY5FZE8jdGgWONlg44VPLPCq/ vlm9vnrtV25lFsPceq9xceqlyRchyUG5XXFwyWHiIjA+bje/DcVCJXNIj9S2tXJz RdUcEZ9dEpqI0IjObzBSi3C0qmeYUBYJO7PzELUGqSEaRrTHz90PYKRBNLnYzLMq a0joaQYE3os17N5HEqBh4qcJSdzKYxkG6zeqCUL2NFjlhMYOO3M1zQejC2eCA5dZ lH+yTFSBEQJvGAp7czOg57CCGcHUonDvdAkdZrd0V7yBGtUD+jjtckgRuaBFShiz X94f8RfNLGJB8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:57 2026 by rpki-client