This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json) Hash identifier: vV8x6+y+10tmJUo+oN8kiPDT5A7iq3vU6l2dN7KVKNk= Subject key identifier: C2:E2:5C:8A:5C:BC:1D:7E:3C:A0:DC:29:7A:64:1A:98:62:B0:AA:95 Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Certificate serial: 019C42102A5A7270020264D73677F90D8381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft Manifest number: 075E Signing time: Mon 09 Feb 2026 11:01:21 +0000 Manifest this update: Mon 09 Feb 2026 11:01:21 +0000 Manifest next update: Tue 10 Feb 2026 11:01:21 +0000 Files and hashes: 1: CQU1i8i4vqvuY4KqJGZlaSLhz1o.roa (hash: CuYb2a2XddVX7SxALr1d1KIhl+UGwYzhtlyXuVxbI4M=) 2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: M01uzrU/h55ofkbOoGlpct3Nj101bJ8ozk+g0NJQmOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:2a:5a:72:70:02:02:64:d7:36:77:f9:0d:83:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Validity Not Before: Feb 9 11:01:21 2026 GMT Not After : Feb 10 11:01:21 2026 GMT Subject: CN=c2e25c8a5cbc1d7e3ca0dc297a641a9862b0aa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:e3:00:cf:9c:b6:fa:e9:e5:f4:6b:c7:ce: 10:25:a4:ce:da:44:15:df:87:ca:35:99:af:98:3d: 02:88:50:8b:f1:a7:10:71:3d:b6:24:78:c6:6c:7d: ab:57:bd:77:98:47:06:c6:6e:2f:71:8e:b1:86:ff: 8c:68:c3:8c:e9:59:d0:f9:45:34:62:8c:3d:de:81: 53:97:3b:d8:68:77:b2:3a:7e:6a:3b:2e:59:d9:c7: 6b:c3:57:ae:61:7b:de:11:9d:1b:59:d0:77:94:60: 5c:51:7b:5a:ff:7b:fa:39:33:4a:ea:49:aa:a3:7b: a1:cb:d8:fd:b0:82:11:df:12:7a:cd:90:c1:6a:b7: 75:2f:c9:6b:0c:3e:6e:91:7a:ff:c5:01:d4:51:6b: 35:9d:e7:07:4b:41:d2:09:4e:2d:e4:63:20:21:6a: 2f:1e:8c:4a:88:6b:fa:26:66:fc:72:7e:b9:b1:a8: 0c:3c:c9:a0:30:61:90:ad:4e:9a:20:75:f7:58:ee: cc:0f:c2:23:ff:15:86:39:e0:6c:72:0a:d7:12:58: 43:9c:85:d1:d7:ef:e2:a2:40:42:7d:7e:08:3e:34: 2e:d0:c2:ad:77:04:58:48:8d:c0:9f:b2:70:b3:dd: 47:22:ba:f7:80:a7:96:a1:0d:9e:a8:33:16:76:37: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E2:5C:8A:5C:BC:1D:7E:3C:A0:DC:29:7A:64:1A:98:62:B0:AA:95 X509v3 Authority Key Identifier: keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:10:0a:66:15:cd:4d:3e:ce:19:34:63:53:dd:a7:76:27:73: e1:e8:db:07:b2:4c:a6:a4:4a:d8:1d:c0:72:d6:b6:89:0e:27: 01:f8:d9:87:e1:c0:d2:bb:0b:94:f3:9b:67:3e:fc:a5:4f:4d: f5:5f:19:15:e3:85:75:0f:f3:88:7b:3d:11:9e:aa:ef:09:6a: 3e:85:f6:b4:9a:69:39:e9:5e:7e:1a:78:2a:7a:b6:da:22:41: 15:6a:e9:c7:34:23:61:c0:20:6c:5a:21:59:ca:8b:13:b5:95: 80:12:3a:20:fa:83:35:52:fb:34:52:bc:df:87:2b:50:9c:47: db:d3:a5:72:c6:24:b3:ae:84:a1:b3:b8:4b:20:64:65:08:80: fa:41:85:02:49:0a:a0:8f:17:af:69:29:dd:66:fb:d6:17:95: 25:38:5a:24:6a:17:3c:cf:1a:f0:fe:d0:e6:fb:99:89:73:82: b3:22:4e:7b:9d:bb:7a:b9:75:c5:91:6f:d2:93:4c:ec:ca:c3: ee:61:d8:a8:da:f1:f8:a1:a2:73:4c:da:b7:42:e4:90:fb:c4: 42:b5:cb:03:1a:7d:ef:b3:77:65:2b:58:eb:3f:04:82:58:fe: 60:8c:10:ad:54:34:38:46:16:2f:34:63:ac:21:44:b8:93:80: 00:66:e9:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECpacnACAmTXNnf5DYOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi ZmJiN2EwHhcNMjYwMjA5MTEwMTIxWhcNMjYwMjEwMTEwMTIxWjAzMTEwLwYDVQQD EyhjMmUyNWM4YTVjYmMxZDdlM2NhMGRjMjk3YTY0MWE5ODYyYjBhYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEfjAM+ctvrp5fRrx84QJaTO2kQV 34fKNZmvmD0CiFCL8acQcT22JHjGbH2rV713mEcGxm4vcY6xhv+MaMOM6VnQ+UU0 Yow93oFTlzvYaHeyOn5qOy5Z2cdrw1euYXveEZ0bWdB3lGBcUXta/3v6OTNK6kmq o3uhy9j9sIIR3xJ6zZDBard1L8lrDD5ukXr/xQHUUWs1necHS0HSCU4t5GMgIWov HoxKiGv6Jmb8cn65sagMPMmgMGGQrU6aIHX3WO7MD8Ij/xWGOeBscgrXElhDnIXR 1+/iokBCfX4IPjQu0MKtdwRYSI3An7Jws91HIrr3gKeWoQ2eqDMWdjcHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLiXIpcvB1+PKDcKXpkGphisKqVMB8GA1UdIwQY MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRAKZhXN TT7OGTRjU92ndidz4ejbB7JMpqRK2B3Acta2iQ4nAfjZh+HA0rsLlPObZz78pU9N 9V8ZFeOFdQ/ziHs9EZ6q7wlqPoX2tJppOelefhp4Knq22iJBFWrpxzQjYcAgbFoh WcqLE7WVgBI6IPqDNVL7NFK834crUJxH29OlcsYks66EobO4SyBkZQiA+kGFAkkK oI8Xr2kp3Wb71heVJThaJGoXPM8a8P7Q5vuZiXOCsyJOe527erl1xZFv0pNM7MrD 7mHYqNrx+KGic0zat0LkkPvEQrXLAxp977N3ZStY6z8Eglj+YIwQrVQ0OEYWLzRj rCFEuJOAAGbpOA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:15 2026 by rpki-client