This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json) Hash identifier: SxFs2AI3f6t1QeoKf3ve4f1Z2j67DCX6fJ0MVM7+OZ4= Subject key identifier: DC:66:15:D8:A6:15:79:59:0D:88:F8:D2:5C:2E:20:93:55:E7:EA:45 Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Certificate serial: 019C427D5E826D3A84ED6263D66A1D20C5FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft Manifest number: 0739 Signing time: Mon 09 Feb 2026 13:00:38 +0000 Manifest this update: Mon 09 Feb 2026 13:00:38 +0000 Manifest next update: Tue 10 Feb 2026 13:00:38 +0000 Files and hashes: 1: Q9ZgPk35Ok6M8we5yqQ4KCOhaNk.roa (hash: JPO6gHRzSYDvTmPZqjhIeasbbYanMzcflBe8oC0yynQ=) 2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: 0ls5N7CYkqthn6UkNVpJLX3w2Xv1lnUIY35cQhKmyBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5e:82:6d:3a:84:ed:62:63:d6:6a:1d:20:c5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132 Validity Not Before: Feb 9 13:00:38 2026 GMT Not After : Feb 10 13:00:38 2026 GMT Subject: CN=dc6615d8a61579590d88f8d25c2e209355e7ea45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:76:91:4a:89:58:1a:3e:e5:34:6d:c2:5f: 5b:96:16:e7:ac:22:ab:8d:5a:3d:af:ef:d7:1f:3d: 49:2b:22:65:0e:d8:96:73:eb:3b:17:65:7a:2f:42: 4f:03:af:6c:28:19:b8:91:a6:0f:a7:7a:1e:1b:48: 16:79:0b:cf:e5:30:34:69:ae:a0:d5:c6:ec:20:69: 0a:d2:0b:a2:ee:63:a3:c2:f2:49:13:db:9d:8c:f2: bd:6d:54:8f:13:7d:99:f7:ea:e2:e9:f6:c7:a0:37: 76:1f:0c:b5:e9:55:21:dc:24:4f:6a:bf:a8:09:ec: b9:90:df:3e:81:94:20:ed:ea:e9:27:84:55:84:19: 3a:84:7c:bc:63:f6:a1:f3:5c:52:a5:ec:02:7e:00: 26:fc:b4:31:fa:da:e1:c2:90:a6:e5:50:fd:0a:3b: dd:ae:ca:10:31:1c:64:c6:be:73:09:e3:bf:91:bb: 21:62:c1:c0:1f:33:f5:cf:55:22:05:f8:77:00:f3: 9d:cf:95:67:9f:e5:9d:8d:1d:c5:49:03:bc:af:23: e1:c1:2a:5c:d7:58:2e:d5:9e:ee:4a:33:28:1b:0f: e0:25:3f:0e:9f:5f:95:e0:08:28:0a:17:8e:9c:23: f5:52:9d:5b:22:16:e8:4f:be:e6:c3:97:ae:fc:06: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:66:15:D8:A6:15:79:59:0D:88:F8:D2:5C:2E:20:93:55:E7:EA:45 X509v3 Authority Key Identifier: keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:04:28:89:69:0c:b3:ce:30:00:7f:91:31:3b:21:d0:4f: 40:c0:c5:51:2f:cd:cc:fd:b5:b2:db:ea:ab:8a:eb:69:5e:08: 80:20:14:4e:32:6c:cf:5f:a2:48:0f:a7:8b:a3:14:64:a6:cf: 93:9d:7f:86:22:c2:da:59:08:17:c3:a1:12:5c:fa:3e:5a:5f: fa:fa:e2:24:81:eb:3e:7f:f6:2a:ae:bd:66:b4:ad:f6:56:18: c6:b3:d8:45:69:86:71:a2:de:8a:bd:22:ef:9c:d3:3f:ac:9f: dd:1a:b6:1e:9e:34:cb:78:78:c7:e4:0f:21:5e:61:68:0c:c0: 5e:f7:61:d1:7c:15:c4:09:82:27:66:5a:6d:f7:06:b9:69:50: 10:85:84:53:ab:ae:84:7e:07:c9:ad:f9:78:8e:a6:c7:c0:99: 16:38:18:0d:33:2d:47:af:0b:ad:98:92:63:af:ce:b6:5b:65: f9:db:2c:87:8e:3a:14:24:bb:a0:db:f5:aa:7e:fc:80:2c:a0: f2:dd:b4:25:51:a1:13:06:93:ae:f9:1d:e8:a9:44:b1:e3:9a: 61:0e:fc:3d:49:2c:0f:62:e8:8f:7a:6c:cb:68:99:5c:07:1c: 1d:40:f7:7d:b9:6f:cc:da:a7:46:93:a1:db:db:93:1c:1a:71: 48:68:79:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfV6CbTqE7WJj1modIMX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3 YzkxMzIwHhcNMjYwMjA5MTMwMDM4WhcNMjYwMjEwMTMwMDM4WjAzMTEwLwYDVQQD EyhkYzY2MTVkOGE2MTU3OTU5MGQ4OGY4ZDI1YzJlMjA5MzU1ZTdlYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstR2kUqJWBo+5TRtwl9blhbnrCKr jVo9r+/XHz1JKyJlDtiWc+s7F2V6L0JPA69sKBm4kaYPp3oeG0gWeQvP5TA0aa6g 1cbsIGkK0gui7mOjwvJJE9udjPK9bVSPE32Z9+ri6fbHoDd2Hwy16VUh3CRPar+o Cey5kN8+gZQg7erpJ4RVhBk6hHy8Y/ah81xSpewCfgAm/LQx+trhwpCm5VD9Cjvd rsoQMRxkxr5zCeO/kbshYsHAHzP1z1UiBfh3APOdz5Vnn+WdjR3FSQO8ryPhwSpc 11gu1Z7uSjMoGw/gJT8On1+V4AgoCheOnCP1Up1bIhboT77mw5eu/AZTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxmFdimFXlZDYj40lwuIJNV5+pFMB8GA1UdIwQY MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkQEKIlp DLPOMAB/kTE7IdBPQMDFUS/NzP21stvqq4rraV4IgCAUTjJsz1+iSA+ni6MUZKbP k51/hiLC2lkIF8OhElz6Plpf+vriJIHrPn/2Kq69ZrSt9lYYxrPYRWmGcaLeir0i 75zTP6yf3Rq2Hp40y3h4x+QPIV5haAzAXvdh0XwVxAmCJ2ZabfcGuWlQEIWEU6uu hH4Hya35eI6mx8CZFjgYDTMtR68LrZiSY6/Otltl+dssh446FCS7oNv1qn78gCyg 8t20JVGhEwaTrvkd6KlEseOaYQ78PUksD2Loj3psy2iZXAccHUD3fblvzNqnRpOh 29uTHBpxSGh5Sg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:25 2026 by rpki-client