This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json) Hash identifier: pVF2mFVIKQdDftYOtrKFKhhqpA4/TSCEbWj0gFuzbH0= Subject key identifier: 96:9B:B1:EE:98:19:36:AD:BE:A6:C4:F2:84:6E:B6:F1:37:42:05:18 Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Certificate serial: 019C41A202FDB2994974D6D70D96A41647CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft Manifest number: 0327 Signing time: Mon 09 Feb 2026 09:01:02 +0000 Manifest this update: Mon 09 Feb 2026 09:01:02 +0000 Manifest next update: Tue 10 Feb 2026 09:01:02 +0000 Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=) 2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: l47nxlNnePu7s5+uQxaqhzpl+ZpsAOYwlryn+DVdELI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:02:fd:b2:99:49:74:d6:d7:0d:96:a4:16:47:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4 Validity Not Before: Feb 9 09:01:02 2026 GMT Not After : Feb 10 09:01:02 2026 GMT Subject: CN=969bb1ee981936adbea6c4f2846eb6f137420518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:30:89:7e:ea:da:73:e1:6d:4a:e3:e3:95: 81:b3:e0:c6:12:da:84:75:78:70:00:95:53:86:7c: ea:b7:88:64:9a:62:4c:c7:09:45:22:d7:66:e8:29: b1:5e:02:ee:98:e1:58:cf:35:b4:65:f7:dd:4c:d0: 41:0f:93:e4:3b:52:13:ec:33:b0:fd:20:77:22:e8: 17:6c:2c:1e:9f:64:9f:fa:f4:e4:bb:8b:b7:74:ef: 00:ef:94:d0:c9:2c:a3:dc:fc:77:13:00:ec:2c:de: c7:91:69:f1:d3:29:ae:fb:52:19:93:31:96:4b:68: 1e:2c:6c:da:b6:92:05:fd:4e:3c:68:d9:b1:12:79: 5c:25:9c:1a:00:03:1d:27:e0:34:0f:bd:aa:f0:0c: 27:0b:16:47:1a:a8:91:b8:15:da:1b:0b:f5:af:b6: 80:a5:39:e1:06:02:4e:67:61:f3:c3:cd:39:2d:3f: 3f:68:a3:44:0d:80:65:79:59:5a:65:9c:0f:79:4c: cf:fd:f3:d2:75:a9:b2:b8:b0:91:6d:4a:8d:5e:bb: a9:33:7d:79:d1:11:62:ae:3b:ec:24:a8:8d:10:72: 06:84:38:14:47:a5:ed:67:58:af:4a:44:2a:0e:63: 35:d6:a5:84:04:c1:58:d5:b9:35:33:dd:d3:2d:dd: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:B1:EE:98:19:36:AD:BE:A6:C4:F2:84:6E:B6:F1:37:42:05:18 X509v3 Authority Key Identifier: keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:63:93:c1:d6:1b:43:f2:7a:f9:c8:9b:e2:b3:b8:57:ea: 78:b8:14:51:cc:88:f0:04:1b:b1:ea:14:e3:30:a9:de:0d:e1: 36:78:77:da:cd:0f:89:3f:35:ec:f6:a1:14:5e:81:e1:04:80: d5:70:d3:d1:e3:41:60:8c:d2:6b:27:bc:97:c0:5a:0d:fe:70: ca:5e:b0:74:9b:e3:9d:5b:7b:3b:60:40:cf:21:6e:14:a1:ec: 9d:3d:61:e6:94:f7:78:f9:08:9d:d3:b2:bb:1b:60:82:18:05: a3:5b:c0:b3:1b:e5:b3:63:b9:6a:f3:51:dc:0a:e9:e4:61:76: 06:c1:cb:2a:37:cd:bf:bb:4d:7c:df:93:5b:b7:fe:ab:22:5a: 42:9d:08:f0:32:88:85:cc:d0:5d:4b:98:dc:24:a3:d8:50:31: 2f:09:b6:a0:0a:fb:79:93:1d:3e:e6:7b:18:18:57:be:3b:61: 8b:18:80:94:55:cd:0e:37:12:6d:49:10:59:88:2b:52:5b:63: c7:e0:45:00:66:38:8a:13:d9:07:1d:0a:ae:ef:12:62:a7:16: 8f:a2:11:97:b7:09:a0:43:93:f9:ee:4d:0b:3f:3f:ba:25:5a: b2:a5:85:73:38:85:bb:e5:2e:23:60:a3:d3:3a:04:75:1e:6e: d2:c7:67:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogL9splJdNbXDZakFkfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzgyNjUwODljYmRkZTZhNmM1NzljZDc3NmI1ZjgwYzBm OGFkZDQwHhcNMjYwMjA5MDkwMTAyWhcNMjYwMjEwMDkwMTAyWjAzMTEwLwYDVQQD Eyg5NjliYjFlZTk4MTkzNmFkYmVhNmM0ZjI4NDZlYjZmMTM3NDIwNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusQwiX7q2nPhbUrj45WBs+DGEtqE dXhwAJVThnzqt4hkmmJMxwlFItdm6CmxXgLumOFYzzW0ZffdTNBBD5PkO1IT7DOw /SB3IugXbCwen2Sf+vTku4u3dO8A75TQySyj3Px3EwDsLN7HkWnx0ymu+1IZkzGW S2geLGzatpIF/U48aNmxEnlcJZwaAAMdJ+A0D72q8AwnCxZHGqiRuBXaGwv1r7aA pTnhBgJOZ2Hzw805LT8/aKNEDYBleVlaZZwPeUzP/fPSdamyuLCRbUqNXrupM315 0RFirjvsJKiNEHIGhDgUR6XtZ1ivSkQqDmM11qWEBMFY1bk1M93TLd2XBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJabse6YGTatvqbE8oRutvE3QgUYMB8GA1UdIwQY MBaAFMXIJlCJy93mpsV5zXdrX4DA+K3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEt NDM4ODIwZmJhMjU0LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEtNDM4ODIwZmJhMjU0 LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy9jk8HW G0PyevnIm+KzuFfqeLgUUcyI8AQbseoU4zCp3g3hNnh32s0PiT817PahFF6B4QSA 1XDT0eNBYIzSaye8l8BaDf5wyl6wdJvjnVt7O2BAzyFuFKHsnT1h5pT3ePkIndOy uxtgghgFo1vAsxvls2O5avNR3Arp5GF2BsHLKjfNv7tNfN+TW7f+qyJaQp0I8DKI hczQXUuY3CSj2FAxLwm2oAr7eZMdPuZ7GBhXvjthixiAlFXNDjcSbUkQWYgrUltj x+BFAGY4ihPZBx0Kru8SYqcWj6IRl7cJoEOT+e5NCz8/uiVasqWFcziFu+UuI2Cj 0zoEdR5u0sdn8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:39 2026 by rpki-client