This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json) Hash identifier: uDVtRrnkVqg8HvUO4vQEHl29KokqC2n9FqrAZNDcDX0= Subject key identifier: 14:7C:E4:5F:55:A2:99:07:CC:BA:51:5D:B6:8A:D5:A5:4C:DF:E3:BB Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1 Certificate serial: 019C4390562088DD3B2EC47663CE4BF4B8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft Manifest number: 103A Signing time: Mon 09 Feb 2026 18:00:58 +0000 Manifest this update: Mon 09 Feb 2026 18:00:58 +0000 Manifest next update: Tue 10 Feb 2026 18:00:58 +0000 Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: z8TPGhctRT1kNKfRTkGFtc8t9m1sqiU25ahREcYGoBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:56:20:88:dd:3b:2e:c4:76:63:ce:4b:f4:b8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1 Validity Not Before: Feb 9 18:00:58 2026 GMT Not After : Feb 10 18:00:58 2026 GMT Subject: CN=147ce45f55a29907ccba515db68ad5a54cdfe3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:69:de:81:91:64:8d:f9:2b:c6:3d:ab:1f: 80:01:95:5b:56:0b:a7:c2:49:a9:88:da:e6:e6:69: e3:db:8e:dc:b1:32:b3:88:e8:29:84:ee:d9:43:5d: ae:ba:90:ef:11:0d:26:17:d3:ad:5e:82:d9:81:9e: 8e:e3:d0:a2:e5:e4:58:c1:db:84:9d:34:ce:63:21: c4:95:45:b6:4f:a3:ba:aa:7d:d5:11:97:15:ed:a5: 48:2e:ef:17:77:d2:9c:81:8c:1f:14:67:41:42:a0: 39:a7:0b:06:8b:85:b8:95:05:54:0d:2b:8e:d4:7e: 70:c6:7d:50:4d:c7:be:ce:d4:48:83:c7:d5:2c:ee: fc:22:92:cd:9d:dc:9d:c7:6b:0a:d0:d3:66:6c:8c: 71:89:92:94:18:ab:0a:ef:16:49:7e:7e:cc:e2:2d: 07:48:f9:de:43:fa:a6:3a:44:83:72:a1:4e:9e:20: 92:20:5a:6a:17:7f:d3:f6:d7:36:f5:e5:2f:e7:98: 5c:a4:58:7c:57:d5:00:aa:de:03:63:26:37:f9:0e: 95:82:23:2f:5b:08:c4:a2:3b:82:8e:d5:3f:68:52: ca:23:e9:f6:3c:c5:fc:53:78:ca:3a:9b:8b:94:8f: c6:c0:9a:9d:c7:bf:b4:99:98:6d:ae:45:20:3d:ad: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:E4:5F:55:A2:99:07:CC:BA:51:5D:B6:8A:D5:A5:4C:DF:E3:BB X509v3 Authority Key Identifier: keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:24:86:93:6b:1a:d6:71:47:3b:f7:1f:bb:6c:ba:e8:bd:29: 1e:e2:0e:55:f4:f0:94:92:83:5d:70:5e:fa:5f:0e:8e:86:3a: cf:c0:8f:54:00:65:25:15:c5:1b:36:25:6b:b2:cc:e5:ba:82: a8:6e:db:be:26:f8:ad:46:67:9f:d1:6d:bb:f3:df:09:78:b8: a8:bc:56:b0:03:5a:1e:be:1c:5a:30:6b:9f:4b:82:e0:c9:96: 16:dc:a2:47:69:9f:04:5d:8d:ed:f2:72:d4:e7:66:be:bd:68: c6:6c:a8:17:a6:dd:7f:77:60:67:82:6e:46:e0:ae:88:db:85: 72:cb:9c:61:bd:69:88:46:8f:c3:ba:b1:a7:d6:e1:93:d8:ae: 9f:1a:38:53:ac:a0:ce:ad:15:e9:fd:cb:78:69:fb:46:8f:23: 29:ac:4b:f8:87:a6:89:04:a2:2e:b4:ed:a7:83:75:7f:04:96: 09:d3:87:92:0c:47:4f:af:d1:65:46:91:de:2d:30:fd:17:3f: 6c:0a:9c:e9:02:5c:4b:38:bf:fc:0e:37:d8:6a:de:98:c3:02: 60:02:32:73:58:f0:66:c2:7f:45:0d:97:45:e1:68:81:3c:d1: fc:a5:06:3e:53:4a:86:fc:6e:f0:80:59:74:53:4b:ab:b5:4c: dd:ba:ef:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFYgiN07LsR2Y85L9Lj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NmI0NGQ3MDczMzI0YWIyODQxNjM2N2RlMDQwZjBlNDYz MzQ4ZDEwHhcNMjYwMjA5MTgwMDU4WhcNMjYwMjEwMTgwMDU4WjAzMTEwLwYDVQQD EygxNDdjZTQ1ZjU1YTI5OTA3Y2NiYTUxNWRiNjhhZDVhNTRjZGZlM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNRp3oGRZI35K8Y9qx+AAZVbVgun wkmpiNrm5mnj247csTKziOgphO7ZQ12uupDvEQ0mF9OtXoLZgZ6O49Ci5eRYwduE nTTOYyHElUW2T6O6qn3VEZcV7aVILu8Xd9KcgYwfFGdBQqA5pwsGi4W4lQVUDSuO 1H5wxn1QTce+ztRIg8fVLO78IpLNndydx2sK0NNmbIxxiZKUGKsK7xZJfn7M4i0H SPneQ/qmOkSDcqFOniCSIFpqF3/T9tc29eUv55hcpFh8V9UAqt4DYyY3+Q6VgiMv WwjEojuCjtU/aFLKI+n2PMX8U3jKOpuLlI/GwJqdx7+0mZhtrkUgPa0gpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR85F9VopkHzLpRXbaK1aVM3+O7MB8GA1UdIwQY MBaAFMRrRNcHMySrKEFjZ94EDw5GM0jRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEt MWYwYWFjMTQ5NWFjLzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEtMWYwYWFjMTQ5NWFj LzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxySGk2sa 1nFHO/cfu2y66L0pHuIOVfTwlJKDXXBe+l8OjoY6z8CPVABlJRXFGzYla7LM5bqC qG7bvib4rUZnn9Ftu/PfCXi4qLxWsANaHr4cWjBrn0uC4MmWFtyiR2mfBF2N7fJy 1Odmvr1oxmyoF6bdf3dgZ4JuRuCuiNuFcsucYb1piEaPw7qxp9bhk9iunxo4U6yg zq0V6f3LeGn7Ro8jKaxL+IemiQSiLrTtp4N1fwSWCdOHkgxHT6/RZUaR3i0w/Rc/ bAqc6QJcSzi//A432GremMMCYAIyc1jwZsJ/RQ2XReFogTzR/KUGPlNKhvxu8IBZ dFNLq7VM3brvug== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:10 2026 by rpki-client