This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json) Hash identifier: lPjHXynAkcmSxdkOUVOWCYbUD+gmeoSPxNexVKX0qXY= Subject key identifier: EF:2E:D8:15:0A:D9:70:82:A1:59:96:8C:78:7C:15:D0:A0:B6:40:24 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019C42462D9794CE749FF990C0DCD67C3B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft Manifest number: 029E Signing time: Mon 09 Feb 2026 12:00:21 +0000 Manifest this update: Mon 09 Feb 2026 12:00:21 +0000 Manifest next update: Tue 10 Feb 2026 12:00:21 +0000 Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=) 2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: 6LgfWfFumoyPMM5SO8DZH2BJWGG9RYpsBt6X1vcS9ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:2d:97:94:ce:74:9f:f9:90:c0:dc:d6:7c:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Feb 9 12:00:21 2026 GMT Not After : Feb 10 12:00:21 2026 GMT Subject: CN=ef2ed8150ad97082a159968c787c15d0a0b64024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:17:0a:2b:3c:62:84:65:7f:59:01:4e:c3: 31:d9:0b:23:13:d6:8c:5f:e3:38:6e:67:09:56:97: 24:8f:88:fb:fe:e6:76:95:16:a1:b0:70:51:92:16: fb:33:c5:74:04:e4:67:6f:19:77:66:24:f1:2f:36: 8f:ae:7c:4f:8d:48:7d:0f:c1:cf:41:e7:7a:82:b5: a3:c3:18:f8:f0:70:56:38:58:8f:f9:27:d7:f9:e2: 04:e7:cd:4f:25:68:c7:5a:de:54:37:c3:ed:13:58: 12:b0:22:d7:12:30:c8:c6:8d:96:3a:ed:5d:6f:b6: c8:97:df:2b:b7:c5:f1:7a:7b:b6:14:74:66:89:70: 10:2e:4e:9d:e0:e3:44:85:03:7f:99:56:1e:4d:32: ff:3e:f1:ca:0d:70:17:ea:fe:dc:57:bd:8d:87:55: c7:de:d0:68:c7:7d:e0:81:f6:cd:31:7f:b6:45:cb: 5e:ec:3d:9b:74:95:d4:48:33:27:c9:bc:cf:ff:fe: 6c:3a:98:b8:29:0e:ba:bb:80:3e:73:04:e1:5b:aa: 9f:94:f6:27:5b:61:b6:a7:f7:a0:df:83:a6:02:33: 8f:4f:70:7b:0a:bc:3f:19:c6:b0:40:3f:d3:93:be: 2f:eb:28:69:ea:cc:68:8f:79:d2:59:dc:dc:64:30: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2E:D8:15:0A:D9:70:82:A1:59:96:8C:78:7C:15:D0:A0:B6:40:24 X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8a:cc:4d:60:36:b4:b4:06:13:1b:96:28:a4:76:dc:a8:41: 71:97:1a:07:29:2d:ce:76:f5:2d:83:c0:93:ac:e9:03:cd:3c: 53:c9:9f:17:26:1c:f8:c8:f2:b2:01:6a:b1:3f:2d:bc:a1:36: 5c:a9:af:18:64:0a:c9:b8:d3:60:6e:ec:e7:ab:d2:4e:3c:50: 53:80:0c:02:dc:d1:fc:3d:81:db:0d:cd:a1:09:be:30:80:c5: 74:ee:d5:f6:61:f0:89:bf:80:b9:e1:a3:68:9f:d2:0c:e4:4b: 24:01:da:04:76:80:dc:07:8e:98:6c:bb:b7:df:3c:9d:4e:cf: 58:75:93:26:8f:a1:9d:3a:64:07:51:8d:7d:d7:93:94:50:e5: 76:cb:73:5a:90:0a:17:8d:ae:c6:c7:e0:a7:77:c7:96:0e:13: 4a:3a:29:16:e2:82:b7:5d:4a:e7:80:19:2c:84:64:e2:c9:c9: 3a:c2:6c:84:e7:cc:bf:61:5c:70:16:a7:a1:dc:e6:22:13:29: 42:2c:77:2d:90:fd:07:c6:f1:d1:d6:e9:95:f2:97:e5:91:9b: 3e:98:4f:c7:95:7e:db:47:6f:79:77:ba:c3:e4:f2:18:84:f1: a7:85:d8:98:d3:31:cf:fa:6f:1e:ce:55:19:10:57:39:48:d0: f4:2d:89:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRi2XlM50n/mQwNzWfDtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjYwMjA5MTIwMDIxWhcNMjYwMjEwMTIwMDIxWjAzMTEwLwYDVQQD EyhlZjJlZDgxNTBhZDk3MDgyYTE1OTk2OGM3ODdjMTVkMGEwYjY0MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkXCis8YoRlf1kBTsMx2QsjE9aM X+M4bmcJVpckj4j7/uZ2lRahsHBRkhb7M8V0BORnbxl3ZiTxLzaPrnxPjUh9D8HP Qed6grWjwxj48HBWOFiP+SfX+eIE581PJWjHWt5UN8PtE1gSsCLXEjDIxo2WOu1d b7bIl98rt8Xxenu2FHRmiXAQLk6d4ONEhQN/mVYeTTL/PvHKDXAX6v7cV72Nh1XH 3tBox33ggfbNMX+2Rcte7D2bdJXUSDMnybzP//5sOpi4KQ66u4A+cwThW6qflPYn W2G2p/eg34OmAjOPT3B7Crw/GcawQD/Tk74v6yhp6sxoj3nSWdzcZDCnLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8u2BUK2XCCoVmWjHh8FdCgtkAkMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVorMTWA2 tLQGExuWKKR23KhBcZcaByktznb1LYPAk6zpA808U8mfFyYc+MjysgFqsT8tvKE2 XKmvGGQKybjTYG7s56vSTjxQU4AMAtzR/D2B2w3NoQm+MIDFdO7V9mHwib+AueGj aJ/SDORLJAHaBHaA3AeOmGy7t988nU7PWHWTJo+hnTpkB1GNfdeTlFDldstzWpAK F42uxsfgp3fHlg4TSjopFuKCt11K54AZLIRk4snJOsJshOfMv2FccBanodzmIhMp Qix3LZD9B8bx0dbplfKX5ZGbPphPx5V+20dveXe6w+TyGITxp4XYmNMxz/pvHs5V GRBXOUjQ9C2J5g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:56 2026 by rpki-client