This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json) Hash identifier: MVIRALbFh+KlepyRhGbeOhPkjTAdmCsngk9ZqCQNL4c= Subject key identifier: 7E:AB:B3:E7:27:9A:38:E5:8B:01:D5:CD:F1:D2:DE:45:2B:D7:66:42 Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc Certificate serial: 019C43FE6022F29B6F2F67DBB389DD52DEB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:01:10 +0000 Manifest this update: Mon 09 Feb 2026 20:01:10 +0000 Manifest next update: Tue 10 Feb 2026 20:01:10 +0000 Files and hashes: 1: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: F9DAd+tYbRsOY3Y8RWDdB8RSLs8Fg9NRHZy9rrmdG/4=) 2: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (hash: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:60:22:f2:9b:6f:2f:67:db:b3:89:dd:52:de:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc Validity Not Before: Feb 9 20:01:10 2026 GMT Not After : Feb 10 20:01:10 2026 GMT Subject: CN=7eabb3e7279a38e58b01d5cdf1d2de452bd76642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:04:b1:2b:d0:b8:54:f5:39:b7:e2:7b:30: 98:c8:15:c7:e6:b4:04:70:aa:f5:ed:b1:79:35:53: 01:eb:24:e0:96:38:55:b1:f6:f3:a4:c8:10:e2:56: 2b:15:db:55:e9:aa:62:3c:e9:f8:ef:0f:25:2c:ea: fd:24:a1:f9:86:ed:1c:0a:95:99:0a:d9:40:b1:75: e4:58:ef:d5:b5:a9:80:b7:e8:cf:b6:85:e6:bb:ba: a8:39:41:e5:70:ad:2f:50:90:3c:1b:0a:92:24:b8: 83:26:a1:2b:79:3f:d4:da:09:4a:7b:4a:c7:a9:92: 49:80:bb:a4:17:6d:3b:97:cd:75:cd:c3:92:5b:60: 64:3c:61:38:94:47:3d:bf:36:2c:8a:43:6a:54:df: 93:bd:46:1a:3f:84:cd:59:c4:3b:ad:51:89:fe:fc: d0:b1:4a:1a:94:fa:8d:69:28:5b:30:7f:b5:67:d8: dc:f3:ff:a0:4f:ae:73:75:93:b8:97:01:f7:eb:42: 26:15:43:f9:dc:32:05:b0:87:af:3b:13:e2:09:b1: 97:b8:e6:07:98:62:5e:54:3e:af:e4:18:fb:84:5c: 0f:a7:e7:6d:18:fa:d8:d3:72:9f:58:68:c2:27:eb: e2:41:86:03:22:01:2a:67:75:e3:e0:a6:48:04:da: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AB:B3:E7:27:9A:38:E5:8B:01:D5:CD:F1:D2:DE:45:2B:D7:66:42 X509v3 Authority Key Identifier: keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:c9:a5:a0:7d:79:bc:5c:3f:59:ee:a8:fd:c4:1f:fd:fc: 56:26:89:00:da:a1:f3:f0:67:fc:59:35:27:8b:4c:bc:a5:af: 63:25:a8:69:c3:99:65:d2:ba:15:11:74:86:07:b5:9a:43:ed: e0:61:4e:39:7f:54:5f:b3:da:78:51:d5:ab:92:63:8b:11:bf: 6a:d5:ea:09:18:28:6d:52:60:01:22:39:b2:db:77:30:fc:05: 1f:aa:0a:e7:22:f7:30:2d:11:ed:df:86:e9:b1:14:16:51:b0: d2:20:d0:42:55:f4:e0:55:be:14:ed:45:a9:c4:b7:04:dd:ba: c0:33:07:6a:b9:4d:e8:8d:53:a0:c4:78:13:fb:cd:b5:10:b1: 32:f3:01:e5:29:6b:91:d9:5f:0e:13:68:33:f5:ec:35:dd:5c: d2:b2:f8:86:d8:90:0e:fa:01:90:e0:ac:b8:0f:25:44:87:76: 27:47:42:bc:7e:39:24:b0:54:3a:8c:1e:72:46:7f:64:32:05: ee:58:bd:dc:c2:28:f0:02:f4:bc:c9:f1:f0:c4:ae:84:bb:8e: d1:4e:de:c8:a1:2f:5c:d6:2c:1f:23:35:58:be:57:15:8d:86: c7:ff:a6:3d:eb:fc:8b:16:1b:a7:77:2e:5e:a7:40:ab:5c:ea: 14:92:f4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mAi8ptvL2fbs4ndUt6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2 MjMxZmMwHhcNMjYwMjA5MjAwMTEwWhcNMjYwMjEwMjAwMTEwWjAzMTEwLwYDVQQD Eyg3ZWFiYjNlNzI3OWEzOGU1OGIwMWQ1Y2RmMWQyZGU0NTJiZDc2NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT4EsSvQuFT1ObfiezCYyBXH5rQE cKr17bF5NVMB6yTgljhVsfbzpMgQ4lYrFdtV6apiPOn47w8lLOr9JKH5hu0cCpWZ CtlAsXXkWO/VtamAt+jPtoXmu7qoOUHlcK0vUJA8GwqSJLiDJqEreT/U2glKe0rH qZJJgLukF207l811zcOSW2BkPGE4lEc9vzYsikNqVN+TvUYaP4TNWcQ7rVGJ/vzQ sUoalPqNaShbMH+1Z9jc8/+gT65zdZO4lwH360ImFUP53DIFsIevOxPiCbGXuOYH mGJeVD6v5Bj7hFwPp+dtGPrY03KfWGjCJ+viQYYDIgEqZ3Xj4KZIBNqvbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6rs+cnmjjliwHVzfHS3kUr12ZCMB8GA1UdIwQY MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt ZDFkOGRiMTQ4ZWMyLzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYbJpaB9 ebxcP1nuqP3EH/38ViaJANqh8/Bn/Fk1J4tMvKWvYyWoacOZZdK6FRF0hge1mkPt 4GFOOX9UX7PaeFHVq5JjixG/atXqCRgobVJgASI5stt3MPwFH6oK5yL3MC0R7d+G 6bEUFlGw0iDQQlX04FW+FO1FqcS3BN26wDMHarlN6I1ToMR4E/vNtRCxMvMB5Slr kdlfDhNoM/XsNd1c0rL4htiQDvoBkOCsuA8lRId2J0dCvH45JLBUOoweckZ/ZDIF 7li93MIo8AL0vMnx8MSuhLuO0U7eyKEvXNYsHyM1WL5XFY2Gx/+mPev8ixYbp3cu XqdAq1zqFJL04A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:28 2026 by rpki-client