This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json) Hash identifier: xwt7whluxIKeJ/L3mW/obZ6bteAmM3r2fmvwZmxfydM= Subject key identifier: 11:6C:8C:96:1E:6F:87:85:E9:07:C6:BC:B0:57:AD:9A:0D:E1:E6:6C Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Certificate serial: 019C42B43FB613E9E17CB7AE6E37BB777131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft Manifest number: 173B Signing time: Mon 09 Feb 2026 14:00:34 +0000 Manifest this update: Mon 09 Feb 2026 14:00:34 +0000 Manifest next update: Tue 10 Feb 2026 14:00:34 +0000 Files and hashes: 1: 4DzAOv88kFIOqHCs_9bsjlv3GTE.roa (hash: caV7/tYU8DPcz0xZ4ImkoJhJu5r2VSnvWFC2mJf3l9g=) 2: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: cwk/XqQnUJt4is6rIlBgFKfxvQ0IKpKk50qxeQkagKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3f:b6:13:e9:e1:7c:b7:ae:6e:37:bb:77:71:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Validity Not Before: Feb 9 14:00:34 2026 GMT Not After : Feb 10 14:00:34 2026 GMT Subject: CN=116c8c961e6f8785e907c6bcb057ad9a0de1e66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:a5:ce:79:5a:3e:29:58:82:94:34:0b:a8: ec:f8:bc:fa:59:e3:57:eb:e2:2e:9e:20:44:91:06: dc:af:21:a0:aa:23:0f:9b:a8:81:22:ee:ae:5d:55: 6f:26:16:82:19:32:df:87:47:64:b8:29:51:40:9d: 0f:46:88:95:6c:4e:aa:d8:b5:d9:f6:79:e2:0f:ab: 08:0f:3a:73:2c:6c:f1:f3:9c:5c:b0:71:c9:45:89: d0:64:e3:5d:b9:e6:22:e7:e1:a0:7b:dd:ec:c2:3e: cc:50:23:6b:0b:2f:80:0c:57:86:37:1e:35:8f:68: e9:eb:e1:54:b9:79:87:bd:18:95:94:17:c6:b8:28: c3:34:4d:42:c4:5e:4e:8e:8e:1e:d7:39:3f:ee:e5: 7e:6e:37:4d:03:a2:86:c0:5b:40:72:52:e3:d9:b4: 25:76:1e:19:bb:ea:30:5d:06:9c:f8:e6:3d:90:a7: 79:71:c6:9f:db:c5:61:e7:2c:c8:b8:93:04:80:70: b6:6c:29:08:4f:d4:b4:53:40:6b:0d:0b:0c:fa:19: 7c:78:71:1f:94:48:c9:ee:90:96:4d:13:e6:db:30: 45:f9:42:1a:00:84:ca:64:af:09:ae:a0:e7:1f:ab: 05:6d:22:90:10:8b:61:bd:a0:f7:70:d1:96:3b:5a: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6C:8C:96:1E:6F:87:85:E9:07:C6:BC:B0:57:AD:9A:0D:E1:E6:6C X509v3 Authority Key Identifier: keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2a:1d:50:e0:61:5b:5e:49:f3:68:cb:96:f6:03:6c:93:e5: 57:eb:e9:98:3d:ab:fb:5d:fa:d9:02:0c:4a:69:91:31:8e:00: e6:b5:87:f4:64:17:2c:9a:78:bb:ec:78:b5:cb:97:75:dd:8f: 72:1a:85:5f:c4:5f:0a:f0:fc:8a:c6:89:2b:72:f4:49:a5:8d: 44:b2:eb:58:80:c2:e9:f4:9f:8d:53:e0:51:fe:3b:3e:ff:64: 65:ba:13:57:57:03:38:11:1e:0e:79:de:23:b0:4f:0b:d7:dc: 84:2a:bd:b2:29:f4:78:7a:af:b9:97:20:39:ff:15:8f:4d:2c: bc:2d:44:b8:a9:ea:da:14:a5:91:ad:1d:79:6e:25:aa:65:a7: a1:2c:0c:c5:de:f7:90:8a:44:70:d0:e8:53:19:d3:14:81:f5: 48:58:89:2b:dd:5f:1e:39:2d:95:0f:ec:66:27:d8:20:33:65: 79:f9:b8:34:0a:35:4c:f4:34:28:bf:28:ce:4c:64:98:9c:86: d4:7d:0d:56:d3:6b:cb:b2:fa:f0:45:05:a3:c6:47:3f:79:81: 58:16:69:1e:d4:64:06:9c:c5:cd:ab:6b:d9:b6:5e:42:c5:a4: dc:df:3c:60:e1:1f:a2:75:ea:14:f8:10:84:ba:eb:e4:ee:b6: cf:69:82:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtD+2E+nhfLeubje7d3ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy YmQ4NmEwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD EygxMTZjOGM5NjFlNmY4Nzg1ZTkwN2M2YmNiMDU3YWQ5YTBkZTFlNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+SlznlaPilYgpQ0C6js+Lz6WeNX 6+IuniBEkQbcryGgqiMPm6iBIu6uXVVvJhaCGTLfh0dkuClRQJ0PRoiVbE6q2LXZ 9nniD6sIDzpzLGzx85xcsHHJRYnQZONdueYi5+Gge93swj7MUCNrCy+ADFeGNx41 j2jp6+FUuXmHvRiVlBfGuCjDNE1CxF5Ojo4e1zk/7uV+bjdNA6KGwFtAclLj2bQl dh4Zu+owXQac+OY9kKd5ccaf28Vh5yzIuJMEgHC2bCkIT9S0U0BrDQsM+hl8eHEf lEjJ7pCWTRPm2zBF+UIaAITKZK8JrqDnH6sFbSKQEIthvaD3cNGWO1pVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFsjJYeb4eF6QfGvLBXrZoN4eZsMB8GA1UdIwQY MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCodUOBh W15J82jLlvYDbJPlV+vpmD2r+1362QIMSmmRMY4A5rWH9GQXLJp4u+x4tcuXdd2P chqFX8RfCvD8isaJK3L0SaWNRLLrWIDC6fSfjVPgUf47Pv9kZboTV1cDOBEeDnne I7BPC9fchCq9sin0eHqvuZcgOf8Vj00svC1EuKnq2hSlka0deW4lqmWnoSwMxd73 kIpEcNDoUxnTFIH1SFiJK91fHjktlQ/sZifYIDNlefm4NAo1TPQ0KL8ozkxkmJyG 1H0NVtNry7L68EUFo8ZHP3mBWBZpHtRkBpzFzatr2bZeQsWk3N88YOEfonXqFPgQ hLrr5O62z2mCFg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:26 2026 by rpki-client