This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json) Hash identifier: QkvewQ8O+z0lqORa9afKAbfOa2GG0YVxUFlAHIltFx0= Subject key identifier: BF:30:EB:9B:17:E2:F3:3A:EE:59:07:1D:EE:47:6C:A8:11:A0:7B:6A Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Certificate serial: 019C420FD318F00FE219F32105226E36B51E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft Manifest number: 1684 Signing time: Mon 09 Feb 2026 11:00:59 +0000 Manifest this update: Mon 09 Feb 2026 11:00:59 +0000 Manifest next update: Tue 10 Feb 2026 11:00:59 +0000 Files and hashes: 1: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (hash: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM=) 2: MG306zVy_XnsDe9avuTP6OQlaR4.roa (hash: eZ9MpR2ZT4wF57S821zouXormxfdjIGPXoURlUDpr+M=) 3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: OS5dptd/sHICq4dn6WmGeoS4r1X2JvgRDrngpS7RN0k=) 4: yA4t8VFR5w-UawfByzFjfg16sDc.roa (hash: mhRBFfLSkDyDoFbm3ZHCraYe+ogc6AsTxV7YQZpdaT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d3:18:f0:0f:e2:19:f3:21:05:22:6e:36:b5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Validity Not Before: Feb 9 11:00:59 2026 GMT Not After : Feb 10 11:00:59 2026 GMT Subject: CN=bf30eb9b17e2f33aee59071dee476ca811a07b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:db:42:a4:59:8e:1c:81:a9:50:be:01:5d:e6: 7c:39:b5:9a:38:71:3d:d4:5b:30:a7:5e:ea:0d:20: 1e:5e:c6:f7:34:67:b5:e5:05:cb:76:27:6d:ad:09: eb:f0:7e:2d:5b:f5:a7:38:a7:96:24:2a:d0:1f:92: 2f:60:21:e2:5f:83:d4:31:23:60:ca:1e:c0:85:60: 65:08:44:20:28:79:ad:0d:ba:62:e9:3b:a2:7e:b5: aa:ad:5e:30:69:50:31:b9:54:0d:00:89:e8:2b:8e: 33:38:14:1f:58:4f:3e:4f:0a:e4:87:25:9f:44:31: 5c:2d:42:c0:e9:00:84:83:35:07:1b:48:c3:77:e4: 29:b0:ee:9b:a7:89:69:8e:b4:2a:89:79:8b:52:64: a0:5d:e1:68:5c:ee:8c:ce:15:b0:da:ad:fe:2e:f7: 62:6a:76:f2:89:46:6d:2d:50:e7:11:a0:fc:ca:e1: 81:67:52:9e:0d:78:fa:56:1b:e2:2f:5d:16:bb:f4: a2:c8:5f:ba:5b:fc:d6:29:4b:f3:ee:a2:16:52:f4: 14:30:da:b5:a8:4f:fd:51:d2:64:c1:5d:6a:5b:bc: 63:e6:7f:92:6b:91:94:11:0b:b3:54:1e:31:85:d9: 55:22:04:21:a0:8b:3d:60:8c:56:a7:8c:d4:f8:a3: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:30:EB:9B:17:E2:F3:3A:EE:59:07:1D:EE:47:6C:A8:11:A0:7B:6A X509v3 Authority Key Identifier: keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:44:36:bd:3a:6a:ea:b1:71:b1:52:4c:e0:19:94:1c:d4:ec: fa:36:a1:b7:1f:cf:64:7a:a3:81:e5:c9:82:22:bc:fd:60:c7: 73:b9:cc:11:ec:35:ec:24:50:5d:8f:48:65:2e:fb:51:8b:12: bf:88:16:a6:2f:8f:9e:4b:42:e0:c6:27:2d:ae:9e:fa:64:75: c4:4d:47:86:da:76:73:cc:94:4d:bc:34:e9:a3:80:3a:20:d2: d3:9a:ad:5b:91:bb:db:59:45:ca:1e:b3:9f:13:af:46:f7:e2: a5:91:94:a5:d5:14:7e:75:7a:45:9d:27:61:e4:e5:dc:b7:e7: d6:e8:4f:13:88:12:e7:46:e4:49:74:a0:2d:f0:91:3d:1c:23: f7:50:90:cf:7f:97:61:b8:ad:8b:7c:47:12:5f:5b:a8:85:cc: 8c:4b:3c:ff:24:4b:f8:bb:a4:e7:a4:63:cc:89:f7:67:51:67: 86:f3:7c:c9:e1:e6:4b:f6:9f:39:f9:ef:95:4a:6a:f7:1b:0f: 3b:81:ce:c0:ba:61:58:25:b8:29:cb:3a:c9:bc:f0:f7:c4:30: d6:d8:a6:89:5c:3b:73:af:ce:f3:1b:6a:e5:87:03:69:b7:12: 27:7d:c6:0c:6f:f4:96:98:85:0d:e3:21:ae:fb:85:87:e6:d0: 0c:10:c0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9MY8A/iGfMhBSJuNrUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj ZjUwYTEwHhcNMjYwMjA5MTEwMDU5WhcNMjYwMjEwMTEwMDU5WjAzMTEwLwYDVQQD EyhiZjMwZWI5YjE3ZTJmMzNhZWU1OTA3MWRlZTQ3NmNhODExYTA3YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dtCpFmOHIGpUL4BXeZ8ObWaOHE9 1Fswp17qDSAeXsb3NGe15QXLdidtrQnr8H4tW/WnOKeWJCrQH5IvYCHiX4PUMSNg yh7AhWBlCEQgKHmtDbpi6TuifrWqrV4waVAxuVQNAInoK44zOBQfWE8+TwrkhyWf RDFcLULA6QCEgzUHG0jDd+QpsO6bp4lpjrQqiXmLUmSgXeFoXO6MzhWw2q3+Lvdi anbyiUZtLVDnEaD8yuGBZ1KeDXj6VhviL10Wu/SiyF+6W/zWKUvz7qIWUvQUMNq1 qE/9UdJkwV1qW7xj5n+Sa5GUEQuzVB4xhdlVIgQhoIs9YIxWp4zU+KPkewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8w65sX4vM67lkHHe5HbKgRoHtqMB8GA1UdIwQY MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt Y2Y2YTYzZTRlZmI2LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2 LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkQ2vTpq 6rFxsVJM4BmUHNTs+jahtx/PZHqjgeXJgiK8/WDHc7nMEew17CRQXY9IZS77UYsS v4gWpi+PnktC4MYnLa6e+mR1xE1Hhtp2c8yUTbw06aOAOiDS05qtW5G721lFyh6z nxOvRvfipZGUpdUUfnV6RZ0nYeTl3Lfn1uhPE4gS50bkSXSgLfCRPRwj91CQz3+X Ybiti3xHEl9bqIXMjEs8/yRL+Luk56RjzIn3Z1FnhvN8yeHmS/afOfnvlUpq9xsP O4HOwLphWCW4Kcs6ybzw98Qw1timiVw7c6/O8xtq5YcDabcSJ33GDG/0lpiFDeMh rvuFh+bQDBDATw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:44 2026 by rpki-client