This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft File: XM814TYW15djDR4lQAwTxiEfUAw.mft (raw, json) Hash identifier: kpfpiUIAG80JoW0uRKxm/iynJunAOpr2dib0vZW+QyM= Subject key identifier: BD:95:DB:99:6F:0B:58:A3:41:0C:06:02:74:35:2C:6F:E5:2B:E2:C2 Authority key identifier: 5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C Certificate issuer: /CN=5ccf35e13616d797630d1e25400c13c6211f500c Certificate serial: 019C4358CE630CDC12B11A84831F344389EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft Manifest number: 01CB Signing time: Mon 09 Feb 2026 17:00:19 +0000 Manifest this update: Mon 09 Feb 2026 17:00:19 +0000 Manifest next update: Tue 10 Feb 2026 17:00:19 +0000 Files and hashes: 1: D30kUtfoFIu60sm6RYYK6TaB79k.roa (hash: pH+2Tpg4nCk6cSuxhVv6OIDISdwdQhjgBdPN7UeRmd8=) 2: XM814TYW15djDR4lQAwTxiEfUAw.crl (hash: RWH9wxc4acvV/MFIPssKXa9kvC14yUw50qYEhK74M0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:ce:63:0c:dc:12:b1:1a:84:83:1f:34:43:89:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccf35e13616d797630d1e25400c13c6211f500c Validity Not Before: Feb 9 17:00:19 2026 GMT Not After : Feb 10 17:00:19 2026 GMT Subject: CN=bd95db996f0b58a3410c060274352c6fe52be2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:d2:11:b1:19:45:a9:19:9f:3d:6b:61:3c: 9b:5e:47:25:9c:d4:d3:a6:b5:11:10:01:ce:9e:78: dc:37:ab:73:62:26:be:bc:68:7c:b5:07:17:ed:fe: 79:e7:f0:8b:78:12:7e:9e:6c:f7:01:52:70:76:60: a3:c2:d5:5f:cb:70:8a:d5:11:c1:6e:74:cc:3c:5c: f6:59:f6:7c:ee:98:43:e9:c5:c3:be:9a:1f:31:b3: 31:28:71:3f:5c:b8:de:3d:c5:97:90:0b:10:dc:e4: 6d:15:e6:dc:c7:e7:d0:3c:d1:01:b8:2a:7d:09:39: c8:85:e6:77:80:27:3e:d9:2e:93:ce:4c:ee:1d:04: d3:c9:fd:ce:cf:73:1f:7d:cd:d7:70:b8:30:27:fc: 4d:7c:8b:6a:1d:f5:08:14:0a:e4:e8:45:7b:9f:7a: fb:85:cb:74:c0:c9:d1:07:67:35:52:45:e3:fe:2c: 3a:94:66:78:b9:87:f7:27:8b:e7:35:5c:09:df:27: 7d:94:64:3c:b2:b0:04:b2:9c:71:f0:c6:8f:8d:c1: 43:27:9d:0f:d4:be:eb:54:f6:85:a9:53:bc:32:ba: 70:33:12:5b:03:76:fd:db:cd:7d:aa:a2:50:94:63: fc:e5:93:03:24:4a:44:35:6a:ef:d7:cc:26:4c:a5: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:DB:99:6F:0B:58:A3:41:0C:06:02:74:35:2C:6F:E5:2B:E2:C2 X509v3 Authority Key Identifier: keyid:5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6b:61:47:b0:8b:cd:a2:9a:e0:6e:bd:a1:ba:e6:ae:d8:c7: ee:8a:eb:35:b9:2f:9d:5f:8b:27:07:89:ae:ee:68:68:ce:72: 74:f0:25:70:32:11:6d:8f:bb:a9:2e:1e:8a:0c:be:35:b5:86: 77:a0:c3:99:7a:ab:aa:f3:ab:28:f6:bd:49:7c:04:c5:e2:29: 31:64:62:04:cf:6e:15:39:22:0d:31:41:e8:dd:79:d0:d5:a0: 10:16:e2:30:92:1e:0a:c2:38:2b:81:70:1c:f2:0e:ed:63:5e: 34:5b:88:95:5c:7b:66:34:f7:8e:36:91:8c:4e:73:85:ef:ba: 6b:c1:32:bd:08:3d:be:3f:4f:1a:f5:7c:f8:a9:da:b5:c5:32: 7f:7e:c4:46:72:c1:e6:06:d8:f1:9a:5b:db:af:52:48:cf:dd: db:5c:4d:c9:82:e0:62:1c:01:53:ab:1b:4f:bf:a2:28:c1:7a: 62:38:c1:c9:23:90:e3:9c:b3:9f:99:1d:43:3a:d4:76:44:b4: e8:ef:f5:b9:aa:dc:63:ac:0c:c9:a2:04:9e:33:5d:a7:eb:a2: 49:b2:43:df:9d:b1:dd:46:a2:27:85:f7:f4:ad:a8:f3:61:77: ab:26:28:22:ce:a9:11:23:d4:27:6a:32:d4:41:cc:cb:62:1a: 7f:54:72:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWM5jDNwSsRqEgx80Q4nvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2YzNWUxMzYxNmQ3OTc2MzBkMWUyNTQwMGMxM2M2MjEx ZjUwMGMwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD EyhiZDk1ZGI5OTZmMGI1OGEzNDEwYzA2MDI3NDM1MmM2ZmU1MmJlMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpbSEbEZRakZnz1rYTybXkclnNTT prUREAHOnnjcN6tzYia+vGh8tQcX7f555/CLeBJ+nmz3AVJwdmCjwtVfy3CK1RHB bnTMPFz2WfZ87phD6cXDvpofMbMxKHE/XLjePcWXkAsQ3ORtFebcx+fQPNEBuCp9 CTnIheZ3gCc+2S6TzkzuHQTTyf3Oz3Mffc3XcLgwJ/xNfItqHfUIFArk6EV7n3r7 hct0wMnRB2c1UkXj/iw6lGZ4uYf3J4vnNVwJ3yd9lGQ8srAEspxx8MaPjcFDJ50P 1L7rVPaFqVO8MrpwMxJbA3b92819qqJQlGP85ZMDJEpENWrv18wmTKW1cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2V25lvC1ijQQwGAnQ1LG/lK+LCMB8GA1UdIwQY MBaAFFzPNeE2FteXYw0eJUAME8YhH1AMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE04MTRUWVcxNWRqRFI0bFFBd1R4aUVmVUF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjZiZjUtM2FjNS00MTNkLWI4OTgt NGZlZjE1ZTdkZWFkLzEvWE04MTRUWVcxNWRqRFI0bFFBd1R4aUVmVUF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjZiZjUtM2FjNS00MTNkLWI4OTgtNGZlZjE1ZTdkZWFk LzEvWE04MTRUWVcxNWRqRFI0bFFBd1R4aUVmVUF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGthR7CL zaKa4G69obrmrtjH7orrNbkvnV+LJweJru5oaM5ydPAlcDIRbY+7qS4eigy+NbWG d6DDmXqrqvOrKPa9SXwExeIpMWRiBM9uFTkiDTFB6N150NWgEBbiMJIeCsI4K4Fw HPIO7WNeNFuIlVx7ZjT3jjaRjE5zhe+6a8EyvQg9vj9PGvV8+KnatcUyf37ERnLB 5gbY8Zpb269SSM/d21xNyYLgYhwBU6sbT7+iKMF6YjjBySOQ45yzn5kdQzrUdkS0 6O/1uarcY6wMyaIEnjNdp+uiSbJD352x3UaiJ4X39K2o82F3qyYoIs6pESPUJ2oy 1EHMy2Iaf1Rycg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:37 2026 by rpki-client