This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json) Hash identifier: igKHv8mqyVEwtutrbjo+6uSWlkQGQ48KmY5/aGSHgBI= Subject key identifier: 27:DA:5C:02:DA:17:42:BB:71:EF:7B:A8:82:16:A4:27:D6:EA:A4:24 Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Certificate serial: 019C4246313F670642F2742DA736903835C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:22 +0000 Manifest this update: Mon 09 Feb 2026 12:00:22 +0000 Manifest next update: Tue 10 Feb 2026 12:00:22 +0000 Files and hashes: 1: biJ04bmigw6iVpUiIdYRLfiKayE.roa (hash: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo=) 2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: u2f5AfH7n8kHeNfeyLv+SHe+Z/+ETRGKXaOsT5bLGEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:31:3f:67:06:42:f2:74:2d:a7:36:90:38:35:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Validity Not Before: Feb 9 12:00:22 2026 GMT Not After : Feb 10 12:00:22 2026 GMT Subject: CN=27da5c02da1742bb71ef7ba88216a427d6eaa424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:ef:3e:4b:59:d0:07:86:44:9b:1b:9f:5a: 09:0f:4d:55:30:52:08:bc:77:62:86:18:6b:d2:9f: 7b:26:7b:86:16:b2:2e:5f:ee:a9:62:fb:88:c4:fc: db:7f:96:7c:4e:9d:c1:7f:6e:33:69:77:ca:5b:b6: ff:96:e5:60:d0:6f:1f:f2:aa:f8:74:0f:d3:87:8b: fd:d6:ec:c4:b1:5c:58:a5:03:65:29:45:e2:c6:b5: 1d:99:14:b5:cd:6f:ad:81:65:c9:7f:38:59:6a:62: 22:42:14:38:fd:79:7a:d4:1e:23:8e:20:2e:af:8e: b1:79:af:da:74:44:7b:de:a5:9b:8c:a9:3f:1b:f0: cc:86:77:00:d1:fa:03:62:e0:a4:c3:70:83:c2:25: 95:17:43:b3:02:f9:e7:d6:14:f8:bb:7b:aa:9f:1b: 1a:4d:ca:6f:df:ad:4f:18:c5:4f:3e:56:30:6b:2b: 02:4b:32:94:45:79:3c:6a:01:0a:d6:d0:91:d9:45: 20:8b:f5:b9:89:0a:9e:85:f8:13:e1:d2:eb:0c:23: 7b:77:73:2e:44:0d:d4:eb:f8:0d:f0:82:f6:7e:e7: 2a:92:6f:6d:23:76:f1:ef:4c:6c:39:8d:be:e4:f3: d6:55:ef:e0:e3:2a:79:0a:61:90:3e:20:06:98:ac: aa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:5C:02:DA:17:42:BB:71:EF:7B:A8:82:16:A4:27:D6:EA:A4:24 X509v3 Authority Key Identifier: keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1b:29:60:0b:e7:d7:54:c1:c3:04:2f:a3:9c:dc:68:33:6b: 3f:74:b7:5c:a4:76:64:ba:2b:45:1b:0f:57:e6:77:ce:5c:ca: f2:27:58:75:b0:bb:63:b0:4c:15:41:47:ba:eb:55:2a:ff:5c: eb:ff:1b:d5:08:48:47:42:3b:9b:c4:7e:cc:67:74:11:98:e4: 7c:7f:4e:92:ba:a8:ad:df:1c:f7:fd:5b:14:b5:50:f8:ce:a7: fc:ab:2a:cd:fe:29:aa:c8:c4:c6:e3:03:e9:fe:2b:f7:62:a7: ca:4f:da:77:00:0e:03:f3:c1:e0:24:3a:23:8a:91:40:e1:af: e6:9d:08:e0:db:16:b7:e1:49:ec:ec:6e:05:d5:79:4f:28:0d: 77:5a:57:59:7f:a9:1f:90:67:bb:38:98:0e:15:26:1f:2d:48: 57:7e:3a:0c:2e:3d:7a:9b:8a:1e:4e:b1:b7:c7:fa:4f:a5:e8: 94:f5:e2:a0:e7:ca:23:5b:90:aa:b1:df:79:97:1a:a2:5c:31: 2a:ff:3a:af:4a:0d:e7:7b:78:8b:dd:16:34:0f:f9:e7:ea:db: d2:28:c9:1d:0b:cb:d6:cc:af:3c:3c:6c:09:eb:61:af:61:b4: 2f:fb:64:3c:10:dd:90:7c:35:86:3a:d6:a0:3b:1b:8d:28:63: 86:89:f5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjE/ZwZC8nQtpzaQODXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTQ1NDY1ZjA2OTZhNzBkNWYwM2VlMWQ1ZGVjYWZkNDFk YzYzODUwHhcNMjYwMjA5MTIwMDIyWhcNMjYwMjEwMTIwMDIyWjAzMTEwLwYDVQQD EygyN2RhNWMwMmRhMTc0MmJiNzFlZjdiYTg4MjE2YTQyN2Q2ZWFhNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy63vPktZ0AeGRJsbn1oJD01VMFII vHdihhhr0p97JnuGFrIuX+6pYvuIxPzbf5Z8Tp3Bf24zaXfKW7b/luVg0G8f8qr4 dA/Th4v91uzEsVxYpQNlKUXixrUdmRS1zW+tgWXJfzhZamIiQhQ4/Xl61B4jjiAu r46xea/adER73qWbjKk/G/DMhncA0foDYuCkw3CDwiWVF0OzAvnn1hT4u3uqnxsa Tcpv361PGMVPPlYwaysCSzKURXk8agEK1tCR2UUgi/W5iQqehfgT4dLrDCN7d3Mu RA3U6/gN8IL2fucqkm9tI3bx70xsOY2+5PPWVe/g4yp5CmGQPiAGmKyq0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfaXALaF0K7ce97qIIWpCfW6qQkMB8GA1UdIwQY MBaAFMQUVGXwaWpw1fA+4dXeyv1B3GOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQt NjVlOTk2MzEyY2JlLzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQtNjVlOTk2MzEyY2Jl LzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRspYAvn 11TBwwQvo5zcaDNrP3S3XKR2ZLorRRsPV+Z3zlzK8idYdbC7Y7BMFUFHuutVKv9c 6/8b1QhIR0I7m8R+zGd0EZjkfH9Okrqord8c9/1bFLVQ+M6n/Ksqzf4pqsjExuMD 6f4r92Knyk/adwAOA/PB4CQ6I4qRQOGv5p0I4NsWt+FJ7OxuBdV5TygNd1pXWX+p H5BnuziYDhUmHy1IV346DC49epuKHk6xt8f6T6XolPXioOfKI1uQqrHfeZcaolwx Kv86r0oN53t4i90WNA/55+rb0ijJHQvL1syvPDxsCethr2G0L/tkPBDdkHw1hjrW oDsbjShjhon12Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:18 2026 by rpki-client