This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft File: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json) Hash identifier: GNrgjjaa6pyWv0vsHFzKQFI5ZjZmPiQLEVyMsHHTxPE= Subject key identifier: E1:43:5F:6A:FE:D4:CB:82:BD:8C:34:60:06:28:15:F0:BE:83:70:12 Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A Certificate issuer: /CN=5e5214158af310ffa9c315298343f4c3e66aec9a Certificate serial: 019C41A1FB1621133E91A3F437BFE57998D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft Manifest number: 085B Signing time: Mon 09 Feb 2026 09:01:00 +0000 Manifest this update: Mon 09 Feb 2026 09:01:00 +0000 Manifest next update: Tue 10 Feb 2026 09:01:00 +0000 Files and hashes: 1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: KGH79gGW67R3jGIaxyt56051FaZFG8MHugmToVH+JuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:fb:16:21:13:3e:91:a3:f4:37:bf:e5:79:98:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a Validity Not Before: Feb 9 09:01:00 2026 GMT Not After : Feb 10 09:01:00 2026 GMT Subject: CN=e1435f6afed4cb82bd8c3460062815f0be837012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:6c:f8:74:65:1f:63:bd:dd:10:ed:db:68: f6:89:fc:20:de:8a:e1:93:ff:61:bc:0d:d6:c1:cf: 11:08:ba:b1:10:3c:b5:84:58:11:06:83:42:ec:8c: 23:eb:4e:29:51:39:5a:e8:03:2d:e1:44:da:85:46: aa:25:43:07:00:ed:10:7f:a7:eb:36:30:44:0e:1f: c8:f8:04:54:ff:e2:45:2b:95:37:96:ae:6e:be:e7: d1:07:ec:c1:39:34:71:5b:71:7c:88:6b:5f:4c:3e: 91:e3:1d:2c:70:f9:50:7d:1f:32:2f:c9:4f:3b:f5: 1c:c4:9b:54:ee:bb:b8:ae:bb:18:67:b8:fd:86:c1: 63:ea:9e:7f:44:67:30:e7:f3:10:20:83:f8:12:87: 6d:29:97:ce:9a:aa:71:04:26:2c:1c:85:42:31:0b: 03:a8:f2:c4:d3:45:0f:b7:b4:cc:3b:f2:69:0b:45: 00:db:86:90:df:64:de:4b:bc:c1:68:94:a8:14:a7: 67:93:fa:2f:a3:35:73:0f:95:4a:68:fc:f7:f6:57: 75:93:90:ad:bc:22:0a:54:4a:22:c6:fa:26:f7:86: 86:74:c1:ff:af:24:09:1d:be:4f:f6:35:4c:69:ea: a3:b9:f9:02:66:c8:21:8c:2a:39:28:0e:fc:51:a3: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:43:5F:6A:FE:D4:CB:82:BD:8C:34:60:06:28:15:F0:BE:83:70:12 X509v3 Authority Key Identifier: keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4d:28:0b:9d:70:9d:a6:32:8f:46:a8:d4:df:96:4a:83:9c: 2b:27:f5:32:49:76:8f:16:90:e7:2a:a2:60:db:f8:e4:41:f7: 75:63:70:91:39:78:42:45:1c:5d:be:c8:a4:27:f7:53:75:b3: 0b:f4:bc:4c:1a:69:89:b2:04:c4:ac:8a:a4:6e:18:d4:4c:53: 73:f8:0b:8c:f1:70:1f:38:2c:9b:b1:cb:e7:62:53:07:ad:78: 15:fc:20:0f:b7:ad:ef:78:ea:cf:24:e0:c1:3c:11:67:81:4e: 4e:7b:76:57:b9:3d:cd:6a:d2:ec:ba:8a:d5:8a:30:16:5e:a6: cd:c4:5b:4e:ff:51:82:fc:a5:51:e5:39:47:31:3c:f5:fc:68: a2:0a:ef:36:84:82:ef:d5:70:f0:50:c4:bb:23:e5:b3:d3:d9: b9:49:74:af:74:8a:4d:ac:7d:e0:08:5f:fa:f3:9b:11:1c:c7: 7c:c4:93:25:a4:15:f6:54:63:6e:c1:33:51:33:3a:57:90:3a: 38:e9:9a:8e:6f:96:28:75:ed:67:71:48:d0:f3:45:e1:b1:3c: eb:7b:2f:e3:ca:50:e7:92:b7:0a:d9:4e:ba:3c:a0:9f:54:0b: 42:cd:7a:2f:5d:7c:52:b2:e7:b7:20:4d:a4:db:03:cc:ac:e5: 8b:43:a4:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofsWIRM+kaP0N7/leZjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTIxNDE1OGFmMzEwZmZhOWMzMTUyOTgzNDNmNGMzZTY2 YWVjOWEwHhcNMjYwMjA5MDkwMTAwWhcNMjYwMjEwMDkwMTAwWjAzMTEwLwYDVQQD EyhlMTQzNWY2YWZlZDRjYjgyYmQ4YzM0NjAwNjI4MTVmMGJlODM3MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yJs+HRlH2O93RDt22j2ifwg3orh k/9hvA3Wwc8RCLqxEDy1hFgRBoNC7Iwj604pUTla6AMt4UTahUaqJUMHAO0Qf6fr NjBEDh/I+ARU/+JFK5U3lq5uvufRB+zBOTRxW3F8iGtfTD6R4x0scPlQfR8yL8lP O/UcxJtU7ru4rrsYZ7j9hsFj6p5/RGcw5/MQIIP4EodtKZfOmqpxBCYsHIVCMQsD qPLE00UPt7TMO/JpC0UA24aQ32TeS7zBaJSoFKdnk/ovozVzD5VKaPz39ld1k5Ct vCIKVEoixvom94aGdMH/ryQJHb5P9jVMaeqjufkCZsghjCo5KA78UaPjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFDX2r+1MuCvYw0YAYoFfC+g3ASMB8GA1UdIwQY MBaAFF5SFBWK8xD/qcMVKYND9MPmauyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hOTkyZmUtYzFjZi00ZGU4LWJiYjAt Zjk2ZjZmNzY5ODM4LzEvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hOTkyZmUtYzFjZi00ZGU4LWJiYjAtZjk2ZjZmNzY5ODM4 LzEvWGxJVUZZcnpFUC1wd3hVcGcwUDB3LVpxN0pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU0oC51w naYyj0ao1N+WSoOcKyf1Mkl2jxaQ5yqiYNv45EH3dWNwkTl4QkUcXb7IpCf3U3Wz C/S8TBppibIExKyKpG4Y1ExTc/gLjPFwHzgsm7HL52JTB614FfwgD7et73jqzyTg wTwRZ4FOTnt2V7k9zWrS7LqK1YowFl6mzcRbTv9RgvylUeU5RzE89fxoogrvNoSC 79Vw8FDEuyPls9PZuUl0r3SKTax94Ahf+vObERzHfMSTJaQV9lRjbsEzUTM6V5A6 OOmajm+WKHXtZ3FI0PNF4bE863sv48pQ55K3CtlOujygn1QLQs16L118UrLntyBN pNsDzKzli0OkVg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:32 2026 by rpki-client