This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json) Hash identifier: zdfxTR3GDZsm8xzm/J2qpwjepWLSHwsrI6WLcj9T1Kw= Subject key identifier: 4F:F3:BA:EC:31:E2:02:41:6C:1D:44:84:82:DE:6D:1E:17:87:97:0D Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Certificate serial: 019C438FC8E69E2A1F3A0C73AC5B2EB5B743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft Manifest number: 177D Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: FcIDtTD5sEYJdx2NOf8UU/rfcYuKVTJEc6Xcw4LkeLU=) 2: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (hash: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c8:e6:9e:2a:1f:3a:0c:73:ac:5b:2e:b5:b7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=4ff3baec31e202416c1d448482de6d1e1787970d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:d6:8e:32:13:5c:91:9d:6f:8f:5f:75:f7: 38:b8:af:65:a3:1a:5f:89:1a:4b:78:10:0f:42:08: b6:70:f9:94:b5:90:b2:ef:18:d9:c5:d1:87:98:eb: c4:5f:c1:83:2e:35:a8:a2:7c:f3:da:6e:8f:ed:e3: 19:07:54:c3:a1:7d:e3:a9:ae:a6:ee:f2:99:2c:ba: c3:14:5f:a0:1f:e7:01:0b:ad:8f:44:40:71:24:53: 09:48:0a:95:ed:5b:61:a6:93:1d:92:46:f6:41:6b: 2f:e4:49:35:4f:ad:29:7e:7e:6b:31:5d:98:4b:fc: e6:ef:28:6d:9f:43:3a:a5:35:c1:de:53:4b:5a:89: 7a:f1:f8:1a:02:70:35:c2:f2:7a:2e:80:94:9a:94: 4e:4f:ab:7a:12:99:ae:47:15:ef:93:12:7c:b6:40: ea:f5:21:54:f7:7d:e3:70:c6:1c:d8:5a:b0:27:14: f3:17:80:df:fd:29:33:94:06:4c:52:e8:95:50:b1: f0:ba:4a:be:fb:55:d2:36:33:c6:60:50:51:cd:ce: 3b:85:32:45:83:e2:9d:8b:f4:42:09:31:a0:22:b3: 72:79:06:c1:9b:84:52:26:ad:1a:44:ee:68:7b:b4: 7f:69:82:fc:83:b7:f2:b3:0a:4b:21:54:d8:15:1f: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:BA:EC:31:E2:02:41:6C:1D:44:84:82:DE:6D:1E:17:87:97:0D X509v3 Authority Key Identifier: keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:f5:81:56:08:46:ad:47:ac:3e:71:5a:bc:54:41:31:a2: ef:c1:e9:ab:92:12:3f:1d:bd:2d:c8:d1:6a:ed:c2:f4:46:41: 07:2b:c6:99:46:a2:54:c2:c5:ea:52:85:32:87:7f:e6:8c:e2: 17:50:da:3f:52:79:21:24:8d:c7:24:46:e3:14:e4:9a:23:8b: 0e:05:16:ad:21:a9:b7:ee:0c:c7:ee:0d:c7:2f:60:56:c4:a7: eb:50:72:b1:a7:91:82:71:d0:76:a3:a4:24:77:b8:63:c0:bc: 87:71:08:0a:fd:4f:66:9d:0e:29:4c:86:30:86:d3:f4:91:fe: 7e:4f:6e:27:34:31:2e:ec:fa:ed:45:46:a3:9f:1d:44:91:d0: 3d:ac:0e:3c:8d:e6:71:1e:90:a2:60:df:11:a7:3f:f4:e7:a2: 44:1e:55:0e:cf:cf:a8:2b:9e:49:34:53:16:96:4b:f5:43:36: f8:6c:d2:4b:35:c9:b9:da:86:e3:62:17:ab:7d:41:72:85:3a: 66:db:54:17:c8:9e:0c:33:e8:0a:ec:c8:de:ac:0f:e8:3f:16: 15:01:c6:42:d1:42:e3:95:00:07:aa:33:e3:77:fc:f9:02:41: c7:7d:21:f1:04:4b:c1:1c:cb:e0:56:66:1a:ed:36:af:2c:ca: 62:7b:4b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8jmniofOgxzrFsutbdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy ODdjOWQwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD Eyg0ZmYzYmFlYzMxZTIwMjQxNmMxZDQ0ODQ4MmRlNmQxZTE3ODc5NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTWjjITXJGdb49fdfc4uK9loxpf iRpLeBAPQgi2cPmUtZCy7xjZxdGHmOvEX8GDLjWoonzz2m6P7eMZB1TDoX3jqa6m 7vKZLLrDFF+gH+cBC62PREBxJFMJSAqV7VthppMdkkb2QWsv5Ek1T60pfn5rMV2Y S/zm7yhtn0M6pTXB3lNLWol68fgaAnA1wvJ6LoCUmpROT6t6EpmuRxXvkxJ8tkDq 9SFU933jcMYc2FqwJxTzF4Df/SkzlAZMUuiVULHwukq++1XSNjPGYFBRzc47hTJF g+Kdi/RCCTGgIrNyeQbBm4RSJq0aRO5oe7R/aYL8g7fyswpLIVTYFR9ZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/zuuwx4gJBbB1EhILebR4Xh5cNMB8GA1UdIwQY MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG/1gVYI Rq1HrD5xWrxUQTGi78Hpq5ISPx29LcjRau3C9EZBByvGmUaiVMLF6lKFMod/5ozi F1DaP1J5ISSNxyRG4xTkmiOLDgUWrSGpt+4Mx+4Nxy9gVsSn61BysaeRgnHQdqOk JHe4Y8C8h3EICv1PZp0OKUyGMIbT9JH+fk9uJzQxLuz67UVGo58dRJHQPawOPI3m cR6QomDfEac/9OeiRB5VDs/PqCueSTRTFpZL9UM2+GzSSzXJudqG42IXq31BcoU6 ZttUF8ieDDPoCuzI3qwP6D8WFQHGQtFC45UAB6oz43f8+QJBx30h8QRLwRzL4FZm Gu02ryzKYntL/w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:21 2026 by rpki-client