This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json) Hash identifier: Gh2WkFbY/PB92FpOugcr1mlzJkrtg3gzz4y4schUG3Y= Subject key identifier: 8D:57:8A:57:73:AB:85:D3:B9:E4:8A:99:A9:74:45:BC:EB:C5:95:5E Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e Certificate serial: 019C41D8FFA7143CBE74EF6DABE26FC2B934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft Manifest number: 140B Signing time: Mon 09 Feb 2026 10:01:06 +0000 Manifest this update: Mon 09 Feb 2026 10:01:06 +0000 Manifest next update: Tue 10 Feb 2026 10:01:06 +0000 Files and hashes: 1: k6Kk-SSfPt5X64syTmG4cY1i-K0.roa (hash: CudYTrmTazmdAPM102kIxAqGfFrQWQy3gnFrCAxwveE=) 2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: 71SIBFYqIHBY2DVfjn7LaRDsqUOtYAPMH5UzFyqK9h4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ff:a7:14:3c:be:74:ef:6d:ab:e2:6f:c2:b9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e Validity Not Before: Feb 9 10:01:06 2026 GMT Not After : Feb 10 10:01:06 2026 GMT Subject: CN=8d578a5773ab85d3b9e48a99a97445bcebc5955e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:bd:b7:46:22:fa:24:88:7c:71:94:8b:53: a1:ae:1e:16:57:a5:7e:08:fc:d4:9b:d0:7b:ba:78: ad:e6:93:2c:ac:18:a9:e4:09:f5:98:b9:30:c4:f0: ac:37:16:49:70:db:20:60:db:ca:a1:e9:bc:16:29: c2:f4:c7:e9:58:ae:c1:33:02:0b:99:a6:df:99:30: 73:5b:7e:13:e5:ec:cd:08:13:63:c6:7f:ec:88:3c: 11:e3:21:6d:c4:19:dd:8b:98:15:4a:fa:f7:2b:77: 4b:a7:f0:ed:e0:f0:f9:b4:9d:e5:55:02:5c:ad:6c: 12:2a:cd:ae:98:14:04:ab:dd:72:b0:19:25:2c:56: 90:70:22:5b:d8:af:89:3e:e6:d1:75:c1:7e:87:db: 99:2f:13:fd:5e:b6:9a:59:27:c0:c0:2f:13:b9:14: 3d:6b:a8:bb:c8:d8:33:e7:b9:0a:97:d5:97:ad:32: 88:18:05:72:3a:3b:5a:d4:8d:3b:ce:de:82:e3:f8: 17:cf:23:5b:94:c7:25:52:04:6a:50:81:5a:1e:2a: 67:45:93:7b:6a:19:ce:a0:86:5c:a6:93:d9:d0:86: 2b:95:62:44:be:58:e1:1d:b0:20:81:fb:25:8a:4a: 8d:48:26:79:f1:c4:cb:da:d8:d5:5a:25:f6:f9:c4: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:57:8A:57:73:AB:85:D3:B9:E4:8A:99:A9:74:45:BC:EB:C5:95:5E X509v3 Authority Key Identifier: keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:dc:de:9f:cb:f9:fa:eb:f5:fa:cf:37:70:c1:74:03:da:3c: 6b:61:76:b4:91:ab:4b:32:32:0c:4a:6e:e5:cd:6e:a5:03:fb: 53:33:b5:71:88:72:5d:22:d3:56:9a:f3:ac:02:85:35:75:e1: 6e:ea:c1:25:e6:81:c9:22:3c:1d:79:9a:57:01:e0:ea:28:2a: 33:ac:35:ba:d6:ee:30:33:60:d2:b6:c4:52:f5:36:b2:c9:ed: b1:3f:bb:47:61:35:21:6d:53:2a:ab:e7:43:2e:59:e6:21:4f: 26:d3:65:5a:dc:2f:b9:b3:8f:11:fc:57:12:eb:5d:2a:ae:61: 99:4b:c5:63:35:24:3b:ca:8a:97:39:44:45:03:6d:9e:a3:5b: e3:8f:f8:65:a0:75:e3:0d:5b:22:ed:89:1e:92:47:18:40:e5: 76:d4:10:20:80:07:09:d0:2a:99:3f:28:d0:b2:a6:4b:1d:d4: 24:76:19:0d:d7:80:ed:d2:2b:7a:87:60:0a:e5:88:57:01:66: 02:3a:b9:8f:ac:e9:cc:6e:48:dc:82:e9:59:f9:b3:5f:6c:2d: 57:28:d7:d5:ab:bf:70:d0:d8:0c:da:6f:37:8c:89:a0:91:87: cf:2f:15:37:ce:d6:31:b6:76:97:2b:b3:3c:a2:9c:fb:68:85: 72:bb:1f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2P+nFDy+dO9tq+Jvwrk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmYwODAzYzQyOThlMTU2ZDU2M2JkNGYyMDdjYjViODM2 MTAyNmUwHhcNMjYwMjA5MTAwMTA2WhcNMjYwMjEwMTAwMTA2WjAzMTEwLwYDVQQD Eyg4ZDU3OGE1NzczYWI4NWQzYjllNDhhOTlhOTc0NDViY2ViYzU5NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDu9t0Yi+iSIfHGUi1Ohrh4WV6V+ CPzUm9B7unit5pMsrBip5An1mLkwxPCsNxZJcNsgYNvKoem8FinC9MfpWK7BMwIL mabfmTBzW34T5ezNCBNjxn/siDwR4yFtxBndi5gVSvr3K3dLp/Dt4PD5tJ3lVQJc rWwSKs2umBQEq91ysBklLFaQcCJb2K+JPubRdcF+h9uZLxP9XraaWSfAwC8TuRQ9 a6i7yNgz57kKl9WXrTKIGAVyOjta1I07zt6C4/gXzyNblMclUgRqUIFaHipnRZN7 ahnOoIZcppPZ0IYrlWJEvljhHbAggfslikqNSCZ58cTL2tjVWiX2+cQmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1Xildzq4XTueSKmal0RbzrxZVeMB8GA1UdIwQY MBaAFMYvCAPEKY4VbVY71PIHy1uDYQJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWIt M2RlYmExNjY2ZTliLzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZGRhMWMtODdlMC00YjQ5LWJkOWItM2RlYmExNjY2ZTli LzEveGk4SUE4UXBqaFZ0Vmp2VThnZkxXNE5oQW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtzen8v5 +uv1+s83cMF0A9o8a2F2tJGrSzIyDEpu5c1upQP7UzO1cYhyXSLTVprzrAKFNXXh burBJeaBySI8HXmaVwHg6igqM6w1utbuMDNg0rbEUvU2ssntsT+7R2E1IW1TKqvn Qy5Z5iFPJtNlWtwvubOPEfxXEutdKq5hmUvFYzUkO8qKlzlERQNtnqNb44/4ZaB1 4w1bIu2JHpJHGEDldtQQIIAHCdAqmT8o0LKmSx3UJHYZDdeA7dIreodgCuWIVwFm Ajq5j6zpzG5I3ILpWfmzX2wtVyjX1au/cNDYDNpvN4yJoJGHzy8VN87WMbZ2lyuz PKKc+2iFcrsf5g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:12 2026 by rpki-client