This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json) Hash identifier: Pr3HyLx0GG07evmUne7TDkK4OZcpV1NJ3uR9twKh6F0= Subject key identifier: 9B:8D:75:85:14:33:BA:BB:AB:14:B7:73:B3:4D:CB:B0:B4:15:A0:EC Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Certificate serial: 019C427DC616479F0227A68A203C542680D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft Manifest number: 013B Signing time: Mon 09 Feb 2026 13:01:04 +0000 Manifest this update: Mon 09 Feb 2026 13:01:04 +0000 Manifest next update: Tue 10 Feb 2026 13:01:04 +0000 Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: gMjaBWrCQ5SsAkAVMKSVuuOXUS20Wh9PIkMRzyzHklQ=) 2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c6:16:47:9f:02:27:a6:8a:20:3c:54:26:80:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Validity Not Before: Feb 9 13:01:04 2026 GMT Not After : Feb 10 13:01:04 2026 GMT Subject: CN=9b8d75851433babbab14b773b34dcbb0b415a0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1e:67:0c:bc:e9:62:4e:38:7c:8c:6c:10:d6: ca:90:07:1c:6d:af:25:21:e7:57:d4:5f:97:d8:e5: de:47:f4:8e:f9:bb:76:86:c8:65:54:a8:ef:b6:70: ff:63:57:b8:6d:5a:fc:28:53:de:cd:02:d5:e4:15: 28:e8:19:b8:1c:32:8a:8f:0e:b7:58:e3:84:c9:43: 9a:42:92:9f:fa:b0:ad:03:b9:d1:fa:bb:db:28:d1: cb:5a:fd:8a:df:a4:c7:0c:d2:98:91:f2:22:73:56: ae:57:b3:ef:ec:47:5e:7d:a6:57:06:06:bf:7a:21: 96:e2:7f:c3:95:ef:f3:87:60:ae:df:2d:40:59:b0: 69:3f:ef:b0:cc:18:18:65:e0:e8:ce:86:60:92:80: 4f:fe:24:b7:7d:97:0d:24:c5:c9:0e:46:bc:54:fc: 11:9b:60:9f:cc:e3:37:a3:f0:a7:40:92:d0:5a:4b: 91:7c:3c:14:43:1f:e8:dd:01:7f:61:6a:68:a7:9f: 66:31:c2:52:82:5c:76:5f:49:82:79:1e:cd:24:e2: 5d:91:d8:85:57:0e:18:00:06:a1:cb:8b:a4:d9:63: 0f:ba:98:67:54:97:7c:26:11:e4:0e:f2:84:be:6b: 4d:3d:58:10:30:68:8f:56:1c:55:b9:ae:72:66:3f: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8D:75:85:14:33:BA:BB:AB:14:B7:73:B3:4D:CB:B0:B4:15:A0:EC X509v3 Authority Key Identifier: keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:aa:ad:1f:8a:2e:d6:2a:6a:af:08:bc:97:3a:eb:76:40:ff: a5:5a:cb:29:7e:73:47:eb:c0:55:11:c9:b4:b4:63:50:95:e6: 23:51:b5:0a:6f:2a:2d:fa:b1:f4:ca:2f:fa:fd:e5:46:f1:63: 20:87:d0:4b:df:2d:a6:08:d7:f0:db:a8:e5:9b:53:19:ff:ac: db:54:c7:3d:4a:ca:6b:be:39:e7:ed:97:a0:9e:64:06:51:bd: 66:b3:94:41:b5:28:20:a7:47:af:c8:5a:1d:35:9a:47:c6:26: 7b:a3:71:6d:08:ac:0f:69:cc:9d:e7:17:fe:bc:ae:f9:03:a2: f8:b1:5a:c2:bb:42:8a:21:24:c3:88:b7:d5:a9:04:55:99:4d: 25:1b:2c:d8:db:20:49:03:22:bf:9d:b9:f3:a3:b7:32:fc:a6: c9:49:53:be:3e:2c:88:fc:79:be:b2:ae:59:71:25:61:38:8e: 70:06:e5:46:a8:56:75:d4:8c:0a:61:f8:fa:72:14:6e:d4:5e: 7f:4e:71:6f:da:ea:85:ac:29:3a:0a:34:e0:8b:ec:8a:79:fb: bc:0c:4c:74:cd:15:6f:f6:40:ba:c9:19:02:d5:f4:49:f4:de: 76:79:89:16:b4:92:97:87:dd:45:50:29:a7:91:57:62:a7:4e: 05:ad:4e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcYWR58CJ6aKIDxUJoDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0 YmVlZjcwHhcNMjYwMjA5MTMwMTA0WhcNMjYwMjEwMTMwMTA0WjAzMTEwLwYDVQQD Eyg5YjhkNzU4NTE0MzNiYWJiYWIxNGI3NzNiMzRkY2JiMGI0MTVhMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB5nDLzpYk44fIxsENbKkAccba8l IedX1F+X2OXeR/SO+bt2hshlVKjvtnD/Y1e4bVr8KFPezQLV5BUo6Bm4HDKKjw63 WOOEyUOaQpKf+rCtA7nR+rvbKNHLWv2K36THDNKYkfIic1auV7Pv7EdefaZXBga/ eiGW4n/Dle/zh2Cu3y1AWbBpP++wzBgYZeDozoZgkoBP/iS3fZcNJMXJDka8VPwR m2CfzOM3o/CnQJLQWkuRfDwUQx/o3QF/YWpop59mMcJSglx2X0mCeR7NJOJdkdiF Vw4YAAahy4uk2WMPuphnVJd8JhHkDvKEvmtNPVgQMGiPVhxVua5yZj/CUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuNdYUUM7q7qxS3c7NNy7C0FaDsMB8GA1UdIwQY MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2 LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KqtH4ou 1ipqrwi8lzrrdkD/pVrLKX5zR+vAVRHJtLRjUJXmI1G1Cm8qLfqx9Mov+v3lRvFj IIfQS98tpgjX8Nuo5ZtTGf+s21THPUrKa7455+2XoJ5kBlG9ZrOUQbUoIKdHr8ha HTWaR8Yme6NxbQisD2nMnecX/ryu+QOi+LFawrtCiiEkw4i31akEVZlNJRss2Nsg SQMiv52586O3MvymyUlTvj4siPx5vrKuWXElYTiOcAblRqhWddSMCmH4+nIUbtRe f05xb9rqhawpOgo04Ivsinn7vAxMdM0Vb/ZAuskZAtX0SfTednmJFrSSl4fdRVAp p5FXYqdOBa1ORQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:26 2026 by rpki-client