This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json) Hash identifier: nqaSjZjT75YxyZ/LN/UtECMqLygC+XpNcXL0Zi0TDxA= Subject key identifier: 17:1F:71:93:C1:FF:54:B9:A8:FF:A5:01:AD:27:D7:0C:47:73:7B:F2 Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33 Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033 Certificate serial: 019C4390ABFBAA1F1A3654CAA47193347FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft Manifest number: 12D5 Signing time: Mon 09 Feb 2026 18:01:20 +0000 Manifest this update: Mon 09 Feb 2026 18:01:20 +0000 Manifest next update: Tue 10 Feb 2026 18:01:20 +0000 Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: spBkmF3IACmrLmhu5EFaH/v9Uh4cnlxFGjV+cFXHJyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ab:fb:aa:1f:1a:36:54:ca:a4:71:93:34:7f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033 Validity Not Before: Feb 9 18:01:20 2026 GMT Not After : Feb 10 18:01:20 2026 GMT Subject: CN=171f7193c1ff54b9a8ffa501ad27d70c47737bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:62:fa:09:c1:0f:24:35:84:8e:19:81:d1: 94:0b:a6:30:cc:9d:57:37:92:52:da:38:06:9a:61: e3:c2:09:7a:98:e1:db:49:be:c0:84:9c:76:5f:70: 0d:24:3a:05:64:16:02:3a:55:a9:43:43:6d:0f:70: ad:df:20:37:07:64:80:d5:7a:7d:37:99:e0:23:f5: 29:b8:9a:91:8d:c5:84:a5:67:de:3a:cc:35:cc:d5: da:2d:61:89:e2:0b:17:2f:e3:11:dd:07:e0:38:6b: 14:96:85:b5:37:5a:3d:2e:60:8a:4c:8c:86:fc:9b: 5a:d6:88:00:00:02:a2:e0:75:b7:5b:e8:93:88:5b: fc:b6:eb:33:c6:b8:c3:cd:05:cf:6e:0d:72:c1:47: e7:88:2a:b1:d5:2e:8c:e9:46:cc:6b:83:92:0b:da: 72:8b:40:53:3c:9e:93:07:40:a8:e4:c5:93:86:67: 42:ab:a8:2a:b5:70:df:a6:e4:d5:21:dc:af:bc:4d: 1e:e8:53:60:63:8b:3a:6b:c6:18:dd:75:87:90:78: de:e7:5e:31:7c:d9:0a:46:4d:82:75:9c:c1:9b:86: d5:4f:a6:29:98:fd:46:a1:c0:b8:a3:b4:85:79:f9: d7:31:7f:6d:3a:14:7c:54:84:ee:55:02:90:c2:0b: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1F:71:93:C1:FF:54:B9:A8:FF:A5:01:AD:27:D7:0C:47:73:7B:F2 X509v3 Authority Key Identifier: keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:74:df:e0:9d:43:b7:ca:84:7e:c3:eb:b1:4c:27:73:ec:17: 47:c2:79:c6:51:c6:06:1f:66:e8:fd:b6:29:67:eb:b5:11:3a: 9e:3d:39:9b:10:73:ed:95:6b:0f:71:1b:18:3f:f0:ac:0a:a9: 20:96:c1:db:af:d6:53:e0:14:35:45:10:60:14:fc:45:16:a3: 50:1d:9c:b7:58:54:c0:c4:7a:28:d4:74:69:c9:eb:24:5c:0c: db:35:9f:b1:40:bf:f2:e7:44:c7:51:f0:99:cb:1a:96:ba:06: e1:15:c5:c7:fd:01:39:a2:5a:23:42:20:54:b7:ea:2d:9e:7a: 1d:d0:b4:e9:0f:15:b4:16:8a:21:c3:06:0d:62:3d:94:c5:21: 51:69:4d:6f:fd:eb:0d:e0:9c:f7:84:41:20:9a:dd:0c:61:eb: 5d:c5:a5:fa:83:10:31:cd:71:ce:72:33:11:f6:f3:c1:1d:27: a8:51:5d:86:21:fa:3b:05:fc:17:cf:57:f9:b2:72:66:5e:80: 38:aa:8b:82:b8:fd:c8:b8:af:6d:77:2f:78:cd:b1:82:f0:23: 0b:cf:86:2e:bf:0f:3f:e9:f6:2d:1a:60:ac:68:0a:1e:83:9a: c0:ef:e5:d3:05:55:b4:fb:7a:52:13:6b:9f:1d:7b:d5:f9:e9: c6:e9:04:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKv7qh8aNlTKpHGTNH/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmMwZjliZjdhNDRhYjM1NjdiYWNmOTI5ZWU0YzljMDU3 NTMwMzMwHhcNMjYwMjA5MTgwMTIwWhcNMjYwMjEwMTgwMTIwWjAzMTEwLwYDVQQD EygxNzFmNzE5M2MxZmY1NGI5YThmZmE1MDFhZDI3ZDcwYzQ3NzM3YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gNi+gnBDyQ1hI4ZgdGUC6YwzJ1X N5JS2jgGmmHjwgl6mOHbSb7AhJx2X3ANJDoFZBYCOlWpQ0NtD3Ct3yA3B2SA1Xp9 N5ngI/UpuJqRjcWEpWfeOsw1zNXaLWGJ4gsXL+MR3QfgOGsUloW1N1o9LmCKTIyG /Jta1ogAAAKi4HW3W+iTiFv8tuszxrjDzQXPbg1ywUfniCqx1S6M6UbMa4OSC9py i0BTPJ6TB0Co5MWThmdCq6gqtXDfpuTVIdyvvE0e6FNgY4s6a8YY3XWHkHje514x fNkKRk2CdZzBm4bVT6YpmP1GocC4o7SFefnXMX9tOhR8VITuVQKQwgtf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcfcZPB/1S5qP+lAa0n1wxHc3vyMB8GA1UdIwQY MBaAFFz8D5v3pEqzVnus+SnuTJwFdTAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lMmZhNWMtODg0Ny00NGU0LWE5NWQt NjFlOGRjMWYxNDU5LzEvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lMmZhNWMtODg0Ny00NGU0LWE5NWQtNjFlOGRjMWYxNDU5 LzEvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3Tf4J1D t8qEfsPrsUwnc+wXR8J5xlHGBh9m6P22KWfrtRE6nj05mxBz7ZVrD3EbGD/wrAqp IJbB26/WU+AUNUUQYBT8RRajUB2ct1hUwMR6KNR0acnrJFwM2zWfsUC/8udEx1Hw mcsalroG4RXFx/0BOaJaI0IgVLfqLZ56HdC06Q8VtBaKIcMGDWI9lMUhUWlNb/3r DeCc94RBIJrdDGHrXcWl+oMQMc1xznIzEfbzwR0nqFFdhiH6OwX8F89X+bJyZl6A OKqLgrj9yLivbXcveM2xgvAjC8+GLr8PP+n2LRpgrGgKHoOawO/l0wVVtPt6UhNr nx171fnpxukEGQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:21 2026 by rpki-client