This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json) Hash identifier: gDV1DwxlA3W1g10gyEfLfZs3Z1gQI5dToYyfg2hqWoI= Subject key identifier: AC:15:CC:7B:B8:EB:DA:9B:7F:27:ED:A0:B9:5C:B6:52:D4:F2:D6:65 Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Certificate serial: 019C41A14AE9A9C9DF0B9A195C8F66E391F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft Manifest number: 0599 Signing time: Mon 09 Feb 2026 09:00:15 +0000 Manifest this update: Mon 09 Feb 2026 09:00:15 +0000 Manifest next update: Tue 10 Feb 2026 09:00:15 +0000 Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: fTGrrgFt1SCUGUYuhA3KVgCsxCZfc0dZYGrU6LkBcxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:4a:e9:a9:c9:df:0b:9a:19:5c:8f:66:e3:91:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e Validity Not Before: Feb 9 09:00:15 2026 GMT Not After : Feb 10 09:00:15 2026 GMT Subject: CN=ac15cc7bb8ebda9b7f27eda0b95cb652d4f2d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:f2:f3:25:b9:3e:87:28:26:03:8d:65:72: a2:81:2f:25:b5:51:e8:a3:4e:d4:41:9c:52:9d:b1: e1:e7:13:f0:1e:5d:74:7e:6d:cf:62:13:a0:9b:b8: a6:4a:ab:bf:e1:7b:6c:5f:b9:28:b5:44:30:ff:55: 39:b9:13:92:76:e0:e3:bc:ee:94:92:19:f7:17:c0: 5c:45:20:be:8a:ce:23:7c:18:0f:24:8a:80:b7:40: be:d0:fe:90:50:32:ed:0b:ae:34:98:8c:33:d8:60: 0e:54:8f:b7:98:95:0e:9c:0b:19:ee:59:21:c9:45: b1:17:34:51:eb:fb:39:a9:55:e4:57:f4:69:3a:0c: 09:ac:ab:61:1b:fa:0c:81:cc:94:70:08:18:93:e9: 97:61:e5:bb:44:b6:13:1a:e2:26:12:f6:38:22:cf: ec:03:b2:95:cb:1b:9c:2f:4c:22:85:86:11:a3:54: 6c:8d:66:2b:75:61:e4:7d:04:f4:68:3a:e8:d4:2b: 14:0e:b9:cc:84:1b:09:d9:bd:40:9b:c1:69:8c:ab: 58:f9:dc:76:72:ba:bd:e8:84:46:9f:de:45:2e:fd: f2:53:ae:1c:6e:1c:8e:13:7e:88:d7:9b:82:cb:c6: 11:25:c0:ff:38:d3:f8:bd:ed:f5:0f:fc:0b:68:07: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:15:CC:7B:B8:EB:DA:9B:7F:27:ED:A0:B9:5C:B6:52:D4:F2:D6:65 X509v3 Authority Key Identifier: keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0a:97:9a:36:5b:5f:b4:24:88:b1:d8:63:e5:8b:fb:7f:eb: 4b:3b:6e:0c:1d:92:03:b8:5a:78:7c:ce:96:fe:1e:98:86:1a: db:cd:1a:80:19:37:95:5f:e9:eb:19:81:6b:7b:f2:4a:03:90: ec:79:62:0c:e9:30:83:dc:c7:79:63:6e:24:a1:1f:16:10:92: 27:22:85:aa:14:a0:c5:5d:4c:a1:6a:ee:a7:09:52:6d:ab:8e: b8:ec:87:29:0a:22:3e:d1:76:23:2a:f6:dc:20:cb:25:97:2c: ea:0e:ca:17:91:46:99:b5:2c:90:e7:58:f1:e2:0e:6e:b6:30: 02:7a:9a:b8:8d:f7:83:4b:c4:41:de:de:b4:1d:6f:41:31:38: 2d:7e:97:7b:1f:32:33:89:05:1c:93:43:8b:80:33:a6:05:35: b8:be:a5:1a:88:08:99:37:b3:dd:f9:e5:6b:af:95:61:ee:d1: 00:2c:17:35:29:ad:ca:d7:b5:64:e0:26:d0:0c:7f:9c:e0:2e: 77:01:d0:77:64:be:95:ad:c3:8a:73:e8:6d:0a:d9:24:39:c6: b7:e0:0a:18:e5:fb:93:b3:43:40:9c:57:38:65:4e:cf:6c:51: 30:09:a3:cd:4b:48:a7:dc:1d:b1:de:20:8a:37:e9:f4:32:77: 4c:61:a7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUrpqcnfC5oZXI9m45H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3 NTExNmUwHhcNMjYwMjA5MDkwMDE1WhcNMjYwMjEwMDkwMDE1WjAzMTEwLwYDVQQD EyhhYzE1Y2M3YmI4ZWJkYTliN2YyN2VkYTBiOTVjYjY1MmQ0ZjJkNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZjy8yW5PocoJgONZXKigS8ltVHo o07UQZxSnbHh5xPwHl10fm3PYhOgm7imSqu/4XtsX7kotUQw/1U5uROSduDjvO6U khn3F8BcRSC+is4jfBgPJIqAt0C+0P6QUDLtC640mIwz2GAOVI+3mJUOnAsZ7lkh yUWxFzRR6/s5qVXkV/RpOgwJrKthG/oMgcyUcAgYk+mXYeW7RLYTGuImEvY4Is/s A7KVyxucL0wihYYRo1RsjWYrdWHkfQT0aDro1CsUDrnMhBsJ2b1Am8FpjKtY+dx2 crq96IRGn95FLv3yU64cbhyOE36I15uCy8YRJcD/ONP4ve31D/wLaAcc9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwVzHu469qbfyftoLlctlLU8tZlMB8GA1UdIwQY MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgqXmjZb X7QkiLHYY+WL+3/rSztuDB2SA7haeHzOlv4emIYa280agBk3lV/p6xmBa3vySgOQ 7HliDOkwg9zHeWNuJKEfFhCSJyKFqhSgxV1MoWrupwlSbauOuOyHKQoiPtF2Iyr2 3CDLJZcs6g7KF5FGmbUskOdY8eIObrYwAnqauI33g0vEQd7etB1vQTE4LX6Xex8y M4kFHJNDi4AzpgU1uL6lGogImTez3fnla6+VYe7RACwXNSmtyte1ZOAm0Ax/nOAu dwHQd2S+la3DinPobQrZJDnGt+AKGOX7k7NDQJxXOGVOz2xRMAmjzUtIp9wdsd4g ijfp9DJ3TGGnUg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:07 2026 by rpki-client