This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json) Hash identifier: Ay0SdWwm0kqLNcA+FNSPq+/67v67LtojPvCMgkJTU2I= Subject key identifier: 91:20:F1:F7:1D:D9:1F:9A:44:64:82:12:3D:69:5E:36:96:89:62:20 Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed Certificate serial: 019C4246A400C663EA4E3A4378B2F1F0E1DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 12:00:51 +0000 Manifest this update: Mon 09 Feb 2026 12:00:51 +0000 Manifest next update: Tue 10 Feb 2026 12:00:51 +0000 Files and hashes: 1: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (hash: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY=) 2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: AY8h87czLkVOq/J6TgaLexcNWwTe2V/nRYzuo9XFQ8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a4:00:c6:63:ea:4e:3a:43:78:b2:f1:f0:e1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed Validity Not Before: Feb 9 12:00:51 2026 GMT Not After : Feb 10 12:00:51 2026 GMT Subject: CN=9120f1f71dd91f9a446482123d695e3696896220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:45:62:25:68:95:0d:1b:75:77:e9:b1:ac: 46:2a:02:68:7c:40:85:9e:0b:6b:f9:94:b5:c2:21: 88:ad:11:85:dd:54:90:f5:f4:4a:f3:8c:d6:1e:5c: 5e:5c:ea:2b:2b:86:39:6d:d9:84:72:9a:dd:e5:c2: 0e:ad:52:d1:3d:4a:32:88:c7:9c:d2:68:34:61:0f: 1d:6c:61:31:fb:2a:b8:cc:6e:c5:09:e8:8c:e6:4d: d5:01:f6:32:6d:27:68:ca:87:29:fd:06:eb:ac:c2: 35:1c:b3:30:72:39:53:97:ff:b2:08:66:e4:21:80: 2b:66:e7:d4:b3:fd:1a:21:c9:99:74:e1:20:96:67: 94:91:b3:51:d1:42:6c:6f:6e:92:19:95:9b:f4:52: 88:c9:09:2d:db:65:d9:b2:30:53:f9:bc:fe:6c:92: 66:6d:3c:fd:14:c9:d5:2a:85:b5:14:64:4c:5c:bd: 13:c0:aa:19:86:95:0c:ef:5f:2a:e4:94:24:42:d9: cc:6c:e0:3a:fb:0d:e3:9e:58:6d:d1:47:47:6c:90: 76:f6:99:6d:4e:89:54:de:c6:3e:7d:fb:1d:ce:13: 86:b8:46:74:98:26:9b:60:35:9a:4e:b6:56:e4:e2: 48:3c:c9:75:b0:3c:5d:09:56:a3:f9:77:ab:6e:26: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:F1:F7:1D:D9:1F:9A:44:64:82:12:3D:69:5E:36:96:89:62:20 X509v3 Authority Key Identifier: keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:78:80:8a:47:22:62:2a:64:93:ed:05:f4:c7:bb:c3:57: 12:09:80:08:1e:3c:bd:f6:e2:1e:66:a5:a8:75:06:90:f2:ac: 62:96:8d:30:b5:87:2e:c5:54:92:1e:6e:77:98:fc:87:d5:54: 79:8f:43:78:a2:d1:83:60:31:77:9a:fe:07:a7:b7:e7:1c:99: 7e:c8:28:87:d4:fa:84:5a:2c:05:9a:dc:ee:35:30:bd:73:9c: c9:55:08:cf:12:a3:1e:0c:70:8e:7f:20:e2:49:a1:1a:58:3f: dd:97:65:41:1a:b7:00:3b:99:3e:4e:9a:d4:95:b7:f1:6f:7d: 15:0c:9a:0a:e2:6e:b2:56:70:7a:dd:c9:c4:30:c5:e0:f6:fa: f2:16:1d:26:0f:5e:e7:52:d5:35:ef:e2:94:6f:ed:90:0d:1f: e4:d1:71:f2:e9:94:21:f8:38:4b:ad:96:39:4d:40:48:1b:58: 8e:83:6b:b1:0e:d0:80:db:d6:09:0e:20:42:05:72:7f:b3:c7: 00:4f:d0:28:14:32:80:bb:56:1a:57:cc:1e:1c:63:91:3b:75: 1f:ef:65:de:7b:ab:a7:38:62:9e:45:a0:72:17:0e:f6:4c:5c: af:d8:66:f9:1d:ef:e9:b3:b5:8c:be:b1:e6:4d:5c:1f:8d:2b: 62:0a:f6:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqQAxmPqTjpDeLLx8OHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTJiYjNkYTY1Y2FhYjUyNDg1MWVmODZjZTliYWE2MjA3 NGUxZWQwHhcNMjYwMjA5MTIwMDUxWhcNMjYwMjEwMTIwMDUxWjAzMTEwLwYDVQQD Eyg5MTIwZjFmNzFkZDkxZjlhNDQ2NDgyMTIzZDY5NWUzNjk2ODk2MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDRFYiVolQ0bdXfpsaxGKgJofECF ngtr+ZS1wiGIrRGF3VSQ9fRK84zWHlxeXOorK4Y5bdmEcprd5cIOrVLRPUoyiMec 0mg0YQ8dbGEx+yq4zG7FCeiM5k3VAfYybSdoyocp/QbrrMI1HLMwcjlTl/+yCGbk IYArZufUs/0aIcmZdOEglmeUkbNR0UJsb26SGZWb9FKIyQkt22XZsjBT+bz+bJJm bTz9FMnVKoW1FGRMXL0TwKoZhpUM718q5JQkQtnMbOA6+w3jnlht0UdHbJB29plt TolU3sY+ffsdzhOGuEZ0mCabYDWaTrZW5OJIPMl1sDxdCVaj+XerbiZnYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEg8fcd2R+aRGSCEj1pXjaWiWIgMB8GA1UdIwQY MBaAFMQSuz2mXKq1JIUe+GzpuqYgdOHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgt OWI5MzJlY2QyZWNjLzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgtOWI5MzJlY2QyZWNj LzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqt4gIpH ImIqZJPtBfTHu8NXEgmACB48vfbiHmalqHUGkPKsYpaNMLWHLsVUkh5ud5j8h9VU eY9DeKLRg2Axd5r+B6e35xyZfsgoh9T6hFosBZrc7jUwvXOcyVUIzxKjHgxwjn8g 4kmhGlg/3ZdlQRq3ADuZPk6a1JW38W99FQyaCuJuslZwet3JxDDF4Pb68hYdJg9e 51LVNe/ilG/tkA0f5NFx8umUIfg4S62WOU1ASBtYjoNrsQ7QgNvWCQ4gQgVyf7PH AE/QKBQygLtWGlfMHhxjkTt1H+9l3nurpzhinkWgchcO9kxcr9hm+R3v6bO1jL6x 5k1cH40rYgr2XA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:12 2026 by rpki-client