This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json) Hash identifier: 8fiaj7E/cfoVESF/sSpLQxoNO1Eiu8KkJ1i27BE8KyY= Subject key identifier: B0:3A:29:BC:9F:FE:10:21:A1:7F:C8:5E:F1:F3:86:7E:84:53:09:21 Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7 Certificate serial: 019C41D89B6B67167771972C02DAB9B6258A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft Manifest number: 0DFB Signing time: Mon 09 Feb 2026 10:00:40 +0000 Manifest this update: Mon 09 Feb 2026 10:00:40 +0000 Manifest next update: Tue 10 Feb 2026 10:00:40 +0000 Files and hashes: 1: WIz4ju7mKgyhClPjYmZVPgV4tVg.roa (hash: bp+DO940zxxbXrDgbAxxoKvL8L9u5E+uFAMTt7Qg4XQ=) 2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: Impw4yR7hQjxCVJ1osfxHTqosm/wGdc/g+6CQcIM/UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9b:6b:67:16:77:71:97:2c:02:da:b9:b6:25:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7 Validity Not Before: Feb 9 10:00:40 2026 GMT Not After : Feb 10 10:00:40 2026 GMT Subject: CN=b03a29bc9ffe1021a17fc85ef1f3867e84530921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:e2:5e:9c:54:47:cc:8f:9b:5b:af:12:51: ee:66:3b:85:e8:2c:9d:1e:b3:6c:bd:9f:6d:2a:ec: f8:50:c7:ba:ec:25:15:f5:74:e9:fc:59:fe:86:b3: 07:f5:83:a7:7c:89:ce:92:0e:38:ff:1a:f8:f3:6c: a9:2b:28:ec:10:9a:0f:fd:5b:5c:76:b8:c0:c7:8e: 11:1c:47:7f:39:26:f9:5b:18:b5:5c:4f:cd:67:64: af:59:98:00:31:76:4d:a2:81:63:72:93:9f:24:03: a2:5a:79:65:91:d4:32:1a:b2:bf:bb:e8:5d:da:1b: e8:5a:b6:eb:d1:4a:9f:09:45:16:61:08:82:6d:27: e9:fe:89:eb:a6:6a:62:fc:dd:70:87:d3:85:15:4f: b1:09:0e:c1:73:3d:0a:ab:d5:29:96:64:e6:d4:56: 96:5b:c0:0f:63:ba:8d:ca:1b:c3:c2:15:4b:2d:92: 31:21:8e:ae:a9:e6:db:f5:7b:f4:9f:ed:ff:33:8e: 5d:60:bc:14:62:03:41:5b:27:54:6a:c3:e2:27:8d: ce:eb:10:b3:cc:ba:b3:e8:9b:65:cd:ad:ef:30:07: f0:2e:62:c8:c0:26:35:91:b0:f9:1d:bc:4e:29:82: f7:f1:c6:38:1b:d5:8a:9e:70:04:d0:21:12:00:9b: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3A:29:BC:9F:FE:10:21:A1:7F:C8:5E:F1:F3:86:7E:84:53:09:21 X509v3 Authority Key Identifier: keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:dd:25:3a:7b:8b:b9:d3:d4:20:03:da:16:30:5a:c0:f5:d7: e2:5d:06:7b:a8:7b:e1:b4:d1:3b:e8:66:be:7c:b9:db:f4:af: 79:11:07:8d:97:90:4b:8a:93:97:14:b0:94:dc:29:d7:74:28: 85:67:b8:54:d6:58:14:d8:3f:e3:eb:50:46:a1:07:63:a7:0f: 8a:f7:27:02:d9:a6:cb:bb:9d:00:0b:73:7a:b9:57:6c:d2:e4: 1b:7b:1e:e0:46:1c:a2:40:b5:60:65:59:43:c8:e3:c6:7b:41: b5:03:08:e0:1b:b9:27:57:11:79:06:b2:70:4f:dc:4d:da:d6: 3d:87:ca:1d:a2:ec:b3:5a:55:65:6d:ef:78:98:90:a8:fa:d8: 46:88:b3:a3:09:f2:95:78:18:38:ad:bd:fb:fc:84:a0:46:7f: 29:ec:71:b3:1d:4d:a2:b5:29:59:6b:b7:27:d4:c9:17:cd:42: 1c:e8:1b:18:dc:88:6f:77:f9:cf:cf:d1:de:4f:e5:b7:f4:b6: 0e:7b:15:ec:63:94:f6:96:79:c0:ca:51:6c:eb:f8:84:59:79: aa:11:83:7f:b0:a4:1f:56:c8:17:36:f2:8d:8f:cb:9b:91:63: 97:3a:01:10:4d:64:69:e9:8c:11:81:d6:86:83:5e:8f:d9:85: 4c:aa:fc:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JtrZxZ3cZcsAtq5tiWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjI3MjIxYzE4ZmNhZmU3NDg5MmJjMGU5N2JmNWVlN2Mz NDRmYTcwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD EyhiMDNhMjliYzlmZmUxMDIxYTE3ZmM4NWVmMWYzODY3ZTg0NTMwOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws3iXpxUR8yPm1uvElHuZjuF6Cyd HrNsvZ9tKuz4UMe67CUV9XTp/Fn+hrMH9YOnfInOkg44/xr482ypKyjsEJoP/Vtc drjAx44RHEd/OSb5Wxi1XE/NZ2SvWZgAMXZNooFjcpOfJAOiWnllkdQyGrK/u+hd 2hvoWrbr0UqfCUUWYQiCbSfp/onrpmpi/N1wh9OFFU+xCQ7Bcz0Kq9UplmTm1FaW W8APY7qNyhvDwhVLLZIxIY6uqebb9Xv0n+3/M45dYLwUYgNBWydUasPiJ43O6xCz zLqz6Jtlza3vMAfwLmLIwCY1kbD5HbxOKYL38cY4G9WKnnAE0CESAJvgEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA6Kbyf/hAhoX/IXvHzhn6EUwkhMB8GA1UdIwQY MBaAFF3yciHBj8r+dIkrwOl79e58NE+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjg5MzctODkwMy00OTVkLWJjNmMt ZjNlOTE1YWQzODAyLzEvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wMjg5MzctODkwMy00OTVkLWJjNmMtZjNlOTE1YWQzODAy LzEvWGZKeUljR1B5djUwaVN2QTZYdjE3bncwVDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd0lOnuL udPUIAPaFjBawPXX4l0Ge6h74bTRO+hmvny52/SveREHjZeQS4qTlxSwlNwp13Qo hWe4VNZYFNg/4+tQRqEHY6cPivcnAtmmy7udAAtzerlXbNLkG3se4EYcokC1YGVZ Q8jjxntBtQMI4Bu5J1cReQaycE/cTdrWPYfKHaLss1pVZW3veJiQqPrYRoizowny lXgYOK29+/yEoEZ/Kexxsx1NorUpWWu3J9TJF81CHOgbGNyIb3f5z8/R3k/lt/S2 DnsV7GOU9pZ5wMpRbOv4hFl5qhGDf7CkH1bIFzbyjY/Lm5FjlzoBEE1kaemMEYHW hoNej9mFTKr86A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:24 2026 by rpki-client