This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json) Hash identifier: lAq5zZvpb9kOj9hry03RYRGcgUjxmQLA37bf92roIb4= Subject key identifier: 60:D5:E2:80:29:61:9A:1A:A9:DF:4A:F3:22:D3:CF:1C:75:FA:E2:3B Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd Certificate serial: 019C420FDC81F22A8745FF3BC4C3688DC686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft Manifest number: 1113 Signing time: Mon 09 Feb 2026 11:01:01 +0000 Manifest this update: Mon 09 Feb 2026 11:01:01 +0000 Manifest next update: Tue 10 Feb 2026 11:01:01 +0000 Files and hashes: 1: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: whFfk70kzyhP4UqNVcOf+j1TvcJZPDC1EuZrbXyVZPE=) 2: qXa05Pm4susE6h1kgPXqtx4ui2U.roa (hash: bVr1M0Wzu14ImKwiIYB0nxHAmPqsQWuDaJyg7tqZvAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:dc:81:f2:2a:87:45:ff:3b:c4:c3:68:8d:c6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd Validity Not Before: Feb 9 11:01:01 2026 GMT Not After : Feb 10 11:01:01 2026 GMT Subject: CN=60d5e28029619a1aa9df4af322d3cf1c75fae23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:4e:5d:de:20:bd:2b:92:50:8d:bf:65:c6: eb:47:29:45:f3:9f:f8:5c:7b:d5:03:ef:a2:56:77: 32:be:16:d7:18:f9:a5:ec:02:7e:e8:80:f2:d5:ed: e7:a1:b9:a2:59:52:86:2a:d6:97:f4:e3:11:ac:5a: c5:4f:7e:ce:24:d8:ff:95:b7:43:73:68:3d:a2:d2: 79:1e:1f:00:3b:33:f6:28:92:6d:57:70:2f:a4:a8: a5:2d:23:1e:aa:0b:fe:54:56:8d:92:6f:d2:43:1a: 8e:82:54:8e:3f:a7:4e:bc:36:12:e0:68:58:21:16: a5:0f:a3:6f:0c:d5:7d:01:ee:22:8b:fc:60:47:d2: 87:bb:17:03:2c:25:fd:ff:a4:e8:e6:dc:ec:28:ae: c4:aa:72:29:32:e3:5a:9b:d1:81:e0:6a:3f:b1:85: 76:e5:f6:8b:fa:a1:21:81:c8:24:00:e1:04:3c:96: d4:3d:6c:2e:c0:5e:a8:12:85:d2:30:34:c4:9f:b7: 35:63:76:c1:cb:40:5b:fd:fb:27:3a:d5:53:b2:69: a2:96:53:0f:2d:1b:74:4e:4f:93:e2:42:ef:4a:26: 60:2d:38:08:76:95:4a:5f:cc:0f:00:cd:1d:90:23: 39:65:c0:d8:ef:7c:db:27:7d:0e:40:6e:8a:93:9b: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D5:E2:80:29:61:9A:1A:A9:DF:4A:F3:22:D3:CF:1C:75:FA:E2:3B X509v3 Authority Key Identifier: keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fa:ec:8e:66:1c:84:3a:cb:c3:d5:0b:1f:6e:e0:44:55:cb: da:6c:96:0f:af:66:3e:95:2d:a1:e4:99:fc:b7:e9:2d:2a:e9: c2:f0:f3:6b:bb:f9:fa:1c:fd:d3:60:d6:43:36:25:17:3e:74: 01:07:92:43:41:6f:0e:20:d9:2c:56:68:37:ce:94:74:d9:02: f8:8f:d6:76:9e:2b:8c:38:eb:a0:9a:08:64:78:4c:71:9c:b6: 12:5c:54:ef:a3:a1:c0:da:50:80:9a:00:76:82:85:d5:b0:f5: d2:19:3b:79:9f:5b:c9:eb:76:d3:d6:44:ff:2e:f0:fa:63:8f: 13:97:67:13:92:12:bb:7b:b4:95:81:86:62:52:70:87:e4:73: 14:bb:63:1c:c3:e8:0d:35:4f:49:ee:ab:52:99:48:a6:cc:69: 3f:b9:85:52:e8:a7:e8:8e:66:4f:d7:f6:c6:6c:60:8e:4f:e1: 31:c6:02:31:2e:a2:7d:c5:0c:e2:a6:b2:d8:4c:d7:9e:36:01: 1b:5b:ca:9e:47:99:42:ad:f2:31:61:8d:71:90:fa:62:df:a2: df:d8:50:e8:23:3f:16:f3:f6:8f:73:9b:a0:6c:20:4c:0e:46: 05:42:bf:05:1c:7c:ed:4d:bf:72:80:41:11:3d:cc:1b:5a:1f: 14:b5:68:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9yB8iqHRf87xMNojcaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1 ODRmY2QwHhcNMjYwMjA5MTEwMTAxWhcNMjYwMjEwMTEwMTAxWjAzMTEwLwYDVQQD Eyg2MGQ1ZTI4MDI5NjE5YTFhYTlkZjRhZjMyMmQzY2YxYzc1ZmFlMjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWROXd4gvSuSUI2/ZcbrRylF85/4 XHvVA++iVncyvhbXGPml7AJ+6IDy1e3nobmiWVKGKtaX9OMRrFrFT37OJNj/lbdD c2g9otJ5Hh8AOzP2KJJtV3AvpKilLSMeqgv+VFaNkm/SQxqOglSOP6dOvDYS4GhY IRalD6NvDNV9Ae4ii/xgR9KHuxcDLCX9/6To5tzsKK7EqnIpMuNam9GB4Go/sYV2 5faL+qEhgcgkAOEEPJbUPWwuwF6oEoXSMDTEn7c1Y3bBy0Bb/fsnOtVTsmmillMP LRt0Tk+T4kLvSiZgLTgIdpVKX8wPAM0dkCM5ZcDY73zbJ30OQG6Kk5tcVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDV4oApYZoaqd9K8yLTzxx1+uI7MB8GA1UdIwQY MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovrsjmYc hDrLw9ULH27gRFXL2myWD69mPpUtoeSZ/LfpLSrpwvDza7v5+hz902DWQzYlFz50 AQeSQ0FvDiDZLFZoN86UdNkC+I/Wdp4rjDjroJoIZHhMcZy2ElxU76OhwNpQgJoA doKF1bD10hk7eZ9byet209ZE/y7w+mOPE5dnE5ISu3u0lYGGYlJwh+RzFLtjHMPo DTVPSe6rUplIpsxpP7mFUuin6I5mT9f2xmxgjk/hMcYCMS6ifcUM4qay2EzXnjYB G1vKnkeZQq3yMWGNcZD6Yt+i39hQ6CM/FvP2j3OboGwgTA5GBUK/BRx87U2/coBB ET3MG1ofFLVozg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:18 2026 by rpki-client