This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json) Hash identifier: 9yO+zLDqJW9kelFjBvOvIXL/pMy4+0f0q9HefNZKGms= Subject key identifier: 20:CC:DE:B1:EF:0C:F6:99:EA:35:78:75:DE:90:02:9C:4D:EF:C3:6A Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f Certificate serial: 019C427D52E2EE80B50C409B5C29D0E1B88C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft Manifest number: 06C4 Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=) 2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: H68bjrY7A2NmVgFDPotbqtclpaZ2W8OZD1zKzdq2hAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:52:e2:ee:80:b5:0c:40:9b:5c:29:d0:e1:b8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=20ccdeb1ef0cf699ea357875de90029c4defc36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:ae:bb:08:61:e7:1d:56:8d:06:97:dd:e6: c4:b3:97:43:f6:a3:98:9d:a8:dc:a2:dc:1c:b5:05: f7:8f:a4:6c:d4:6a:ba:c7:f2:95:b0:40:95:e6:db: 8c:b2:0c:91:81:fd:0f:6b:f2:a2:6b:b6:b9:1f:5f: da:74:57:18:84:82:ff:73:d0:f6:6c:82:f4:19:51: 21:01:df:0c:30:45:3b:b5:af:8f:5d:7e:4e:61:95: c5:0f:e3:55:92:8a:f6:ab:2f:9b:9d:9b:68:8e:4f: 90:6e:4e:4b:45:dc:91:28:88:7d:8e:73:bf:a0:b1: 5e:91:53:89:bc:94:e1:d1:99:55:dc:6e:fe:be:4f: 38:e3:ab:d2:d2:3f:5a:81:ea:1e:1e:03:b4:7d:78: 98:dd:01:18:03:41:51:f4:ac:66:a0:19:aa:96:65: 31:73:94:2c:54:0d:86:16:f7:3d:99:2e:0a:90:c9: bf:82:ce:fc:27:d2:37:17:a9:b6:55:a8:89:e2:76: a3:90:d7:69:32:a7:cc:f4:99:b1:28:a1:24:d3:95: 4e:e3:d7:68:a6:f3:dc:01:a1:99:ef:61:2c:54:0f: e2:7f:29:99:c4:41:b4:1d:aa:d8:5a:a0:1e:fa:6e: f1:c5:80:92:99:c8:ab:3c:ef:65:e6:37:41:29:ea: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CC:DE:B1:EF:0C:F6:99:EA:35:78:75:DE:90:02:9C:4D:EF:C3:6A X509v3 Authority Key Identifier: keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8a:37:2b:b8:28:bc:36:c1:fd:c3:33:a7:1f:9b:0d:85:6e: 1b:e4:16:8b:fd:45:3e:c4:b4:75:28:21:1b:2a:fa:80:3a:28: 7e:eb:1e:71:32:e3:86:55:c9:55:78:e0:e9:b3:f2:44:d3:5b: e9:30:9a:ca:1f:f6:22:84:65:b4:2f:45:23:53:d7:37:5f:52: 1c:6e:53:2a:9f:a3:36:fc:2b:2d:e6:75:2c:f5:2b:08:c4:a1: 4a:7a:5e:81:dd:6a:9a:9a:91:9d:14:80:db:e0:61:82:a8:bb: be:ca:7b:d0:77:dd:00:51:5f:4f:76:22:de:4e:ee:1b:24:0c: 5b:ec:0f:5b:8c:f6:8e:63:52:43:8f:07:7c:ab:dd:4e:db:4e: 9e:04:9e:58:e1:45:1d:c5:70:59:32:cc:53:46:86:71:c8:41: 46:cc:2d:22:48:26:85:d0:00:f7:d7:ff:59:60:e5:dd:52:87: 0b:a7:e8:b8:4f:d4:fb:ad:50:83:93:7a:14:ec:f6:e9:16:71: 67:c0:df:44:3d:b2:ae:50:c6:e1:62:b6:bc:f3:38:76:4f:5f: 4e:57:3a:df:42:1c:aa:9f:c9:f7:86:af:0d:fb:88:9e:9a:60: e0:10:a4:06:78:23:4f:de:cb:93:68:a3:e0:13:3d:03:0b:85: 02:62:fd:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVLi7oC1DECbXCnQ4biMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1 MzRiOGYwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EygyMGNjZGViMWVmMGNmNjk5ZWEzNTc4NzVkZTkwMDI5YzRkZWZjMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJyuuwhh5x1WjQaX3ebEs5dD9qOY najcotwctQX3j6Rs1Gq6x/KVsECV5tuMsgyRgf0Pa/Kia7a5H1/adFcYhIL/c9D2 bIL0GVEhAd8MMEU7ta+PXX5OYZXFD+NVkor2qy+bnZtojk+Qbk5LRdyRKIh9jnO/ oLFekVOJvJTh0ZlV3G7+vk8446vS0j9ageoeHgO0fXiY3QEYA0FR9KxmoBmqlmUx c5QsVA2GFvc9mS4KkMm/gs78J9I3F6m2VaiJ4najkNdpMqfM9JmxKKEk05VO49do pvPcAaGZ72EsVA/ifymZxEG0HarYWqAe+m7xxYCSmcirPO9l5jdBKerbowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDM3rHvDPaZ6jV4dd6QApxN78NqMB8GA1UdIwQY MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4 LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoo3K7go vDbB/cMzpx+bDYVuG+QWi/1FPsS0dSghGyr6gDoofusecTLjhlXJVXjg6bPyRNNb 6TCayh/2IoRltC9FI1PXN19SHG5TKp+jNvwrLeZ1LPUrCMShSnpegd1qmpqRnRSA 2+Bhgqi7vsp70HfdAFFfT3Yi3k7uGyQMW+wPW4z2jmNSQ48HfKvdTttOngSeWOFF HcVwWTLMU0aGcchBRswtIkgmhdAA99f/WWDl3VKHC6fouE/U+61Qg5N6FOz26RZx Z8DfRD2yrlDG4WK2vPM4dk9fTlc630Icqp/J94avDfuInppg4BCkBngjT97Lk2ij 4BM9AwuFAmL9iw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:08 2026 by rpki-client