This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json) Hash identifier: JNvtJcvNcIhxKA1N9gj2NSLEVdKuqw0IwLD1ujwuEco= Subject key identifier: 6F:30:81:63:72:8B:83:0B:16:DD:A3:FD:5C:69:1A:25:20:7D:DC:8A Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424 Certificate serial: 019C42EB73401112F2B68B284B792A09DDAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft Manifest number: 0C60 Signing time: Mon 09 Feb 2026 15:00:52 +0000 Manifest this update: Mon 09 Feb 2026 15:00:52 +0000 Manifest next update: Tue 10 Feb 2026 15:00:52 +0000 Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: vu5ckxWvHgTBRZDTVJll/695H6fUtTRDznYBOsLCIms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:73:40:11:12:f2:b6:8b:28:4b:79:2a:09:dd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424 Validity Not Before: Feb 9 15:00:52 2026 GMT Not After : Feb 10 15:00:52 2026 GMT Subject: CN=6f308163728b830b16dda3fd5c691a25207ddc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:ed:e5:55:ec:51:c0:8d:eb:21:2a:42:75: ff:b2:8e:62:95:29:82:48:5d:8c:95:aa:8c:13:cd: 98:8e:bd:8c:c5:06:40:e0:bc:10:5d:60:8d:0b:9f: e0:66:09:d8:f6:2a:e4:61:80:c1:00:a7:39:d2:04: 79:c2:9a:bc:17:78:34:e5:56:32:03:06:d9:ca:36: 07:3f:8f:ee:51:41:90:e1:ff:63:b0:c4:2d:ed:a7: 73:3e:13:f1:6c:a1:9e:7b:26:64:b8:20:46:10:a4: b1:e9:06:01:07:6d:16:b1:08:49:bf:af:f3:ec:89: 07:48:4d:ff:58:6a:6c:8d:b0:f3:ad:f4:59:a8:a2: e0:d8:93:57:b5:dd:e3:1f:be:3a:6b:48:a5:c1:26: ba:44:96:df:75:ab:3f:90:4f:4e:6d:3b:8c:e4:81: 79:28:4e:04:94:1d:2b:06:e8:37:55:86:0d:7a:f6: e6:85:58:a2:aa:d1:aa:1c:99:30:a7:de:af:25:08: 2e:41:d1:8b:21:18:9e:30:cc:6f:ee:c9:bb:0d:eb: 99:56:1c:26:fa:b1:99:39:05:bc:0a:d1:7f:4a:d5: e2:64:9f:89:ab:6a:58:54:c2:ca:c5:9c:b4:36:d7: c2:27:2f:46:d5:fe:d5:d6:b5:47:9a:61:24:11:6a: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:30:81:63:72:8B:83:0B:16:DD:A3:FD:5C:69:1A:25:20:7D:DC:8A X509v3 Authority Key Identifier: keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ce:c1:5e:f6:4b:e2:3d:00:0f:14:ff:1d:b1:88:1e:2e:5d: b5:75:31:94:16:c4:d0:07:90:f9:25:cd:7c:f6:96:ff:bd:6d: 2f:9a:45:be:5d:89:85:63:cb:97:59:42:d7:6f:c1:5f:75:fc: e9:c7:6b:04:ec:96:0a:fe:8a:da:61:bb:8f:ec:73:43:72:af: 05:5e:10:1d:b9:c0:99:1b:00:45:51:5f:e0:40:30:12:70:62: 07:33:94:d3:41:f3:d2:8f:0d:92:ee:e7:c8:fc:9b:ee:b9:9b: d6:43:6e:ae:2f:2e:2b:a8:77:43:99:33:34:0a:5e:d4:71:43: 47:66:95:a1:16:31:88:9a:30:96:79:33:59:05:09:2d:55:7a: fd:44:aa:a2:ec:e5:9f:ed:16:c4:f7:d8:30:06:7f:0f:65:5c: af:b2:ee:d5:4d:30:fc:c1:d8:28:d2:f9:ce:b5:e5:26:0d:41: 47:f3:ad:4a:2d:f4:d0:8a:21:f9:1d:88:ac:8f:95:a6:80:82: 2f:f4:86:be:34:26:36:c4:52:ce:25:61:6b:fa:c7:d0:21:79: 72:bb:4a:f2:c6:a8:a0:e7:4a:22:9d:82:16:87:96:d7:ca:ec: cd:61:e1:62:f9:67:f2:18:97:f7:a1:e5:0f:64:24:3b:3d:86: 7f:3c:57:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63NAERLytosoS3kqCd2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm NmM0MjQwHhcNMjYwMjA5MTUwMDUyWhcNMjYwMjEwMTUwMDUyWjAzMTEwLwYDVQQD Eyg2ZjMwODE2MzcyOGI4MzBiMTZkZGEzZmQ1YzY5MWEyNTIwN2RkYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Pt5VXsUcCN6yEqQnX/so5ilSmC SF2MlaqME82Yjr2MxQZA4LwQXWCNC5/gZgnY9irkYYDBAKc50gR5wpq8F3g05VYy AwbZyjYHP4/uUUGQ4f9jsMQt7adzPhPxbKGeeyZkuCBGEKSx6QYBB20WsQhJv6/z 7IkHSE3/WGpsjbDzrfRZqKLg2JNXtd3jH746a0ilwSa6RJbfdas/kE9ObTuM5IF5 KE4ElB0rBug3VYYNevbmhViiqtGqHJkwp96vJQguQdGLIRieMMxv7sm7DeuZVhwm +rGZOQW8CtF/StXiZJ+Jq2pYVMLKxZy0NtfCJy9G1f7V1rVHmmEkEWpAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8wgWNyi4MLFt2j/VxpGiUgfdyKMB8GA1UdIwQY MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs7BXvZL 4j0ADxT/HbGIHi5dtXUxlBbE0AeQ+SXNfPaW/71tL5pFvl2JhWPLl1lC12/BX3X8 6cdrBOyWCv6K2mG7j+xzQ3KvBV4QHbnAmRsARVFf4EAwEnBiBzOU00Hz0o8Nku7n yPyb7rmb1kNuri8uK6h3Q5kzNApe1HFDR2aVoRYxiJowlnkzWQUJLVV6/USqouzl n+0WxPfYMAZ/D2Vcr7Lu1U0w/MHYKNL5zrXlJg1BR/OtSi300Ioh+R2IrI+VpoCC L/SGvjQmNsRSziVha/rH0CF5crtK8saooOdKIp2CFoeW18rszWHhYvln8hiX96Hl D2QkOz2GfzxXpA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:11 2026 by rpki-client