This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json) Hash identifier: slo2WeanhxITfZjxdjgi/ElCKFc7VtoNDJV+Gc6Xiso= Subject key identifier: DC:BA:67:A3:6D:F8:B4:76:BB:D5:37:0B:55:16:C2:DF:42:BF:B0:05 Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019C420FC8B245234D3A8C540C6E275A8451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft Manifest number: 0B32 Signing time: Mon 09 Feb 2026 11:00:56 +0000 Manifest this update: Mon 09 Feb 2026 11:00:56 +0000 Manifest next update: Tue 10 Feb 2026 11:00:56 +0000 Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=) 2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: za/4290rBDRDh/rcb5c27ZvC9dKTyHdNxZWv4wgqw6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:c8:b2:45:23:4d:3a:8c:54:0c:6e:27:5a:84:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Feb 9 11:00:56 2026 GMT Not After : Feb 10 11:00:56 2026 GMT Subject: CN=dcba67a36df8b476bbd5370b5516c2df42bfb005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:96:51:e1:56:10:02:18:5e:74:65:86:04: 0d:08:0c:98:9e:d8:12:a1:cb:5e:4d:76:d6:c6:cc: 72:a9:9d:fe:3f:83:ce:1c:39:01:6b:df:b3:e4:4d: 21:eb:ba:54:2e:e5:6d:b5:ae:29:89:85:ee:30:1f: f9:e8:df:2c:cc:08:46:ad:62:05:b3:92:6c:cf:6c: 50:22:ef:99:fd:f1:ee:f7:58:85:21:1a:eb:34:1a: 8a:0b:6b:eb:aa:45:f0:66:23:c6:66:64:68:28:28: a4:7a:01:91:3e:86:b4:6b:d0:83:10:2a:ab:e3:66: 53:74:48:02:77:0a:14:b0:6d:d6:40:aa:55:0f:79: e4:ba:91:7e:b4:58:cc:d6:62:7d:b3:d5:21:2d:f8: 91:f1:a7:33:72:93:52:1d:a8:6a:b1:39:d9:a1:0b: 32:c5:3f:64:7c:ea:84:d2:d9:6f:a0:f6:59:7c:8c: 27:56:5f:46:42:2f:00:36:b0:54:cf:ec:7e:dd:3d: 22:87:1a:e3:08:5a:99:57:85:fc:1e:38:cb:76:95: d5:2d:82:25:c2:d7:2f:6d:4e:2f:5e:0f:63:63:5d: 16:ce:2d:0c:ae:13:e7:b7:e6:70:f3:0d:b3:a2:54: ce:5f:a5:1a:bd:cf:fe:50:c0:46:9d:ad:7b:aa:5a: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BA:67:A3:6D:F8:B4:76:BB:D5:37:0B:55:16:C2:DF:42:BF:B0:05 X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:33:f9:af:04:35:9b:f9:9c:f7:e5:74:1c:f0:a5:3c:a5:9d: 3c:25:40:d5:19:2b:73:ce:1f:a8:8f:84:40:91:34:65:08:cc: 32:82:0b:43:44:cd:6b:fd:1b:ef:61:5e:5f:b7:56:1f:40:1a: 55:38:95:2c:e4:2b:10:c8:74:f4:3d:84:64:37:33:5f:1b:94: 7f:31:b8:ff:09:ca:46:f8:78:2b:27:74:79:f2:13:d7:94:a1: 1e:5a:b5:c5:4c:cf:2c:a0:01:e0:bd:d7:02:c6:3b:cd:3d:74: 6a:26:5f:35:69:2a:6d:76:0e:9e:4b:a8:60:c8:70:c7:cf:fe: 7e:d2:f1:11:ac:8e:fc:2b:1a:ba:84:94:c9:42:74:a7:9b:f5: f3:68:e4:a1:b3:96:14:e2:ee:80:82:44:a6:1f:d1:8d:89:98: a3:56:19:84:f8:2d:05:48:07:0c:78:10:7d:1b:a0:1b:c5:1d: ec:06:f2:1c:f4:94:a9:04:48:a7:65:4b:2c:a1:31:8e:a2:84: bd:5b:92:41:da:7e:0b:f3:39:28:fa:60:6c:cb:30:12:bb:c4: af:41:0d:a0:8a:08:19:8d:9a:b0:f6:7d:a1:87:69:06:29:d0: 2d:bf:02:8b:f9:b4:65:eb:34:fe:ba:24:89:8b:0a:d3:74:1d: d3:b2:d9:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8iyRSNNOoxUDG4nWoRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD EyhkY2JhNjdhMzZkZjhiNDc2YmJkNTM3MGI1NTE2YzJkZjQyYmZiMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpOWUeFWEAIYXnRlhgQNCAyYntgS octeTXbWxsxyqZ3+P4POHDkBa9+z5E0h67pULuVtta4piYXuMB/56N8szAhGrWIF s5Jsz2xQIu+Z/fHu91iFIRrrNBqKC2vrqkXwZiPGZmRoKCikegGRPoa0a9CDECqr 42ZTdEgCdwoUsG3WQKpVD3nkupF+tFjM1mJ9s9UhLfiR8aczcpNSHahqsTnZoQsy xT9kfOqE0tlvoPZZfIwnVl9GQi8ANrBUz+x+3T0ihxrjCFqZV4X8HjjLdpXVLYIl wtcvbU4vXg9jY10Wzi0MrhPnt+Zw8w2zolTOX6Uavc/+UMBGna17qloe7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy6Z6Nt+LR2u9U3C1UWwt9Cv7AFMB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETP5rwQ1 m/mc9+V0HPClPKWdPCVA1Rkrc84fqI+EQJE0ZQjMMoILQ0TNa/0b72FeX7dWH0Aa VTiVLOQrEMh09D2EZDczXxuUfzG4/wnKRvh4Kyd0efIT15ShHlq1xUzPLKAB4L3X AsY7zT10aiZfNWkqbXYOnkuoYMhwx8/+ftLxEayO/CsauoSUyUJ0p5v182jkobOW FOLugIJEph/RjYmYo1YZhPgtBUgHDHgQfRugG8Ud7AbyHPSUqQRIp2VLLKExjqKE vVuSQdp+C/M5KPpgbMswErvEr0ENoIoIGY2asPZ9oYdpBinQLb8Ci/m0Zes0/rok iYsK03Qd07LZVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:42 2026 by rpki-client