This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json) Hash identifier: XK/RyF0atHdE+oUJodrJWb/QxykZHEMABl8aP+rXlnM= Subject key identifier: 26:2A:87:2C:44:ED:C1:03:06:29:A7:44:1A:30:D8:82:61:DF:A1:7B Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019C4133944F008AAA54E3AB44BF94663389 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft Manifest number: 1346 Signing time: Mon 09 Feb 2026 07:00:25 +0000 Manifest this update: Mon 09 Feb 2026 07:00:25 +0000 Manifest next update: Tue 10 Feb 2026 07:00:25 +0000 Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=) 2: 5WVKFC0tIs3qECrATtHYfjSRy9U.roa (hash: 0laLmepgzK3PsoUCQzvdtjbDgKkvW1Qb5dCLcjPTJAs=) 3: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=) 4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: O8WvFJp1m5uqjYMNYFRVlMOqW5S/OJRslcltS8LQi5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:94:4f:00:8a:aa:54:e3:ab:44:bf:94:66:33:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Feb 9 07:00:25 2026 GMT Not After : Feb 10 07:00:25 2026 GMT Subject: CN=262a872c44edc1030629a7441a30d88261dfa17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:f0:09:e2:a6:47:10:6a:91:10:06:1d:c8: 15:01:13:a8:bb:72:61:b0:3d:3a:ec:89:fd:c2:d1: 1a:d2:92:c9:44:1f:1b:fe:db:9b:a0:ad:c5:23:bd: 79:e2:db:8c:e7:20:e7:6f:e7:ef:d5:c1:6f:29:38: 36:15:af:33:ed:a4:e4:46:ac:80:34:c2:6d:63:e8: 91:e6:f6:48:94:5f:7c:32:ed:84:8f:b5:43:2d:cc: 9c:34:e4:d3:00:ff:c2:e3:79:93:7f:ee:0f:09:0b: 59:cd:71:61:87:ba:2a:22:17:32:2e:32:8b:12:52: 56:22:c5:33:9c:17:f5:c9:1d:1a:e6:4d:6b:b0:4c: 8b:92:4a:52:3e:25:1c:d0:a3:dc:09:68:f4:aa:43: 4c:a8:87:bb:97:29:40:44:44:7c:b5:a4:44:3c:14: eb:5e:5a:80:d2:9d:15:c8:4b:93:25:fa:af:86:6b: dc:44:a6:a7:75:20:5a:bb:6d:97:60:51:06:af:e3: 2c:2c:49:1c:3f:45:cd:5e:9d:50:f3:f6:83:61:cb: 86:c7:90:df:88:75:f5:c4:80:8e:26:27:74:be:b8: 5f:09:93:c3:ba:19:d5:0f:ec:6c:93:e2:7d:dc:4a: 98:96:6f:71:8e:31:db:30:6d:bb:54:23:eb:0a:50: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:87:2C:44:ED:C1:03:06:29:A7:44:1A:30:D8:82:61:DF:A1:7B X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4a:1b:69:e5:86:b4:81:7e:39:51:53:b5:bb:a7:ee:27:8e: f0:97:9c:60:29:05:13:42:d0:b4:77:af:99:92:f6:50:ac:91: dd:4a:75:7b:91:d3:6f:b9:d4:d5:f0:f2:ab:ef:67:97:d7:6f: b9:4a:69:d8:4a:e8:b8:f0:62:cc:04:02:fd:7c:ab:e3:92:bb: 6e:73:a8:6a:7f:04:f5:1c:54:48:39:93:3b:e0:10:b7:b7:48: 54:c3:c7:f5:9f:a3:8c:30:bb:92:82:ff:7a:0f:30:8a:79:c1: df:4f:26:b5:02:45:59:f7:f7:16:25:93:eb:f0:4b:b2:e1:cc: 17:7a:9b:d9:e4:96:ed:4f:0d:32:39:7f:fc:48:ca:a0:67:3a: 28:24:30:45:af:9b:a5:a7:b8:d4:8d:88:3c:97:6f:8a:23:03: a9:8e:5c:75:63:8a:96:58:89:88:a1:e6:2e:41:e4:04:0e:da: 80:4e:69:c9:53:8f:a4:f1:76:30:e8:cc:05:1e:62:cb:44:6f: 5d:89:74:c8:55:78:d7:b9:d1:13:36:07:1d:68:5c:44:4a:7b: e0:66:d5:19:90:42:ef:9c:a1:cc:6d:62:09:58:7f:bf:14:b6: 77:3a:db:85:d1:25:58:27:56:eb:a4:57:62:40:af:07:57:5f: 73:6e:bb:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM5RPAIqqVOOrRL+UZjOJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjYwMjA5MDcwMDI1WhcNMjYwMjEwMDcwMDI1WjAzMTEwLwYDVQQD EygyNjJhODcyYzQ0ZWRjMTAzMDYyOWE3NDQxYTMwZDg4MjYxZGZhMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK7wCeKmRxBqkRAGHcgVAROou3Jh sD067In9wtEa0pLJRB8b/tuboK3FI7154tuM5yDnb+fv1cFvKTg2Fa8z7aTkRqyA NMJtY+iR5vZIlF98Mu2Ej7VDLcycNOTTAP/C43mTf+4PCQtZzXFhh7oqIhcyLjKL ElJWIsUznBf1yR0a5k1rsEyLkkpSPiUc0KPcCWj0qkNMqIe7lylARER8taREPBTr XlqA0p0VyEuTJfqvhmvcRKandSBau22XYFEGr+MsLEkcP0XNXp1Q8/aDYcuGx5Df iHX1xICOJid0vrhfCZPDuhnVD+xsk+J93EqYlm9xjjHbMG27VCPrClB3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYqhyxE7cEDBimnRBow2IJh36F7MB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0obaeWG tIF+OVFTtbun7ieO8JecYCkFE0LQtHevmZL2UKyR3Up1e5HTb7nU1fDyq+9nl9dv uUpp2ErouPBizAQC/Xyr45K7bnOoan8E9RxUSDmTO+AQt7dIVMPH9Z+jjDC7koL/ eg8winnB308mtQJFWff3FiWT6/BLsuHMF3qb2eSW7U8NMjl//EjKoGc6KCQwRa+b pae41I2IPJdviiMDqY5cdWOKlliJiKHmLkHkBA7agE5pyVOPpPF2MOjMBR5iy0Rv XYl0yFV417nREzYHHWhcREp74GbVGZBC75yhzG1iCVh/vxS2dzrbhdElWCdW66RX YkCvB1dfc267YQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:55 2026 by rpki-client