This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json) Hash identifier: eS62L5rugmRXU1mmzwHLmfrdydEGvTbZ2UerxS/WaJI= Subject key identifier: C8:3D:29:31:E7:50:18:52:CC:C4:EA:55:F6:0C:B5:8B:B6:1B:59:D9 Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Certificate serial: 019C41A2374E80002FF02CE53A7A8E50360D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft Manifest number: 0C62 Signing time: Mon 09 Feb 2026 09:01:15 +0000 Manifest this update: Mon 09 Feb 2026 09:01:15 +0000 Manifest next update: Tue 10 Feb 2026 09:01:15 +0000 Files and hashes: 1: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: dqlZZlqWxS4W2aAkc9UdhBTUAlAjy5OpvLPgrq/6sCw=) 2: s48bE7zPFBsdxI3PwTkDcvxFl10.roa (hash: LCQZLSRk+w6NsXbM56XYTWWTkMECSvsvXOz9oSXfsiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:37:4e:80:00:2f:f0:2c:e5:3a:7a:8e:50:36:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7 Validity Not Before: Feb 9 09:01:15 2026 GMT Not After : Feb 10 09:01:15 2026 GMT Subject: CN=c83d2931e7501852ccc4ea55f60cb58bb61b59d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:0e:20:6e:8b:43:ec:af:4c:11:9b:a9:77: 3b:28:d1:38:d3:e5:80:bf:33:38:ae:e5:f0:a6:be: b3:18:d0:ad:9b:71:0f:70:30:05:ee:b0:67:ce:64: 26:4a:33:81:de:19:1f:9d:5b:ce:3a:81:0d:4c:55: 01:65:81:7d:ce:09:74:02:6e:e0:76:0b:40:90:e3: 9e:76:d8:8c:df:5e:ab:18:23:d2:fc:c8:5f:cd:b6: b4:16:e7:85:bd:cf:87:97:7a:88:7f:78:c9:08:f1: e4:49:79:a7:2c:0f:82:ff:2b:85:d4:b5:34:a5:7d: a3:2c:d6:aa:3e:43:56:27:7b:91:22:82:d7:3f:67: 31:77:92:07:5d:99:56:00:e9:bc:f5:36:19:56:fd: 55:1a:8d:2e:46:34:f3:65:1e:83:d0:82:1a:3c:2f: 3c:76:1a:b6:49:40:09:27:d8:7b:18:33:ab:27:70: ff:1c:0a:92:04:ad:f0:fb:42:3e:3e:93:b3:16:e6: 0e:55:46:de:1a:04:c9:ac:1b:96:ec:17:da:b8:7b: ad:e8:b2:dd:52:8c:d0:7f:86:67:4e:48:cf:e0:07: ef:53:f8:52:46:7d:dd:19:67:3f:cd:17:cf:f2:1a: a7:e2:f9:3c:20:ed:99:c1:68:de:60:79:3b:fe:dc: 09:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:29:31:E7:50:18:52:CC:C4:EA:55:F6:0C:B5:8B:B6:1B:59:D9 X509v3 Authority Key Identifier: keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:13:eb:c7:7c:d3:4f:c6:61:66:69:52:ef:18:4c:f6:60:9b: 66:66:d6:e1:53:46:66:98:a9:41:c4:84:d9:3b:99:82:46:a6: 23:24:da:d2:7c:e6:c8:dc:8f:9d:86:78:79:69:ff:b0:3a:df: 8b:c8:91:87:71:f2:bc:34:bf:2d:98:a5:81:fe:7b:46:7e:14: 3d:47:96:50:fc:ac:dc:06:b8:3f:7a:41:50:50:2d:61:07:5a: 63:c9:8d:95:f0:ea:4c:b1:df:2c:ba:2d:a1:ff:4f:aa:d1:3e: 79:b1:4c:76:0c:49:16:85:80:78:2e:74:92:6e:b2:5f:68:6d: de:63:19:f9:96:e2:5d:79:42:3e:71:78:68:cf:96:8d:b8:ac: fa:72:92:0e:74:36:73:1e:11:13:28:88:03:62:b5:47:f3:0c: 97:3a:2f:ad:68:b1:a3:9c:98:3b:e2:04:98:9d:4c:5e:e4:58: bd:3d:7c:41:25:4e:5f:c3:46:c0:10:22:83:fb:2a:38:81:50: be:18:a1:e5:8c:fb:ce:84:57:11:b2:3a:29:44:9e:7a:d1:35: 7a:b6:eb:f5:f3:8f:ea:8f:9b:48:6a:06:64:ca:14:99:1b:e2: 94:47:61:8c:db:99:6a:14:fa:fa:f8:37:47:7e:f1:e7:86:67: aa:c2:97:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBojdOgAAv8CzlOnqOUDYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi M2VlYzcwHhcNMjYwMjA5MDkwMTE1WhcNMjYwMjEwMDkwMTE1WjAzMTEwLwYDVQQD EyhjODNkMjkzMWU3NTAxODUyY2NjNGVhNTVmNjBjYjU4YmI2MWI1OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpIOIG6LQ+yvTBGbqXc7KNE40+WA vzM4ruXwpr6zGNCtm3EPcDAF7rBnzmQmSjOB3hkfnVvOOoENTFUBZYF9zgl0Am7g dgtAkOOedtiM316rGCPS/Mhfzba0FueFvc+Hl3qIf3jJCPHkSXmnLA+C/yuF1LU0 pX2jLNaqPkNWJ3uRIoLXP2cxd5IHXZlWAOm89TYZVv1VGo0uRjTzZR6D0IIaPC88 dhq2SUAJJ9h7GDOrJ3D/HAqSBK3w+0I+PpOzFuYOVUbeGgTJrBuW7BfauHut6LLd UozQf4ZnTkjP4AfvU/hSRn3dGWc/zRfP8hqn4vk8IO2ZwWjeYHk7/twJVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg9KTHnUBhSzMTqVfYMtYu2G1nZMB8GA1UdIwQY MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRPrx3zT T8ZhZmlS7xhM9mCbZmbW4VNGZpipQcSE2TuZgkamIyTa0nzmyNyPnYZ4eWn/sDrf i8iRh3HyvDS/LZilgf57Rn4UPUeWUPys3Aa4P3pBUFAtYQdaY8mNlfDqTLHfLLot of9PqtE+ebFMdgxJFoWAeC50km6yX2ht3mMZ+ZbiXXlCPnF4aM+Wjbis+nKSDnQ2 cx4REyiIA2K1R/MMlzovrWixo5yYO+IEmJ1MXuRYvT18QSVOX8NGwBAig/sqOIFQ vhih5Yz7zoRXEbI6KUSeetE1erbr9fOP6o+bSGoGZMoUmRvilEdhjNuZahT6+vg3 R37x54ZnqsKXrw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:13 2026 by rpki-client