This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json) Hash identifier: c1t/gIVVnuOoDlNOPjhcUthIgzWoeoZz/2TKOeiUEtM= Subject key identifier: 35:D7:E5:2A:A1:BD:45:D2:58:58:F6:BA:45:AA:6B:43:5D:40:31:49 Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0 Certificate serial: 019C43C6A58183E06296FDBEA30B9496D0A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft Manifest number: 12BD Signing time: Mon 09 Feb 2026 19:00:17 +0000 Manifest this update: Mon 09 Feb 2026 19:00:17 +0000 Manifest next update: Tue 10 Feb 2026 19:00:17 +0000 Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: hBJXTJUxnoxrpuL/fgD7MvKdimNq1/fhtZIwkEosYqw=) 2: _bNCiGJxahmWNfuieBMbkzGV9Ow.roa (hash: jgB/46kLWrM8U+ephCXoLnuepJdYT1yvSIychEW3MaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:a5:81:83:e0:62:96:fd:be:a3:0b:94:96:d0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0 Validity Not Before: Feb 9 19:00:17 2026 GMT Not After : Feb 10 19:00:17 2026 GMT Subject: CN=35d7e52aa1bd45d25858f6ba45aa6b435d403149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:c7:4d:93:c7:18:a4:8b:46:c0:f0:3f:9d: 6b:d7:d4:a2:9c:61:53:b1:28:9d:0c:42:35:69:45: f3:06:9f:0e:f1:1b:0e:5e:85:dc:57:fc:98:a1:d4: 0f:41:e4:09:01:06:b3:12:5b:39:a9:21:0d:92:4a: 92:7f:a9:7f:2f:45:f7:24:01:aa:96:bb:39:c0:af: e8:82:e2:24:84:2b:45:71:38:bb:b5:1a:45:75:1d: e2:b9:49:fb:77:21:02:4a:5c:2b:40:7a:c3:4f:4b: 3b:ee:e7:25:b2:13:82:42:4b:85:89:a2:44:d8:41: 27:e8:75:f9:c9:89:a2:1d:70:1e:f0:62:c8:79:8b: 82:cc:d7:36:06:20:b6:44:84:40:cf:0a:31:42:4f: 0b:e1:91:33:ac:cc:6b:71:b7:c6:40:c1:ef:a2:68: dc:bf:00:1d:0f:0f:4a:b6:8e:68:55:20:c4:2d:66: 9e:ca:79:34:59:11:8c:75:55:53:67:47:ab:d1:25: af:b9:f0:e0:42:ca:66:44:5a:ef:e0:fd:b3:96:98: c7:82:17:ee:61:a7:44:d3:8c:e3:a1:06:63:08:8e: 29:50:cc:12:a6:a0:3d:9d:1d:0b:dd:93:bf:28:23: fb:e5:c1:e5:c0:e6:84:0a:0f:21:5b:e2:b3:08:04: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D7:E5:2A:A1:BD:45:D2:58:58:F6:BA:45:AA:6B:43:5D:40:31:49 X509v3 Authority Key Identifier: keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:c3:43:94:bb:9a:ce:1e:2f:a8:13:10:b6:0c:a5:a2:c9: cd:88:df:01:4c:c1:a9:cd:f8:56:0a:6b:4d:3d:81:10:a4:58: 2f:1d:b4:80:44:b0:d4:de:2a:b8:52:2e:0b:c3:80:41:cf:20: 7d:7f:5d:d6:c5:a0:a7:24:86:a5:60:12:45:f7:97:a5:00:6c: a0:54:74:9c:8f:68:0a:d4:43:92:39:01:4a:43:0e:86:15:92: 92:42:aa:1c:e3:d4:84:43:bf:3f:a9:45:61:e2:0f:76:f5:da: d7:14:e2:c9:18:5d:b5:e8:ed:ff:69:f5:df:7e:7b:00:ce:4e: ab:66:45:fb:d2:25:ce:55:10:0f:f4:86:1b:cc:3b:83:95:92: 93:a9:15:00:34:5b:9d:14:82:94:91:3a:b1:86:2b:81:c4:08: ff:7c:43:d1:7a:fd:bf:f1:37:81:ca:5a:e8:be:49:2f:b5:38: 34:10:9f:85:c2:71:9d:d7:dc:d5:01:cc:aa:8d:3b:87:9a:ab: f6:f5:33:69:a3:18:7f:a0:24:bf:ac:ac:7f:da:4b:43:29:2d: 7c:73:f3:d0:73:fc:a6:22:4d:c6:8a:0e:80:49:89:98:07:d4: 2c:77:78:ab:33:9c:e1:df:70:e7:d3:a1:88:0d:3a:dc:4d:f9: f8:9c:20:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxqWBg+Bilv2+owuUltCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzUyMDMxNTFkM2IyM2VjY2NiNjRmNTIwZmI0MjU0OTg2 MGNmZjAwHhcNMjYwMjA5MTkwMDE3WhcNMjYwMjEwMTkwMDE3WjAzMTEwLwYDVQQD EygzNWQ3ZTUyYWExYmQ0NWQyNTg1OGY2YmE0NWFhNmI0MzVkNDAzMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnTHTZPHGKSLRsDwP51r19SinGFT sSidDEI1aUXzBp8O8RsOXoXcV/yYodQPQeQJAQazEls5qSENkkqSf6l/L0X3JAGq lrs5wK/oguIkhCtFcTi7tRpFdR3iuUn7dyECSlwrQHrDT0s77uclshOCQkuFiaJE 2EEn6HX5yYmiHXAe8GLIeYuCzNc2BiC2RIRAzwoxQk8L4ZEzrMxrcbfGQMHvomjc vwAdDw9Kto5oVSDELWaeynk0WRGMdVVTZ0er0SWvufDgQspmRFrv4P2zlpjHghfu YadE04zjoQZjCI4pUMwSpqA9nR0L3ZO/KCP75cHlwOaECg8hW+KzCARl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXX5SqhvUXSWFj2ukWqa0NdQDFJMB8GA1UdIwQY MBaAFF91IDFR07I+zMtk9SD7QlSYYM/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgt MDlkZDRjMjhiMWU0LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgtMDlkZDRjMjhiMWU0 LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbXDQ5S7 ms4eL6gTELYMpaLJzYjfAUzBqc34VgprTT2BEKRYLx20gESw1N4quFIuC8OAQc8g fX9d1sWgpySGpWASRfeXpQBsoFR0nI9oCtRDkjkBSkMOhhWSkkKqHOPUhEO/P6lF YeIPdvXa1xTiyRhdtejt/2n13357AM5Oq2ZF+9IlzlUQD/SGG8w7g5WSk6kVADRb nRSClJE6sYYrgcQI/3xD0Xr9v/E3gcpa6L5JL7U4NBCfhcJxndfc1QHMqo07h5qr 9vUzaaMYf6Akv6ysf9pLQyktfHPz0HP8piJNxooOgEmJmAfULHd4qzOc4d9w59Oh iA063E35+Jwgkg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:09 2026 by rpki-client