This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json) Hash identifier: gpUlckQeOWtQoAUGSMY9xfJEqdu0j8kYwe251E66iQg= Subject key identifier: 00:1B:01:2B:2C:20:A2:AE:7C:8D:B0:C9:ED:57:27:67:88:49:27:28 Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Certificate serial: 019C4322F31F76D58ED75346BBDBB62A5FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft Manifest number: 052B Signing time: Mon 09 Feb 2026 16:01:29 +0000 Manifest this update: Mon 09 Feb 2026 16:01:29 +0000 Manifest next update: Tue 10 Feb 2026 16:01:29 +0000 Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=) 2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: iOmz3ztbCvb2eSiVwsvW6TqK6KqzgC+L4nwg77o7JrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f3:1f:76:d5:8e:d7:53:46:bb:db:b6:2a:5f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Validity Not Before: Feb 9 16:01:29 2026 GMT Not After : Feb 10 16:01:29 2026 GMT Subject: CN=001b012b2c20a2ae7c8db0c9ed57276788492728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:55:73:30:cc:5e:78:27:86:74:6e:ad:24: 64:7c:b1:1f:e8:91:b5:a8:97:a1:60:dc:f0:17:26: 8e:18:fb:a7:4c:37:59:3b:e7:80:62:ed:1a:94:3e: 90:2e:b2:49:94:15:bb:c0:d7:17:e8:66:3d:f5:0d: 69:4e:f7:05:15:09:52:6d:fe:f2:e1:3c:b7:e0:77: cf:37:1e:b2:a9:5e:ce:19:cf:df:09:8c:24:44:c1: 49:9b:66:41:aa:14:be:64:a9:35:75:d8:9e:82:56: 0b:54:97:0e:40:f2:ee:f3:6d:fb:d3:be:bc:a4:ba: b0:1a:cb:23:58:7c:3f:68:2f:ba:87:db:43:9b:26: ff:ec:1d:84:5a:fb:9b:dd:9c:4f:d9:7a:da:0d:68: c4:81:f5:76:09:89:0b:77:f4:29:39:0e:86:79:db: 81:f4:e3:d1:1e:56:df:b8:31:35:9c:a6:ee:84:9f: d1:18:6f:ef:d7:98:a3:33:36:d1:16:47:53:25:12: 00:7b:48:cb:d5:8c:3f:e0:4f:a2:6e:0c:95:a5:79: b0:b2:79:bc:89:a4:73:b9:93:ce:92:e8:3b:c4:d7: 05:24:c9:3d:4d:9d:09:5f:a2:cf:5c:b0:b4:ca:b6: 25:99:3c:2f:2c:0c:34:c8:97:44:f7:02:e4:15:75: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1B:01:2B:2C:20:A2:AE:7C:8D:B0:C9:ED:57:27:67:88:49:27:28 X509v3 Authority Key Identifier: keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:7f:0f:9e:05:0f:20:05:22:4a:a7:4f:04:29:e1:ac:b2: 77:a2:75:65:9d:dd:20:9d:a7:12:71:8d:2d:1f:9c:43:ad:d7: be:08:31:a4:d2:16:19:03:46:f7:03:d9:83:71:08:43:e7:e7: b8:41:6c:a7:d4:91:d7:93:bb:bb:b9:40:ed:5b:ec:aa:ac:c3: 97:54:b8:f7:55:1e:ae:f3:e2:96:58:e1:23:92:76:4f:9b:c8: ef:28:59:9e:67:9c:34:32:c1:17:b9:c2:e5:b6:95:77:e8:65: be:6c:21:2b:c4:50:56:28:b3:02:00:d1:d9:4e:a4:09:b7:d0: 2a:3e:d2:c6:ad:bf:e8:13:17:59:24:42:3e:1a:4d:97:de:ac: 1b:d7:43:67:b4:f2:3b:cb:a3:c4:15:2e:87:87:f2:f2:83:0a: dc:f9:c3:cc:1d:8c:f8:06:f7:5c:5c:82:e8:36:44:ae:72:91: a4:1c:7f:dc:aa:f1:64:0d:95:dc:0b:66:ef:94:a8:e5:2c:4e: e5:ce:f9:bc:85:64:b2:ec:31:d1:75:fd:32:0e:cc:b6:0f:a9: a5:3c:0d:c1:57:77:34:18:12:9f:3c:e5:ff:cf:79:8f:21:68: de:5f:18:6d:f9:2e:3a:89:9d:31:c0:24:81:0e:08:e3:98:fe: d3:be:91:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvMfdtWO11NGu9u2Kl/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ1NzM3MjRjYjFjMDk1YjliNjFiMmRmMDVlZTNmYzFh ODcxNmQwHhcNMjYwMjA5MTYwMTI5WhcNMjYwMjEwMTYwMTI5WjAzMTEwLwYDVQQD EygwMDFiMDEyYjJjMjBhMmFlN2M4ZGIwYzllZDU3Mjc2Nzg4NDkyNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrJVczDMXngnhnRurSRkfLEf6JG1 qJehYNzwFyaOGPunTDdZO+eAYu0alD6QLrJJlBW7wNcX6GY99Q1pTvcFFQlSbf7y 4Ty34HfPNx6yqV7OGc/fCYwkRMFJm2ZBqhS+ZKk1ddieglYLVJcOQPLu82370768 pLqwGssjWHw/aC+6h9tDmyb/7B2EWvub3ZxP2XraDWjEgfV2CYkLd/QpOQ6GeduB 9OPRHlbfuDE1nKbuhJ/RGG/v15ijMzbRFkdTJRIAe0jL1Yw/4E+ibgyVpXmwsnm8 iaRzuZPOkug7xNcFJMk9TZ0JX6LPXLC0yrYlmTwvLAw0yJdE9wLkFXUBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAbASssIKKufI2wye1XJ2eISScoMB8GA1UdIwQY MBaAFMYtVzckyxwJW5thst8F7j/BqHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgt ZjY3ZWNjNTg1YmI4LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgtZjY3ZWNjNTg1YmI4 LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB5/D54F DyAFIkqnTwQp4ayyd6J1ZZ3dIJ2nEnGNLR+cQ63XvggxpNIWGQNG9wPZg3EIQ+fn uEFsp9SR15O7u7lA7VvsqqzDl1S491UervPilljhI5J2T5vI7yhZnmecNDLBF7nC 5baVd+hlvmwhK8RQViizAgDR2U6kCbfQKj7Sxq2/6BMXWSRCPhpNl96sG9dDZ7Ty O8ujxBUuh4fy8oMK3PnDzB2M+Ab3XFyC6DZErnKRpBx/3KrxZA2V3Atm75So5SxO 5c75vIVksuwx0XX9Mg7Mtg+ppTwNwVd3NBgSnzzl/895jyFo3l8YbfkuOomdMcAk gQ4I45j+076RdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:47 2026 by rpki-client