This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: fuCWkjstfKIJvWVdP5NT/yRuIk4vUF2MSUvR0MTvzYU= Subject key identifier: 7B:DE:D5:E0:70:93:13:CB:8C:AB:5C:AF:98:02:72:69:4C:87:AF:5D Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019C42B47AC395DDC90C7C33B81FF5B613B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=) 2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: MhLlCXEHYUBiw5DvwQgkDxHZFzSzNI/8MV1Ia+Rivlo=) 3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7a:c3:95:dd:c9:0c:7c:33:b8:1f:f5:b6:13:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=7bded5e0709313cb8cab5caf980272694c87af5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:74:eb:83:0e:0a:18:83:ee:cf:42:f5:8d: ec:04:6d:47:90:06:86:60:49:f1:39:20:4a:15:fc: b4:ac:b7:22:ad:3b:db:92:ce:ea:03:90:ec:db:72: e4:6d:e7:78:ea:33:45:b9:62:9b:b6:d0:34:49:be: 9c:bc:a2:01:99:03:f8:c9:1e:24:90:6c:05:3a:24: c5:e3:14:37:fa:a7:15:a4:56:51:d5:90:fe:40:a7: e6:a1:85:53:0f:18:02:cc:7f:0c:21:4d:d0:cb:c4: d3:6b:16:8a:cf:f5:45:2e:b3:c2:6d:44:93:ac:65: d5:37:98:37:42:8d:c8:6d:f0:ce:f3:15:f5:43:b8: 0c:7a:6f:06:db:dc:69:67:23:81:9a:f8:fe:27:7e: 71:bd:ad:36:85:07:e4:73:b4:20:34:4e:4d:e2:08: cb:00:f2:88:0e:9e:3b:5e:eb:ea:21:0a:2e:ae:0e: 13:f0:a9:0e:27:bd:0e:aa:13:2d:48:fe:fd:c7:51: 21:45:ae:96:b9:50:52:2d:d7:84:77:99:2a:b0:3b: 40:8e:9c:26:9d:13:75:9d:d1:28:d1:f5:18:67:dd: 14:5d:d9:5d:bc:97:fa:4b:5a:61:40:0e:30:96:a3: 44:3e:55:f8:ba:4c:b3:b3:61:0a:d5:77:11:55:2d: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DE:D5:E0:70:93:13:CB:8C:AB:5C:AF:98:02:72:69:4C:87:AF:5D X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:38:a8:b2:44:8a:33:fa:f7:db:7d:5f:ae:78:7f:86:10:a8: 33:4b:c8:c8:fa:49:d4:fa:59:40:aa:2e:48:66:20:f0:44:86: 34:28:f7:c7:8c:c5:a4:5a:4d:61:b0:fd:4f:7c:4c:3e:df:9e: c4:5f:30:1d:e3:94:b5:cc:7c:dc:0b:c5:c6:96:95:16:89:20: 68:98:8b:2e:98:de:54:d6:c8:40:96:dd:8a:5a:0a:24:7c:b3: cc:4e:00:28:56:30:4a:89:33:32:70:4b:f2:e2:08:bf:e7:f5: 82:c9:38:9d:c2:da:c8:05:45:43:a7:6e:80:49:d6:3b:ff:18: 4b:36:d7:d6:03:9f:46:cc:a5:d2:30:39:89:9c:05:4b:c3:01: a7:b9:a3:a3:9d:d5:00:77:c4:7b:d9:8a:08:4e:97:4e:14:9b: dc:85:1d:50:0f:60:4c:af:09:f8:8c:eb:f1:b8:81:c7:20:cd: fd:e7:86:87:c2:2c:1b:34:1a:a1:39:5a:c3:39:4c:91:19:24: ab:32:4b:b4:2f:65:14:2c:2d:9c:d1:58:65:ba:f3:57:52:6b: 9f:d4:d6:35:c5:ac:8c:c3:1b:e8:fd:61:12:e3:10:63:51:3a: b3:f8:01:78:83:76:9b:eb:a0:59:88:29:85:e3:ff:8c:13:2f: f7:1a:c8:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHrDld3JDHwzuB/1thO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD Eyg3YmRlZDVlMDcwOTMxM2NiOGNhYjVjYWY5ODAyNzI2OTRjODdhZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZd064MOChiD7s9C9Y3sBG1HkAaG YEnxOSBKFfy0rLcirTvbks7qA5Ds23Lkbed46jNFuWKbttA0Sb6cvKIBmQP4yR4k kGwFOiTF4xQ3+qcVpFZR1ZD+QKfmoYVTDxgCzH8MIU3Qy8TTaxaKz/VFLrPCbUST rGXVN5g3Qo3IbfDO8xX1Q7gMem8G29xpZyOBmvj+J35xva02hQfkc7QgNE5N4gjL APKIDp47XuvqIQourg4T8KkOJ70OqhMtSP79x1EhRa6WuVBSLdeEd5kqsDtAjpwm nRN1ndEo0fUYZ90UXdldvJf6S1phQA4wlqNEPlX4ukyzs2EK1XcRVS35SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHve1eBwkxPLjKtcr5gCcmlMh69dMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzioskSK M/r3231frnh/hhCoM0vIyPpJ1PpZQKouSGYg8ESGNCj3x4zFpFpNYbD9T3xMPt+e xF8wHeOUtcx83AvFxpaVFokgaJiLLpjeVNbIQJbdiloKJHyzzE4AKFYwSokzMnBL 8uIIv+f1gsk4ncLayAVFQ6dugEnWO/8YSzbX1gOfRsyl0jA5iZwFS8MBp7mjo53V AHfEe9mKCE6XThSb3IUdUA9gTK8J+Izr8biBxyDN/eeGh8IsGzQaoTlawzlMkRkk qzJLtC9lFCwtnNFYZbrzV1Jrn9TWNcWsjMMb6P1hEuMQY1E6s/gBeIN2m+ugWYgp heP/jBMv9xrITg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:25 2026 by rpki-client