This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft File: xykw_A7V-O90yB7YYTnHPl1a2FU.mft (raw, json) Hash identifier: rnkri4JAWXVNcvwsIg8HH9Kc4y3pMdi7VvIg17H3ZqA= Subject key identifier: 4E:1A:A2:16:FE:2A:38:24:AB:50:1C:FA:B1:43:89:15:AC:6B:A8:AB Authority key identifier: C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55 Certificate issuer: /CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855 Certificate serial: 019C41A18F3B26F704995B05ED177CB44BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft Manifest number: 0288 Signing time: Mon 09 Feb 2026 09:00:32 +0000 Manifest this update: Mon 09 Feb 2026 09:00:32 +0000 Manifest next update: Tue 10 Feb 2026 09:00:32 +0000 Files and hashes: 1: xykw_A7V-O90yB7YYTnHPl1a2FU.crl (hash: /xa6UAaKozimjhG+0g+IcyzwfMziwPGwIPFxF0OkxxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8f:3b:26:f7:04:99:5b:05:ed:17:7c:b4:4b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c72930fc0ed5f8ef74c81ed86139c73e5d5ad855 Validity Not Before: Feb 9 09:00:32 2026 GMT Not After : Feb 10 09:00:32 2026 GMT Subject: CN=4e1aa216fe2a3824ab501cfab1438915ac6ba8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:75:63:35:05:21:33:be:1d:27:03:c1:03:43: 34:f2:2c:60:5b:6b:42:f5:0b:fa:c9:c9:b4:90:12: 38:18:61:b7:10:b9:41:07:96:d4:cb:d0:44:28:4e: e0:3f:67:be:90:de:f0:01:03:1b:ff:6d:d2:7f:be: d7:f7:5d:fc:c8:4a:28:51:63:87:01:a0:ff:d5:d0: c7:11:d2:e3:ca:61:f6:b7:5c:fe:76:65:63:eb:ed: 71:14:9a:71:a3:fc:1a:19:b5:d7:56:68:c8:1b:05: 97:1f:a1:74:3b:17:d6:1c:62:6d:6e:7c:3c:f5:58: d2:b8:8d:7a:cb:d8:be:14:7e:21:9c:f5:e0:62:4b: 5a:fc:b4:5d:0e:73:5c:20:4b:29:69:41:b9:05:af: 9a:b1:88:e0:62:f1:00:df:29:f5:21:2c:98:6f:9d: 21:f0:b4:de:e3:40:ba:f2:e1:8a:31:49:4c:30:df: 01:7d:37:2b:c0:a8:f1:64:4f:8d:48:2f:d3:c4:60: be:a6:12:1e:21:dc:e4:41:2e:3e:06:9e:4d:96:11: 21:58:61:48:69:d1:28:24:9a:f3:59:3b:c8:98:d1: 73:70:0f:1a:1f:d1:5d:d4:a0:ea:aa:de:bc:9a:7c: 09:3a:f2:96:80:ab:62:86:cf:60:90:5f:8a:97:df: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:A2:16:FE:2A:38:24:AB:50:1C:FA:B1:43:89:15:AC:6B:A8:AB X509v3 Authority Key Identifier: keyid:C7:29:30:FC:0E:D5:F8:EF:74:C8:1E:D8:61:39:C7:3E:5D:5A:D8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xykw_A7V-O90yB7YYTnHPl1a2FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/db2809-119b-411b-bf07-18abcfff1f03/1/xykw_A7V-O90yB7YYTnHPl1a2FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:a5:e0:41:97:52:5d:82:8f:ba:e6:29:86:3a:cf:1e:b1:fe: ee:cd:57:d4:e2:c2:23:3a:cb:3e:d5:e4:a0:ae:c8:36:1d:31: 3e:c5:ba:0b:47:a5:5b:e9:0d:f8:5a:ab:30:7f:cd:d5:33:63: 63:f8:0b:c7:c3:3f:6d:62:d8:40:f6:df:02:36:a1:f7:10:d1: 79:9c:1d:1c:b1:ea:80:a4:a9:b2:a6:fe:47:38:4c:68:1a:55: bd:9c:fd:d4:ae:1b:d6:63:22:10:a4:d4:fa:04:3a:3f:59:2f: e5:72:c0:8c:63:4e:0c:f2:3a:f7:08:d2:66:65:7b:bc:1f:3d: dc:b1:31:e0:25:7a:a4:63:cf:5a:f4:f0:5c:04:ca:ef:90:99: 18:12:ad:dd:4b:b4:82:e8:bb:b3:0e:d9:2a:71:a0:8a:9d:76: 5e:03:90:43:8c:a3:c8:ac:51:5d:73:a3:fc:93:34:28:2b:01: 42:44:3e:32:55:bc:7a:d5:b6:3c:df:f1:35:7f:c7:81:83:8f: a7:5d:40:d5:28:59:f9:c6:ae:ad:a3:70:d0:f2:2c:2e:56:15: 41:38:b5:74:89:f0:61:f0:de:98:bc:09:8b:d1:90:a6:93:bb: 85:8f:c8:17:2b:42:d6:78:a6:fa:cd:0a:fb:c8:ef:2d:ad:6c: 66:55:71:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoY87JvcEmVsF7Rd8tEu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjkzMGZjMGVkNWY4ZWY3NGM4MWVkODYxMzljNzNlNWQ1 YWQ4NTUwHhcNMjYwMjA5MDkwMDMyWhcNMjYwMjEwMDkwMDMyWjAzMTEwLwYDVQQD Eyg0ZTFhYTIxNmZlMmEzODI0YWI1MDFjZmFiMTQzODkxNWFjNmJhOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknVjNQUhM74dJwPBA0M08ixgW2tC 9Qv6ycm0kBI4GGG3ELlBB5bUy9BEKE7gP2e+kN7wAQMb/23Sf77X9138yEooUWOH AaD/1dDHEdLjymH2t1z+dmVj6+1xFJpxo/waGbXXVmjIGwWXH6F0OxfWHGJtbnw8 9VjSuI16y9i+FH4hnPXgYkta/LRdDnNcIEspaUG5Ba+asYjgYvEA3yn1ISyYb50h 8LTe40C68uGKMUlMMN8BfTcrwKjxZE+NSC/TxGC+phIeIdzkQS4+Bp5NlhEhWGFI adEoJJrzWTvImNFzcA8aH9Fd1KDqqt68mnwJOvKWgKtihs9gkF+Kl998ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4aohb+Kjgkq1Ac+rFDiRWsa6irMB8GA1UdIwQY MBaAFMcpMPwO1fjvdMge2GE5xz5dWthVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlrd19BN1YtTzkweUI3WVlUbkhQbDFhMkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kYjI4MDktMTE5Yi00MTFiLWJmMDct MThhYmNmZmYxZjAzLzEveHlrd19BN1YtTzkweUI3WVlUbkhQbDFhMkZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kYjI4MDktMTE5Yi00MTFiLWJmMDctMThhYmNmZmYxZjAz LzEveHlrd19BN1YtTzkweUI3WVlUbkhQbDFhMkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1qXgQZdS XYKPuuYphjrPHrH+7s1X1OLCIzrLPtXkoK7INh0xPsW6C0elW+kN+FqrMH/N1TNj Y/gLx8M/bWLYQPbfAjah9xDReZwdHLHqgKSpsqb+RzhMaBpVvZz91K4b1mMiEKTU +gQ6P1kv5XLAjGNODPI69wjSZmV7vB893LEx4CV6pGPPWvTwXATK75CZGBKt3Uu0 gui7sw7ZKnGgip12XgOQQ4yjyKxRXXOj/JM0KCsBQkQ+MlW8etW2PN/xNX/HgYOP p11A1ShZ+cauraNw0PIsLlYVQTi1dInwYfDemLwJi9GQppO7hY/IFytC1nim+s0K +8jvLa1sZlVx9A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:11 2026 by rpki-client