This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json) Hash identifier: FW/9uRZ9nTUY6kKQsFnBPbkZTs7rMuV1jsAgH0y4hms= Subject key identifier: E0:18:C8:3E:6E:E1:A6:05:16:95:27:A2:36:87:42:1B:E2:79:E3:58 Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054 Certificate serial: 019C4246CAC8AEE93409319A060CFAA801EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft Manifest number: 0624 Signing time: Mon 09 Feb 2026 12:01:01 +0000 Manifest this update: Mon 09 Feb 2026 12:01:01 +0000 Manifest next update: Tue 10 Feb 2026 12:01:01 +0000 Files and hashes: 1: TWT9W3DXJ-dZxjJQAE97-jeVzik.roa (hash: NuWvDNT5j64qkROJmNnrF3uPdv6iEhConb08RZf+VeY=) 2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: RfVkYafedJtI9VkXrfokH911hgxaA1+FC2PJessKPFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ca:c8:ae:e9:34:09:31:9a:06:0c:fa:a8:01:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054 Validity Not Before: Feb 9 12:01:01 2026 GMT Not After : Feb 10 12:01:01 2026 GMT Subject: CN=e018c83e6ee1a605169527a23687421be279e358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:85:97:f2:c2:1f:d0:b8:c8:fc:59:a2:b1: 6c:d5:48:7f:a2:6f:e0:2c:9d:36:b9:e4:cd:43:d8: 87:11:db:64:a1:24:f5:65:84:b1:0d:a3:00:5e:54: 8f:ad:92:74:03:92:5e:73:6c:4d:78:0d:1d:c1:23: 6f:02:a7:bf:48:1c:2c:e3:3a:18:7e:f4:0b:36:64: 30:a0:87:1e:25:e2:4f:61:dc:52:d6:2f:b1:78:d9: f4:29:07:a9:37:01:2f:9c:0c:87:a4:80:94:04:bd: 93:68:9b:2f:60:ba:51:bb:a7:0b:b1:ed:3c:73:40: 0b:27:a7:a4:ff:ef:7b:c2:fb:75:b3:07:b1:cf:3e: ec:70:77:e5:0c:ca:dc:df:24:b6:35:6f:10:73:63: b3:ee:b5:b3:22:85:3d:c1:c3:37:3f:d2:ea:b5:05: d6:cb:7c:84:28:dc:71:a2:a7:74:e9:f4:d1:4d:28: 32:56:3e:71:37:26:fc:e0:43:d7:5e:77:ce:ae:a7: ae:25:b7:42:99:12:83:c8:ac:13:32:bf:d4:ef:ae: db:e6:b7:3a:b1:8c:4f:08:94:ac:7d:28:71:bc:8a: 5f:24:e3:a6:5a:63:07:f1:f9:15:69:c2:f8:52:66: d0:75:33:45:9a:f9:e5:cf:10:41:8e:d4:af:78:81: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:18:C8:3E:6E:E1:A6:05:16:95:27:A2:36:87:42:1B:E2:79:E3:58 X509v3 Authority Key Identifier: keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c3:66:2f:1e:75:c9:14:eb:1f:5f:98:7e:9c:05:2c:98:36: 60:81:39:db:88:84:49:a6:81:6b:1f:d0:2b:a3:50:db:16:31: 45:73:40:e1:d0:21:ff:c9:cc:a3:bd:62:4c:a2:93:89:24:22: 4d:69:c0:07:6b:07:35:38:2f:64:8b:91:77:86:d3:b2:d8:27: 5f:05:40:f8:1d:dd:1c:66:ca:6b:78:07:d5:35:21:94:f6:a9: cc:37:80:75:5c:a6:35:9f:2f:2f:f5:b9:c5:a4:48:5a:81:db: 71:f9:b2:b7:71:95:e3:35:95:66:ec:b4:15:ce:6c:21:d7:93: 77:7f:8a:d0:5c:70:c2:41:bc:61:a5:68:72:a6:ca:ee:04:56: 3f:6c:d4:a4:be:e2:c5:ee:05:87:1b:11:56:98:0a:ac:db:a7: 6c:6c:b7:53:76:e9:8b:e1:16:a1:5a:3b:f7:02:df:74:1c:22: a5:5b:41:53:30:7c:40:3d:6f:4f:cc:f4:8a:00:d9:f5:3b:7f: 32:21:d7:9b:97:38:81:69:b3:34:56:f5:23:1c:ec:0c:d9:2e: 29:09:7c:06:cc:25:93:5b:ef:5d:93:d5:77:a2:28:0b:46:92: 7c:0c:e9:2b:f6:a2:b6:66:c4:dc:14:c3:fd:0d:cd:4c:3f:db: 6e:43:6c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsrIruk0CTGaBgz6qAHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDIwZWI1ZDk0ZjBmYWI4NjJlMDg0MDQxNGY0MzJiNzg1 ZTYwNTQwHhcNMjYwMjA5MTIwMTAxWhcNMjYwMjEwMTIwMTAxWjAzMTEwLwYDVQQD EyhlMDE4YzgzZTZlZTFhNjA1MTY5NTI3YTIzNjg3NDIxYmUyNzllMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX6Fl/LCH9C4yPxZorFs1Uh/om/g LJ02ueTNQ9iHEdtkoST1ZYSxDaMAXlSPrZJ0A5Jec2xNeA0dwSNvAqe/SBws4zoY fvQLNmQwoIceJeJPYdxS1i+xeNn0KQepNwEvnAyHpICUBL2TaJsvYLpRu6cLse08 c0ALJ6ek/+97wvt1swexzz7scHflDMrc3yS2NW8Qc2Oz7rWzIoU9wcM3P9LqtQXW y3yEKNxxoqd06fTRTSgyVj5xNyb84EPXXnfOrqeuJbdCmRKDyKwTMr/U767b5rc6 sYxPCJSsfShxvIpfJOOmWmMH8fkVacL4UmbQdTNFmvnlzxBBjtSveIEeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAYyD5u4aYFFpUnojaHQhvieeNYMB8GA1UdIwQY MBaAFMVCDrXZTw+rhi4IQEFPQyt4XmBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYt NDI1OGVlNGRlOTFlLzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYtNDI1OGVlNGRlOTFl LzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMNmLx51 yRTrH1+YfpwFLJg2YIE524iESaaBax/QK6NQ2xYxRXNA4dAh/8nMo71iTKKTiSQi TWnAB2sHNTgvZIuRd4bTstgnXwVA+B3dHGbKa3gH1TUhlPapzDeAdVymNZ8vL/W5 xaRIWoHbcfmyt3GV4zWVZuy0Fc5sIdeTd3+K0FxwwkG8YaVocqbK7gRWP2zUpL7i xe4FhxsRVpgKrNunbGy3U3bpi+EWoVo79wLfdBwipVtBUzB8QD1vT8z0igDZ9Tt/ MiHXm5c4gWmzNFb1IxzsDNkuKQl8Bswlk1vvXZPVd6IoC0aSfAzpK/aitmbE3BTD /Q3NTD/bbkNsBw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:57 2026 by rpki-client