This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json) Hash identifier: ivgmKJRNArdLg2fePN5P/6Lk78aBE5Pw5nHWUzYwzIo= Subject key identifier: DF:76:97:03:F8:F3:65:40:35:87:53:8C:64:DC:6F:A0:9C:C7:89:4F Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a Certificate serial: 019C43220496FF250ADEED0E5E183043726D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft Manifest number: 0A9E Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: rgrCyk554MCrsM4pVZO0TZKouIYA27l5FuqBzYiTSlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:04:96:ff:25:0a:de:ed:0e:5e:18:30:43:72:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=df769703f8f365403587538c64dc6fa09cc7894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:c4:f8:ad:57:a6:d5:58:f6:33:19:c6:6b: 3b:9b:63:78:a0:ea:fc:ee:dc:9a:9a:70:f0:20:48: 96:de:e0:d9:0d:52:42:6d:2b:89:31:f5:f5:07:43: af:cc:02:36:27:1b:08:a7:b3:87:06:73:16:da:9e: af:7b:31:dd:b7:c0:6c:1e:4f:e7:9e:df:c5:a3:e8: c6:bb:a2:85:5a:39:80:d0:aa:8b:21:5f:e6:87:cd: 39:33:3f:c7:95:21:54:f4:86:37:41:ae:34:7d:5d: 70:76:d8:72:fd:4b:c8:00:f5:bb:07:f2:67:b9:83: a0:02:b2:18:77:88:2e:c2:97:af:4d:a8:e3:90:38: 57:21:81:f7:d1:e5:08:63:4b:5f:18:79:b6:b7:4b: 11:5e:fd:0e:f5:56:d1:92:a3:35:6f:59:c7:8c:33: 63:c1:03:1b:17:8d:9e:aa:9e:e1:cb:96:60:0e:3f: b9:d2:f1:64:04:30:9d:48:9f:8f:7e:a2:f7:6b:08: d1:b5:48:8d:89:39:17:1f:0f:8d:82:e3:f7:01:7b: ef:71:10:a9:aa:6e:80:b6:bb:b1:80:0c:fa:74:a9: 89:e4:92:5e:92:1e:b4:65:9c:a0:19:f9:3c:49:18: b5:02:58:e0:7d:83:10:83:02:c3:f3:8a:2c:54:e5: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:76:97:03:F8:F3:65:40:35:87:53:8C:64:DC:6F:A0:9C:C7:89:4F X509v3 Authority Key Identifier: keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2f:5d:1f:46:d2:8f:45:a8:b6:75:af:97:ee:60:cf:5e:26: 79:19:98:21:44:3a:80:84:9a:13:2e:c0:b0:b8:c6:51:3f:a8: 34:f5:f4:4b:3b:ba:ee:0b:8a:6d:8e:17:73:cf:ec:12:dc:ab: bb:70:bf:16:b6:23:ac:a9:ab:c1:a2:5c:c1:65:cd:3e:41:94: 57:1c:2e:29:4d:c3:c4:dc:b6:2b:35:82:b8:f8:da:53:09:a0: 5b:46:ec:20:fe:ff:de:9b:3f:91:ed:e7:e6:ae:0d:36:48:84: 1d:d2:74:f6:60:52:05:c0:f1:99:a5:1c:54:89:1e:cf:e3:53: 01:a9:5c:3c:64:5f:36:d4:c4:97:81:8d:2d:0b:2d:ca:8b:06: 22:0d:92:ce:49:e8:9a:71:b0:83:0b:10:af:7d:5b:35:06:3b: bf:f4:54:b8:69:81:a0:3e:b4:84:76:99:0e:49:fb:71:87:84: 47:66:77:a2:6f:37:7a:11:96:73:38:9c:c2:51:c0:36:e5:be: 11:8e:04:56:1b:8a:90:b3:d4:d2:32:94:21:bd:85:9c:dd:e1: b8:3e:10:11:f4:f2:fb:3f:8a:46:a8:78:1f:3b:87:32:5a:c3: 38:5f:f5:7e:7f:a6:05:34:55:35:6d:04:b2:47:51:04:ed:c3: f8:27:e1:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgSW/yUK3u0OXhgwQ3JtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2IxNzJlODE2MWM4MWNlOGU5NTRhZmQzNWE3M2IyZmFk MGJiM2EwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EyhkZjc2OTcwM2Y4ZjM2NTQwMzU4NzUzOGM2NGRjNmZhMDljYzc4OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36/E+K1XptVY9jMZxms7m2N4oOr8 7tyamnDwIEiW3uDZDVJCbSuJMfX1B0OvzAI2JxsIp7OHBnMW2p6vezHdt8BsHk/n nt/Fo+jGu6KFWjmA0KqLIV/mh805Mz/HlSFU9IY3Qa40fV1wdthy/UvIAPW7B/Jn uYOgArIYd4guwpevTajjkDhXIYH30eUIY0tfGHm2t0sRXv0O9VbRkqM1b1nHjDNj wQMbF42eqp7hy5ZgDj+50vFkBDCdSJ+PfqL3awjRtUiNiTkXHw+NguP3AXvvcRCp qm6AtruxgAz6dKmJ5JJekh60ZZygGfk8SRi1AljgfYMQgwLD84osVOV/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN92lwP482VANYdTjGTcb6Ccx4lPMB8GA1UdIwQY MBaAFF07Fy6BYcgc6OlUr9Nac7L60Ls6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEt MzJjNjEzZjczNjYxLzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEtMzJjNjEzZjczNjYx LzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWy9dH0bS j0WotnWvl+5gz14meRmYIUQ6gISaEy7AsLjGUT+oNPX0Szu67guKbY4Xc8/sEtyr u3C/FrYjrKmrwaJcwWXNPkGUVxwuKU3DxNy2KzWCuPjaUwmgW0bsIP7/3ps/ke3n 5q4NNkiEHdJ09mBSBcDxmaUcVIkez+NTAalcPGRfNtTEl4GNLQstyosGIg2Szkno mnGwgwsQr31bNQY7v/RUuGmBoD60hHaZDkn7cYeER2Z3om83ehGWczicwlHANuW+ EY4EVhuKkLPU0jKUIb2FnN3huD4QEfTy+z+KRqh4HzuHMlrDOF/1fn+mBTRVNW0E skdRBO3D+Cfhng== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:53 2026 by rpki-client