This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json) Hash identifier: qPZmaFY4AsOk+GFxyhYGtEn9D14nNWqrEYSXf+OHmOg= Subject key identifier: 7D:1F:35:89:AB:27:5E:95:35:DA:20:21:07:64:1E:CD:FA:15:40:FC Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Certificate serial: 019C41D8C1ECE7539BA1C15895321E3D370A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft Manifest number: 0760 Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: SFpGTVnSyEKSt5+pgMyoGkgwg6vLgwwSphbRNqxncOQ=) 2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c1:ec:e7:53:9b:a1:c1:58:95:32:1e:3d:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=7d1f3589ab275e9535da202107641ecdfa1540fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:97:9d:67:04:3b:e4:a3:b8:0b:7f:a5:a8: af:65:31:0a:e5:20:55:0c:77:27:be:27:b9:cf:a4: 23:f3:28:58:3a:85:08:9e:57:4f:65:d8:b3:fe:bb: be:cf:5f:f7:ae:ec:50:b6:3f:20:e3:e6:25:ce:5c: d3:1a:1b:c4:e0:13:38:9f:1a:bd:e0:6c:b2:db:eb: a4:19:ca:91:1f:83:1f:6b:d4:fb:b5:10:9c:ef:b0: d4:4d:7c:1e:1d:e3:d7:b6:dc:7c:04:fa:c4:8d:a3: 94:fa:5b:ff:f2:43:ca:2e:fc:66:d0:b9:71:0c:95: b0:6a:eb:37:f7:9a:b8:46:03:a1:2b:2f:36:7a:0f: f8:35:aa:bd:fd:09:32:fd:c4:f0:5d:49:92:9c:5c: d3:2a:78:9d:29:18:36:28:25:09:86:25:e4:ee:09: 57:f7:fd:73:e9:4c:aa:75:71:e2:e0:ec:e4:90:a1: ff:13:4c:ca:fa:8e:26:fb:5e:fc:95:4a:9c:f1:d9: 6c:5f:26:90:7d:af:57:22:44:0f:7f:01:d2:5b:ba: fc:60:ab:91:c4:15:0b:f4:84:04:89:f2:ef:b6:3b: c9:91:e8:af:b2:73:36:15:8f:c4:a1:bf:90:b2:b5: 7f:ec:21:3d:fe:0b:f5:6c:dc:c4:00:39:2b:46:2e: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1F:35:89:AB:27:5E:95:35:DA:20:21:07:64:1E:CD:FA:15:40:FC X509v3 Authority Key Identifier: keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3c:e2:ad:f4:6b:82:7a:69:98:00:5d:dd:ce:77:e8:06:f5: 35:30:7b:37:9e:5c:c0:f0:ae:a9:fe:5d:73:43:8b:03:b9:a8: 44:dc:bf:01:7f:8a:03:04:99:8c:44:23:92:57:26:57:a3:15: 0e:19:76:2b:3c:bb:52:ae:12:37:dd:5a:41:09:05:ce:8a:c9: d8:98:3d:11:85:47:d2:1c:4a:f9:8e:2e:0a:78:e1:bc:0f:b8: e0:1e:c3:48:ca:a6:34:7b:04:f7:16:0e:5d:5e:3f:f3:bc:af: cb:36:3b:3c:54:b6:16:49:b8:f3:ae:7c:59:6e:85:d1:27:8c: 8b:37:63:59:4b:d7:e3:10:91:89:7e:b5:10:31:a8:b6:3d:14: b8:a3:ab:38:6f:cc:52:2a:6d:d8:88:d2:f5:e0:11:59:93:9f: 53:e8:15:01:c0:82:7c:40:b6:fe:73:f1:aa:c2:26:b9:ea:1e: e1:34:57:80:20:30:9d:32:09:f0:13:7e:2f:56:9e:d1:4f:ab: 5c:9e:fa:06:b1:28:41:e4:fd:25:e2:f1:3c:74:75:a4:05:76: d2:63:64:c3:bc:19:ad:b9:81:16:49:a3:65:b9:2e:ed:ca:61: ec:ad:83:53:f0:da:2e:2a:dd:d9:ca:0b:8f:f4:d2:92:f4:eb: d6:3f:a8:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MHs51ObocFYlTIePTcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjMxN2Y2OTM2ZTZiNTc4YjM4YzNkZmIxOTgwMjU0OThm Y2FlYTEwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD Eyg3ZDFmMzU4OWFiMjc1ZTk1MzVkYTIwMjEwNzY0MWVjZGZhMTU0MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNiXnWcEO+SjuAt/paivZTEK5SBV DHcnvie5z6Qj8yhYOoUInldPZdiz/ru+z1/3ruxQtj8g4+YlzlzTGhvE4BM4nxq9 4Gyy2+ukGcqRH4Mfa9T7tRCc77DUTXweHePXttx8BPrEjaOU+lv/8kPKLvxm0Llx DJWwaus395q4RgOhKy82eg/4Naq9/Qky/cTwXUmSnFzTKnidKRg2KCUJhiXk7glX 9/1z6UyqdXHi4OzkkKH/E0zK+o4m+178lUqc8dlsXyaQfa9XIkQPfwHSW7r8YKuR xBUL9IQEifLvtjvJkeivsnM2FY/Eob+QsrV/7CE9/gv1bNzEADkrRi5hwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0fNYmrJ16VNdogIQdkHs36FUD8MB8GA1UdIwQY MBaAFF1jF/aTbmtXizjD37GYAlSY/K6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAt ZDU2NThkMGYzMjkyLzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAtZDU2NThkMGYzMjky LzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTzirfRr gnppmABd3c536Ab1NTB7N55cwPCuqf5dc0OLA7moRNy/AX+KAwSZjEQjklcmV6MV Dhl2Kzy7Uq4SN91aQQkFzorJ2Jg9EYVH0hxK+Y4uCnjhvA+44B7DSMqmNHsE9xYO XV4/87yvyzY7PFS2Fkm48658WW6F0SeMizdjWUvX4xCRiX61EDGotj0UuKOrOG/M Uipt2IjS9eARWZOfU+gVAcCCfEC2/nPxqsImueoe4TRXgCAwnTIJ8BN+L1ae0U+r XJ76BrEoQeT9JeLxPHR1pAV20mNkw7wZrbmBFkmjZbku7cph7K2DU/DaLird2coL j/TSkvTr1j+oew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:38 2026 by rpki-client