This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json) Hash identifier: PBCxOhxY8Al5AoKX53e7DMRpV02sEM8DAi9s10KgTlw= Subject key identifier: 19:38:AF:F3:31:C0:D5:45:B5:CF:62:E4:CB:16:60:EF:5B:E7:08:D9 Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae Certificate serial: 019C416AFB3CA882315E4E69A639C6B4B74A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 08:00:55 +0000 Manifest this update: Mon 09 Feb 2026 08:00:55 +0000 Manifest next update: Tue 10 Feb 2026 08:00:55 +0000 Files and hashes: 1: W8zaDpL7y2hHlsHPm8j6VsbmlbI.roa (hash: QkA/6itD4OWCILhEtalZJrgtDe5cM/xdXi2+B6boyL0=) 2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: FoCdPPkQYIMF/Ga+tnNMLtx4mZPtbrzDmySuGe7RLbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:fb:3c:a8:82:31:5e:4e:69:a6:39:c6:b4:b7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae Validity Not Before: Feb 9 08:00:55 2026 GMT Not After : Feb 10 08:00:55 2026 GMT Subject: CN=1938aff331c0d545b5cf62e4cb1660ef5be708d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:9f:77:18:db:fe:27:8b:b9:5c:f4:a8:b2: c8:50:de:f0:5c:51:8c:be:12:06:3c:d0:ad:31:56: de:c2:e1:ac:d7:1e:ab:41:ed:7e:71:19:79:3f:ec: 38:c5:fc:8e:f2:4d:86:91:2c:26:8a:4c:89:b5:4e: 24:df:4b:19:4b:81:7a:8c:7e:39:bc:46:bd:3e:20: 07:67:6a:d4:27:af:10:35:4e:d9:ef:6b:0e:84:5b: 5f:7a:75:38:ae:04:24:f5:b3:4b:c3:a7:f7:fa:f8: d7:9d:2f:f7:10:aa:04:a2:82:e0:68:9b:55:56:08: 31:2b:a2:c7:eb:96:a0:5f:4e:b3:1e:c2:ca:f8:86: 39:f9:8e:4b:c1:ad:49:16:8d:02:4c:79:df:2f:66: 52:78:ab:4c:77:b6:a5:06:68:35:af:f2:b9:11:41: 1e:de:63:a9:b4:5c:db:b6:11:05:70:ab:76:9b:b0: 89:44:0f:5c:1e:42:ea:15:12:ec:13:2b:29:4b:67: 8a:f6:d8:f7:b1:c7:58:53:c6:83:74:0a:a0:b8:09: ed:fa:f7:9e:3a:68:f9:fc:9c:8f:40:37:4d:87:fd: 8c:34:3d:a9:75:b3:dd:79:a8:48:92:01:b7:4d:f5: 04:67:83:5c:1d:66:09:19:52:06:8c:81:c3:8d:da: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:38:AF:F3:31:C0:D5:45:B5:CF:62:E4:CB:16:60:EF:5B:E7:08:D9 X509v3 Authority Key Identifier: keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fb:5d:84:9d:29:95:d2:54:eb:81:95:03:42:68:f4:ae:6b: 89:e5:5b:31:98:bb:18:23:9a:fa:1e:a8:fe:72:52:7f:e9:35: b4:39:92:26:e1:05:25:be:9e:af:3e:27:9a:62:5f:71:c7:60: d9:ab:eb:d2:3c:04:14:3d:a4:4c:7c:6a:95:cf:26:fb:d8:64: bf:08:c3:14:c5:ba:ab:61:6e:c8:c4:98:8e:c0:b0:ac:97:ea: f6:f9:da:ba:f4:d1:55:29:0e:4d:a1:71:d9:3f:1d:aa:a1:70: eb:62:b9:9a:6f:ca:b4:5a:c7:e7:8f:f6:b7:1a:60:bc:a0:ea: dd:c8:22:8a:8c:6d:90:e8:31:15:66:b6:99:55:10:21:8f:7d: 4e:f4:00:7a:24:69:c5:87:25:01:84:37:ad:9b:8a:6f:99:25: 10:8a:47:3e:8a:e7:c9:be:da:dd:02:f1:2c:86:56:69:d4:e3: 4e:91:bd:10:db:a7:62:56:a4:0f:e0:e6:23:0b:66:ed:d6:79: 85:40:06:f7:a5:47:36:d6:0d:7e:32:19:9d:83:ca:5e:0d:ea: 5c:f4:29:8f:70:13:da:b2:7a:7d:65:a6:7b:c2:96:52:1f:08: 64:7b:f5:c5:bb:06:7e:f1:ae:d3:cc:36:96:0d:5b:0b:ec:30: 69:72:61:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavs8qIIxXk5ppjnGtLdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTMzM2QwZTgxMDc4ODZkMDMwNWM3YmQ4MWJkZDM1NDg5 NTI3YWUwHhcNMjYwMjA5MDgwMDU1WhcNMjYwMjEwMDgwMDU1WjAzMTEwLwYDVQQD EygxOTM4YWZmMzMxYzBkNTQ1YjVjZjYyZTRjYjE2NjBlZjViZTcwOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMSfdxjb/ieLuVz0qLLIUN7wXFGM vhIGPNCtMVbewuGs1x6rQe1+cRl5P+w4xfyO8k2GkSwmikyJtU4k30sZS4F6jH45 vEa9PiAHZ2rUJ68QNU7Z72sOhFtfenU4rgQk9bNLw6f3+vjXnS/3EKoEooLgaJtV VggxK6LH65agX06zHsLK+IY5+Y5Lwa1JFo0CTHnfL2ZSeKtMd7alBmg1r/K5EUEe 3mOptFzbthEFcKt2m7CJRA9cHkLqFRLsEyspS2eK9tj3scdYU8aDdAqguAnt+vee Omj5/JyPQDdNh/2MND2pdbPdeahIkgG3TfUEZ4NcHWYJGVIGjIHDjdowXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk4r/MxwNVFtc9i5MsWYO9b5wjZMB8GA1UdIwQY MBaAFMYTM9DoEHiG0DBce9gb3TVIlSeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEt OGVjNWYwZWVhMDQ1LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEtOGVjNWYwZWVhMDQ1 LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPtdhJ0p ldJU64GVA0Jo9K5rieVbMZi7GCOa+h6o/nJSf+k1tDmSJuEFJb6erz4nmmJfccdg 2avr0jwEFD2kTHxqlc8m+9hkvwjDFMW6q2FuyMSYjsCwrJfq9vnauvTRVSkOTaFx 2T8dqqFw62K5mm/KtFrH54/2txpgvKDq3cgiioxtkOgxFWa2mVUQIY99TvQAeiRp xYclAYQ3rZuKb5klEIpHPornyb7a3QLxLIZWadTjTpG9ENunYlakD+DmIwtm7dZ5 hUAG96VHNtYNfjIZnYPKXg3qXPQpj3AT2rJ6fWWme8KWUh8IZHv1xbsGfvGu08w2 lg1bC+wwaXJhVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:43 2026 by rpki-client