This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json) Hash identifier: bO0Rpk8VppNwsS7YOzQiKG0hZwcE20Nlsrv2WpJEiLQ= Subject key identifier: B9:94:D3:C6:C8:CA:0B:A3:F2:43:9C:9E:7E:EB:B7:3C:02:73:C2:C0 Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7 Certificate serial: 019C4321C7816A695F12C60CAC8D9E99F88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft Manifest number: 086F Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: F30FN8U3Xj87k2Z9DAG1GB_A31Q.roa (hash: pnPZQBEXHi+ImRZ6WCYxFeNcDY9y0/l3lR4zkQuuaVQ=) 2: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: urzfYBg82XTBYehjRweKicWS85TNq9nDlrcq8ORq75A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c7:81:6a:69:5f:12:c6:0c:ac:8d:9e:99:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7 Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=b994d3c6c8ca0ba3f2439c9e7eebb73c0273c2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:08:28:d0:84:e0:99:1e:26:d2:52:76:93:96: ce:81:c6:19:a0:11:c8:66:21:6a:20:0b:78:60:5d: 7b:d7:2f:98:75:21:13:a7:4d:be:b9:8a:62:c0:76: 25:cc:33:5b:52:84:22:bc:28:80:8f:e5:cc:50:0c: 10:b2:fc:61:18:df:8f:83:e7:c9:7f:f6:9d:da:8f: 58:db:0c:cf:81:6b:87:bb:73:27:d8:30:65:e0:06: e0:35:d0:ac:50:fd:b1:56:25:b3:dd:93:d8:ae:9e: e7:68:6e:7a:fb:10:c1:34:80:7f:08:cc:e2:1b:91: 92:8f:d6:5f:b2:f7:7e:ca:ee:b2:d4:1a:33:a8:a2: 48:9e:31:b2:89:ae:2c:2c:b6:ef:e4:9c:e8:e7:cb: 1d:ac:d8:21:cc:87:16:25:d4:4a:1d:36:48:68:47: ae:60:a7:22:12:29:dc:f0:6a:47:e8:9f:5b:51:73: 91:6b:b7:06:60:11:ac:ed:b7:d3:55:da:48:30:03: 39:76:cc:59:ec:a0:76:6f:81:4f:44:c9:f5:9e:43: bf:d9:f4:b8:40:f1:c7:70:fb:43:58:ce:80:0c:90: cc:1a:0f:f9:72:27:ee:21:e7:fe:a2:00:a7:22:49: a7:1e:0a:96:8e:85:89:58:d5:8f:a1:51:a4:bc:a1: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:94:D3:C6:C8:CA:0B:A3:F2:43:9C:9E:7E:EB:B7:3C:02:73:C2:C0 X509v3 Authority Key Identifier: keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ec:8b:a4:d5:4d:cb:ee:67:33:8c:02:c5:f6:2a:b4:16:d1: d3:d3:4e:2f:fe:53:77:e1:d6:e1:de:e4:69:52:e4:11:ff:3c: 0d:05:aa:c9:ef:c2:33:36:88:98:ae:fe:31:77:bb:b6:35:90: 3d:76:b2:f5:aa:ac:c3:ce:57:57:75:ef:34:b9:3f:a5:62:6b: ef:2e:e0:50:22:00:e1:83:53:b9:08:22:dd:42:a9:5a:5f:40: e5:53:89:f7:40:65:78:fa:fe:bc:78:f9:af:8a:0d:e2:c9:2f: 77:2d:18:b5:b7:ef:ac:69:77:04:d5:75:74:05:e7:5f:34:0b: b7:83:d3:c3:3d:be:f1:0d:8f:0f:39:27:f3:bb:5f:9d:aa:54: f7:e5:72:34:7f:9e:7e:a7:e9:1b:c7:8a:4c:de:3e:a3:59:ae: 5d:32:7f:72:8b:2d:97:e9:b9:5b:df:69:6a:56:9f:f5:ae:0a: 9d:9c:3d:9d:1b:07:90:54:ba:1e:ec:ea:f9:4b:07:2a:03:b1: bc:7f:ab:7c:d3:d8:b7:15:c2:d6:74:1f:85:b7:15:ff:b4:4d: d6:d4:f4:e6:62:46:e1:ce:3e:f0:39:f3:82:25:a6:64:d5:e1: 57:2c:27:63:4a:15:43:f2:82:03:4e:dc:ab:a6:21:30:c9:16: 03:8d:88:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIceBamlfEsYMrI2emfiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm MmJmYzcwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD EyhiOTk0ZDNjNmM4Y2EwYmEzZjI0MzljOWU3ZWViYjczYzAyNzNjMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQgo0ITgmR4m0lJ2k5bOgcYZoBHI ZiFqIAt4YF171y+YdSETp02+uYpiwHYlzDNbUoQivCiAj+XMUAwQsvxhGN+Pg+fJ f/ad2o9Y2wzPgWuHu3Mn2DBl4AbgNdCsUP2xViWz3ZPYrp7naG56+xDBNIB/CMzi G5GSj9Zfsvd+yu6y1BozqKJInjGyia4sLLbv5Jzo58sdrNghzIcWJdRKHTZIaEeu YKciEinc8GpH6J9bUXORa7cGYBGs7bfTVdpIMAM5dsxZ7KB2b4FPRMn1nkO/2fS4 QPHHcPtDWM6ADJDMGg/5cifuIef+ogCnIkmnHgqWjoWJWNWPoVGkvKHTPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmU08bIyguj8kOcnn7rtzwCc8LAMB8GA1UdIwQY MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+yLpNVN y+5nM4wCxfYqtBbR09NOL/5Td+HW4d7kaVLkEf88DQWqye/CMzaImK7+MXe7tjWQ PXay9aqsw85XV3XvNLk/pWJr7y7gUCIA4YNTuQgi3UKpWl9A5VOJ90BlePr+vHj5 r4oN4skvdy0YtbfvrGl3BNV1dAXnXzQLt4PTwz2+8Q2PDzkn87tfnapU9+VyNH+e fqfpG8eKTN4+o1muXTJ/costl+m5W99palaf9a4KnZw9nRsHkFS6Huzq+UsHKgOx vH+rfNPYtxXC1nQfhbcV/7RN1tT05mJG4c4+8DnzgiWmZNXhVywnY0oVQ/KCA07c q6YhMMkWA42IPg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:55 2026 by rpki-client