This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json) Hash identifier: K2nGFb5K0XIJFl6x0md7oS0VCIuSyCfhIDbGGfMVR5k= Subject key identifier: 75:81:80:20:93:EA:74:AF:37:EF:1D:AA:3E:6C:0C:31:AA:D2:B1:7D Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Certificate serial: 019C438FA6DD2EB1B4DA78ED1CFEBCEE88C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 18:00:13 +0000 Manifest this update: Mon 09 Feb 2026 18:00:13 +0000 Manifest next update: Tue 10 Feb 2026 18:00:13 +0000 Files and hashes: 1: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: qjVTRGtr/PG7gD3bON2fTG7Zw+sSqRc7vSuah2V0+1Y=) 2: kzJmJeIzYK-uABy4gPDlGybg7UM.roa (hash: 1fLld3TaRC0xWtpNDMUlOBBVpSlt5nimLcyX9NO1jT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:a6:dd:2e:b1:b4:da:78:ed:1c:fe:bc:ee:88:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Validity Not Before: Feb 9 18:00:13 2026 GMT Not After : Feb 10 18:00:13 2026 GMT Subject: CN=7581802093ea74af37ef1daa3e6c0c31aad2b17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:69:10:a2:be:d6:95:13:5d:31:3c:30:a5: bb:fe:6b:3a:ab:d4:ab:95:49:4f:67:48:69:44:6a: 14:6e:29:f7:3f:f2:29:c9:22:03:9d:7a:ab:db:e0: de:63:22:af:d8:7a:22:ab:25:53:45:5f:39:7f:74: 88:cc:1a:bc:46:3a:a0:3e:5d:89:38:b8:dc:e3:e6: 74:16:71:34:f9:ca:c5:3e:e9:5a:d0:7d:b2:80:82: 9a:d6:24:ed:17:ce:8b:6c:8b:32:a5:13:c9:23:ce: 4a:92:02:65:52:96:2c:73:1d:f1:31:d6:b3:73:c5: fa:d6:18:af:70:14:62:53:52:40:02:aa:18:df:bd: ac:84:12:5f:92:95:b6:60:d8:93:2e:82:d8:26:a0: 67:6c:0a:52:8f:d5:c9:2a:d2:7d:09:fe:fd:f9:31: d9:53:4f:d0:b0:93:b9:cc:8f:d4:2c:34:6a:74:6f: 81:57:10:aa:db:a1:53:cf:b6:4c:c5:90:bb:16:23: 7c:45:e8:ca:60:35:7b:c1:1c:5a:ea:2c:33:ed:a4: c7:63:4a:07:b7:26:7c:98:d2:13:8c:e8:da:5a:f0: 0e:7d:5d:64:9f:ae:36:93:10:e7:ae:67:03:c8:9a: c3:45:e1:c1:2f:a3:96:50:6c:5c:b4:22:e9:25:93: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:81:80:20:93:EA:74:AF:37:EF:1D:AA:3E:6C:0C:31:AA:D2:B1:7D X509v3 Authority Key Identifier: keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:74:01:b4:85:72:40:28:69:3a:b3:5f:a9:f7:9b:32:d0:68: ee:ec:2d:4f:16:00:ba:28:d0:b0:dd:94:4c:ae:a0:37:ff:ff: e7:48:ad:39:bf:5d:8f:82:49:ec:5c:c3:86:79:03:15:97:7d: c4:13:68:94:1c:a9:bf:48:e5:39:0b:33:f8:51:47:ea:e1:ab: 60:d2:20:86:50:3a:94:3c:61:d7:04:a2:79:77:93:52:41:1b: 21:9e:73:76:03:e7:5e:73:74:b0:92:81:10:be:a7:c0:78:fe: 94:08:e1:d4:7e:25:9c:46:8c:85:b4:d8:43:2e:52:b4:1e:83: b7:5c:87:08:9f:43:1b:7f:fa:14:ac:34:2f:52:7e:35:0d:c0: ee:3f:84:16:bb:3d:09:2f:dc:a7:ab:eb:69:4a:87:85:79:9c: b6:f8:cb:55:62:ac:f0:94:aa:98:fc:76:14:0a:47:77:b8:58: 30:f9:3d:c6:69:f1:d1:2b:47:b4:dd:9a:20:8a:04:1b:32:d8: cc:6a:c4:8a:8e:8d:de:4c:3e:5e:40:25:4f:d1:59:9c:3e:08: 5a:e0:0a:20:65:9c:2d:de:d1:f9:a9:09:9e:be:03:ab:3b:fd: ce:f8:6c:a2:71:ef:b4:13:5d:92:09:87:83:7a:89:93:9e:1b: 11:c8:f9:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6bdLrG02njtHP687ojFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTZkY2NmYjJlMmM4OGNmMDlmNDg3YzQyMWZjOGFmN2Ji ZDM1NzQwHhcNMjYwMjA5MTgwMDEzWhcNMjYwMjEwMTgwMDEzWjAzMTEwLwYDVQQD Eyg3NTgxODAyMDkzZWE3NGFmMzdlZjFkYWEzZTZjMGMzMWFhZDJiMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ9pEKK+1pUTXTE8MKW7/ms6q9Sr lUlPZ0hpRGoUbin3P/IpySIDnXqr2+DeYyKv2HoiqyVTRV85f3SIzBq8RjqgPl2J OLjc4+Z0FnE0+crFPula0H2ygIKa1iTtF86LbIsypRPJI85KkgJlUpYscx3xMdaz c8X61hivcBRiU1JAAqoY372shBJfkpW2YNiTLoLYJqBnbApSj9XJKtJ9Cf79+THZ U0/QsJO5zI/ULDRqdG+BVxCq26FTz7ZMxZC7FiN8RejKYDV7wRxa6iwz7aTHY0oH tyZ8mNITjOjaWvAOfV1kn642kxDnrmcDyJrDReHBL6OWUGxctCLpJZP1qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWBgCCT6nSvN+8dqj5sDDGq0rF9MB8GA1UdIwQY MBaAFF0W3M+y4siM8J9IfEIfyK97vTV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEt ODVjNWQ1MzAyZDg4LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEtODVjNWQ1MzAyZDg4 LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXQBtIVy QChpOrNfqfebMtBo7uwtTxYAuijQsN2UTK6gN///50itOb9dj4JJ7FzDhnkDFZd9 xBNolBypv0jlOQsz+FFH6uGrYNIghlA6lDxh1wSieXeTUkEbIZ5zdgPnXnN0sJKB EL6nwHj+lAjh1H4lnEaMhbTYQy5StB6Dt1yHCJ9DG3/6FKw0L1J+NQ3A7j+EFrs9 CS/cp6vraUqHhXmctvjLVWKs8JSqmPx2FApHd7hYMPk9xmnx0StHtN2aIIoEGzLY zGrEio6N3kw+XkAlT9FZnD4IWuAKIGWcLd7R+akJnr4Dqzv9zvhsonHvtBNdkgmH g3qJk54bEcj5Og== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:24 2026 by rpki-client