This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json) Hash identifier: 2qg/aSbuNrUsL1cHShrnx4SCgk5k4FnJzhoDNiu/SsY= Subject key identifier: 57:03:1B:C3:02:F4:17:45:97:80:A6:CC:8C:0D:A6:E9:70:30:67:9E Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c Certificate serial: 019C43FDCFBEE22D7F48ABC16B292941BC8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft Manifest number: 1311 Signing time: Mon 09 Feb 2026 20:00:33 +0000 Manifest this update: Mon 09 Feb 2026 20:00:33 +0000 Manifest next update: Tue 10 Feb 2026 20:00:33 +0000 Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: hSjeBSg023piocF+E35ruWj0sUOmpXaQB0Wy+EXRGyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:cf:be:e2:2d:7f:48:ab:c1:6b:29:29:41:bc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c Validity Not Before: Feb 9 20:00:33 2026 GMT Not After : Feb 10 20:00:33 2026 GMT Subject: CN=57031bc302f417459780a6cc8c0da6e97030679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:c2:5e:60:a5:c7:97:ac:fa:8c:1c:42:49: d5:c2:df:c9:66:c9:dc:65:e2:76:b4:1f:c6:97:9b: 52:54:cf:d0:ea:7b:ae:fc:3a:8c:27:a4:8d:1e:16: a7:d4:68:c7:fe:1a:45:86:75:b0:b5:58:6a:5d:2e: 6b:d7:56:9f:03:0d:85:9b:c0:fe:ad:4b:12:16:d2: ad:a2:56:4e:b6:24:a4:af:41:25:3e:b7:e3:90:44: 1c:89:af:f8:51:ea:2f:e6:a1:b4:83:92:8d:d0:05: 0a:4c:92:39:5b:a4:94:9b:49:34:9c:7c:e6:1e:d2: 24:1f:1a:73:d9:2d:03:a9:f3:b4:8f:e0:30:4f:96: 06:5d:e6:1d:53:ee:eb:67:e7:1d:f8:8e:6c:9e:46: 93:e7:2a:ff:c3:f6:be:1c:0f:dc:a6:65:3b:44:b3: 22:44:74:e4:61:63:89:96:31:37:34:ae:de:9e:96: 9a:d8:4e:49:e1:5e:00:d1:7a:55:b5:95:60:80:6a: ef:11:5e:59:07:a9:57:71:f0:d4:39:3a:5d:b2:2e: e2:d6:1f:92:42:c5:9c:95:00:67:49:e9:98:56:66: 4d:5e:49:d7:60:97:a8:d5:0a:2d:98:b8:52:03:71: be:f1:0c:bc:5b:27:40:7c:41:fb:94:5d:27:a5:98: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:03:1B:C3:02:F4:17:45:97:80:A6:CC:8C:0D:A6:E9:70:30:67:9E X509v3 Authority Key Identifier: keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:60:e1:99:4b:5b:ec:7e:eb:b4:d8:dc:24:2f:7e:f0:5f:8f: dd:7d:d2:08:24:db:89:54:88:51:87:cb:57:f5:d6:c5:e8:14: 8f:5a:4d:3d:77:9a:79:ad:4a:e2:36:20:0f:29:37:4a:10:c6: a1:76:b9:48:d1:54:4e:82:96:05:d5:d1:38:a5:cc:61:da:b2: 50:08:fd:c2:12:e4:54:c2:4c:a4:a4:fc:0a:78:0d:b0:f5:21: 31:6f:ee:33:8a:78:bd:91:3f:25:b4:9a:d0:2a:91:87:93:5e: 45:c2:f0:ff:90:81:69:88:09:7e:74:0f:60:0a:60:19:bb:df: 1f:c4:38:a5:40:23:08:47:ed:32:34:c2:8a:3f:28:86:ae:f6: ee:ca:ef:a6:ee:0a:90:cd:89:2b:88:40:06:8d:ee:94:ab:75: 64:bd:6e:e7:7f:78:f9:cb:74:4f:fa:19:71:e2:bd:7f:97:39: 5c:6c:4e:ad:da:40:dc:19:1a:01:02:31:88:09:c7:4f:5c:d6: 63:25:ea:c5:75:c5:e5:10:65:11:f2:4b:50:83:b9:87:6c:85: c9:39:14:87:21:33:4a:35:01:7e:77:51:d1:5a:4b:e2:fc:09: 1d:ea:25:88:b9:da:35:a5:4a:25:fb:46:29:08:a8:22:07:2e: 28:1f:2b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/c++4i1/SKvBaykpQbyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmZiNjEwNTNiYTJkYWJjNTE3MTViMGY1M2NkN2I2Yjk0 NTRkMGMwHhcNMjYwMjA5MjAwMDMzWhcNMjYwMjEwMjAwMDMzWjAzMTEwLwYDVQQD Eyg1NzAzMWJjMzAyZjQxNzQ1OTc4MGE2Y2M4YzBkYTZlOTcwMzA2NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWTCXmClx5es+owcQknVwt/JZsnc ZeJ2tB/Gl5tSVM/Q6nuu/DqMJ6SNHhan1GjH/hpFhnWwtVhqXS5r11afAw2Fm8D+ rUsSFtKtolZOtiSkr0ElPrfjkEQcia/4Ueov5qG0g5KN0AUKTJI5W6SUm0k0nHzm HtIkHxpz2S0DqfO0j+AwT5YGXeYdU+7rZ+cd+I5snkaT5yr/w/a+HA/cpmU7RLMi RHTkYWOJljE3NK7enpaa2E5J4V4A0XpVtZVggGrvEV5ZB6lXcfDUOTpdsi7i1h+S QsWclQBnSemYVmZNXknXYJeo1QotmLhSA3G+8Qy8WydAfEH7lF0npZjonwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcDG8MC9BdFl4CmzIwNpulwMGeeMB8GA1UdIwQY MBaAFMQvthBTui2rxRcVsPU817a5RU0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjIt OGYxMWY2Mjc1YWFmLzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjItOGYxMWY2Mjc1YWFm LzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2DhmUtb 7H7rtNjcJC9+8F+P3X3SCCTbiVSIUYfLV/XWxegUj1pNPXeaea1K4jYgDyk3ShDG oXa5SNFUToKWBdXROKXMYdqyUAj9whLkVMJMpKT8CngNsPUhMW/uM4p4vZE/JbSa 0CqRh5NeRcLw/5CBaYgJfnQPYApgGbvfH8Q4pUAjCEftMjTCij8ohq727srvpu4K kM2JK4hABo3ulKt1ZL1u5394+ct0T/oZceK9f5c5XGxOrdpA3BkaAQIxiAnHT1zW YyXqxXXF5RBlEfJLUIO5h2yFyTkUhyEzSjUBfndR0VpL4vwJHeoliLnaNaVKJftG KQioIgcuKB8rXA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:10 2026 by rpki-client