This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: kpjw+o6iEpFXqA88YPFbhT4xkub5kADmnzgT9Qc5T8w= Subject key identifier: 27:E5:60:CF:81:C2:66:18:09:56:5F:D0:5A:C7:BA:88:87:A4:F9:58 Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019C42469D27AEAF3756F16739B50AB74232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 03DE Signing time: Mon 09 Feb 2026 12:00:49 +0000 Manifest this update: Mon 09 Feb 2026 12:00:49 +0000 Manifest next update: Tue 10 Feb 2026 12:00:49 +0000 Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: kMkcJQw4HLTJQ1g2jln5dvZLyeIsTDxc5XN8tm9Fbi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9d:27:ae:af:37:56:f1:67:39:b5:0a:b7:42:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Feb 9 12:00:49 2026 GMT Not After : Feb 10 12:00:49 2026 GMT Subject: CN=27e560cf81c2661809565fd05ac7ba8887a4f958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:01:2f:9f:52:b2:b6:bb:b1:b5:dd:f4:80: 6a:79:a7:4b:88:05:d1:3c:1a:97:bc:69:a5:17:0f: 6c:07:ad:96:14:9f:1b:ae:4c:22:41:fb:3f:4e:7f: 86:1f:82:91:43:39:2d:19:67:1b:bc:f3:e3:09:67: ce:1e:b5:b0:06:6e:ca:96:63:a7:fe:f3:69:d8:a0: 18:7e:9a:02:ad:9b:4a:c2:41:69:99:dd:43:00:93: 6a:98:c2:13:72:4a:98:51:a9:ee:b0:49:10:db:9d: 10:64:ed:fb:5c:4e:11:5b:e6:86:dd:01:f8:7b:36: f9:fb:37:54:25:af:19:98:c0:ae:56:50:82:43:c8: 02:e4:3d:bc:e9:40:e5:55:ca:eb:7b:7f:54:21:bc: 78:7f:37:d3:34:88:c6:1d:fa:ae:a5:65:71:e8:37: a0:3f:95:9c:86:46:b4:80:50:b2:27:d5:78:5e:f4: 33:8b:e4:6f:8a:0c:a9:5f:e7:ad:d5:1f:db:c4:35: 34:4d:6d:b6:6a:46:9f:e2:34:14:df:97:bf:ee:69: c8:47:32:4b:93:2d:1c:6c:c6:4b:ad:3a:e6:61:b2: 56:ce:78:bc:cd:1e:73:d5:70:1c:9e:e0:7f:c0:f4: 79:5a:05:dc:27:5d:0d:64:ae:8e:8e:37:7e:79:c3: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E5:60:CF:81:C2:66:18:09:56:5F:D0:5A:C7:BA:88:87:A4:F9:58 X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:28:3a:49:02:fb:7f:57:3f:19:c5:0d:12:24:1b:dc:c4:8d: b5:07:76:67:61:5a:7a:29:9c:24:99:d1:fe:c0:f4:82:b1:e1: ab:d2:c3:70:2f:55:f4:ba:31:9d:95:bb:60:a8:79:d2:76:86: 5f:4d:7b:a5:a2:0d:07:ad:80:86:77:d6:1e:72:ab:ed:fd:88: 07:fa:40:de:87:1e:c9:b3:d8:f5:21:ee:b2:87:d6:c9:9f:6e: 36:25:6c:95:37:87:41:0d:13:fe:de:3b:e1:e4:f9:37:fa:aa: bc:16:63:12:0c:c4:bd:f5:74:09:cc:07:47:62:6e:2d:b2:47: 5a:97:77:c0:0b:9b:85:15:66:d7:62:7e:3e:80:e6:b5:fe:25: 75:52:83:04:a5:c0:c5:0f:72:da:a6:7f:03:04:87:8b:3e:ee: 29:a9:2d:89:b5:3f:f2:ef:28:44:35:0f:f7:87:7c:c6:83:b0: 46:19:b1:43:59:71:be:9b:76:4e:31:52:b3:86:9c:03:4e:f9: 6c:7f:ec:07:d2:17:4d:d0:e6:f9:a0:e1:87:88:04:40:31:d9: b6:d3:dd:5c:26:55:a2:98:32:59:56:06:ac:51:b2:5a:8f:b9: 94:f6:68:24:ca:32:e6:0e:fc:81:23:1c:45:00:5e:4d:88:6d: 79:36:a6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRp0nrq83VvFnObUKt0IyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjYwMjA5MTIwMDQ5WhcNMjYwMjEwMTIwMDQ5WjAzMTEwLwYDVQQD EygyN2U1NjBjZjgxYzI2NjE4MDk1NjVmZDA1YWM3YmE4ODg3YTRmOTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBEBL59Ssra7sbXd9IBqeadLiAXR PBqXvGmlFw9sB62WFJ8brkwiQfs/Tn+GH4KRQzktGWcbvPPjCWfOHrWwBm7KlmOn /vNp2KAYfpoCrZtKwkFpmd1DAJNqmMITckqYUanusEkQ250QZO37XE4RW+aG3QH4 ezb5+zdUJa8ZmMCuVlCCQ8gC5D286UDlVcrre39UIbx4fzfTNIjGHfqupWVx6Deg P5Wchka0gFCyJ9V4XvQzi+RvigypX+et1R/bxDU0TW22akaf4jQU35e/7mnIRzJL ky0cbMZLrTrmYbJWzni8zR5z1XAcnuB/wPR5WgXcJ10NZK6Ojjd+ecM5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCflYM+BwmYYCVZf0FrHuoiHpPlYMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCg6SQL7 f1c/GcUNEiQb3MSNtQd2Z2FaeimcJJnR/sD0grHhq9LDcC9V9LoxnZW7YKh50naG X017paINB62AhnfWHnKr7f2IB/pA3oceybPY9SHusofWyZ9uNiVslTeHQQ0T/t47 4eT5N/qqvBZjEgzEvfV0CcwHR2JuLbJHWpd3wAubhRVm12J+PoDmtf4ldVKDBKXA xQ9y2qZ/AwSHiz7uKaktibU/8u8oRDUP94d8xoOwRhmxQ1lxvpt2TjFSs4acA075 bH/sB9IXTdDm+aDhh4gEQDHZttPdXCZVopgyWVYGrFGyWo+5lPZoJMoy5g78gSMc RQBeTYhteTamUA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:14 2026 by rpki-client