This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json) Hash identifier: vZg+65bgwjrGvvlHzDAz06kr3M99tzOgEJSVU7g4JIs= Subject key identifier: 3C:D7:0C:C0:3C:D6:AD:78:31:03:E8:D9:7F:58:A9:9C:4B:45:B6:B9 Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f Certificate serial: 019C42B42BB18CF1B8E58F416C51D912C4D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft Manifest number: 166B Signing time: Mon 09 Feb 2026 14:00:29 +0000 Manifest this update: Mon 09 Feb 2026 14:00:29 +0000 Manifest next update: Tue 10 Feb 2026 14:00:29 +0000 Files and hashes: 1: IewQ4-Em8YPzzj6aKGxcrGBWA00.roa (hash: d+3Wy6JFrqiHOg5/dyS0zErOjSAHU2d4zx1E1Uy5i+w=) 2: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: jekAACxlOimwTv7cgRLxgMgxImJvw+Z/ouPzAjbr54E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2b:b1:8c:f1:b8:e5:8f:41:6c:51:d9:12:c4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f Validity Not Before: Feb 9 14:00:29 2026 GMT Not After : Feb 10 14:00:29 2026 GMT Subject: CN=3cd70cc03cd6ad783103e8d97f58a99c4b45b6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:4a:3e:f2:e5:28:e2:7b:57:a5:52:ef:2b: 98:30:c9:f0:30:2f:c4:af:8f:b1:f3:5a:d8:40:16: e7:3c:9c:3a:82:36:de:de:5e:65:41:6d:b4:ed:c9: 01:84:88:4f:3b:be:65:c7:f7:4f:46:9e:53:cc:9c: 89:19:a1:43:c5:2c:3d:69:fc:1f:26:0d:4f:e7:dd: 59:90:9b:4c:84:ca:90:36:5a:f4:37:67:b9:28:8c: 28:f3:6d:33:3c:c7:c5:b5:05:5a:0a:ef:ba:75:e7: 39:20:c9:e7:ec:44:79:4b:42:21:dd:21:51:01:5c: ed:64:08:65:d8:83:b4:c9:14:2d:ee:b5:38:15:01: 1e:fa:f3:42:51:34:7d:66:c8:88:a1:1b:89:40:18: 3b:8c:d7:43:26:b8:cd:ac:2d:ef:ce:5b:4b:a5:a1: 25:ee:86:54:e6:22:4f:88:af:a8:fc:04:24:14:34: 16:80:49:83:21:b4:92:af:39:db:65:6d:a3:6b:e4: 28:26:40:8e:a9:46:94:3f:46:28:2d:4c:93:6d:d7: 57:51:8b:c1:e0:e4:81:23:a8:30:92:f2:4d:0d:1d: e1:6a:4c:c3:54:7f:77:2e:96:59:1e:6a:33:5c:33: 74:2e:d8:7d:29:17:8c:01:4f:34:c4:27:d1:ba:81: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:0C:C0:3C:D6:AD:78:31:03:E8:D9:7F:58:A9:9C:4B:45:B6:B9 X509v3 Authority Key Identifier: keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:57:9c:c1:15:a4:52:4c:ab:64:7f:43:70:b0:66:be:05:b1: bf:0f:b1:68:9f:01:e6:e9:f3:ea:b3:85:4f:31:42:8b:2b:22: 58:b3:b3:57:70:a6:d6:7e:8b:7a:44:31:73:15:6c:d7:37:01: 4c:96:38:21:53:a3:25:8d:a5:ab:b1:0b:77:8c:26:24:56:97: d3:95:7f:ba:be:d1:5a:c0:49:ce:dd:a8:fb:1e:78:80:c6:bb: da:57:05:30:f3:aa:38:c0:fa:4c:3f:e8:f5:3c:39:e7:06:f5: 7c:51:38:e5:82:f9:5b:24:05:ea:db:b2:8b:f7:fd:91:aa:90: 70:6b:3e:90:2b:f1:fb:d9:2a:9e:d5:ed:04:6a:b6:e6:75:5d: ea:9a:c2:42:10:bd:bd:27:77:44:eb:0e:6a:32:8c:a1:be:9b: 08:b1:f5:96:61:60:da:38:48:62:db:04:3b:dc:38:8e:3f:ba: 51:e6:fe:4a:62:c6:64:c4:b0:af:b4:d8:03:64:d3:e3:a6:80: 4a:4d:9f:83:46:5f:12:0e:f3:76:4b:80:f8:95:25:b5:f0:6b: 3f:a4:3b:05:6a:5e:95:55:ba:fe:b1:be:9e:38:7b:99:af:72: b7:de:0a:45:7a:5e:7d:e5:09:10:1f:2d:01:c3:f0:bf:a1:cf: 3d:0d:fa:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCuxjPG45Y9BbFHZEsTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh OTYzOWYwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD EygzY2Q3MGNjMDNjZDZhZDc4MzEwM2U4ZDk3ZjU4YTk5YzRiNDViNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PtKPvLlKOJ7V6VS7yuYMMnwMC/E r4+x81rYQBbnPJw6gjbe3l5lQW207ckBhIhPO75lx/dPRp5TzJyJGaFDxSw9afwf Jg1P591ZkJtMhMqQNlr0N2e5KIwo820zPMfFtQVaCu+6dec5IMnn7ER5S0Ih3SFR AVztZAhl2IO0yRQt7rU4FQEe+vNCUTR9ZsiIoRuJQBg7jNdDJrjNrC3vzltLpaEl 7oZU5iJPiK+o/AQkFDQWgEmDIbSSrznbZW2ja+QoJkCOqUaUP0YoLUyTbddXUYvB 4OSBI6gwkvJNDR3hakzDVH93LpZZHmozXDN0Lth9KReMAU80xCfRuoHr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzXDMA81q14MQPo2X9YqZxLRba5MB8GA1UdIwQY MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVecwRWk UkyrZH9DcLBmvgWxvw+xaJ8B5unz6rOFTzFCiysiWLOzV3Cm1n6LekQxcxVs1zcB TJY4IVOjJY2lq7ELd4wmJFaX05V/ur7RWsBJzt2o+x54gMa72lcFMPOqOMD6TD/o 9Tw55wb1fFE45YL5WyQF6tuyi/f9kaqQcGs+kCvx+9kqntXtBGq25nVd6prCQhC9 vSd3ROsOajKMob6bCLH1lmFg2jhIYtsEO9w4jj+6Ueb+SmLGZMSwr7TYA2TT46aA Sk2fg0ZfEg7zdkuA+JUltfBrP6Q7BWpelVW6/rG+njh7ma9yt94KRXpefeUJEB8t AcPwv6HPPQ36tA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:33 2026 by rpki-client