This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json) Hash identifier: naeZYEFcsnKZlds3YUyYEU/wxLnMmTyIeytLhY3r7Zw= Subject key identifier: 9F:1F:31:C5:5E:AA:9A:7C:44:4E:55:45:17:A9:2E:64:3B:39:B2:97 Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4 Certificate serial: 019C438FF3D14C7B6E90710CB83ABF83A7FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft Manifest number: 052A Signing time: Mon 09 Feb 2026 18:00:33 +0000 Manifest this update: Mon 09 Feb 2026 18:00:33 +0000 Manifest next update: Tue 10 Feb 2026 18:00:33 +0000 Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: DNS7e/nZgwGiuYsohA8S0RfHKYWPArw9IBQF+u4EhHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f3:d1:4c:7b:6e:90:71:0c:b8:3a:bf:83:a7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4 Validity Not Before: Feb 9 18:00:33 2026 GMT Not After : Feb 10 18:00:33 2026 GMT Subject: CN=9f1f31c55eaa9a7c444e554517a92e643b39b297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:b7:65:bf:dc:27:89:45:0a:0a:7a:65:ea: 72:0d:a3:5d:f6:d6:36:dd:ba:a4:ab:1d:ad:ae:82: f0:1d:f5:d0:fe:2d:5e:7f:bc:13:77:24:02:a7:42: 2a:01:70:75:f6:62:77:e7:67:0a:c5:03:58:75:68: 81:ab:35:bf:3d:76:67:0c:c1:50:5f:82:52:7f:21: 32:12:f0:e4:e8:4b:c3:59:ed:b7:9d:03:29:a0:75: 92:4f:12:66:ba:02:40:f5:51:36:ba:02:ad:fb:aa: 38:21:43:26:02:91:93:5b:80:b6:fd:b6:64:37:6f: b8:67:bd:8f:d8:76:8c:83:0d:40:fe:35:b4:d2:11: 16:d3:bb:7c:4d:3e:07:90:7e:f4:5a:03:59:73:88: 03:6e:c2:10:74:36:99:84:aa:51:a9:9d:a2:70:4e: 00:13:d7:22:a4:4a:9d:4a:a0:6d:93:e7:4e:12:e6: 28:7f:92:d2:d5:ba:56:8a:e5:41:47:1b:21:a8:a4: d6:86:7c:83:4f:a0:d4:67:51:98:0d:da:60:b0:46: 5a:89:be:8d:eb:2d:e4:e9:dd:49:21:83:81:48:02: 43:d6:2e:3d:38:f6:3e:5a:ba:05:43:9f:39:1f:e5: 87:f8:2a:18:1f:de:64:58:67:95:00:7e:47:27:cb: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1F:31:C5:5E:AA:9A:7C:44:4E:55:45:17:A9:2E:64:3B:39:B2:97 X509v3 Authority Key Identifier: keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a1:b7:3e:a0:b4:07:aa:d0:cd:4b:90:eb:d6:49:08:0b:8c: fa:22:3b:03:5c:78:3a:ef:bb:bf:e0:72:d2:71:b4:61:14:51: 7a:f6:a1:93:79:9f:05:d9:37:e5:44:de:23:e6:9e:d6:f3:0e: a2:7e:fc:c7:06:80:48:b4:f1:7c:67:41:f4:11:5c:31:a8:b2: eb:1f:01:54:d9:df:31:49:3f:35:c8:5b:94:7b:10:28:ec:16: b4:72:70:9e:fd:ff:15:02:24:67:ca:c5:3e:f2:1e:79:7b:9f: 03:c3:1c:21:0e:1c:77:9b:a4:54:2e:4c:f7:ee:6a:58:45:4c: 52:44:8f:1b:a6:c7:4b:6d:f3:bb:8c:2a:e1:fc:7a:3d:a2:78: fe:c5:c9:1c:14:f8:22:3e:5f:61:6a:4c:98:f3:2e:68:26:48: 68:44:f5:c3:44:7e:5d:b0:b7:29:2d:0a:dc:4b:a5:25:8e:13: 8f:1f:90:10:a9:f7:1c:3b:e4:bf:8f:33:98:42:3e:28:9e:04: 1b:d9:78:a3:b5:22:80:8c:dc:b1:76:a9:c9:23:0a:6d:64:3b: 63:76:f0:c4:21:19:3a:e3:2a:0d:81:be:51:53:58:9f:2a:6d: 7e:7b:a3:fa:3f:e6:56:10:49:7a:68:e7:b5:bd:58:e3:f8:44: 1a:94:88:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/PRTHtukHEMuDq/g6f9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjQ5MGU2OTgwYjc5ZmE0YWIxN2U1ZjY1NzM3MWRhNjZj MzZhZjQwHhcNMjYwMjA5MTgwMDMzWhcNMjYwMjEwMTgwMDMzWjAzMTEwLwYDVQQD Eyg5ZjFmMzFjNTVlYWE5YTdjNDQ0ZTU1NDUxN2E5MmU2NDNiMzliMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2O3Zb/cJ4lFCgp6ZepyDaNd9tY2 3bqkqx2troLwHfXQ/i1ef7wTdyQCp0IqAXB19mJ352cKxQNYdWiBqzW/PXZnDMFQ X4JSfyEyEvDk6EvDWe23nQMpoHWSTxJmugJA9VE2ugKt+6o4IUMmApGTW4C2/bZk N2+4Z72P2HaMgw1A/jW00hEW07t8TT4HkH70WgNZc4gDbsIQdDaZhKpRqZ2icE4A E9cipEqdSqBtk+dOEuYof5LS1bpWiuVBRxshqKTWhnyDT6DUZ1GYDdpgsEZaib6N 6y3k6d1JIYOBSAJD1i49OPY+WroFQ585H+WH+CoYH95kWGeVAH5HJ8uZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8fMcVeqpp8RE5VRRepLmQ7ObKXMB8GA1UdIwQY MBaAFMQkkOaYC3n6SrF+X2Vzcdpmw2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQt NThjMTg5YzZlZmVkLzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQtNThjMTg5YzZlZmVk LzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6G3PqC0 B6rQzUuQ69ZJCAuM+iI7A1x4Ou+7v+By0nG0YRRRevahk3mfBdk35UTeI+ae1vMO on78xwaASLTxfGdB9BFcMaiy6x8BVNnfMUk/NchblHsQKOwWtHJwnv3/FQIkZ8rF PvIeeXufA8McIQ4cd5ukVC5M9+5qWEVMUkSPG6bHS23zu4wq4fx6PaJ4/sXJHBT4 Ij5fYWpMmPMuaCZIaET1w0R+XbC3KS0K3EulJY4Tjx+QEKn3HDvkv48zmEI+KJ4E G9l4o7UigIzcsXapySMKbWQ7Y3bwxCEZOuMqDYG+UVNYnyptfnuj+j/mVhBJemjn tb1Y4/hEGpSIAA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:19 2026 by rpki-client