This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json) Hash identifier: oQelGoCHsMzJctHLx/8CrtICZ49ri4nRR5yFzo2w3G8= Subject key identifier: 43:FA:BC:58:C8:52:1E:27:D3:B5:02:B0:08:A1:6F:39:92:72:14:70 Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e Certificate serial: 019C4322AAE964C9DB32A0A2948F6376B865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft Manifest number: 028D Signing time: Mon 09 Feb 2026 16:01:11 +0000 Manifest this update: Mon 09 Feb 2026 16:01:11 +0000 Manifest next update: Tue 10 Feb 2026 16:01:11 +0000 Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: 27n3D84rsiOgEqE0dncRvB1yrGj+OvDY3qwtlXWZTik=) 2: kSjjDOzoNANECAR0DxlgQ3qg0Ak.roa (hash: /lj5qR8E+7YT0u9bmkNO6K63OEKU1WfqJKCxaWzabBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:aa:e9:64:c9:db:32:a0:a2:94:8f:63:76:b8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e Validity Not Before: Feb 9 16:01:11 2026 GMT Not After : Feb 10 16:01:11 2026 GMT Subject: CN=43fabc58c8521e27d3b502b008a16f3992721470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:e2:4f:15:39:22:e2:36:0c:ea:15:80:c1: a1:cc:fa:9d:48:a5:82:b6:0a:12:e7:24:0e:2e:ce: 27:95:a5:91:1e:cc:a3:e0:69:4b:61:0a:7d:53:2d: e8:fc:c9:68:5d:ef:b6:ba:42:1a:56:a4:2d:ca:a1: a7:3b:10:de:4d:df:b1:14:d3:71:80:3a:a9:39:aa: 7c:98:2e:00:4d:06:d9:93:e0:04:4f:a8:35:9b:4b: 5c:bb:e1:47:e6:3a:32:0a:34:f4:e4:cc:c9:0b:eb: 7c:96:bf:33:e2:06:2d:52:41:b8:a8:a2:49:83:5d: 22:3a:e7:76:3a:f9:fa:b7:e5:c1:e1:3e:d9:2c:59: f5:ad:3c:9f:7c:1d:f1:07:78:7e:5e:fd:e4:7a:10: 41:67:b0:34:61:8e:3e:81:1a:a7:fd:ba:ab:d0:9e: af:d3:af:9d:8d:d3:cd:a2:14:94:e2:8d:90:0e:36: 2d:6b:df:4a:ac:c0:89:4c:7b:f5:eb:fb:bf:e1:0f: 6e:16:a7:4f:b5:92:3a:35:c1:75:12:88:4b:1f:f4: c4:7a:81:38:fe:76:56:08:1d:d9:e1:a3:6e:69:ae: 78:f5:b4:1c:47:53:16:5b:9f:8d:c1:6d:4f:ff:f5: fe:72:44:20:61:22:3f:a4:22:a5:03:93:f6:cd:c4: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:BC:58:C8:52:1E:27:D3:B5:02:B0:08:A1:6F:39:92:72:14:70 X509v3 Authority Key Identifier: keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:90:ab:f2:6d:29:c4:4f:46:6c:3a:cc:3d:ab:63:bb:e1: cd:b4:6c:8d:2c:73:cf:f8:e2:10:9b:6e:9d:fb:00:94:2d:32: 48:10:17:8f:0a:cb:b1:5c:e9:70:29:2d:2d:a3:5c:0c:2e:6c: db:44:fe:2d:a6:01:49:31:6e:d8:79:4e:96:a6:b6:4b:56:ca: 33:e2:29:30:9b:8e:a7:0c:7b:49:54:b8:8c:1c:be:b2:88:7f: 95:37:0a:83:41:db:2d:0e:43:2f:f6:82:d3:8e:e5:ba:ab:6d: 8f:99:40:70:49:8f:56:f9:b8:e9:fa:f6:6b:31:e8:7c:e5:39: 28:87:4d:1a:3c:bb:fc:78:df:c4:be:23:12:51:21:8f:7b:f8: 54:4d:94:dc:9b:96:6e:22:d7:0e:db:de:d9:86:5d:e8:12:c5: 69:5c:45:3a:05:7c:9c:b8:f8:7c:d5:d5:54:a2:61:27:a0:72: e5:8b:79:31:55:2a:d3:09:36:54:96:5f:2d:b2:a6:ad:1d:f1: bb:27:dd:1a:50:71:16:66:00:57:2a:09:cd:84:b5:73:a8:8d: b8:55:65:5a:c1:f1:87:3d:84:5b:f5:9f:7a:ae:3e:75:69:6b: c1:f2:54:82:1c:6c:6c:5c:88:9c:de:93:7c:14:bb:81:e0:d2: c7:76:1c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqrpZMnbMqCilI9jdrhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGQ3Yjc5MGYzZjQ5MzQzMjhlMTI5YTJkZGU0ZGQ3NGFh M2UxM2UwHhcNMjYwMjA5MTYwMTExWhcNMjYwMjEwMTYwMTExWjAzMTEwLwYDVQQD Eyg0M2ZhYmM1OGM4NTIxZTI3ZDNiNTAyYjAwOGExNmYzOTkyNzIxNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyDiTxU5IuI2DOoVgMGhzPqdSKWC tgoS5yQOLs4nlaWRHsyj4GlLYQp9Uy3o/MloXe+2ukIaVqQtyqGnOxDeTd+xFNNx gDqpOap8mC4ATQbZk+AET6g1m0tcu+FH5joyCjT05MzJC+t8lr8z4gYtUkG4qKJJ g10iOud2Ovn6t+XB4T7ZLFn1rTyffB3xB3h+Xv3kehBBZ7A0YY4+gRqn/bqr0J6v 06+djdPNohSU4o2QDjYta99KrMCJTHv16/u/4Q9uFqdPtZI6NcF1EohLH/TEeoE4 /nZWCB3Z4aNuaa549bQcR1MWW5+NwW1P//X+ckQgYSI/pCKlA5P2zcRgsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP6vFjIUh4n07UCsAihbzmSchRwMB8GA1UdIwQY MBaAFF9Ne3kPP0k0Mo4Smi3eTddKo+E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjIt N2Q1NDkyNzQ0NWY2LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjItN2Q1NDkyNzQ0NWY2 LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJmQq/Jt KcRPRmw6zD2rY7vhzbRsjSxzz/jiEJtunfsAlC0ySBAXjwrLsVzpcCktLaNcDC5s 20T+LaYBSTFu2HlOlqa2S1bKM+IpMJuOpwx7SVS4jBy+soh/lTcKg0HbLQ5DL/aC 047luqttj5lAcEmPVvm46fr2azHofOU5KIdNGjy7/HjfxL4jElEhj3v4VE2U3JuW biLXDtve2YZd6BLFaVxFOgV8nLj4fNXVVKJhJ6By5Yt5MVUq0wk2VJZfLbKmrR3x uyfdGlBxFmYAVyoJzYS1c6iNuFVlWsHxhz2EW/Wfeq4+dWlrwfJUghxsbFyInN6T fBS7geDSx3Yc9w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:35 2026 by rpki-client