This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json) Hash identifier: dww7GEqyBsIbZS0Fv+ycS7ONskPaLDXB4Acl0pWxuzc= Subject key identifier: FC:71:8C:74:F5:E0:B0:BF:3E:D0:21:2C:8B:2F:ED:66:8F:92:21:BD Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55 Certificate serial: 019C4134341EE3E323654FEF23064667DE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft Manifest number: 0C1B Signing time: Mon 09 Feb 2026 07:01:06 +0000 Manifest this update: Mon 09 Feb 2026 07:01:06 +0000 Manifest next update: Tue 10 Feb 2026 07:01:06 +0000 Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: Uv0lLrnIH16C6+mHMZQceF8o1qz4A8vXf91mnnF7oT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:34:1e:e3:e3:23:65:4f:ef:23:06:46:67:de:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55 Validity Not Before: Feb 9 07:01:06 2026 GMT Not After : Feb 10 07:01:06 2026 GMT Subject: CN=fc718c74f5e0b0bf3ed0212c8b2fed668f9221bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:b4:2a:d4:b5:db:9b:a7:54:a4:1c:83:b6: be:16:c7:2d:d8:9c:56:e5:36:c3:a2:6a:11:84:7b: 90:dc:96:a5:f4:13:81:84:e3:bc:1a:b6:0b:d1:27: bc:12:45:fb:a7:f0:4e:14:5b:b0:81:84:a7:d6:72: 26:14:d1:7d:46:c3:4c:1b:4e:6e:fe:4d:6b:cf:96: 28:c0:35:f4:9a:7c:19:54:2c:0b:e1:9b:f5:2a:79: b4:4b:4d:3c:f2:b1:58:91:d0:12:2b:8c:2f:3f:83: 56:5d:9f:3f:59:81:12:bd:05:1c:56:79:07:96:fd: 4d:5e:8a:88:a1:09:ad:e5:a1:79:53:59:31:d7:3b: 0f:4a:2d:fe:1b:7d:a2:f9:86:e9:17:0d:8d:d3:31: 9e:65:9e:0b:14:44:a8:ee:6e:d9:d9:a4:41:8a:75: b2:7d:3a:a3:f6:44:f1:f5:b1:64:65:6d:81:95:9d: bb:8f:e0:ee:4a:45:ac:e4:cc:9c:ca:6c:ba:d0:c0: ce:18:95:04:6e:e9:29:63:6b:b5:7f:d7:af:91:d1: 60:21:47:64:ea:4f:e2:0d:ca:88:9e:21:9b:04:a7: b5:51:5e:78:8e:d5:70:d1:9b:2e:93:a2:62:dd:40: e0:cc:c8:b9:82:55:ac:9d:24:42:bd:8e:f9:7c:be: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:8C:74:F5:E0:B0:BF:3E:D0:21:2C:8B:2F:ED:66:8F:92:21:BD X509v3 Authority Key Identifier: keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:8f:90:46:04:16:20:c4:83:da:cb:d6:c3:de:5a:d8:62: a8:be:04:21:00:21:e1:4e:34:c7:9f:55:f8:cf:97:94:76:b3: 87:4b:05:bf:4c:27:d8:ab:24:5d:04:d6:12:61:2b:a9:ad:c7: ac:cc:f5:52:be:a1:ed:03:a2:67:e8:dd:82:80:ab:cb:7b:41: e6:3f:f0:0f:f5:70:e8:bd:95:ae:c5:20:41:16:5d:5e:6c:65: 93:45:f1:06:83:e2:1f:04:d4:12:66:a0:4b:8d:c5:1d:f5:b0: f3:02:ac:c5:27:05:0b:bd:69:14:2c:fc:96:46:31:85:be:0d: 59:5b:86:fd:0a:c1:ce:6a:e3:53:a2:7a:6f:9e:e9:56:ce:ce: 2d:b6:69:b4:fc:ca:eb:20:ca:4d:fb:05:92:59:5b:fd:11:91: 9f:8b:f2:83:68:9b:be:ef:49:4b:da:d1:b7:b3:05:13:8d:44: 2e:3e:da:4a:d4:cc:67:1a:22:ed:35:86:a5:2e:11:07:b6:7a: 88:96:e1:d0:28:f6:07:5d:45:1d:68:9f:03:ef:6b:6b:45:db: 8f:0c:19:2c:ae:da:b6:ea:19:28:92:09:c6:a2:04:33:cb:20: 8f:e7:83:00:d0:55:d2:f9:d3:3c:a8:eb:3f:c2:77:26:50:b9: 85:78:82:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNDQe4+MjZU/vIwZGZ94PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm MDhlNTUwHhcNMjYwMjA5MDcwMTA2WhcNMjYwMjEwMDcwMTA2WjAzMTEwLwYDVQQD EyhmYzcxOGM3NGY1ZTBiMGJmM2VkMDIxMmM4YjJmZWQ2NjhmOTIyMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvve0KtS125unVKQcg7a+Fsct2JxW 5TbDomoRhHuQ3Jal9BOBhOO8GrYL0Se8EkX7p/BOFFuwgYSn1nImFNF9RsNMG05u /k1rz5YowDX0mnwZVCwL4Zv1Knm0S0088rFYkdASK4wvP4NWXZ8/WYESvQUcVnkH lv1NXoqIoQmt5aF5U1kx1zsPSi3+G32i+YbpFw2N0zGeZZ4LFESo7m7Z2aRBinWy fTqj9kTx9bFkZW2BlZ27j+DuSkWs5Mycymy60MDOGJUEbukpY2u1f9evkdFgIUdk 6k/iDcqIniGbBKe1UV54jtVw0Zsuk6Ji3UDgzMi5glWsnSRCvY75fL6OYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxxjHT14LC/PtAhLIsv7WaPkiG9MB8GA1UdIwQY MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzqPkEYE FiDEg9rL1sPeWthiqL4EIQAh4U40x59V+M+XlHazh0sFv0wn2KskXQTWEmErqa3H rMz1Ur6h7QOiZ+jdgoCry3tB5j/wD/Vw6L2VrsUgQRZdXmxlk0XxBoPiHwTUEmag S43FHfWw8wKsxScFC71pFCz8lkYxhb4NWVuG/QrBzmrjU6J6b57pVs7OLbZptPzK 6yDKTfsFkllb/RGRn4vyg2ibvu9JS9rRt7MFE41ELj7aStTMZxoi7TWGpS4RB7Z6 iJbh0Cj2B11FHWifA+9ra0XbjwwZLK7atuoZKJIJxqIEM8sgj+eDANBV0vnTPKjr P8J3JlC5hXiCuA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:41 2026 by rpki-client