This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json) Hash identifier: EyDldFmbMLZHIFEnZLqfWpMjTytgmq/ipuQrhRSZqMY= Subject key identifier: E2:E3:65:58:F8:55:8A:F2:57:A6:38:D2:E1:02:AF:1F:6E:1A:30:9A Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672 Certificate serial: 019C4321FC968A63B459F24AB1605C636841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: 2Vs036RIRQoTV2qAx1ertXDI75Q.roa (hash: 3fM+Aj1+OVjee08EOwpC46t8Bux0tVGCFsexo6Rt54s=) 2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: 1gt+SD542P4yo+DosQzfwuHDZx/PvdBxwLqoWbpwAa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fc:96:8a:63:b4:59:f2:4a:b1:60:5c:63:68:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=e2e36558f8558af257a638d2e102af1f6e1a309a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:1a:50:2f:33:f1:79:a7:b1:6b:9b:7b:f3: 87:f1:a0:ee:64:65:d4:b7:35:90:8c:65:6e:59:2f: 3a:7c:e6:fe:46:c5:f7:5d:62:4d:6f:3f:1a:fd:1d: f5:65:af:75:01:13:1b:ff:61:89:71:c4:c2:87:d0: 44:6f:03:4e:29:a1:5a:ac:e0:60:ba:00:b7:0f:52: c0:75:16:52:42:4d:14:e9:3f:36:0f:7a:7e:ac:69: af:21:f4:21:88:35:a2:8e:af:d6:86:04:27:39:15: 43:b8:5d:5a:f1:6a:1e:88:b7:5d:8a:8c:e9:a2:ff: 45:ac:e4:76:b4:cc:dc:ab:f1:ee:ae:75:76:fc:e0: bc:45:3a:9e:c4:95:e5:53:98:de:14:ba:b6:d8:e0: 8f:4b:7d:f0:d7:af:35:41:32:da:ec:c3:25:d1:bd: b1:20:7b:0b:32:02:fe:f6:d8:dd:94:6a:44:66:81: f7:21:15:2e:df:30:b4:b0:fd:da:9f:68:a1:7e:3f: 54:a1:e7:ea:e5:e5:db:67:76:32:a7:15:99:26:0f: a6:c1:f2:4b:c1:e2:65:fa:3f:a7:4b:2c:c4:b0:3b: d7:e4:aa:18:d0:0b:55:69:54:81:3c:6a:89:f6:98: bc:ac:78:07:3f:3f:4e:0a:94:a8:42:d2:23:43:00: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E3:65:58:F8:55:8A:F2:57:A6:38:D2:E1:02:AF:1F:6E:1A:30:9A X509v3 Authority Key Identifier: keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:69:6a:29:d4:9b:6b:ab:47:0d:91:c7:8d:42:c4:c2:81:5e: 81:04:98:26:e8:a7:d9:83:1e:b4:5c:ad:d2:0c:ac:b7:df:1e: c6:8d:e8:27:d1:87:66:a1:03:c2:78:df:a5:aa:12:a7:c7:1a: 59:2e:91:74:66:28:fa:25:47:f0:69:06:9a:bc:b9:13:16:63: 1b:09:4f:b3:ff:06:0f:c5:c5:90:fc:0a:2a:16:1f:cf:bf:d4: 48:09:2d:c9:60:e6:58:0c:cf:a5:1d:75:d5:56:33:54:3e:6f: b0:59:9a:fe:7c:a8:7c:fe:06:7d:d6:47:73:f6:6c:1f:0e:eb: aa:c2:ca:fc:59:ad:90:90:c1:e8:b6:68:16:0a:71:96:15:61: 1f:46:66:01:47:e8:2c:47:35:32:60:7f:21:4a:c7:4d:58:a0: cb:5d:4b:16:0e:14:e7:26:f8:b4:2a:de:c9:0f:13:f0:cd:50: 30:53:42:4d:5c:c6:38:7d:8b:2e:75:9a:30:e6:db:2e:ec:ab: 93:c5:9c:26:13:11:bf:ec:c5:e5:0a:a8:ef:43:4e:98:6f:47: cd:fa:37:19:c8:d1:4a:7b:42:4e:cc:76:e1:4c:bd:05:ab:8c: d7:02:4d:e7:be:09:fc:58:ec:46:14:e7:33:cc:60:d8:04:09: 30:d4:14:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfyWimO0WfJKsWBcY2hBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4 NjI2NzIwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD EyhlMmUzNjU1OGY4NTU4YWYyNTdhNjM4ZDJlMTAyYWYxZjZlMWEzMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE8aUC8z8XmnsWube/OH8aDuZGXU tzWQjGVuWS86fOb+RsX3XWJNbz8a/R31Za91ARMb/2GJccTCh9BEbwNOKaFarOBg ugC3D1LAdRZSQk0U6T82D3p+rGmvIfQhiDWijq/WhgQnORVDuF1a8WoeiLddiozp ov9FrOR2tMzcq/HurnV2/OC8RTqexJXlU5jeFLq22OCPS33w1681QTLa7MMl0b2x IHsLMgL+9tjdlGpEZoH3IRUu3zC0sP3an2ihfj9Uoefq5eXbZ3YypxWZJg+mwfJL weJl+j+nSyzEsDvX5KoY0AtVaVSBPGqJ9pi8rHgHPz9OCpSoQtIjQwDSnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLjZVj4VYryV6Y40uECrx9uGjCaMB8GA1UdIwQY MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt ZDkyZDY0YjlmODAxLzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmlqKdSb a6tHDZHHjULEwoFegQSYJuin2YMetFyt0gyst98exo3oJ9GHZqEDwnjfpaoSp8ca WS6RdGYo+iVH8GkGmry5ExZjGwlPs/8GD8XFkPwKKhYfz7/USAktyWDmWAzPpR11 1VYzVD5vsFma/nyofP4GfdZHc/ZsHw7rqsLK/FmtkJDB6LZoFgpxlhVhH0ZmAUfo LEc1MmB/IUrHTVigy11LFg4U5yb4tCreyQ8T8M1QMFNCTVzGOH2LLnWaMObbLuyr k8WcJhMRv+zF5Qqo70NOmG9Hzfo3GcjRSntCTsx24Uy9BauM1wJN574J/FjsRhTn M8xg2AQJMNQU9A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:33 2026 by rpki-client