This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json) Hash identifier: LrWrMiXmBjAN+9B4NyJ/cs9dkOQKbxLIQEWIaroCins= Subject key identifier: 04:E3:74:28:BD:82:6F:CA:B5:19:B6:7B:7F:89:FA:BF:2E:DD:65:D7 Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Certificate serial: 019C42EB2447E62EBFF466064AEFD0E2EE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft Manifest number: 1724 Signing time: Mon 09 Feb 2026 15:00:32 +0000 Manifest this update: Mon 09 Feb 2026 15:00:32 +0000 Manifest next update: Tue 10 Feb 2026 15:00:32 +0000 Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=) 2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=) 3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: htHv3Grzru/o6Bp3b0sXITZjUmgxdjDiRX2d9TJ/Mag=) 4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:24:47:e6:2e:bf:f4:66:06:4a:ef:d0:e2:ee:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50 Validity Not Before: Feb 9 15:00:32 2026 GMT Not After : Feb 10 15:00:32 2026 GMT Subject: CN=04e37428bd826fcab519b67b7f89fabf2edd65d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:9d:1c:fa:cf:9f:d5:50:10:3b:ef:7c:b6: 6f:a0:38:b5:45:1d:03:2f:03:4d:dd:31:80:55:02: 9e:5a:50:03:2a:f7:74:e0:30:82:d4:fc:bc:ec:82: da:b7:83:24:07:1c:ff:1e:32:ea:aa:24:9e:b4:48: 6c:a6:db:7d:50:57:2e:7d:99:b9:e7:91:93:4c:fb: c4:91:0d:9e:20:43:65:2c:5b:c5:1d:7d:71:fe:9a: c7:4b:28:ee:e0:9b:75:05:83:08:0f:7f:40:0a:90: 69:33:2b:01:aa:37:c7:99:a0:1e:c3:5f:65:49:ef: 32:e9:11:d4:af:37:20:89:39:41:bf:5d:95:19:0a: 0d:ea:ff:50:0a:3e:5a:ff:d8:f5:7b:0e:52:d3:a1: 93:78:77:6b:8f:dd:ab:37:59:04:9e:84:81:36:99: 02:79:0b:49:c7:92:30:40:cb:ae:51:c4:5f:13:2b: a2:1a:85:ec:c3:d7:05:0b:36:6b:13:59:30:4b:62: ab:00:b9:45:53:62:49:1a:ce:88:1d:75:a2:7c:53: ac:d6:cf:65:e0:bf:73:6f:4d:f0:1c:49:4a:1b:c1: 71:69:ae:a9:9c:29:6c:e2:44:9f:8d:73:78:e7:da: 85:99:48:84:8d:a3:0b:20:d0:0f:02:bc:7f:d7:58: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E3:74:28:BD:82:6F:CA:B5:19:B6:7B:7F:89:FA:BF:2E:DD:65:D7 X509v3 Authority Key Identifier: keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:88:a8:30:d6:bf:fe:83:66:7a:8a:31:ef:09:2b:6a:e3:99: 6c:32:9f:05:b0:fa:85:56:94:7d:69:95:7b:50:bf:8e:52:61: 2f:d2:d8:10:e0:f6:a2:b7:49:64:80:27:c9:fe:af:1c:21:f5: fd:49:85:3d:06:58:02:50:20:8a:64:76:9e:72:ef:c0:49:2f: 6e:d5:68:84:94:a3:0c:86:ef:55:0c:94:42:12:a9:ae:6c:70: a4:c6:08:43:17:f0:13:81:65:c4:f7:67:31:70:8e:ee:99:bc: 13:e6:8b:c5:5c:83:98:07:38:b7:70:c0:e6:a9:80:80:88:b9: 44:a4:7c:19:fc:ca:27:7f:51:8c:c3:e8:97:28:38:9d:29:af: 15:b2:b0:b6:88:69:31:c7:b9:f3:57:02:32:ab:01:16:61:84: c6:b5:42:e7:15:5e:0e:96:33:41:c1:08:b5:85:da:aa:93:f2: 46:32:2a:7b:82:02:e6:d3:48:d9:1d:64:c6:ac:7b:a2:d6:3b: 05:84:d1:1b:81:95:5b:1f:ce:e2:34:65:0f:6a:61:aa:74:b4: 50:d7:04:ba:4a:e0:c6:a1:04:97:57:21:54:d5:88:0e:9b:28: ee:a0:0a:c8:c9:92:df:60:e6:44:95:e8:9f:59:6a:ad:44:18: 59:0c:90:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6yRH5i6/9GYGSu/Q4u4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz YzFkNTAwHhcNMjYwMjA5MTUwMDMyWhcNMjYwMjEwMTUwMDMyWjAzMTEwLwYDVQQD EygwNGUzNzQyOGJkODI2ZmNhYjUxOWI2N2I3Zjg5ZmFiZjJlZGQ2NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqSdHPrPn9VQEDvvfLZvoDi1RR0D LwNN3TGAVQKeWlADKvd04DCC1Py87ILat4MkBxz/HjLqqiSetEhsptt9UFcufZm5 55GTTPvEkQ2eIENlLFvFHX1x/prHSyju4Jt1BYMID39ACpBpMysBqjfHmaAew19l Se8y6RHUrzcgiTlBv12VGQoN6v9QCj5a/9j1ew5S06GTeHdrj92rN1kEnoSBNpkC eQtJx5IwQMuuUcRfEyuiGoXsw9cFCzZrE1kwS2KrALlFU2JJGs6IHXWifFOs1s9l 4L9zb03wHElKG8Fxaa6pnCls4kSfjXN459qFmUiEjaMLINAPArx/11gTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATjdCi9gm/KtRm2e3+J+r8u3WXXMB8GA1UdIwQY MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIioMNa/ /oNmeoox7wkrauOZbDKfBbD6hVaUfWmVe1C/jlJhL9LYEOD2ordJZIAnyf6vHCH1 /UmFPQZYAlAgimR2nnLvwEkvbtVohJSjDIbvVQyUQhKprmxwpMYIQxfwE4FlxPdn MXCO7pm8E+aLxVyDmAc4t3DA5qmAgIi5RKR8GfzKJ39RjMPolyg4nSmvFbKwtohp Mce581cCMqsBFmGExrVC5xVeDpYzQcEItYXaqpPyRjIqe4IC5tNI2R1kxqx7otY7 BYTRG4GVWx/O4jRlD2phqnS0UNcEukrgxqEEl1chVNWIDpso7qAKyMmS32DmRJXo n1lqrUQYWQyQhA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:34 2026 by rpki-client