This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json) Hash identifier: eCo3yytFY9SyfVHrE0swEvbngGy4OhUD0uO9duPCLAI= Subject key identifier: 1F:6A:8E:5F:4D:11:F6:08:9C:19:F5:42:D2:5E:FC:98:80:DB:E3:24 Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80 Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80 Certificate serial: 019C42B463EE569366AF7AFA83004821B41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:44 +0000 Manifest this update: Mon 09 Feb 2026 14:00:44 +0000 Manifest next update: Tue 10 Feb 2026 14:00:44 +0000 Files and hashes: 1: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: xVuKyVnbJKYbWAqM0nvmOmbhIU0MIdTRi1+VU9ntcjI=) 2: tLZ0vd3hZne2YN5KbPWPpWn9_8g.roa (hash: HKLOzks2rDfm/VvNHgcbNaGddSHwrQ2C+smhCCvmgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:63:ee:56:93:66:af:7a:fa:83:00:48:21:b4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80 Validity Not Before: Feb 9 14:00:44 2026 GMT Not After : Feb 10 14:00:44 2026 GMT Subject: CN=1f6a8e5f4d11f6089c19f542d25efc9880dbe324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:c7:b6:93:7f:40:82:47:ce:ba:33:42:8b: ef:34:fb:8c:dc:d3:47:10:a2:ab:d8:66:8b:9e:2a: 5a:33:1d:88:29:5d:a7:8b:07:b7:4f:74:b3:83:a2: 1e:25:20:68:fe:6c:f3:17:1e:fd:c3:b5:6d:c7:f4: 0c:1d:9e:d7:22:47:91:12:bd:52:45:85:16:ac:b3: 18:ae:8d:67:86:64:63:84:fd:e9:31:87:1b:65:8b: f5:17:e1:69:24:cf:3c:7f:1a:a3:9a:4d:08:c9:cd: bd:01:39:1d:27:65:a9:c7:32:07:34:8f:7c:26:ba: 26:30:1c:cb:10:94:db:00:b3:01:12:d3:b2:3e:6e: 47:1f:ba:c2:72:3b:44:9e:24:f2:7c:4d:8f:85:6e: 1f:0c:48:69:94:1d:9a:09:66:6f:b6:46:51:21:9e: dc:41:7d:bc:fd:5d:7e:9d:27:56:1d:d3:83:99:49: 85:f9:d5:e2:a9:c2:52:bb:9a:c4:bd:43:56:37:54: 3a:63:25:37:00:a8:b2:f5:1c:1b:86:18:31:9c:21: 67:fc:85:e5:3c:0a:b4:2d:ad:36:89:20:b4:98:1b: c1:82:90:60:2f:bd:e3:e0:6e:1e:82:ba:d0:9e:b0: 14:e2:3f:64:80:38:8c:f4:f7:ec:47:ab:75:0d:8e: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6A:8E:5F:4D:11:F6:08:9C:19:F5:42:D2:5E:FC:98:80:DB:E3:24 X509v3 Authority Key Identifier: keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:96:95:79:57:54:cf:f7:26:63:0c:40:16:30:b4:47:f6: 97:27:1c:b5:01:fa:56:73:5f:02:0f:49:1b:c7:8c:b8:1f:28: 47:96:5d:ff:bb:a6:c0:b6:45:64:2c:0e:f5:5a:57:66:cf:df: 74:ff:a0:66:a0:3b:1e:9a:22:6e:d3:77:5d:be:1a:0d:7f:f6: e8:77:66:1c:8d:54:f9:d5:1c:03:e4:77:c5:30:8e:63:fc:67: e1:43:97:64:33:a3:1b:41:aa:fa:dd:a0:dc:ef:28:47:1e:8b: 58:41:06:79:33:99:83:72:b4:e1:5e:87:97:9a:2b:a3:ab:36: a4:f2:20:39:c8:1f:36:7d:94:3b:00:f8:4d:bd:04:76:c0:38: 63:97:48:48:ed:d4:43:dd:30:35:37:6e:63:77:f3:20:3b:71: c7:51:bc:54:87:72:9e:cb:48:8c:a7:89:62:6f:03:06:b2:e9: ea:7e:c1:f4:98:8f:c2:a7:88:96:d3:87:eb:37:1f:95:f6:69: e2:14:3b:8f:30:6e:c4:54:36:8d:89:ef:7e:26:4d:a8:2c:7d: 74:13:e3:08:13:37:01:07:6b:47:f9:1a:b2:94:ec:3b:4a:4f: 2c:6d:72:1c:b7:62:6d:65:27:f4:8c:4f:99:3a:46:f1:f5:bb: 78:6b:4c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGPuVpNmr3r6gwBIIbQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGJiZWI3ODMzYmRjOWJlNzI1MDYxMTU3YzAzOWYyYTEw ZjFhODAwHhcNMjYwMjA5MTQwMDQ0WhcNMjYwMjEwMTQwMDQ0WjAzMTEwLwYDVQQD EygxZjZhOGU1ZjRkMTFmNjA4OWMxOWY1NDJkMjVlZmM5ODgwZGJlMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbDHtpN/QIJHzrozQovvNPuM3NNH EKKr2GaLnipaMx2IKV2niwe3T3Szg6IeJSBo/mzzFx79w7Vtx/QMHZ7XIkeREr1S RYUWrLMYro1nhmRjhP3pMYcbZYv1F+FpJM88fxqjmk0Iyc29ATkdJ2WpxzIHNI98 JromMBzLEJTbALMBEtOyPm5HH7rCcjtEniTyfE2PhW4fDEhplB2aCWZvtkZRIZ7c QX28/V1+nSdWHdODmUmF+dXiqcJSu5rEvUNWN1Q6YyU3AKiy9RwbhhgxnCFn/IXl PAq0La02iSC0mBvBgpBgL73j4G4egrrQnrAU4j9kgDiM9PfsR6t1DY6IcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9qjl9NEfYInBn1QtJe/JiA2+MkMB8GA1UdIwQY MBaAFF0LvreDO9yb5yUGEVfAOfKhDxqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2It NjMxYzZkMDllODQ1LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2ItNjMxYzZkMDllODQ1 LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8CWlXlX VM/3JmMMQBYwtEf2lycctQH6VnNfAg9JG8eMuB8oR5Zd/7umwLZFZCwO9VpXZs/f dP+gZqA7HpoibtN3Xb4aDX/26HdmHI1U+dUcA+R3xTCOY/xn4UOXZDOjG0Gq+t2g 3O8oRx6LWEEGeTOZg3K04V6Hl5oro6s2pPIgOcgfNn2UOwD4Tb0EdsA4Y5dISO3U Q90wNTduY3fzIDtxx1G8VIdynstIjKeJYm8DBrLp6n7B9JiPwqeIltOH6zcflfZp 4hQ7jzBuxFQ2jYnvfiZNqCx9dBPjCBM3AQdrR/kaspTsO0pPLG1yHLdibWUn9IxP mTpG8fW7eGtMyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:35 2026 by rpki-client