This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json) Hash identifier: CXys4rj9Oyece25yDrCRl5vyj+2x3HS0GE40pnAaP6U= Subject key identifier: 30:9C:77:A3:61:55:6B:CD:F7:83:6D:88:8E:82:21:06:A5:12:4D:69 Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33 Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933 Certificate serial: 019C43905E73E6B7E1C0F79995B701E30DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:00 +0000 Manifest this update: Mon 09 Feb 2026 18:01:00 +0000 Manifest next update: Tue 10 Feb 2026 18:01:00 +0000 Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: TBkzJgs7gNfQuH0QmzLG9J0eiAw+DcXdnx01n56DxVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5e:73:e6:b7:e1:c0:f7:99:95:b7:01:e3:0d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933 Validity Not Before: Feb 9 18:01:00 2026 GMT Not After : Feb 10 18:01:00 2026 GMT Subject: CN=309c77a361556bcdf7836d888e822106a5124d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:5a:9d:a2:8e:bf:01:61:e7:a2:fe:1b:27: 4f:b7:67:6d:0e:a8:66:6c:92:f0:79:b4:6d:ed:2a: c6:d8:d2:ad:a4:09:17:b4:ff:a8:93:86:c4:2a:6b: 16:77:16:5a:24:d9:c0:f1:b4:81:e9:64:d5:8e:aa: df:af:2d:a1:b0:ca:4f:04:71:da:d3:a7:e3:ba:7d: d6:5f:28:96:73:4b:d7:3d:a3:f1:55:5b:a2:eb:2a: cd:af:1e:ed:9f:7d:c5:17:3c:99:bc:a2:73:66:88: 74:93:c0:07:13:42:d3:73:62:01:8e:e8:5a:03:a4: f4:0d:63:cf:ff:5c:bd:17:d3:01:2e:1e:a4:3e:85: 5b:54:97:be:e7:f7:8a:63:12:f9:ac:57:0f:62:62: e6:55:6e:ff:c9:15:f2:d5:ba:e5:37:2d:a9:bd:cc: 10:d0:64:90:0e:b3:d0:46:2e:73:4e:0b:2e:5f:a4: ec:2d:12:e9:bc:79:a0:c6:68:47:6b:11:32:6a:72: 46:37:3c:10:d1:a2:c4:c5:d3:3e:e0:55:10:06:92: 33:a1:5e:94:68:b7:cd:2a:c8:b1:77:58:40:6a:b6: 0f:d2:4b:31:42:51:c5:6a:84:4b:f7:ef:39:e9:f9: 30:a5:f2:df:f6:02:76:40:a3:c4:c5:43:f4:05:74: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:77:A3:61:55:6B:CD:F7:83:6D:88:8E:82:21:06:A5:12:4D:69 X509v3 Authority Key Identifier: keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:22:a6:b2:29:62:83:54:a0:33:90:6f:50:5b:5d:26:e9:d0: 2a:d7:50:a7:c1:de:49:74:bc:7d:fa:07:84:d2:9f:43:0f:66: 1a:3b:77:69:aa:50:c9:88:96:a9:66:85:e1:f5:8f:aa:6b:cc: 57:1f:29:72:f3:cc:03:77:81:32:8a:a2:00:6a:11:dc:fc:82: db:1c:64:7e:d0:b9:15:04:93:be:35:47:98:81:f5:04:0d:fc: d5:db:01:e3:fc:9b:49:b7:c3:58:74:5e:48:69:a2:ef:58:77: 38:36:53:63:b7:43:a9:c4:b8:8b:79:d4:4b:7c:97:b7:aa:cc: ea:a9:a7:f4:5e:b9:37:6a:94:78:4a:5b:53:e7:18:0d:37:97: cd:e6:22:ba:15:51:05:62:9d:2a:1e:dc:5b:ca:50:c4:cb:6a: b7:d5:ff:12:c0:0d:77:5f:ba:fd:45:9f:7a:23:76:b8:bf:b1: cf:26:71:4c:8b:8d:5d:6b:ff:89:92:5c:7e:d8:d9:7a:30:45: 05:7a:2b:47:a0:ce:4a:9c:87:d0:06:60:d3:f1:cd:63:31:c1: 8d:bd:e0:b4:99:ad:7e:8c:1a:3c:2f:2f:29:9d:58:14:92:88: f6:55:0a:d2:08:8c:15:8c:a2:d3:3c:7f:2e:f9:13:2b:8c:6b: 1c:e8:c9:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkF5z5rfhwPeZlbcB4w29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj YzA5MzMwHhcNMjYwMjA5MTgwMTAwWhcNMjYwMjEwMTgwMTAwWjAzMTEwLwYDVQQD EygzMDljNzdhMzYxNTU2YmNkZjc4MzZkODg4ZTgyMjEwNmE1MTI0ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMBanaKOvwFh56L+GydPt2dtDqhm bJLwebRt7SrG2NKtpAkXtP+ok4bEKmsWdxZaJNnA8bSB6WTVjqrfry2hsMpPBHHa 06fjun3WXyiWc0vXPaPxVVui6yrNrx7tn33FFzyZvKJzZoh0k8AHE0LTc2IBjuha A6T0DWPP/1y9F9MBLh6kPoVbVJe+5/eKYxL5rFcPYmLmVW7/yRXy1brlNy2pvcwQ 0GSQDrPQRi5zTgsuX6TsLRLpvHmgxmhHaxEyanJGNzwQ0aLExdM+4FUQBpIzoV6U aLfNKsixd1hAarYP0ksxQlHFaoRL9+856fkwpfLf9gJ2QKPExUP0BXQ87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCcd6NhVWvN94NtiI6CIQalEk1pMB8GA1UdIwQY MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiKmsili g1SgM5BvUFtdJunQKtdQp8HeSXS8ffoHhNKfQw9mGjt3aapQyYiWqWaF4fWPqmvM Vx8pcvPMA3eBMoqiAGoR3PyC2xxkftC5FQSTvjVHmIH1BA381dsB4/ybSbfDWHRe SGmi71h3ODZTY7dDqcS4i3nUS3yXt6rM6qmn9F65N2qUeEpbU+cYDTeXzeYiuhVR BWKdKh7cW8pQxMtqt9X/EsANd1+6/UWfeiN2uL+xzyZxTIuNXWv/iZJcftjZejBF BXorR6DOSpyH0AZg0/HNYzHBjb3gtJmtfowaPC8vKZ1YFJKI9lUK0giMFYyi0zx/ LvkTK4xrHOjJxw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:29 2026 by rpki-client