This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json) Hash identifier: j3Dt98qwJRi8C1qr1SbsoPpq6uDY2nxdcW91cW06Rys= Subject key identifier: 41:DB:E8:F3:7A:AF:08:36:1D:A8:A0:81:D0:96:40:FE:32:FE:A0:22 Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Certificate serial: 019C4322A18E97B6AC747461AFF43F5E0B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft Manifest number: 1716 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: 8uZYa8d3_ISXNAeXmSBhUlA4Cto.roa (hash: xoIdvMZvBj9GwlnZPTsCqxvamz7iLWgOhpxAumR136Q=) 2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: 2cMK2ASJy/Vp1EZPkh6yzOvP8Wkrq4Tq/yjWQ7Jjl0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a1:8e:97:b6:ac:74:74:61:af:f4:3f:5e:0b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=41dbe8f37aaf08361da8a081d09640fe32fea022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:a7:b0:b5:e1:44:1b:7d:20:7d:e6:6c:0c: 87:94:91:d8:9d:0c:91:bc:9b:f7:92:f8:01:99:b2: 65:b5:fc:6b:b5:38:83:81:6d:fa:3c:a2:94:cf:a3: a7:f5:dd:6f:dc:0f:8a:d5:d6:90:6e:d6:54:00:3c: cf:e9:a8:78:2b:ff:91:9b:2b:eb:5d:b2:4c:e4:27: 2e:a2:0e:b6:9b:70:a3:40:33:b7:b2:de:c8:fb:1d: 77:29:e2:0b:77:12:4e:f3:9a:8d:2e:05:86:a3:48: a6:43:c3:4f:0d:76:5a:9e:97:98:c7:11:f5:00:96: b3:6d:a4:ba:26:b9:11:99:92:bc:09:17:08:f2:a7: cc:0c:7c:66:68:0f:af:2c:02:3f:40:81:be:79:d8: 45:5a:0a:35:31:39:e4:e3:79:a9:11:d9:49:cd:06: 85:a6:ff:c2:f7:a9:66:d5:53:be:7e:b7:ca:d3:6e: a1:21:ee:44:06:26:06:30:9b:3c:34:2c:db:95:d6: 43:35:bb:82:4b:9f:d4:62:fc:11:4c:d2:3f:34:22: 12:08:78:72:38:9c:10:33:05:dc:e3:e1:89:fe:c3: bf:b0:54:89:1b:43:9b:94:19:5a:f6:f2:3e:40:03: 7e:11:f4:df:cf:c4:2b:e0:1b:8c:e5:f7:c0:23:f0: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DB:E8:F3:7A:AF:08:36:1D:A8:A0:81:D0:96:40:FE:32:FE:A0:22 X509v3 Authority Key Identifier: keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:67:53:ca:59:79:b7:ed:75:1c:ca:5d:20:a6:20:7f:83:ff: c1:50:12:c9:a4:ff:48:e0:0f:9b:45:d7:75:bb:a4:52:71:21: cc:81:be:5c:3e:91:d1:8a:29:3f:83:7a:62:93:f9:91:33:ea: 11:7e:9b:e8:26:64:52:eb:b0:b1:ec:27:e3:29:b4:50:f7:f2: 0b:78:71:5f:39:36:2e:83:00:24:29:f2:52:ab:b4:ab:46:7b: c9:93:5d:8b:03:15:cb:4d:32:a3:30:9f:47:23:f3:9e:b1:bd: bf:c9:d9:d8:05:b3:3d:82:82:87:87:3e:36:2d:60:0b:50:1c: 8c:d2:b1:ab:be:3d:9a:32:43:55:a4:e4:4e:60:77:91:b1:5b: e2:9f:00:f2:b0:6b:d9:24:ac:3a:0e:57:5f:76:67:bb:69:9b: 91:d5:5d:6b:7d:f5:a4:1b:66:5f:50:17:3b:38:0a:d8:ab:fe: a0:68:c2:1a:1b:9f:9f:1d:34:f1:de:37:33:85:29:74:5f:fa: 9d:92:89:87:39:87:ff:fd:9a:ea:30:51:59:95:84:df:33:4b: 00:a1:79:d1:db:0c:d4:5a:d0:4c:d0:1d:f9:8b:c4:4e:38:a7: 97:c4:e7:40:f0:73:50:4b:02:3f:31:5d:fb:68:51:0c:88:a5: 60:77:a5:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqGOl7asdHRhr/Q/XgsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjg4YWRjMTllYWFkMTNkNjg1YjgxZWMzOTkzNWJkNGIy YzY5YWQwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD Eyg0MWRiZThmMzdhYWYwODM2MWRhOGEwODFkMDk2NDBmZTMyZmVhMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUGnsLXhRBt9IH3mbAyHlJHYnQyR vJv3kvgBmbJltfxrtTiDgW36PKKUz6On9d1v3A+K1daQbtZUADzP6ah4K/+Rmyvr XbJM5Ccuog62m3CjQDO3st7I+x13KeILdxJO85qNLgWGo0imQ8NPDXZanpeYxxH1 AJazbaS6JrkRmZK8CRcI8qfMDHxmaA+vLAI/QIG+edhFWgo1MTnk43mpEdlJzQaF pv/C96lm1VO+frfK026hIe5EBiYGMJs8NCzbldZDNbuCS5/UYvwRTNI/NCISCHhy OJwQMwXc4+GJ/sO/sFSJG0OblBla9vI+QAN+EfTfz8Qr4BuM5ffAI/CKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHb6PN6rwg2HaiggdCWQP4y/qAiMB8GA1UdIwQY MBaAFFz4itwZ6q0T1oW4HsOZNb1LLGmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUt MTdjZTY3YmRhZDdiLzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUtMTdjZTY3YmRhZDdi LzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2dTyll5 t+11HMpdIKYgf4P/wVASyaT/SOAPm0XXdbukUnEhzIG+XD6R0YopP4N6YpP5kTPq EX6b6CZkUuuwsewn4ym0UPfyC3hxXzk2LoMAJCnyUqu0q0Z7yZNdiwMVy00yozCf RyPznrG9v8nZ2AWzPYKCh4c+Ni1gC1AcjNKxq749mjJDVaTkTmB3kbFb4p8A8rBr 2SSsOg5XX3Znu2mbkdVda331pBtmX1AXOzgK2Kv+oGjCGhufnx008d43M4UpdF/6 nZKJhzmH//2a6jBRWZWE3zNLAKF50dsM1FrQTNAd+YvETjinl8TnQPBzUEsCPzFd +2hRDIilYHel+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:43 2026 by rpki-client