This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft File: xLCiTzhOiW3lHlg149KEYHtJxZE.mft (raw, json) Hash identifier: Ywik5Wi9VA3sJjn1//DCa3sO1vVUFiXvNQG+df1N3xM= Subject key identifier: F9:82:25:F1:FE:C9:9D:36:41:A9:13:C5:EF:3B:AE:0A:A1:99:F4:9A Authority key identifier: C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91 Certificate issuer: /CN=c4b0a24f384e896de51e5835e3d284607b49c591 Certificate serial: 019C41347B9D52FF0719DFFD9F5392FD8C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft Manifest number: 02E3 Signing time: Mon 09 Feb 2026 07:01:24 +0000 Manifest this update: Mon 09 Feb 2026 07:01:24 +0000 Manifest next update: Tue 10 Feb 2026 07:01:24 +0000 Files and hashes: 1: xLCiTzhOiW3lHlg149KEYHtJxZE.crl (hash: 3qNY+hRhXLtC02vj1CyGxV6dHdpiWbnI/a8GC7U542c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:7b:9d:52:ff:07:19:df:fd:9f:53:92:fd:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b0a24f384e896de51e5835e3d284607b49c591 Validity Not Before: Feb 9 07:01:24 2026 GMT Not After : Feb 10 07:01:24 2026 GMT Subject: CN=f98225f1fec99d3641a913c5ef3bae0aa199f49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:b9:1f:20:94:29:52:05:c9:c7:32:df:5e: aa:ce:2b:0f:34:41:e9:e1:dd:fb:48:e2:6e:34:36: cf:24:e4:8d:1d:0b:72:9b:1a:8b:08:53:ad:aa:0d: 3d:17:31:0b:2c:2f:cb:32:78:4a:88:2a:8e:96:04: 44:c4:67:ea:1a:a5:6a:93:fb:e3:67:87:83:8e:bb: 7a:ef:5a:6e:73:5d:be:c9:13:00:f8:db:19:28:60: 12:65:83:70:9f:cf:75:ed:25:86:b1:19:bc:bd:2f: 37:c6:db:e6:a2:1d:5f:b2:45:49:23:8e:f6:e8:fd: 4d:5e:ce:44:4c:f1:19:59:5e:a2:3b:eb:43:2d:13: 0a:a8:ae:34:d1:c4:20:f7:f3:aa:a6:46:b7:0e:ea: 46:ca:16:8c:9d:de:91:b9:7e:63:9e:bf:a9:cf:e1: 60:2e:d2:25:6f:19:1d:81:f8:04:87:b4:43:a9:bb: 60:c2:f5:53:d4:c9:d2:a3:6f:81:e7:d7:cf:09:05: 9d:c5:ec:2b:f9:53:69:e4:6a:9a:4f:dc:eb:ff:af: 84:a6:3d:39:3f:c8:81:0c:20:9d:b3:8f:3f:9a:c6: 65:2f:79:83:7f:06:41:7a:4c:e4:c1:1b:99:13:aa: 0f:a7:86:ac:a4:2a:64:38:97:93:99:f5:7e:4c:f4: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:25:F1:FE:C9:9D:36:41:A9:13:C5:EF:3B:AE:0A:A1:99:F4:9A X509v3 Authority Key Identifier: keyid:C4:B0:A2:4F:38:4E:89:6D:E5:1E:58:35:E3:D2:84:60:7B:49:C5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLCiTzhOiW3lHlg149KEYHtJxZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e2927e-bff0-4c61-9188-b86a6f262633/1/xLCiTzhOiW3lHlg149KEYHtJxZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0b:14:d7:dc:b6:58:b6:2f:98:0f:d6:f1:13:d3:fb:ba:a4: b2:6a:2b:fd:03:0b:8c:43:fb:70:b7:32:61:96:d7:93:65:8a: ea:87:b0:4c:14:ea:f5:53:15:99:3e:4c:35:b5:72:0b:29:c6: 7b:c1:c7:5c:02:3f:81:5e:e6:71:14:43:ba:77:c5:e9:14:53: 30:13:7f:67:60:68:63:46:99:86:a5:34:c0:43:53:fe:d1:ce: 02:fa:c5:8c:3c:a1:ab:32:d4:d6:69:04:3c:9d:05:a4:25:6c: 77:b3:c3:9b:a0:f0:24:b7:e1:e9:e2:cc:9f:ee:97:d4:ce:95: 39:4f:7f:65:86:46:4c:31:d8:13:76:95:a2:c4:8c:84:8a:b7: eb:30:f7:27:05:10:6d:06:df:1e:fa:43:69:71:a1:44:cd:6f: 35:18:a3:5a:b8:04:ee:cb:91:51:67:bb:a7:45:fa:56:93:04: 7e:29:43:e4:21:65:a4:98:fd:d5:e3:64:d2:24:c9:c0:19:5b: ee:92:75:d3:75:ce:3a:d1:5f:38:01:c0:31:a9:83:31:9a:a1: 96:55:d5:57:0f:cf:94:45:c6:85:4b:2d:c2:a8:47:31:5b:d0: fc:b6:61:7f:45:22:87:43:c4:00:77:69:63:ad:95:04:25:65: 91:b7:ce:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNHudUv8HGd/9n1OS/YyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjBhMjRmMzg0ZTg5NmRlNTFlNTgzNWUzZDI4NDYwN2I0 OWM1OTEwHhcNMjYwMjA5MDcwMTI0WhcNMjYwMjEwMDcwMTI0WjAzMTEwLwYDVQQD EyhmOTgyMjVmMWZlYzk5ZDM2NDFhOTEzYzVlZjNiYWUwYWExOTlmNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuae5HyCUKVIFyccy316qzisPNEHp 4d37SOJuNDbPJOSNHQtymxqLCFOtqg09FzELLC/LMnhKiCqOlgRExGfqGqVqk/vj Z4eDjrt671puc12+yRMA+NsZKGASZYNwn8917SWGsRm8vS83xtvmoh1fskVJI472 6P1NXs5ETPEZWV6iO+tDLRMKqK400cQg9/Oqpka3DupGyhaMnd6RuX5jnr+pz+Fg LtIlbxkdgfgEh7RDqbtgwvVT1MnSo2+B59fPCQWdxewr+VNp5GqaT9zr/6+Epj05 P8iBDCCds48/msZlL3mDfwZBekzkwRuZE6oPp4aspCpkOJeTmfV+TPTtsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmCJfH+yZ02QakTxe87rgqhmfSaMB8GA1UdIwQY MBaAFMSwok84Tolt5R5YNePShGB7ScWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExDaVR6aE9pVzNsSGxnMTQ5S0VZSHRKeFpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMjkyN2UtYmZmMC00YzYxLTkxODgt Yjg2YTZmMjYyNjMzLzEveExDaVR6aE9pVzNsSGxnMTQ5S0VZSHRKeFpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lMjkyN2UtYmZmMC00YzYxLTkxODgtYjg2YTZmMjYyNjMz LzEveExDaVR6aE9pVzNsSGxnMTQ5S0VZSHRKeFpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQsU19y2 WLYvmA/W8RPT+7qksmor/QMLjEP7cLcyYZbXk2WK6oewTBTq9VMVmT5MNbVyCynG e8HHXAI/gV7mcRRDunfF6RRTMBN/Z2BoY0aZhqU0wENT/tHOAvrFjDyhqzLU1mkE PJ0FpCVsd7PDm6DwJLfh6eLMn+6X1M6VOU9/ZYZGTDHYE3aVosSMhIq36zD3JwUQ bQbfHvpDaXGhRM1vNRijWrgE7suRUWe7p0X6VpMEfilD5CFlpJj91eNk0iTJwBlb 7pJ103XOOtFfOAHAMamDMZqhllXVVw/PlEXGhUstwqhHMVvQ/LZhf0Uih0PEAHdp Y62VBCVlkbfObQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:17 2026 by rpki-client