This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json) Hash identifier: 2tQYCAhyD8NzPFjN199+bPAsCP6Sc9EouEXqRctpS5U= Subject key identifier: 06:D5:D4:0B:4C:BC:CE:6C:70:DF:38:C7:74:CE:FE:09:76:DE:F4:3D Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a Certificate serial: 019C43FE9519736586154AC70540927F4951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 20:01:23 +0000 Manifest this update: Mon 09 Feb 2026 20:01:23 +0000 Manifest next update: Tue 10 Feb 2026 20:01:23 +0000 Files and hashes: 1: MsXjoDhcJ3cwovjao6DlRt0DHd0.roa (hash: Tw0sup4+WLjwE3lyNhBuN8zmG2+OMt8afwKPB5VGZGg=) 2: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: VzslrUzNPKjyYNgMGZdtsz44/NbpOe5ubx76raacLlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:95:19:73:65:86:15:4a:c7:05:40:92:7f:49:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a Validity Not Before: Feb 9 20:01:23 2026 GMT Not After : Feb 10 20:01:23 2026 GMT Subject: CN=06d5d40b4cbcce6c70df38c774cefe0976def43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:b0:6f:c4:d9:4e:d9:3e:3a:d7:35:52:be: c0:d4:69:41:20:16:e7:b3:af:8c:e0:c0:70:27:3c: e1:f9:62:00:f5:5d:48:55:0d:ac:ad:b0:b2:fc:b0: f7:03:86:5a:cc:e2:2b:7c:28:0d:97:83:b4:6f:fb: 12:98:ea:1a:43:6c:d5:6a:0f:9a:d9:f1:a1:86:61: f8:b9:bf:e9:50:c8:28:d5:e8:34:a5:1d:ff:cc:26: f1:04:65:b5:06:3c:46:03:f5:49:fc:79:24:73:8b: 8d:ba:8a:22:b9:e4:e8:60:04:18:0e:8d:89:3a:b1: 0d:b8:c4:c5:d1:c5:9d:2c:20:36:58:96:86:cf:6d: b2:22:82:b9:0b:5e:cd:d3:4b:49:cb:59:5f:98:1a: ba:7d:3c:c1:60:6a:5d:2c:b1:f5:ba:cc:0e:79:6a: 2a:f7:58:22:d1:99:20:c6:6f:a1:7f:12:53:cc:d0: d5:1d:8a:36:6b:37:dc:8f:d1:f0:60:01:9a:07:14: 75:31:b2:35:c7:53:68:8a:cf:4c:19:e0:68:cc:d4: 13:b3:f0:45:7f:db:46:10:b2:a9:29:5a:c9:16:99: f4:b1:17:26:72:78:16:1b:0f:21:a1:26:3d:83:b8: 2a:dc:1e:91:24:e3:5f:d2:79:66:59:99:e6:0e:e8: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D5:D4:0B:4C:BC:CE:6C:70:DF:38:C7:74:CE:FE:09:76:DE:F4:3D X509v3 Authority Key Identifier: keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:f6:3b:06:a8:07:40:20:06:a2:e7:1c:3e:6d:82:28:56: cf:0c:32:9b:e5:4a:27:9a:3b:e6:9d:b5:c2:de:e8:85:34:fe: 75:ca:91:b7:1b:b5:9b:3e:dc:71:a3:c6:93:f0:18:46:46:2c: b9:30:15:06:1f:f7:f7:46:6a:28:e1:e3:18:8a:8a:07:96:d2: f2:1e:3f:91:90:08:ba:ee:d4:7b:ae:98:09:36:5d:76:c7:d5: c7:91:5d:92:f3:e0:82:c0:22:8a:77:02:ae:85:5f:0c:7b:46: cf:32:fb:49:69:42:13:6c:b2:2a:df:a1:08:86:90:e2:bf:13: 5f:5b:02:e8:91:ac:3b:ac:56:2f:db:d9:5e:39:84:64:fe:f4: 2c:28:94:fc:9a:d4:6a:03:67:2f:8f:6d:7a:4b:0c:cd:b6:e4: 6d:41:42:a4:96:ae:d6:2f:ff:07:3f:c1:b5:60:f5:b8:ff:c6: 31:55:ba:96:e3:70:02:5d:05:8f:9a:7f:d5:41:3c:ec:74:ed: c2:82:97:82:8a:b5:6b:17:6a:32:e6:97:4c:6b:f9:5b:3a:28: 6b:83:9a:71:74:b1:a8:9f:23:d9:bd:64:1b:07:fc:8d:c8:c3: d6:b4:f1:f9:7c:6c:ab:9b:a3:a2:d3:57:9a:ac:6f:f3:71:85: 0e:3c:4f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/pUZc2WGFUrHBUCSf0lRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWJhNDAwMDdjY2RjZDA5MzBmMWEyYmRjNGIwMmUyOTk0 NTc2N2EwHhcNMjYwMjA5MjAwMTIzWhcNMjYwMjEwMjAwMTIzWjAzMTEwLwYDVQQD EygwNmQ1ZDQwYjRjYmNjZTZjNzBkZjM4Yzc3NGNlZmUwOTc2ZGVmNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m2wb8TZTtk+Otc1Ur7A1GlBIBbn s6+M4MBwJzzh+WIA9V1IVQ2srbCy/LD3A4ZazOIrfCgNl4O0b/sSmOoaQ2zVag+a 2fGhhmH4ub/pUMgo1eg0pR3/zCbxBGW1BjxGA/VJ/Hkkc4uNuooiueToYAQYDo2J OrENuMTF0cWdLCA2WJaGz22yIoK5C17N00tJy1lfmBq6fTzBYGpdLLH1uswOeWoq 91gi0Zkgxm+hfxJTzNDVHYo2azfcj9HwYAGaBxR1MbI1x1Nois9MGeBozNQTs/BF f9tGELKpKVrJFpn0sRcmcngWGw8hoSY9g7gq3B6RJONf0nlmWZnmDuhmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbV1AtMvM5scN84x3TO/gl23vQ9MB8GA1UdIwQY MBaAFP8bpAAHzNzQkw8aK9xLAuKZRXZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWIt OGQyYTY1M2JhOTk5LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWItOGQyYTY1M2JhOTk5 LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMT2Owao B0AgBqLnHD5tgihWzwwym+VKJ5o75p21wt7ohTT+dcqRtxu1mz7ccaPGk/AYRkYs uTAVBh/390ZqKOHjGIqKB5bS8h4/kZAIuu7Ue66YCTZddsfVx5FdkvPggsAiincC roVfDHtGzzL7SWlCE2yyKt+hCIaQ4r8TX1sC6JGsO6xWL9vZXjmEZP70LCiU/JrU agNnL49teksMzbbkbUFCpJau1i//Bz/BtWD1uP/GMVW6luNwAl0Fj5p/1UE87HTt woKXgoq1axdqMuaXTGv5Wzooa4OacXSxqJ8j2b1kGwf8jcjD1rTx+Xxsq5ujotNX mqxv83GFDjxPuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:58 2026 by rpki-client