This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json) Hash identifier: OiIVyWsofDiSyJZmDTnT0ZW0qZ7vSd9G9YsQ8ZCRzvI= Subject key identifier: 1A:D2:44:11:5C:F4:56:F4:A0:59:CD:B2:F2:53:97:B8:B4:41:AE:DF Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Certificate serial: 019C43C74CB7AB05E4254F13E78717AF79BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 19:01:00 +0000 Manifest this update: Mon 09 Feb 2026 19:01:00 +0000 Manifest next update: Tue 10 Feb 2026 19:01:00 +0000 Files and hashes: 1: TsOOfWYO7s3iDHFcR1k7ZOE39Ec.roa (hash: j+9fyMphVuQhWbTHtgX76YqDUNucL2DHLde2/xPrgJg=) 2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: T1kvPuJVSxIrB5wLl9kAa9X/PND+B4DusJ0cBfwa1b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:4c:b7:ab:05:e4:25:4f:13:e7:87:17:af:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612 Validity Not Before: Feb 9 19:01:00 2026 GMT Not After : Feb 10 19:01:00 2026 GMT Subject: CN=1ad244115cf456f4a059cdb2f25397b8b441aedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:d5:94:ff:20:e8:f3:cc:6f:84:9d:68:37: e7:0d:28:dd:28:c8:f0:13:eb:8c:a5:ba:99:79:28: a3:cb:66:db:c1:4d:aa:3b:f9:61:c6:95:d2:5e:8b: 81:3b:3b:86:aa:0e:ed:d7:89:88:36:e0:7c:cd:5b: 7a:a1:45:67:82:4e:cc:93:06:b9:2a:26:07:08:59: 4f:10:2d:55:c6:85:11:05:31:73:8e:03:41:e8:a1: f1:a6:bf:23:87:7a:41:33:ab:d2:1f:64:56:a2:73: a8:6c:5e:1c:a7:da:b7:d9:ce:29:2f:43:e4:57:3f: e1:c3:e0:23:47:c4:da:42:92:f7:dd:e2:bb:8c:f2: 53:07:d5:0d:ca:cf:12:bf:0e:62:18:50:3b:b5:eb: 4a:62:f6:d0:f2:fb:f3:90:23:b0:06:41:7d:69:44: 8c:ae:01:d1:9d:41:df:2d:53:17:27:b5:37:a7:47: 24:7b:fd:d7:62:24:08:a4:6c:61:14:24:11:9a:aa: 4f:47:60:13:e8:33:57:f4:75:d0:1c:09:b7:54:34: cf:b2:98:ed:25:f7:59:ec:81:75:e6:ce:87:0d:04: 11:bb:d7:fe:fd:29:8f:2a:42:a2:40:34:4b:5d:db: db:ff:2e:70:72:37:74:00:a7:e8:3e:17:fa:7f:38: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D2:44:11:5C:F4:56:F4:A0:59:CD:B2:F2:53:97:B8:B4:41:AE:DF X509v3 Authority Key Identifier: keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:9a:77:7f:c7:a8:9e:7e:0f:9a:5f:c8:44:6a:6f:b7:ec: 28:4d:d3:12:f3:fa:13:b7:22:62:f7:47:9d:74:26:ff:b0:d2: 5a:94:37:0e:f6:38:fe:da:e3:a8:6d:17:6e:8b:c8:7e:fc:33: f6:eb:0d:36:48:25:a0:7b:b6:0e:a1:32:8b:5b:9e:66:02:b3: f6:de:ad:6c:be:34:aa:90:61:3b:4e:e6:9e:14:57:d7:8c:2b: c1:1b:4e:41:8c:93:e3:32:60:00:bd:cf:fd:e8:0a:80:4c:17: fb:b2:e8:00:d0:c4:c2:d2:60:ad:5d:cc:e3:5c:ba:c2:17:c0: 24:2f:82:62:33:a4:dc:f7:d9:81:94:b2:b6:0a:b8:09:04:42: e8:66:eb:7f:37:c7:3f:a7:fe:47:be:70:eb:31:b8:c5:07:f2: a9:a2:40:fa:11:80:ff:7f:43:4e:28:e1:21:09:a0:1e:2a:91: 0f:b7:66:36:66:a1:38:05:17:93:90:54:f3:05:fd:35:47:4f: 28:b6:ca:4f:1a:c8:d3:64:8a:54:c1:2d:c3:35:b0:64:35:9b: 1f:e3:b6:04:46:32:6f:13:ed:90:e6:b2:78:0c:67:87:63:b0: 10:43:21:48:e2:2c:71:9f:88:b4:a7:81:46:af:e8:57:7c:6d: 8b:50:a3:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0y3qwXkJU8T54cXr3m7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw NmE2MTIwHhcNMjYwMjA5MTkwMTAwWhcNMjYwMjEwMTkwMTAwWjAzMTEwLwYDVQQD EygxYWQyNDQxMTVjZjQ1NmY0YTA1OWNkYjJmMjUzOTdiOGI0NDFhZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlrVlP8g6PPMb4SdaDfnDSjdKMjw E+uMpbqZeSijy2bbwU2qO/lhxpXSXouBOzuGqg7t14mINuB8zVt6oUVngk7Mkwa5 KiYHCFlPEC1VxoURBTFzjgNB6KHxpr8jh3pBM6vSH2RWonOobF4cp9q32c4pL0Pk Vz/hw+AjR8TaQpL33eK7jPJTB9UNys8Svw5iGFA7tetKYvbQ8vvzkCOwBkF9aUSM rgHRnUHfLVMXJ7U3p0cke/3XYiQIpGxhFCQRmqpPR2AT6DNX9HXQHAm3VDTPspjt JfdZ7IF15s6HDQQRu9f+/SmPKkKiQDRLXdvb/y5wcjd0AKfoPhf6fzieaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrSRBFc9Fb0oFnNsvJTl7i0Qa7fMB8GA1UdIwQY MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt MjE0YTc2MjEwZmQ2LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2 LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb2ad3/H qJ5+D5pfyERqb7fsKE3TEvP6E7ciYvdHnXQm/7DSWpQ3DvY4/trjqG0XbovIfvwz 9usNNkgloHu2DqEyi1ueZgKz9t6tbL40qpBhO07mnhRX14wrwRtOQYyT4zJgAL3P /egKgEwX+7LoANDEwtJgrV3M41y6whfAJC+CYjOk3PfZgZSytgq4CQRC6GbrfzfH P6f+R75w6zG4xQfyqaJA+hGA/39DTijhIQmgHiqRD7dmNmahOAUXk5BU8wX9NUdP KLbKTxrI02SKVMEtwzWwZDWbH+O2BEYybxPtkOayeAxnh2OwEEMhSOIscZ+ItKeB Rq/oV3xti1Cj1A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:47 2026 by rpki-client