This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json) Hash identifier: /ibpLnzFBl/poC0OifGgK0pRPgp986LmJQhXfa0quSc= Subject key identifier: 06:1B:87:55:B9:34:D8:E8:77:6D:6E:F8:4C:AD:B5:6B:3B:69:F8:C8 Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b Certificate serial: 019C4390C43B7215BDDB80C5323C8916DEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft Manifest number: 1511 Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: IWc0e1xHvEeNaFpUiEHsoSj8LCQ.roa (hash: FkF+LBfyPEQLntzgMJAsrXU06VpPmyg3zztpMpixRM4=) 2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: AYAELKqcQG+Xlf47H5rgHJs1PlHO85gmAJKdFUfCBIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c4:3b:72:15:bd:db:80:c5:32:3c:89:16:de:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=061b8755b934d8e8776d6ef84cadb56b3b69f8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:ce:0b:74:f6:46:06:d2:b4:80:d3:fd:d0: 65:4f:ad:20:64:64:e6:78:37:47:df:8b:dc:66:a2: 61:f1:66:ee:25:16:f0:4c:15:d1:44:14:d7:b7:3c: cf:78:13:3f:ad:52:53:7f:e4:c8:4b:73:fc:fe:56: 5b:ad:ba:22:3a:03:f9:cd:4b:2e:4e:f4:aa:60:76: 05:28:22:c6:83:20:1d:91:bc:19:5e:b5:fd:ca:00: c9:6a:26:69:82:5d:52:be:c3:5a:c0:41:5a:e7:86: 70:e1:67:42:bb:4f:ba:db:54:b8:b0:75:37:fb:df: 83:08:f7:50:6b:f6:d9:6b:08:3c:19:8e:82:8b:84: a2:07:5e:57:f1:15:9f:30:1e:f0:7d:4e:20:73:5b: b2:2f:3e:5b:af:95:a5:6e:38:e8:cb:b1:00:a3:3f: 8c:34:8e:92:e1:43:85:dc:b1:88:e4:ba:42:54:81: 38:5b:ff:52:4e:8f:8c:00:07:17:44:33:31:2d:62: ae:91:db:12:b8:6c:fa:04:e0:d7:4a:39:8b:d8:b1: f0:2e:2f:2e:2d:04:31:28:a1:0f:f7:4b:fb:81:46: 3b:b7:67:16:5e:bb:56:64:89:3d:d6:62:fe:be:6e: 91:dd:f6:cb:24:11:7c:a5:47:a0:8b:99:0e:ee:cf: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1B:87:55:B9:34:D8:E8:77:6D:6E:F8:4C:AD:B5:6B:3B:69:F8:C8 X509v3 Authority Key Identifier: keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a6:a8:85:8b:d0:14:c2:85:60:2a:a2:c5:f9:23:12:24:73: 46:d4:29:bd:eb:c9:c9:3f:d2:b6:53:c2:0d:ca:be:8e:5b:02: 55:e8:b2:bd:fa:69:d1:cc:35:a8:e1:d5:de:ef:96:5e:58:cb: e2:8a:c4:ee:6d:2b:2e:38:1c:d2:fd:cd:77:39:dc:d8:83:3f: a9:72:f3:6a:bd:de:4a:f9:ef:1c:9d:bd:c1:a8:ae:2e:3d:d7: 55:fb:4f:8d:11:fc:cb:e4:54:9a:a3:00:91:2e:5c:09:72:09: 7f:4f:0b:32:d6:51:31:d4:26:e4:5d:86:93:7a:0c:bc:74:fe: 75:3d:91:6e:ec:d9:4e:82:a7:0c:16:e2:9e:53:39:63:8a:8d: ec:e7:c6:de:2f:eb:f5:90:96:cc:cd:99:89:cb:c4:c7:08:b9: 5c:15:cb:60:97:2e:28:e7:54:55:c4:36:cf:e8:56:e4:e3:9c: 8c:02:a8:08:43:c7:74:bd:c7:d3:65:e8:5e:02:b6:0d:19:9a: e8:7e:93:49:7a:c9:60:72:4f:23:a1:6d:6f:75:50:60:a2:da: 96:2a:ae:dd:7a:92:4b:a0:d9:14:89:4a:d0:2d:04:92:fb:65: 97:37:21:11:05:cf:6c:dc:41:ac:fb:42:19:ed:29:c3:d9:6a: e7:37:47:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMQ7chW924DFMjyJFt7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGQyMjg2YjVjYzdiZTQyZjhhZWJhZWI2YWFlNTdlN2Nl N2RhMmIwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD EygwNjFiODc1NWI5MzRkOGU4Nzc2ZDZlZjg0Y2FkYjU2YjNiNjlmOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxePOC3T2RgbStIDT/dBlT60gZGTm eDdH34vcZqJh8WbuJRbwTBXRRBTXtzzPeBM/rVJTf+TIS3P8/lZbrboiOgP5zUsu TvSqYHYFKCLGgyAdkbwZXrX9ygDJaiZpgl1SvsNawEFa54Zw4WdCu0+621S4sHU3 +9+DCPdQa/bZawg8GY6Ci4SiB15X8RWfMB7wfU4gc1uyLz5br5Wlbjjoy7EAoz+M NI6S4UOF3LGI5LpCVIE4W/9STo+MAAcXRDMxLWKukdsSuGz6BODXSjmL2LHwLi8u LQQxKKEP90v7gUY7t2cWXrtWZIk91mL+vm6R3fbLJBF8pUegi5kO7s9E7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYbh1W5NNjod21u+EyttWs7afjIMB8GA1UdIwQY MBaAFMZNIoa1zHvkL4rrrraq5X5859orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTkt ZTVhNzAwM2UxMGRlLzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTktZTVhNzAwM2UxMGRl LzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqaohYvQ FMKFYCqixfkjEiRzRtQpvevJyT/StlPCDcq+jlsCVeiyvfpp0cw1qOHV3u+WXljL 4orE7m0rLjgc0v3Ndznc2IM/qXLzar3eSvnvHJ29waiuLj3XVftPjRH8y+RUmqMA kS5cCXIJf08LMtZRMdQm5F2Gk3oMvHT+dT2RbuzZToKnDBbinlM5Y4qN7OfG3i/r 9ZCWzM2ZicvExwi5XBXLYJcuKOdUVcQ2z+hW5OOcjAKoCEPHdL3H02XoXgK2DRma 6H6TSXrJYHJPI6Ftb3VQYKLaliqu3XqSS6DZFIlK0C0EkvtllzchEQXPbNxBrPtC Ge0pw9lq5zdHyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:46 2026 by rpki-client