This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json) Hash identifier: jIDJkXCYgFYlwfxUvZS4TOzuZAmEkWgpvurIEZno4YY= Subject key identifier: 7C:D5:34:F1:F1:FB:76:68:5D:5D:87:84:53:BC:66:8C:59:F6:F7:FC Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67 Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667 Certificate serial: 019C43592B33EC45E26657B7DC0AF5AFDCFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft Manifest number: 0FD0 Signing time: Mon 09 Feb 2026 17:00:42 +0000 Manifest this update: Mon 09 Feb 2026 17:00:42 +0000 Manifest next update: Tue 10 Feb 2026 17:00:42 +0000 Files and hashes: 1: FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa (hash: ly+kVhxO/3fVLln2oSG/sFbuci0ZnP8XN3ql69hgFNU=) 2: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: 8+RNYnNQ9DBUonsP5XX/Z9fWjxUVJK9faEcA0vg9ClY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2b:33:ec:45:e2:66:57:b7:dc:0a:f5:af:dc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667 Validity Not Before: Feb 9 17:00:42 2026 GMT Not After : Feb 10 17:00:42 2026 GMT Subject: CN=7cd534f1f1fb76685d5d878453bc668c59f6f7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:ad:3e:b2:10:0e:ac:0c:16:07:7e:83:97: 5d:c8:2f:5c:03:6b:14:26:f6:77:b2:92:75:11:1b: 6c:b3:39:fe:27:2e:32:66:db:11:ad:95:48:c4:12: 4d:a8:53:2c:35:ed:52:19:57:ae:86:ae:b1:ce:2a: 3e:a7:0e:62:c5:44:ba:57:67:7e:8a:d1:d8:f2:36: af:1c:b6:24:43:ac:59:ff:50:fd:d6:b2:8c:82:4b: 09:4f:aa:1c:56:e6:5e:87:37:18:23:24:b5:3f:49: 58:c9:00:15:e3:71:74:88:0a:0a:ae:c1:0a:cd:3d: 47:fd:3c:68:4c:86:ad:95:fb:92:9e:b9:c9:ad:9d: d7:ff:90:b6:38:87:39:c0:7d:2c:4f:8f:1a:3b:64: 81:c4:bf:fb:43:fe:c8:e2:99:35:77:21:13:5a:70: a5:e6:66:76:78:ce:85:a8:99:3f:54:4b:8b:f0:05: ca:a9:6a:d6:40:35:54:65:71:b9:14:8a:10:be:28: 68:f5:d7:fe:50:39:56:a1:c3:42:a1:fe:c0:bb:fd: 76:b2:9c:8f:7a:92:30:32:1f:8b:d1:e0:67:9f:90: 4c:76:87:52:49:8b:a2:da:e8:79:ce:ac:3f:12:b2: 58:e2:41:5e:68:e6:e9:66:60:a2:8f:f4:be:61:31: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D5:34:F1:F1:FB:76:68:5D:5D:87:84:53:BC:66:8C:59:F6:F7:FC X509v3 Authority Key Identifier: keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:51:b7:72:34:7f:8b:3a:c0:94:69:39:b8:8f:d4:6c:62:c8: 42:ca:8e:1c:6e:72:f9:42:43:79:b4:71:a1:d7:41:06:e6:87: 5c:11:fe:7b:b8:9f:58:be:74:d6:c8:44:e5:90:21:b8:09:a8: f8:ad:b6:20:10:04:55:06:6d:60:89:77:52:53:42:45:81:f5: 06:4a:a7:98:ed:5b:7e:89:f3:fb:a9:8d:b5:a6:18:1e:23:89: e9:04:c0:28:3e:8b:8f:bb:19:34:dd:2b:69:77:e0:ca:af:32: ae:af:ab:a0:1d:77:69:ef:a5:05:d9:6c:21:1e:14:29:ab:af: 18:72:90:49:2e:bb:8d:6b:3c:af:2b:ad:a5:ea:cf:5e:d0:ed: 35:96:5c:37:1e:12:fa:a7:f5:0a:e2:0c:6c:9e:ca:f5:33:02: 67:96:dc:f0:56:cd:11:fa:97:32:9e:21:41:b0:0d:c0:1b:d7: bb:ca:19:0c:2c:23:e3:96:3b:8e:ff:36:08:f0:50:bf:8d:1a: 1b:ac:92:4d:12:f5:fa:b0:64:3b:94:16:56:95:a4:9d:4b:77: 04:49:f8:a6:41:af:1d:9e:e2:49:da:87:14:7c:e5:9d:d1:5f: c2:2b:d3:89:f7:11:50:1a:a5:d3:e2:f4:56:f6:49:db:4d:9c: e1:ef:d6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSsz7EXiZle33Ar1r9z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZGQxZThjMjM5NGQxOGU4NzZjMmQ1NzAxNmU3ZWQ4OTgw NWE2NjcwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD Eyg3Y2Q1MzRmMWYxZmI3NjY4NWQ1ZDg3ODQ1M2JjNjY4YzU5ZjZmN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOtPrIQDqwMFgd+g5ddyC9cA2sU JvZ3spJ1ERtsszn+Jy4yZtsRrZVIxBJNqFMsNe1SGVeuhq6xzio+pw5ixUS6V2d+ itHY8javHLYkQ6xZ/1D91rKMgksJT6ocVuZehzcYIyS1P0lYyQAV43F0iAoKrsEK zT1H/TxoTIatlfuSnrnJrZ3X/5C2OIc5wH0sT48aO2SBxL/7Q/7I4pk1dyETWnCl 5mZ2eM6FqJk/VEuL8AXKqWrWQDVUZXG5FIoQviho9df+UDlWocNCof7Au/12spyP epIwMh+L0eBnn5BMdodSSYui2uh5zqw/ErJY4kFeaObpZmCij/S+YTHv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzVNPHx+3ZoXV2HhFO8ZoxZ9vf8MB8GA1UdIwQY MBaAFF/dHowjlNGOh2wtVwFuftiYBaZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMt NWFlOTNlYzhmYjExLzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMtNWFlOTNlYzhmYjEx LzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1G3cjR/ izrAlGk5uI/UbGLIQsqOHG5y+UJDebRxoddBBuaHXBH+e7ifWL501shE5ZAhuAmo +K22IBAEVQZtYIl3UlNCRYH1BkqnmO1bfonz+6mNtaYYHiOJ6QTAKD6Lj7sZNN0r aXfgyq8yrq+roB13ae+lBdlsIR4UKauvGHKQSS67jWs8ryutperPXtDtNZZcNx4S +qf1CuIMbJ7K9TMCZ5bc8FbNEfqXMp4hQbANwBvXu8oZDCwj45Y7jv82CPBQv40a G6ySTRL1+rBkO5QWVpWknUt3BEn4pkGvHZ7iSdqHFHzlndFfwivTifcRUBql0+L0 VvZJ202c4e/WFA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:20 2026 by rpki-client