This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json) Hash identifier: QQYnlELFvTggiklslVkrKuX+MFSX6eCBUe9uzOkJLBc= Subject key identifier: 57:48:F3:D3:FE:D5:2D:53:70:FA:55:65:D1:37:30:CC:A6:5C:23:2C Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e Certificate serial: 019C41A26104AC98ECA3AADC658627F26AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft Manifest number: 0B6E Signing time: Mon 09 Feb 2026 09:01:26 +0000 Manifest this update: Mon 09 Feb 2026 09:01:26 +0000 Manifest next update: Tue 10 Feb 2026 09:01:26 +0000 Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: N0DSfrhK1Oh3KiPb2EEEEpqTSP7Ln5mZimM/lG/G2Yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:61:04:ac:98:ec:a3:aa:dc:65:86:27:f2:6a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e Validity Not Before: Feb 9 09:01:26 2026 GMT Not After : Feb 10 09:01:26 2026 GMT Subject: CN=5748f3d3fed52d5370fa5565d13730cca65c232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:63:13:87:38:fe:60:25:ae:e4:e9:14:4a: e3:f5:40:aa:e5:0f:d8:e0:88:58:02:de:90:5a:83: ae:1b:b0:e9:af:2f:4e:b3:96:41:0c:11:0e:ec:aa: d5:f3:d6:d8:98:3b:0f:be:a6:43:e8:f4:85:dd:65: be:ab:40:e6:4c:70:2c:48:28:43:ed:0d:70:68:9d: b4:c3:97:94:81:52:eb:a0:60:f7:52:9c:6d:0b:ed: db:32:0e:d0:73:10:d4:67:dd:37:f6:8b:27:e7:20: 75:33:a8:9d:8d:5f:c0:33:6e:82:c2:d0:de:41:a0: f1:d7:6f:13:19:87:5a:0e:7c:7f:c1:99:07:57:27: 74:3f:36:9b:e4:0b:bd:be:fa:21:51:45:da:f6:07: 30:77:4e:f2:8f:2d:b2:8d:85:3e:71:5c:44:ff:2f: 62:d1:56:c3:1a:b6:9c:f4:1d:24:23:de:ab:bc:c5: d8:b6:80:7e:9a:11:a8:39:15:14:b9:b4:6f:5a:bc: de:4b:a9:2d:57:76:69:cc:91:1d:b6:58:68:63:a6: 59:6d:4c:7e:be:35:5f:5d:4e:0b:3b:7c:f9:ef:57: 12:80:cf:38:9d:36:21:f5:23:13:36:63:9b:c9:42: 56:14:c4:39:c0:64:1b:77:e4:9f:1d:de:be:53:68: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:F3:D3:FE:D5:2D:53:70:FA:55:65:D1:37:30:CC:A6:5C:23:2C X509v3 Authority Key Identifier: keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:09:5c:a7:6d:3f:24:07:40:02:46:a6:84:e1:eb:2b:9b:7d: f5:a2:a3:ad:03:19:f8:d1:46:66:b0:48:cd:2f:c6:a4:eb:94: 24:48:f8:03:06:2c:d2:4c:41:7b:31:26:58:30:b1:89:dc:7b: f1:64:dd:5c:2e:8a:9b:ff:e8:a2:47:f1:d5:d2:a0:d7:ee:0e: 29:bd:35:46:e4:b1:b6:70:95:5f:e4:b7:43:2b:4c:0f:67:f5: 60:28:40:37:42:4e:d7:3d:84:c9:82:a6:0c:64:d3:43:74:c5: a4:64:ca:ef:ad:7b:dd:d9:7e:bc:76:3b:3a:dc:6b:03:03:e5: 9d:71:d7:71:9f:1b:df:82:23:cb:94:37:4f:9c:d2:c2:f9:43: 69:e2:d9:a7:d8:dc:78:1e:24:1e:2d:10:64:50:fa:38:06:0f: f7:10:9e:ac:07:dd:0f:50:21:eb:e2:20:4f:a0:dc:6f:e3:f1: 17:0c:99:92:da:e8:1e:a6:38:36:29:4e:83:3a:22:d2:2c:e5: 93:54:a9:00:f2:a1:17:d1:3d:c8:6a:0a:29:8c:b2:80:ff:0f: b3:6c:c2:75:83:52:58:57:ab:0f:24:66:82:f6:88:c0:4e:02: d7:14:be:aa:16:e2:91:c6:be:b9:8e:15:ef:d1:0e:47:39:c6: b4:7e:0a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomEErJjso6rcZYYn8mrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZGZiZWRlYWMwNmIwMWM1YTNmNzg0Y2VhMDQ2ZTVhMmM5 NWNhNWUwHhcNMjYwMjA5MDkwMTI2WhcNMjYwMjEwMDkwMTI2WjAzMTEwLwYDVQQD Eyg1NzQ4ZjNkM2ZlZDUyZDUzNzBmYTU1NjVkMTM3MzBjY2E2NWMyMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFpjE4c4/mAlruTpFErj9UCq5Q/Y 4IhYAt6QWoOuG7Dpry9Os5ZBDBEO7KrV89bYmDsPvqZD6PSF3WW+q0DmTHAsSChD 7Q1waJ20w5eUgVLroGD3UpxtC+3bMg7QcxDUZ9039osn5yB1M6idjV/AM26CwtDe QaDx128TGYdaDnx/wZkHVyd0Pzab5Au9vvohUUXa9gcwd07yjy2yjYU+cVxE/y9i 0VbDGrac9B0kI96rvMXYtoB+mhGoORUUubRvWrzeS6ktV3ZpzJEdtlhoY6ZZbUx+ vjVfXU4LO3z571cSgM84nTYh9SMTNmObyUJWFMQ5wGQbd+SfHd6+U2jP0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdI89P+1S1TcPpVZdE3MMymXCMsMB8GA1UdIwQY MBaAFF7fvt6sBrAcWj94TOoEbloslcpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUt YjU4NjE3ZTE4ODhiLzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUtYjU4NjE3ZTE4ODhi LzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwlcp20/ JAdAAkamhOHrK5t99aKjrQMZ+NFGZrBIzS/GpOuUJEj4AwYs0kxBezEmWDCxidx7 8WTdXC6Km//ookfx1dKg1+4OKb01RuSxtnCVX+S3QytMD2f1YChAN0JO1z2EyYKm DGTTQ3TFpGTK76173dl+vHY7OtxrAwPlnXHXcZ8b34Ijy5Q3T5zSwvlDaeLZp9jc eB4kHi0QZFD6OAYP9xCerAfdD1Ah6+IgT6Dcb+PxFwyZktroHqY4NilOgzoi0izl k1SpAPKhF9E9yGoKKYyygP8Ps2zCdYNSWFerDyRmgvaIwE4C1xS+qhbikca+uY4V 79EORznGtH4K3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:30 2026 by rpki-client