This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json) Hash identifier: EDlyHNaR3se/rReQxQkzIf+iOsBYpWWgp0kuII4UNHM= Subject key identifier: E1:4D:04:F3:D1:CC:83:24:C0:54:F2:68:5F:8A:89:A5:36:51:E0:5C Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2 Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2 Certificate serial: 019C42EB7949BA992F4990E40CFB6A16842D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 15:00:54 +0000 Manifest this update: Mon 09 Feb 2026 15:00:54 +0000 Manifest next update: Tue 10 Feb 2026 15:00:54 +0000 Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: DTmox4iRtMXoHZL5peZQN5bUuWHfxgFFu6AG0NvO46I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:79:49:ba:99:2f:49:90:e4:0c:fb:6a:16:84:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2 Validity Not Before: Feb 9 15:00:54 2026 GMT Not After : Feb 10 15:00:54 2026 GMT Subject: CN=e14d04f3d1cc8324c054f2685f8a89a53651e05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cf:aa:b0:88:2d:8e:a3:a9:7c:07:1b:31:2e: 3c:42:4e:c0:e4:ff:6d:c9:72:b5:34:7e:30:84:24: 52:c5:91:23:21:54:57:43:96:c5:28:76:f2:ca:02: be:24:05:ad:7f:55:af:39:6a:b3:60:84:95:1a:78: e3:b5:1d:5a:6f:58:01:07:7d:a1:d1:5e:89:58:d3: eb:ed:41:a6:4e:ed:42:67:de:6a:05:33:30:57:89: d3:2d:88:a5:c4:38:ae:e0:41:8e:c9:11:2a:80:f5: a8:59:5e:2d:3b:77:ce:bf:4b:6b:10:e8:1b:f1:4d: ae:59:e1:a0:d5:d5:ba:58:c7:6f:88:ee:03:3f:47: 42:63:9f:00:13:61:4b:cb:fb:fa:3b:91:59:30:d7: 6e:02:49:72:2f:85:66:f3:86:22:8c:64:96:64:2d: 19:5c:e4:ff:a4:85:8a:d9:2c:50:a8:3e:9b:f5:06: bd:4d:85:89:e6:72:02:48:0a:b0:3b:2f:9b:fb:32: 3e:b5:3e:09:d4:ef:46:be:42:6b:14:21:ec:44:10: a6:f5:09:fc:7d:9b:d8:9c:de:55:9c:77:d8:d4:57: 1e:a0:0a:3a:72:99:34:0f:b4:13:6b:39:66:55:66: 55:31:14:ca:a5:c8:8b:86:df:fa:c0:61:18:f2:25: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4D:04:F3:D1:CC:83:24:C0:54:F2:68:5F:8A:89:A5:36:51:E0:5C X509v3 Authority Key Identifier: keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:59:d5:af:5c:f0:4a:4a:e2:48:4b:cb:5a:f3:86:28:81:79: a5:90:af:a0:10:6b:3f:2e:be:ce:9a:a6:a2:d6:ce:2e:af:36: 2a:26:44:de:cf:ae:70:02:80:ef:42:f5:e3:70:06:e9:e9:8d: 96:74:f3:52:f9:cc:47:e5:96:df:71:e9:42:3d:05:27:87:87: 03:5d:1b:6a:af:cf:b2:8e:d3:f3:20:a2:6c:be:dc:4f:c0:02: 39:01:74:95:c8:d8:9f:fe:1c:a1:e7:b1:54:59:2b:80:c5:dc: 29:3b:2a:8e:d2:97:df:b0:9c:bb:ec:45:9b:4b:5f:35:30:55: dd:96:a5:4b:ad:62:cc:92:18:18:f0:99:f4:ea:ba:8f:3e:b2: c5:0f:34:10:33:52:3d:ce:f4:4c:4b:58:62:71:98:44:7a:9d: 92:45:c4:21:43:41:c1:62:68:d7:a2:a3:dd:2e:65:e4:8a:a4: d8:31:91:41:d8:41:38:77:b4:f3:b7:4f:bc:dd:28:ac:a3:f3: 88:a7:d6:f8:d8:d9:94:42:63:00:d8:d2:9a:22:60:b0:03:6b: 6c:66:41:54:59:34:cf:db:3e:90:ab:7d:eb:9e:09:31:7f:1a: ae:ac:ae:28:8b:21:78:ee:9e:ad:bf:8d:d4:ce:f9:e5:87:e2: 61:19:61:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63lJupkvSZDkDPtqFoQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4 YjA4YTIwHhcNMjYwMjA5MTUwMDU0WhcNMjYwMjEwMTUwMDU0WjAzMTEwLwYDVQQD EyhlMTRkMDRmM2QxY2M4MzI0YzA1NGYyNjg1ZjhhODlhNTM2NTFlMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78+qsIgtjqOpfAcbMS48Qk7A5P9t yXK1NH4whCRSxZEjIVRXQ5bFKHbyygK+JAWtf1WvOWqzYISVGnjjtR1ab1gBB32h 0V6JWNPr7UGmTu1CZ95qBTMwV4nTLYilxDiu4EGOyREqgPWoWV4tO3fOv0trEOgb 8U2uWeGg1dW6WMdviO4DP0dCY58AE2FLy/v6O5FZMNduAklyL4Vm84YijGSWZC0Z XOT/pIWK2SxQqD6b9Qa9TYWJ5nICSAqwOy+b+zI+tT4J1O9GvkJrFCHsRBCm9Qn8 fZvYnN5VnHfY1FceoAo6cpk0D7QTazlmVWZVMRTKpciLht/6wGEY8iUU0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFNBPPRzIMkwFTyaF+KiaU2UeBcMB8GA1UdIwQY MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFnVr1zw SkriSEvLWvOGKIF5pZCvoBBrPy6+zpqmotbOLq82KiZE3s+ucAKA70L143AG6emN lnTzUvnMR+WW33HpQj0FJ4eHA10baq/Pso7T8yCibL7cT8ACOQF0lcjYn/4coeex VFkrgMXcKTsqjtKX37Ccu+xFm0tfNTBV3ZalS61izJIYGPCZ9Oq6jz6yxQ80EDNS Pc70TEtYYnGYRHqdkkXEIUNBwWJo16Kj3S5l5Iqk2DGRQdhBOHe087dPvN0orKPz iKfW+NjZlEJjANjSmiJgsANrbGZBVFk0z9s+kKt9654JMX8arqyuKIsheO6erb+N 1M755YfiYRlhfw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:32 2026 by rpki-client