This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json) Hash identifier: 7vF7BDSNRjIEdInLGpAU9KucHhbJLvBLmwzFgDG8830= Subject key identifier: 0A:3A:20:47:08:0C:38:6E:A5:C1:CE:70:BA:F7:3E:BD:F0:EA:D4:00 Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Certificate serial: 019C44A301ECA68B1DFB3C66495967B15B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft Manifest number: 126A Signing time: Mon 09 Feb 2026 23:00:59 +0000 Manifest this update: Mon 09 Feb 2026 23:00:59 +0000 Manifest next update: Tue 10 Feb 2026 23:00:59 +0000 Files and hashes: 1: PD1M6PtARbBp-MFE-_EKsQHkiUA.roa (hash: skJJkpTERxyYoCR/2Ty9oHhbHrSmVPhxCwzmUEM9AKQ=) 2: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: th5WHIU3auCLHHGk9jYyjFBA5EthS1YDK5jXbFPlQBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a3:01:ec:a6:8b:1d:fb:3c:66:49:59:67:b1:5b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Validity Not Before: Feb 9 23:00:59 2026 GMT Not After : Feb 10 23:00:59 2026 GMT Subject: CN=0a3a2047080c386ea5c1ce70baf73ebdf0ead400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:cb:c4:f1:0a:64:f8:e6:da:37:bb:b7:fe: f4:33:6c:8d:f8:7b:fa:25:0d:3c:b1:8f:7d:9a:0d: 80:4f:0d:be:48:33:72:76:24:77:e8:b0:80:e0:d8: 7e:03:0c:a3:b4:40:c6:f1:86:d4:b9:ac:95:4e:cb: 09:92:bd:f1:33:86:c3:9c:b6:91:58:3d:29:4f:37: 50:83:59:dd:57:9a:83:3c:d5:22:46:8a:d7:f8:e6: 06:38:8f:e5:5c:a7:54:39:1a:3f:89:de:fa:c3:cb: 5f:bf:27:94:d0:71:4f:ab:f8:89:32:cd:18:c5:3c: 59:c4:71:b4:89:ff:91:0a:fc:ef:f9:7f:3b:74:cc: 73:16:d5:4c:21:ef:11:07:9d:5f:e5:ca:ba:01:1c: b6:ca:2b:f3:93:fe:ce:d9:95:08:9d:38:11:e7:6d: 57:e5:b8:81:89:23:1a:4e:36:66:0a:7b:39:51:f1: 34:c3:75:0c:59:a7:cf:79:44:5f:40:73:8a:46:25: c3:7f:d1:3a:85:b8:f1:01:01:89:4b:6d:48:f2:73: 89:00:40:35:0f:26:63:b9:f9:55:17:12:ca:46:c5: 2b:9b:37:cb:b9:2f:dc:32:c5:72:19:bc:d1:f4:e2: 6c:c9:c8:18:e0:9b:52:84:1e:6a:59:c9:11:98:6d: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3A:20:47:08:0C:38:6E:A5:C1:CE:70:BA:F7:3E:BD:F0:EA:D4:00 X509v3 Authority Key Identifier: keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:99:61:95:12:36:d6:69:57:c4:74:9a:f5:63:8e:c0:a0: b6:e4:9f:6b:f8:af:96:38:20:ee:8e:6f:06:8f:6b:4e:2e:1c: 6d:7f:63:75:4a:1e:26:cb:d9:8f:4a:b2:48:df:64:f8:26:eb: 8c:69:c8:b1:24:77:c7:4c:16:3f:3e:a9:c8:7f:8d:9d:e4:0a: 9d:61:7d:21:5c:d3:9d:89:c3:1f:3d:9d:5e:b0:8c:b5:1f:56: 99:c3:cc:3e:bc:a3:08:a7:7a:7a:47:01:4c:e5:84:12:ac:38: f2:40:1c:03:08:5b:05:95:75:a1:3b:1e:f8:e4:d4:20:89:b2: 5c:b3:ae:dc:58:aa:0e:65:b2:7b:c6:19:e8:3d:f0:88:3f:14: ed:7b:66:d1:5f:f9:7e:20:9b:7a:cb:cf:98:8c:0a:2c:b4:74: 51:24:19:00:d2:e6:82:ce:1b:31:3f:b2:27:0b:38:16:14:21: 0e:00:51:f5:59:22:11:8e:62:94:8d:53:4a:b6:c0:3d:d2:70: 75:8f:4d:f1:c6:bc:ac:c4:ed:6e:b1:3e:04:25:c7:c3:49:02: 6c:3f:35:ee:08:5d:10:79:4c:00:02:a8:ac:06:33:ec:7a:6e: dd:19:35:5e:53:64:69:fe:37:70:41:84:f6:a4:5b:6b:fb:9a: 99:84:a2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEowHsposd+zxmSVlnsVs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDJmOTgxYmVlNzk1MjFhMzA0YjY4ZjY2N2ZlYWVkODFl YTNmZjYwHhcNMjYwMjA5MjMwMDU5WhcNMjYwMjEwMjMwMDU5WjAzMTEwLwYDVQQD EygwYTNhMjA0NzA4MGMzODZlYTVjMWNlNzBiYWY3M2ViZGYwZWFkNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTLxPEKZPjm2je7t/70M2yN+Hv6 JQ08sY99mg2ATw2+SDNydiR36LCA4Nh+AwyjtEDG8YbUuayVTssJkr3xM4bDnLaR WD0pTzdQg1ndV5qDPNUiRorX+OYGOI/lXKdUORo/id76w8tfvyeU0HFPq/iJMs0Y xTxZxHG0if+RCvzv+X87dMxzFtVMIe8RB51f5cq6ARy2yivzk/7O2ZUInTgR521X 5biBiSMaTjZmCns5UfE0w3UMWafPeURfQHOKRiXDf9E6hbjxAQGJS21I8nOJAEA1 DyZjuflVFxLKRsUrmzfLuS/cMsVyGbzR9OJsycgY4JtShB5qWckRmG2o0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo6IEcIDDhupcHOcLr3Pr3w6tQAMB8GA1UdIwQY MBaAFFwC+YG+55UhowS2j2Z/6u2B6j/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMt MzdkMmIwMzJiYTU3LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMtMzdkMmIwMzJiYTU3 LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3uZYZUS NtZpV8R0mvVjjsCgtuSfa/ivljgg7o5vBo9rTi4cbX9jdUoeJsvZj0qySN9k+Cbr jGnIsSR3x0wWPz6pyH+NneQKnWF9IVzTnYnDHz2dXrCMtR9WmcPMPryjCKd6ekcB TOWEEqw48kAcAwhbBZV1oTse+OTUIImyXLOu3FiqDmWye8YZ6D3wiD8U7Xtm0V/5 fiCbesvPmIwKLLR0USQZANLmgs4bMT+yJws4FhQhDgBR9VkiEY5ilI1TSrbAPdJw dY9N8ca8rMTtbrE+BCXHw0kCbD817ghdEHlMAAKorAYz7Hpu3Rk1XlNkaf43cEGE 9qRba/uamYSixQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:26 2026 by rpki-client