This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json) Hash identifier: duqEYTsitHbYZbu3bsBvUGJGaow0/ogJG/D1yNt+s7Y= Subject key identifier: 56:0B:5F:4A:77:90:A6:FA:F2:05:22:83:19:FE:B6:AB:EF:C1:C2:15 Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Certificate serial: 019C42EB9F4D0346DD478FB82FE9BD863369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft Manifest number: 17AD Signing time: Mon 09 Feb 2026 15:01:03 +0000 Manifest this update: Mon 09 Feb 2026 15:01:03 +0000 Manifest next update: Tue 10 Feb 2026 15:01:03 +0000 Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=) 2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: D3aGJuc70sgZkvFKW+RjZJNX+lJ6ZV4qkDEMGixW/UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9f:4d:03:46:dd:47:8f:b8:2f:e9:bd:86:33:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8 Validity Not Before: Feb 9 15:01:03 2026 GMT Not After : Feb 10 15:01:03 2026 GMT Subject: CN=560b5f4a7790a6faf205228319feb6abefc1c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:7a:02:f3:cd:20:91:5a:7a:fc:ee:99:93: 57:19:b2:b1:d4:eb:fa:56:d2:86:d0:31:44:59:46: 8a:17:51:0e:f9:00:b2:68:ef:1f:fa:ac:f0:87:9d: c3:16:1c:81:cb:0b:99:c4:29:ef:44:44:d2:1f:c5: 14:88:c7:69:e9:56:47:82:a0:ba:d9:64:90:69:2f: 26:ad:a3:26:e2:06:27:93:af:d3:13:3b:bc:4e:22: 82:da:07:0e:7b:f6:84:2d:b2:33:12:c1:56:56:bc: bd:17:47:3e:1a:ef:c9:60:6d:21:f7:47:d5:ff:5e: ef:32:9d:fe:ca:7f:90:76:51:ba:dd:36:ee:f3:d9: d2:5e:49:98:54:f5:49:e5:7b:8b:8b:14:03:2c:5d: 1b:01:25:d8:8a:b6:f8:f6:5c:d0:a0:38:7e:f4:83: 58:cb:fa:68:6d:5b:52:84:58:f4:d9:26:9b:ab:e7: a8:7b:7d:c0:ff:cc:aa:96:d3:d6:e5:74:af:37:4e: d9:5d:6b:f7:d3:16:4f:9f:2e:59:c1:eb:04:4d:d8: 93:dd:a8:77:87:9b:74:da:87:b0:c6:67:d1:31:0e: e0:33:41:be:72:82:ad:55:17:d3:7d:6b:56:2e:cc: 10:85:db:ca:d9:fa:ff:b5:74:ac:ee:f9:fc:49:41: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0B:5F:4A:77:90:A6:FA:F2:05:22:83:19:FE:B6:AB:EF:C1:C2:15 X509v3 Authority Key Identifier: keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:49:96:83:1a:37:04:32:de:27:e8:1d:9f:66:38:78:9f:9d: d8:8d:73:3b:ea:b8:60:a8:46:b0:f4:a0:e1:5c:97:e5:fd:12: ec:7d:0c:07:7e:25:dd:a3:5d:c8:33:ab:62:ec:b9:c9:5d:63: 64:f6:33:45:37:8a:d4:83:09:22:5c:7f:5e:7e:78:ea:d3:cf: 87:e5:cf:3e:8d:3d:fd:aa:f2:6d:81:ea:5f:e0:a6:dc:63:29: 3b:a0:b8:a1:74:31:aa:d5:34:4a:04:29:17:c8:9c:24:26:1d: a1:9b:d9:21:4e:85:4e:40:d8:f6:a6:92:50:7b:e1:4e:7b:4e: 54:43:68:c2:09:9b:14:d7:28:d3:23:fd:5e:d8:67:46:e3:94: 2e:e2:69:77:38:ec:46:df:a2:dc:b9:48:81:28:ed:05:11:11: dc:6b:5f:60:1f:51:11:2d:5a:70:48:06:89:4c:07:e1:43:9a: 6d:a4:2e:6a:73:44:28:94:50:74:ff:ae:f9:a4:d0:a5:35:14: 78:9c:19:7d:ba:5d:49:4a:ef:fa:77:9e:99:86:34:02:c5:d8: 7f:2c:03:f5:d7:76:82:1c:e3:1e:3d:50:d8:65:23:c0:f9:08: b4:4f:96:42:e6:fd:8d:6d:11:54:fc:b4:60:98:ac:3b:d1:4f: 1a:12:85:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC659NA0bdR4+4L+m9hjNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw YjdlZjgwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD Eyg1NjBiNWY0YTc3OTBhNmZhZjIwNTIyODMxOWZlYjZhYmVmYzFjMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qR6AvPNIJFaevzumZNXGbKx1Ov6 VtKG0DFEWUaKF1EO+QCyaO8f+qzwh53DFhyBywuZxCnvRETSH8UUiMdp6VZHgqC6 2WSQaS8mraMm4gYnk6/TEzu8TiKC2gcOe/aELbIzEsFWVry9F0c+Gu/JYG0h90fV /17vMp3+yn+QdlG63Tbu89nSXkmYVPVJ5XuLixQDLF0bASXYirb49lzQoDh+9INY y/pobVtShFj02Sabq+eoe33A/8yqltPW5XSvN07ZXWv30xZPny5ZwesETdiT3ah3 h5t02oewxmfRMQ7gM0G+coKtVRfTfWtWLswQhdvK2fr/tXSs7vn8SUFl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYLX0p3kKb68gUigxn+tqvvwcIVMB8GA1UdIwQY MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1 LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUmWgxo3 BDLeJ+gdn2Y4eJ+d2I1zO+q4YKhGsPSg4VyX5f0S7H0MB34l3aNdyDOrYuy5yV1j ZPYzRTeK1IMJIlx/Xn546tPPh+XPPo09/arybYHqX+Cm3GMpO6C4oXQxqtU0SgQp F8icJCYdoZvZIU6FTkDY9qaSUHvhTntOVENowgmbFNco0yP9XthnRuOULuJpdzjs Rt+i3LlIgSjtBRER3GtfYB9RES1acEgGiUwH4UOabaQuanNEKJRQdP+u+aTQpTUU eJwZfbpdSUrv+neemYY0AsXYfywD9dd2ghzjHj1Q2GUjwPkItE+WQub9jW0RVPy0 YJisO9FPGhKFsg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:24 2026 by rpki-client