This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json) Hash identifier: ANcQlTh0bAAt1Nr+6CeQE+EADKdxsKgJNKxuGF9GMSA= Subject key identifier: 07:59:35:A6:A1:24:14:E6:4B:D6:9E:3F:A9:36:59:41:FE:1A:40:F4 Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1 Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1 Certificate serial: 019C43591BC6F9B46B26DCB0E7F2AF67E69E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:39 +0000 Manifest this update: Mon 09 Feb 2026 17:00:39 +0000 Manifest next update: Tue 10 Feb 2026 17:00:39 +0000 Files and hashes: 1: O58aCTrbE5lgm64c310ntztX4Wk.roa (hash: 0T3h+C9Xr6EOTPtS+HVLjRGd+kBq9kMPTWwsY3303pg=) 2: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: E01yikOzVw+FzL+5t42O/FITLufYozdRBMAKdtmIimo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:1b:c6:f9:b4:6b:26:dc:b0:e7:f2:af:67:e6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1 Validity Not Before: Feb 9 17:00:39 2026 GMT Not After : Feb 10 17:00:39 2026 GMT Subject: CN=075935a6a12414e64bd69e3fa9365941fe1a40f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:19:b8:90:f1:de:09:98:f0:a0:fe:fd:2e: 81:be:32:93:34:f8:7c:3d:16:eb:8d:27:29:55:06: ce:f5:ce:d1:f9:89:1b:8e:6f:b7:64:0d:86:8f:0f: 14:73:23:09:ed:93:2a:8f:23:79:88:57:a7:73:b4: c2:5e:72:e1:f1:fc:ea:0f:b0:6a:35:da:2c:33:82: 9e:a7:a2:80:01:0d:a9:a5:3b:b9:4d:bf:fd:3a:2a: 39:56:a1:91:3a:b8:33:4c:ed:2f:ea:a0:4e:22:93: 58:ca:79:8b:0f:e3:68:17:1f:15:76:5c:fc:d1:7c: 3c:1b:07:cd:29:b5:7e:a8:b3:e9:ef:95:5b:0b:e9: 4a:4a:36:b8:7d:95:48:b7:36:ad:c6:55:7d:83:f7: 92:f4:41:d7:d6:8b:66:95:38:9c:e5:6c:22:f7:4d: c6:77:a1:dd:c1:bf:ae:6b:c5:1d:7b:9e:b1:67:ba: b1:48:ca:bd:77:42:db:01:05:aa:05:a0:18:8b:0e: 5d:5e:d7:17:55:71:5d:b8:62:59:81:aa:3e:f2:48: 2e:ff:68:50:c0:8e:af:87:3f:2f:9e:58:35:8c:a9: f4:c1:5f:ff:43:af:2c:a6:d1:fc:93:0e:4c:35:78: 3e:47:8b:3b:29:4d:e1:c5:98:08:ad:1d:8e:07:74: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:35:A6:A1:24:14:E6:4B:D6:9E:3F:A9:36:59:41:FE:1A:40:F4 X509v3 Authority Key Identifier: keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:44:60:4e:44:cd:9f:84:9c:03:38:18:70:87:1f:ec:ce:5e: 35:9c:d1:4d:1d:44:db:4d:f1:f6:04:4e:dc:2b:82:5f:96:0c: dc:bc:52:4a:8b:08:25:c2:31:3e:e2:4f:d4:bc:29:6d:20:c5: f9:94:a7:d6:05:b0:01:01:46:2c:4f:c2:72:f7:5c:15:47:2c: ac:01:fc:27:b0:b0:38:eb:53:17:b8:51:7c:84:e8:4b:54:0c: 00:6c:a7:d2:64:a7:00:41:8a:d0:d6:3f:f0:19:91:0e:eb:3a: cd:75:35:d5:d5:51:32:41:f0:35:eb:84:23:35:b1:c7:e0:e1: e9:79:5d:d7:a4:db:80:f5:46:20:da:db:af:3e:0e:b7:e4:af: 7f:e9:fb:1f:83:04:bf:92:81:1d:cd:cc:82:9d:65:43:21:c6: f5:b9:37:ad:5d:6e:25:ae:74:c9:eb:d3:1f:5f:01:fc:3b:84: e0:c0:7b:14:ad:cf:41:94:17:cf:9a:68:ba:27:b1:fc:9d:ed: 79:f2:ca:9c:b1:f6:8e:ca:02:0f:b4:de:4a:85:08:45:ab:e7: 91:d3:c9:da:09:54:9a:cd:21:9a:52:d7:1e:d1:41:8c:57:5e: 08:38:60:c9:9f:7b:a5:c8:1b:b6:64:f1:4e:8e:30:cb:5f:d6: 54:dc:75:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRvG+bRrJtyw5/KvZ+aeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx MWY2ZTEwHhcNMjYwMjA5MTcwMDM5WhcNMjYwMjEwMTcwMDM5WjAzMTEwLwYDVQQD EygwNzU5MzVhNmExMjQxNGU2NGJkNjllM2ZhOTM2NTk0MWZlMWE0MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwsZuJDx3gmY8KD+/S6BvjKTNPh8 PRbrjScpVQbO9c7R+Ykbjm+3ZA2Gjw8UcyMJ7ZMqjyN5iFenc7TCXnLh8fzqD7Bq NdosM4Kep6KAAQ2ppTu5Tb/9Oio5VqGROrgzTO0v6qBOIpNYynmLD+NoFx8Vdlz8 0Xw8GwfNKbV+qLPp75VbC+lKSja4fZVItzatxlV9g/eS9EHX1otmlTic5Wwi903G d6Hdwb+ua8Ude56xZ7qxSMq9d0LbAQWqBaAYiw5dXtcXVXFduGJZgao+8kgu/2hQ wI6vhz8vnlg1jKn0wV//Q68sptH8kw5MNXg+R4s7KU3hxZgIrR2OB3QhAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdZNaahJBTmS9aeP6k2WUH+GkD0MB8GA1UdIwQY MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0RgTkTN n4ScAzgYcIcf7M5eNZzRTR1E203x9gRO3CuCX5YM3LxSSosIJcIxPuJP1LwpbSDF +ZSn1gWwAQFGLE/CcvdcFUcsrAH8J7CwOOtTF7hRfIToS1QMAGyn0mSnAEGK0NY/ 8BmRDus6zXU11dVRMkHwNeuEIzWxx+Dh6Xld16TbgPVGINrbrz4Ot+Svf+n7H4ME v5KBHc3Mgp1lQyHG9bk3rV1uJa50yevTH18B/DuE4MB7FK3PQZQXz5pouiex/J3t efLKnLH2jsoCD7TeSoUIRavnkdPJ2glUms0hmlLXHtFBjFdeCDhgyZ97pcgbtmTx To4wy1/WVNx1nA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:44 2026 by rpki-client