This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json) Hash identifier: 2F21FvvTk4ATCEOGxp/e2LLtCtp4dM8kKN+Xwj6/d38= Subject key identifier: AF:46:6D:14:E4:B3:80:56:5D:D2:CF:D6:FD:6C:A6:DD:25:5C:57:81 Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26 Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26 Certificate serial: 019C42466B287CB9FDC5ABF0B5FA3BDE0903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft Manifest number: 07FC Signing time: Mon 09 Feb 2026 12:00:36 +0000 Manifest this update: Mon 09 Feb 2026 12:00:36 +0000 Manifest next update: Tue 10 Feb 2026 12:00:36 +0000 Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: /LQW08x+0NhCwg+/UDokQwUGYdV2mT5Hou77ZqgZXlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:6b:28:7c:b9:fd:c5:ab:f0:b5:fa:3b:de:09:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26 Validity Not Before: Feb 9 12:00:36 2026 GMT Not After : Feb 10 12:00:36 2026 GMT Subject: CN=af466d14e4b380565dd2cfd6fd6ca6dd255c5781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:52:b3:9d:a8:a3:54:21:9a:f1:81:22:57: 12:e8:18:ac:6f:de:8a:98:b3:97:8b:cf:83:ec:9c: c0:51:57:ef:67:8c:52:64:0b:b4:53:44:db:9c:e7: 59:97:16:aa:51:45:76:e2:af:b3:d1:5c:5d:2d:cc: 33:61:b5:f7:d8:06:fa:bd:33:86:23:84:74:af:9b: 06:47:12:90:7a:46:89:ad:39:cf:3d:d3:d7:b0:3f: fc:10:3d:ef:3d:47:c5:1f:59:3e:d8:e3:cd:16:f5: 2b:1f:5a:09:20:bc:67:65:08:38:d8:12:c0:ba:7b: 35:c7:ae:5d:41:79:a3:a3:e8:05:71:db:29:44:2b: fd:58:e8:d1:39:bc:10:e5:28:b7:4f:1d:82:32:4b: 92:ac:f9:b5:c0:e6:46:b6:78:08:85:91:7f:05:51: dd:3d:15:b0:1c:08:ea:23:ac:de:b0:5f:4a:92:12: 31:42:cb:28:d7:60:b2:c9:84:2c:0a:d0:22:71:81: 69:d0:c3:0b:0c:74:b0:94:c6:47:6e:58:e1:2a:2a: a6:39:54:1f:73:e6:0f:8e:6c:f2:f6:b5:1d:df:4a: b8:84:91:ad:1b:34:d3:ab:f6:c3:61:28:e9:ee:93: df:f2:1a:21:3c:e1:0a:a8:95:02:fd:89:62:0d:02: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:6D:14:E4:B3:80:56:5D:D2:CF:D6:FD:6C:A6:DD:25:5C:57:81 X509v3 Authority Key Identifier: keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:9d:07:4b:f7:fe:3c:df:cc:2e:e5:9a:50:a5:c2:e7:7e: b7:9e:ce:c7:10:8b:55:40:1c:d7:dd:e8:cd:0e:da:c5:ed:fb: 79:e8:88:f5:19:54:32:59:0f:a3:b9:d6:4e:da:ad:0f:2f:d3: 40:c6:2f:b4:ed:c7:a9:87:07:b6:50:f7:c8:c3:d5:7b:be:39: b3:c0:d3:62:d1:0c:a6:b1:97:e9:de:ac:8f:f9:78:b7:e9:87: 0b:13:57:27:99:f8:c8:19:c7:8c:95:a7:d5:ea:0f:a3:2c:0c: 12:a7:5c:df:e7:53:5d:28:10:de:cd:49:55:98:90:f7:f3:81: 10:6c:ab:c7:06:a7:03:18:0b:e3:be:f9:17:79:1e:2e:53:14: fd:1a:5a:88:0f:6a:99:1d:66:78:fc:e6:e4:38:16:b9:40:91: ce:08:40:e2:9d:f7:61:39:36:64:9a:15:e7:32:e0:a5:fc:50: cb:4c:7c:95:d6:62:0c:37:af:e7:a3:c2:f4:5c:b5:ba:7f:21: 91:2b:54:8c:ca:b6:0c:55:0b:ea:a3:d6:9f:30:5a:3b:9c:24: 2c:e4:46:3e:f1:a3:6c:9f:34:be:47:0d:2e:dd:55:a1:0b:b9: c3:21:3a:a7:95:52:7e:e1:54:3e:57:f6:b1:6f:e3:87:d7:8d: 8e:c9:f0:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmsofLn9xavwtfo73gkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTdmYWM1MTBhM2UxZTg3MzllMzgxMmZjMGE1Y2FlMDI1 N2RmMjYwHhcNMjYwMjA5MTIwMDM2WhcNMjYwMjEwMTIwMDM2WjAzMTEwLwYDVQQD EyhhZjQ2NmQxNGU0YjM4MDU2NWRkMmNmZDZmZDZjYTZkZDI1NWM1NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsFSs52oo1QhmvGBIlcS6Bisb96K mLOXi8+D7JzAUVfvZ4xSZAu0U0TbnOdZlxaqUUV24q+z0VxdLcwzYbX32Ab6vTOG I4R0r5sGRxKQekaJrTnPPdPXsD/8ED3vPUfFH1k+2OPNFvUrH1oJILxnZQg42BLA uns1x65dQXmjo+gFcdspRCv9WOjRObwQ5Si3Tx2CMkuSrPm1wOZGtngIhZF/BVHd PRWwHAjqI6zesF9KkhIxQsso12CyyYQsCtAicYFp0MMLDHSwlMZHbljhKiqmOVQf c+YPjmzy9rUd30q4hJGtGzTTq/bDYSjp7pPf8hohPOEKqJUC/YliDQKNKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9GbRTks4BWXdLP1v1spt0lXFeBMB8GA1UdIwQY MBaAFF+X+sUQo+Hoc544EvwKXK4CV98mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQt NzFhNzg1MDU4NWU1LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQtNzFhNzg1MDU4NWU1 LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9mdB0v3 /jzfzC7lmlClwud+t57OxxCLVUAc193ozQ7axe37eeiI9RlUMlkPo7nWTtqtDy/T QMYvtO3HqYcHtlD3yMPVe745s8DTYtEMprGX6d6sj/l4t+mHCxNXJ5n4yBnHjJWn 1eoPoywMEqdc3+dTXSgQ3s1JVZiQ9/OBEGyrxwanAxgL4775F3keLlMU/RpaiA9q mR1mePzm5DgWuUCRzghA4p33YTk2ZJoV5zLgpfxQy0x8ldZiDDev56PC9Fy1un8h kStUjMq2DFUL6qPWnzBaO5wkLORGPvGjbJ80vkcNLt1VoQu5wyE6p5VSfuFUPlf2 sW/jh9eNjsnwWg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:05 2026 by rpki-client