This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json) Hash identifier: HHoDznCcKMJ7wDyQCusjLD4o7OohL29zppLvKVQmGhY= Subject key identifier: 46:D6:06:A8:9D:8F:DD:54:61:7B:94:4D:F3:2F:96:F2:77:05:A1:F8 Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Certificate serial: 019C427DAC92674FE025CE0E6F8A44CA765B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft Manifest number: 0FAA Signing time: Mon 09 Feb 2026 13:00:58 +0000 Manifest this update: Mon 09 Feb 2026 13:00:58 +0000 Manifest next update: Tue 10 Feb 2026 13:00:58 +0000 Files and hashes: 1: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: D08KA+uEgTzf79P/jpi5nJJhDeuG/qYvMnBGV3s9sM4=) 2: o10KDQLCNX_eEti6B07ro4cJyK8.roa (hash: hy+4KJvTq+cRULOZkT8/acKHvswCR6Ar2bCCrvuaUxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ac:92:67:4f:e0:25:ce:0e:6f:8a:44:ca:76:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Validity Not Before: Feb 9 13:00:58 2026 GMT Not After : Feb 10 13:00:58 2026 GMT Subject: CN=46d606a89d8fdd54617b944df32f96f27705a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:31:c5:88:b9:6b:4d:21:4e:42:a4:e0:bc: ea:db:3c:93:47:cc:3f:06:af:65:92:16:c8:a5:e9: e7:e5:c3:89:bc:c2:f5:32:ab:c3:73:52:cb:79:4a: 45:7f:5b:c7:21:99:86:fb:b9:21:04:1c:d0:39:6f: fd:a0:dd:60:7b:61:22:8b:a3:d6:59:1e:ec:9b:fd: b9:f8:d7:27:55:ca:4e:f3:84:79:1b:6a:22:0c:08: e8:2d:4e:a6:16:ce:20:cb:4a:04:fd:3d:76:01:fd: 42:f1:5c:fa:66:a2:7c:33:36:a0:0c:d4:6b:ba:1b: ed:fd:0f:b9:ea:7d:ab:4b:ff:ff:aa:c0:56:17:fc: e8:a9:61:a4:21:e4:bb:32:5c:ae:95:95:a3:9f:fb: 3b:b5:ac:02:34:fc:87:ec:cd:ef:a7:5c:62:25:df: 95:31:ea:ce:90:a1:37:33:cb:f4:5c:f7:65:18:28: df:d8:d1:07:d4:a9:10:88:3b:21:50:c6:9f:b3:37: a4:3b:a4:64:33:30:6c:85:46:d4:04:a3:6c:a6:0c: 2d:63:b7:77:ba:1a:30:00:a2:a3:1b:0c:07:38:62: 0b:45:50:2d:ec:0d:59:dc:bc:6d:ec:d3:46:5a:cf: 1c:e8:a3:c1:64:5b:32:45:ab:8d:f7:f5:46:7c:9d: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:06:A8:9D:8F:DD:54:61:7B:94:4D:F3:2F:96:F2:77:05:A1:F8 X509v3 Authority Key Identifier: keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c3:a2:8a:a8:4c:15:84:7e:48:59:29:25:5c:b6:ae:e9:ca: 0a:e7:06:6e:8e:06:fa:f5:f1:1b:99:86:f4:39:7f:fc:75:ac: 22:9a:ff:c6:df:db:b2:33:5e:6e:5e:c0:8a:c4:6e:c9:e9:58: f0:c9:a0:19:42:aa:fd:bf:ed:98:6c:a3:47:c3:23:65:82:e6: ed:83:f8:6c:14:02:83:52:ad:e9:1f:a6:b5:66:4a:dc:dd:b3: 4f:03:60:ad:c3:15:13:2d:0b:0a:45:31:4d:b3:55:e7:2e:31: b5:57:09:94:ca:90:82:01:1e:77:02:06:c1:1f:27:98:6a:b8: 75:68:31:04:b7:98:b7:65:16:a7:1e:50:e7:83:cd:13:ec:42: d1:6e:7e:0f:2c:53:ad:cb:2d:7e:5d:39:f5:dd:ac:66:a2:8f: 28:86:54:43:d0:2a:35:64:c0:88:6f:39:1f:9c:47:42:42:ff: 80:22:ba:7e:02:3c:26:96:3d:5c:f4:1f:55:36:51:e8:54:49: 3b:4d:49:87:e0:4a:44:37:6f:6e:cc:7f:e6:81:ce:d4:b0:75: 5f:61:70:10:5d:0a:f7:31:ac:36:a8:f1:2c:0a:86:1a:0c:1e: 67:c5:34:a1:68:1b:29:18:a9:5a:9d:6e:9f:22:3c:eb:16:bb: 0b:07:0b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaySZ0/gJc4Ob4pEynZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw ZjkzNzcwHhcNMjYwMjA5MTMwMDU4WhcNMjYwMjEwMTMwMDU4WjAzMTEwLwYDVQQD Eyg0NmQ2MDZhODlkOGZkZDU0NjE3Yjk0NGRmMzJmOTZmMjc3MDVhMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOAxxYi5a00hTkKk4Lzq2zyTR8w/ Bq9lkhbIpenn5cOJvML1MqvDc1LLeUpFf1vHIZmG+7khBBzQOW/9oN1ge2Eii6PW WR7sm/25+NcnVcpO84R5G2oiDAjoLU6mFs4gy0oE/T12Af1C8Vz6ZqJ8MzagDNRr uhvt/Q+56n2rS///qsBWF/zoqWGkIeS7MlyulZWjn/s7tawCNPyH7M3vp1xiJd+V MerOkKE3M8v0XPdlGCjf2NEH1KkQiDshUMafszekO6RkMzBshUbUBKNspgwtY7d3 uhowAKKjGwwHOGILRVAt7A1Z3Lxt7NNGWs8c6KPBZFsyRauN9/VGfJ1TAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbWBqidj91UYXuUTfMvlvJ3BaH4MB8GA1UdIwQY MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt NWUwZTI4MWQ3ZGEzLzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMOiiqhM FYR+SFkpJVy2runKCucGbo4G+vXxG5mG9Dl//HWsIpr/xt/bsjNebl7AisRuyelY 8MmgGUKq/b/tmGyjR8MjZYLm7YP4bBQCg1Kt6R+mtWZK3N2zTwNgrcMVEy0LCkUx TbNV5y4xtVcJlMqQggEedwIGwR8nmGq4dWgxBLeYt2UWpx5Q54PNE+xC0W5+DyxT rcstfl059d2sZqKPKIZUQ9AqNWTAiG85H5xHQkL/gCK6fgI8JpY9XPQfVTZR6FRJ O01Jh+BKRDdvbsx/5oHO1LB1X2FwEF0K9zGsNqjxLAqGGgweZ8U0oWgbKRipWp1u nyI86xa7CwcLdw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:12 2026 by rpki-client