This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json) Hash identifier: MEwuo/LQZ/X+kMBq2pjb3EwWeBMPIUY8kyAoOguSdgs= Subject key identifier: 37:2C:78:D3:C9:A7:B8:AF:71:06:75:7E:F3:E2:D2:1D:3E:18:60:26 Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Certificate serial: 019C4322B3448D267270EEB1481DB0D4BC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft Manifest number: 055C Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: gvYOZYY6etTPpfY0vexUiQ/KrZCKGUWHy2dt8MHsRtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b3:44:8d:26:72:70:ee:b1:48:1d:b0:d4:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=372c78d3c9a7b8af7106757ef3e2d21d3e186026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:01:8f:ab:f5:af:a9:f8:6f:ca:ce:eb:d1: a3:96:0f:53:d9:ae:61:cf:3a:b3:15:47:1b:49:5c: f8:dc:66:02:12:98:a6:07:9e:c9:a0:ce:f1:46:07: 35:af:11:09:f9:02:e2:70:4c:52:06:ae:d9:b9:c5: 57:2f:42:66:8b:27:51:b4:01:e6:ac:d6:17:f2:ef: c7:4d:00:32:1a:83:26:e0:53:a0:86:d4:fa:f0:1e: e2:6d:22:6a:dd:0b:c6:68:47:f7:08:e2:ac:cb:1f: 9b:03:b1:47:94:cf:bc:7f:fb:f3:30:ee:ba:49:96: b5:54:80:45:43:29:42:9d:40:d8:65:fc:cb:7e:a7: 47:9b:7f:e5:51:ae:17:a3:fc:ad:2f:f2:e2:3f:0f: 30:11:34:af:ef:d3:3d:e7:83:17:f5:b1:db:38:8b: 0f:2f:00:e3:5c:5f:bd:66:9b:76:92:32:26:28:64: 40:36:f1:60:57:05:7b:c3:bb:2a:ac:dd:8a:03:b9: 7d:ce:f7:b2:c1:23:8e:59:4f:3d:12:04:1a:2e:ba: de:dc:84:b3:b8:8e:ee:ca:c4:63:67:aa:f1:e9:1a: 3d:80:be:b0:22:1c:ef:55:fa:de:6f:4e:a2:20:ee: 84:80:f9:3b:26:ee:6b:57:7c:af:71:3e:37:ae:36: 2b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:78:D3:C9:A7:B8:AF:71:06:75:7E:F3:E2:D2:1D:3E:18:60:26 X509v3 Authority Key Identifier: keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4b:48:e6:ed:63:ca:71:7d:19:0c:9d:34:77:e3:d4:9a:f9: 32:c7:28:7c:05:05:03:9e:9d:3a:cd:95:b6:79:ed:4b:05:99: aa:b8:58:45:3a:d5:60:26:07:ec:e0:6c:a1:d3:17:41:92:a3: cd:18:83:54:eb:15:da:a0:df:73:55:fc:1d:66:46:4f:58:a5: 31:d0:45:b1:1f:73:68:fd:2b:c1:e6:30:e6:ec:0d:c4:77:fa: 36:0d:2e:d0:c6:4b:9a:1b:20:09:5b:d0:9e:a7:cc:ae:46:86: f2:24:ff:82:a3:03:2c:e3:0e:5e:6c:4b:3d:8c:31:a6:6b:ed: 3d:0a:8e:04:5c:e3:22:04:c2:c2:e5:9f:e3:4e:90:0d:29:1a: 86:1d:b8:43:b3:1a:e2:e0:ce:b0:f8:83:af:d1:25:c6:10:87: 5c:ad:8e:e4:3b:47:c0:c6:76:2d:aa:7b:36:37:e1:50:fa:ab: 58:b7:e3:63:ad:d2:09:99:11:7e:cd:e6:3b:41:01:5f:58:8e: c8:e2:02:92:2b:ac:e2:d1:0a:8b:92:bb:31:f5:a3:36:84:66: 4a:80:11:5a:dd:8c:d5:6a:b0:f3:24:1f:5c:65:13:92:5b:9d: b5:a3:b3:5c:2c:4b:32:27:4b:8b:8d:cf:33:23:55:c7:ee:62: 35:8a:c1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrNEjSZycO6xSB2w1LxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NDhjYmZkZTcxYTUzMDVjYWJmZDRlNzljZTZkZWU3MTQ4 MjgxNTEwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD EygzNzJjNzhkM2M5YTdiOGFmNzEwNjc1N2VmM2UyZDIxZDNlMTg2MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln0Bj6v1r6n4b8rO69Gjlg9T2a5h zzqzFUcbSVz43GYCEpimB57JoM7xRgc1rxEJ+QLicExSBq7ZucVXL0JmiydRtAHm rNYX8u/HTQAyGoMm4FOghtT68B7ibSJq3QvGaEf3COKsyx+bA7FHlM+8f/vzMO66 SZa1VIBFQylCnUDYZfzLfqdHm3/lUa4Xo/ytL/LiPw8wETSv79M954MX9bHbOIsP LwDjXF+9Zpt2kjImKGRANvFgVwV7w7sqrN2KA7l9zveywSOOWU89EgQaLrre3ISz uI7uysRjZ6rx6Ro9gL6wIhzvVfreb06iIO6EgPk7Ju5rV3yvcT43rjYrQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcseNPJp7ivcQZ1fvPi0h0+GGAmMB8GA1UdIwQY MBaAFMZIy/3nGlMFyr/U55zm3ucUgoFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYt YTlkMmU2YTNkMGYxLzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYtYTlkMmU2YTNkMGYx LzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUtI5u1j ynF9GQydNHfj1Jr5MscofAUFA56dOs2VtnntSwWZqrhYRTrVYCYH7OBsodMXQZKj zRiDVOsV2qDfc1X8HWZGT1ilMdBFsR9zaP0rweYw5uwNxHf6Ng0u0MZLmhsgCVvQ nqfMrkaG8iT/gqMDLOMOXmxLPYwxpmvtPQqOBFzjIgTCwuWf406QDSkahh24Q7Ma 4uDOsPiDr9ElxhCHXK2O5DtHwMZ2Lap7NjfhUPqrWLfjY63SCZkRfs3mO0EBX1iO yOICkius4tEKi5K7MfWjNoRmSoARWt2M1Wqw8yQfXGUTkludtaOzXCxLMidLi43P MyNVx+5iNYrBnw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:19 2026 by rpki-client