This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json) Hash identifier: sRO2TjGWEh87oChd+O5CMVIBAwCCEuRSX4yy4jrisUo= Subject key identifier: 0E:04:C7:47:12:58:B7:BE:7E:F4:A0:58:BF:A8:B6:C4:30:76:3E:2B Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Certificate serial: 019C427DDED3671AB3973ECF05EBC713A657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft Manifest number: 157D Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=) 2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: d8wqi0nQWOYY6zSOGWTKoJJ5A1FRYVALsvAl4OQjD8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:de:d3:67:1a:b3:97:3e:cf:05:eb:c7:13:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=0e04c7471258b7be7ef4a058bfa8b6c430763e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:29:90:2a:d2:e5:01:f2:44:00:54:1f:98: a2:91:67:cf:56:27:d4:cf:0c:be:c2:50:2f:d5:ae: df:8f:51:03:23:dd:6e:6b:91:9b:e6:cb:3b:bb:76: 75:c1:2a:49:bd:af:ad:67:38:7e:95:61:ca:43:27: 11:32:86:84:79:d9:d1:aa:ed:20:da:ad:76:6c:d5: 62:59:b3:04:44:0d:2c:f0:35:71:85:a0:92:26:04: 1b:e6:d2:0b:28:37:88:aa:45:fa:92:fb:83:72:15: 50:58:99:ea:d2:88:c2:91:90:2a:bb:21:44:f0:0a: f9:45:2c:f1:3e:d3:db:08:09:e1:4d:25:3d:ad:ee: 6c:ba:10:3c:e5:80:53:c6:58:d3:64:d5:ad:33:e5: 5d:16:ee:ea:d2:5c:9d:31:4c:32:a1:ba:9d:1f:44: 30:0a:39:e6:2f:bc:eb:e6:e3:1a:61:df:b7:66:99: 01:18:25:d7:5c:b9:d6:34:80:21:39:7f:04:e9:2e: 59:47:60:d7:fd:31:8c:0f:01:8b:ac:ad:2c:3a:f6: 81:6d:c4:72:d2:54:5d:c2:e1:c1:9a:25:c3:82:40: 5e:69:03:06:86:b3:f2:75:ee:d8:30:16:17:35:4f: 1d:dd:a8:95:8b:11:0d:5b:fa:87:43:26:10:c9:22: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:C7:47:12:58:B7:BE:7E:F4:A0:58:BF:A8:B6:C4:30:76:3E:2B X509v3 Authority Key Identifier: keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:64:68:1a:08:98:02:d4:90:4a:5f:eb:66:40:37:4a:8f:8e: 4b:aa:55:cd:d8:62:88:72:90:c6:04:50:60:ae:21:66:29:ab: 4e:fa:89:8d:91:c6:77:d6:3e:58:23:e7:38:e3:57:7a:56:43: 53:a9:32:0e:95:ce:e0:d5:ff:a2:5b:cd:25:8c:f7:19:8c:6d: 4d:ab:8a:47:9d:9d:39:19:c3:c9:3c:ec:c1:8b:61:e1:8b:8d: 2a:06:e4:96:61:0b:37:1d:63:41:9e:01:3f:49:df:a2:83:4c: ad:fc:5d:50:65:b5:b8:0a:47:da:c2:b0:b0:9a:a1:2f:31:7e: 10:68:9e:05:55:69:74:43:aa:c9:ad:bd:92:6c:3e:ce:83:01: 72:f6:7e:37:02:24:f0:15:0f:76:1c:11:c6:fb:c1:08:98:ac: 58:05:0d:4e:bf:cf:47:0b:53:b2:e5:3c:df:00:2e:f6:41:40: cf:c2:83:77:b8:74:12:06:bf:57:9f:33:d9:53:f0:33:b4:97: 16:c7:9f:49:26:59:78:d3:9e:ce:62:1b:71:ff:46:1f:52:1d: 81:20:db:00:f3:4d:81:ad:b2:80:6f:92:ce:08:8e:a3:e9:2f: d3:93:20:42:3b:0b:f9:e5:31:ea:87:18:ab:16:07:fe:f5:8d: e7:7b:7d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfd7TZxqzlz7PBevHE6ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm ZGQ0YzYwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EygwZTA0Yzc0NzEyNThiN2JlN2VmNGEwNThiZmE4YjZjNDMwNzYzZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshIpkCrS5QHyRABUH5iikWfPVifU zwy+wlAv1a7fj1EDI91ua5Gb5ss7u3Z1wSpJva+tZzh+lWHKQycRMoaEednRqu0g 2q12bNViWbMERA0s8DVxhaCSJgQb5tILKDeIqkX6kvuDchVQWJnq0ojCkZAquyFE 8Ar5RSzxPtPbCAnhTSU9re5suhA85YBTxljTZNWtM+VdFu7q0lydMUwyobqdH0Qw CjnmL7zr5uMaYd+3ZpkBGCXXXLnWNIAhOX8E6S5ZR2DX/TGMDwGLrK0sOvaBbcRy 0lRdwuHBmiXDgkBeaQMGhrPyde7YMBYXNU8d3aiVixENW/qHQyYQySIfjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4Ex0cSWLe+fvSgWL+otsQwdj4rMB8GA1UdIwQY MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGRoGgiY AtSQSl/rZkA3So+OS6pVzdhiiHKQxgRQYK4hZimrTvqJjZHGd9Y+WCPnOONXelZD U6kyDpXO4NX/olvNJYz3GYxtTauKR52dORnDyTzswYth4YuNKgbklmELNx1jQZ4B P0nfooNMrfxdUGW1uApH2sKwsJqhLzF+EGieBVVpdEOqya29kmw+zoMBcvZ+NwIk 8BUPdhwRxvvBCJisWAUNTr/PRwtTsuU83wAu9kFAz8KDd7h0Ega/V58z2VPwM7SX FsefSSZZeNOezmIbcf9GH1IdgSDbAPNNga2ygG+SzgiOo+kv05MgQjsL+eUx6ocY qxYH/vWN53t9Kw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:57 2026 by rpki-client