This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json) Hash identifier: fQJhh6AhczjmL0gv82Yt732/ON+MoXapaOp1IaV5KD4= Subject key identifier: A7:38:BD:40:24:80:70:DE:C9:9D:B2:BC:8B:31:65:F7:C3:22:5B:77 Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb Certificate serial: 019C42463CE10C5E22F2FA23A885EF7CE1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:25 +0000 Manifest this update: Mon 09 Feb 2026 12:00:25 +0000 Manifest next update: Tue 10 Feb 2026 12:00:25 +0000 Files and hashes: 1: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: 3iChdx3+H7ZQn9++lzRbENLLzWfvRiHqc0+66W+i2pY=) 2: oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa (hash: sqZQ4ODNviSrmC5Scgdot54s+8lbk1XnzbtP1SaI9m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:3c:e1:0c:5e:22:f2:fa:23:a8:85:ef:7c:e1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb Validity Not Before: Feb 9 12:00:25 2026 GMT Not After : Feb 10 12:00:25 2026 GMT Subject: CN=a738bd40248070dec99db2bc8b3165f7c3225b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:23:0d:23:ea:94:51:c2:ea:47:44:17:78:58: 3b:b6:ae:f4:77:3b:8b:01:e7:d4:b9:c7:3a:f1:bc: 7b:6e:f4:9d:15:d4:d5:8a:69:2d:07:d7:af:c8:2a: 21:4e:cc:e8:34:bd:7c:f9:fd:30:bc:16:89:45:1e: d6:c8:9a:bb:6a:81:89:25:5d:24:1d:dc:a2:b9:62: 3c:6d:4a:a8:76:9d:66:85:92:7d:92:18:cc:fd:83: de:73:29:da:c3:b9:4e:f5:fa:1c:52:18:5a:ad:79: 0c:ca:c7:6a:6e:6e:ba:93:3a:3e:05:75:4b:e5:e5: 5a:a2:79:b7:dd:2a:89:da:b5:57:3d:f3:0a:af:2a: 9b:f9:bc:6c:26:c8:56:61:52:4e:43:c6:fe:f7:90: ab:61:ed:e1:45:53:0d:d9:09:e8:bb:83:2f:d8:52: f7:99:09:c2:90:76:f7:34:9a:1c:73:94:e5:1f:66: d1:66:da:b6:4f:84:97:49:0f:c4:93:63:ca:ca:7e: 3b:6c:70:97:de:eb:18:b7:b2:d2:83:29:ee:20:bb: 26:34:92:af:6c:76:3d:bd:e7:5f:17:e1:76:cc:d5: c9:84:28:e3:36:76:b2:bd:66:f6:e0:ef:18:b0:f0: b7:45:ed:8c:ce:b1:3c:43:a5:39:a9:e2:c8:fe:72: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:38:BD:40:24:80:70:DE:C9:9D:B2:BC:8B:31:65:F7:C3:22:5B:77 X509v3 Authority Key Identifier: keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:12:c1:1a:85:4e:d3:86:58:75:94:7a:3d:90:ce:0c:11:1d: 80:84:eb:da:2a:e3:2f:db:6c:54:95:03:12:04:69:73:22:cb: 3a:3c:e5:e9:17:dc:92:b5:58:2b:0e:fd:b5:31:4b:27:75:84: fe:a8:98:ab:4a:db:44:bd:a3:68:99:65:97:9d:d0:e7:da:18: 4c:24:82:db:ab:17:90:0e:76:a1:17:8d:7f:6e:bf:f9:92:eb: 46:77:0c:98:35:d3:77:c1:bf:d1:31:34:9b:71:90:d3:a8:df: e6:b8:c9:60:c8:d1:3b:97:cb:54:3c:a3:5e:25:21:19:af:c2: fe:54:77:66:e1:5c:77:4b:cf:d8:d2:1e:cc:34:a2:03:7d:3d: 37:ab:f0:c1:2b:a3:cd:2e:11:5f:be:bf:26:b2:22:cd:c1:0b: dc:b9:e2:49:c4:ae:bc:33:fd:67:2a:99:05:d1:87:68:cd:09: f9:38:d7:00:de:75:d8:eb:96:77:a3:a1:96:83:77:53:2e:88: ce:6e:2a:c8:53:2c:50:ea:95:4f:31:91:60:58:5a:73:ca:34: 90:23:17:a8:c0:14:7a:da:fe:30:95:59:25:85:7e:ce:fd:0b: 8c:88:7d:72:7f:37:a4:5b:44:6c:4c:59:a2:9a:c6:c2:52:28: 8d:8f:71:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjzhDF4i8vojqIXvfOHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1 NzQ2Y2IwHhcNMjYwMjA5MTIwMDI1WhcNMjYwMjEwMTIwMDI1WjAzMTEwLwYDVQQD EyhhNzM4YmQ0MDI0ODA3MGRlYzk5ZGIyYmM4YjMxNjVmN2MzMjI1Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyMNI+qUUcLqR0QXeFg7tq70dzuL AefUucc68bx7bvSdFdTVimktB9evyCohTszoNL18+f0wvBaJRR7WyJq7aoGJJV0k HdyiuWI8bUqodp1mhZJ9khjM/YPecynaw7lO9focUhharXkMysdqbm66kzo+BXVL 5eVaonm33SqJ2rVXPfMKryqb+bxsJshWYVJOQ8b+95CrYe3hRVMN2Qnou4Mv2FL3 mQnCkHb3NJocc5TlH2bRZtq2T4SXSQ/Ek2PKyn47bHCX3usYt7LSgynuILsmNJKv bHY9vedfF+F2zNXJhCjjNnayvWb24O8YsPC3Re2MzrE8Q6U5qeLI/nJgbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc4vUAkgHDeyZ2yvIsxZffDIlt3MB8GA1UdIwQY MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt NWUyMzY3MjY3M2QyLzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRLBGoVO 04ZYdZR6PZDODBEdgITr2irjL9tsVJUDEgRpcyLLOjzl6RfckrVYKw79tTFLJ3WE /qiYq0rbRL2jaJlll53Q59oYTCSC26sXkA52oReNf26/+ZLrRncMmDXTd8G/0TE0 m3GQ06jf5rjJYMjRO5fLVDyjXiUhGa/C/lR3ZuFcd0vP2NIezDSiA309N6vwwSuj zS4RX76/JrIizcEL3LniScSuvDP9ZyqZBdGHaM0J+TjXAN512OuWd6OhloN3Uy6I zm4qyFMsUOqVTzGRYFhac8o0kCMXqMAUetr+MJVZJYV+zv0LjIh9cn83pFtEbExZ oprGwlIojY9xAg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:59 2026 by rpki-client