This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json) Hash identifier: nlgXADkvu+l0IVOTFh7HZyH0PYqhRvqXWJ0Mf0nveSI= Subject key identifier: EA:52:AE:78:E0:1E:B3:34:6F:D5:D7:76:5A:F3:85:66:26:3F:12:CA Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Certificate serial: 019C4390CF8E4766381B35A19209093F08E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft Manifest number: 07DD Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=) 2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: +W7u5yScb30L7QJq1JEhIMgmG54UE8vLEJDx/eZZtQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cf:8e:47:66:38:1b:35:a1:92:09:09:3f:08:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=ea52ae78e01eb3346fd5d7765af38566263f12ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:91:eb:08:5f:88:b0:2f:6b:27:22:7c:ed: bf:f6:c1:2d:dd:4a:f2:62:fe:a1:4f:0c:6f:45:4e: ee:46:e7:15:7f:87:c0:86:ab:11:6b:b2:24:72:c2: d3:fd:f4:a0:be:cc:83:3c:8a:29:25:96:3c:74:d9: 41:cb:6f:4c:10:92:28:3b:db:0d:8e:40:be:89:8e: 1d:64:54:e7:64:ec:46:32:80:25:6e:ec:ca:65:b3: 86:f4:50:0f:c3:a6:88:3f:55:e9:8a:04:84:9e:32: 6d:09:d5:f8:ae:1c:c1:fa:93:9a:36:32:d9:00:05: e6:11:67:98:a0:ac:81:31:dd:ec:cc:f7:b6:1c:e8: e5:d0:bc:54:41:c1:2a:d7:f8:bc:37:89:63:de:b4: 76:d0:e5:ce:b5:b0:15:c6:3f:14:09:a4:df:23:27: e4:41:fa:c3:05:91:00:5b:e0:7a:f0:80:72:70:86: a0:de:81:90:55:ee:dc:68:54:3c:29:fe:86:53:dd: 3f:6b:eb:7c:1c:da:18:77:95:10:36:67:a6:ce:58: 67:33:bd:18:bc:8c:ea:65:24:ee:4c:ae:78:c9:a2: 49:ed:4e:c5:4a:b0:9a:d9:8e:6f:de:6f:7b:02:4f: ab:46:5f:dc:d7:58:df:cd:29:b5:9f:1c:5e:94:c6: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:AE:78:E0:1E:B3:34:6F:D5:D7:76:5A:F3:85:66:26:3F:12:CA X509v3 Authority Key Identifier: keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bd:e4:a7:3d:4a:4d:da:40:3a:52:de:8e:68:0e:23:b7:57: 4e:7a:b7:6d:fc:6b:17:9e:8b:50:cc:e6:7f:08:87:08:9e:1c: c9:54:54:2c:3d:ee:b3:10:28:c0:a8:f2:5a:04:2c:f1:71:f9: cb:fb:d1:59:7c:26:ab:ea:6c:5f:fb:28:91:48:e8:bb:1e:9f: 4d:b3:d3:55:5a:f9:0f:63:c1:2b:26:cd:5b:5b:39:d9:d5:d5: 4c:01:c1:45:53:e5:9f:4f:9b:fa:fb:3b:b7:a6:f3:57:18:30: 1c:cc:15:f6:3d:d3:d5:6c:80:40:c5:03:c9:bf:0c:54:0f:cb: ac:5c:14:95:de:33:fa:63:43:d9:69:ac:2f:94:61:80:9f:81: 19:50:53:a2:d7:4e:00:80:f9:59:fb:a4:29:e7:2c:3a:07:0b: 7a:29:cf:1f:ff:0a:92:0e:0d:a0:7b:58:12:09:0e:67:cc:f1: 69:23:63:78:82:46:f8:fe:d2:95:f2:93:57:a4:29:a8:2f:1f: 9d:4f:76:ad:34:3a:11:40:68:33:e3:a7:2e:ff:e6:42:7d:30: cd:47:fe:6c:9c:9c:18:5b:e2:96:b5:f5:69:5b:dc:dd:4d:94: 4c:b9:4a:51:83:58:f9:ca:79:df:e8:44:e9:dc:93:ec:a9:17: 4d:36:71:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkM+OR2Y4GzWhkgkJPwjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk YjJlMDcwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD EyhlYTUyYWU3OGUwMWViMzM0NmZkNWQ3NzY1YWYzODU2NjI2M2YxMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuKR6whfiLAvaycifO2/9sEt3Ury Yv6hTwxvRU7uRucVf4fAhqsRa7IkcsLT/fSgvsyDPIopJZY8dNlBy29MEJIoO9sN jkC+iY4dZFTnZOxGMoAlbuzKZbOG9FAPw6aIP1XpigSEnjJtCdX4rhzB+pOaNjLZ AAXmEWeYoKyBMd3szPe2HOjl0LxUQcEq1/i8N4lj3rR20OXOtbAVxj8UCaTfIyfk QfrDBZEAW+B68IBycIag3oGQVe7caFQ8Kf6GU90/a+t8HNoYd5UQNmemzlhnM70Y vIzqZSTuTK54yaJJ7U7FSrCa2Y5v3m97Ak+rRl/c11jfzSm1nxxelMZsqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpSrnjgHrM0b9XXdlrzhWYmPxLKMB8GA1UdIwQY MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt YTg5YTcwMjhkNDI5LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5 LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq73kpz1K TdpAOlLejmgOI7dXTnq3bfxrF56LUMzmfwiHCJ4cyVRULD3usxAowKjyWgQs8XH5 y/vRWXwmq+psX/sokUjoux6fTbPTVVr5D2PBKybNW1s52dXVTAHBRVPln0+b+vs7 t6bzVxgwHMwV9j3T1WyAQMUDyb8MVA/LrFwUld4z+mND2WmsL5RhgJ+BGVBTotdO AID5WfukKecsOgcLeinPH/8Kkg4NoHtYEgkOZ8zxaSNjeIJG+P7SlfKTV6QpqC8f nU92rTQ6EUBoM+OnLv/mQn0wzUf+bJycGFvilrX1aVvc3U2UTLlKUYNY+cp53+hE 6dyT7KkXTTZxtQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:29 2026 by rpki-client