This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json) Hash identifier: V8TIq8yRsu7BTJfw+AjiuL2ai27pYryzflrquKp16uo= Subject key identifier: 1D:CF:60:0B:DF:8B:52:31:EB:6E:68:30:48:BC:D5:2A:0A:7B:D9:8E Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64 Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64 Certificate serial: 019C4246A8CFDF134445C4FF442210616B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft Manifest number: 03D8 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: CQwWSYHinzdpj5a5anR9lb0ud5Uqzq7LJCM2d0i975s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a8:cf:df:13:44:45:c4:ff:44:22:10:61:6b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=1dcf600bdf8b5231eb6e683048bcd52a0a7bd98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:9a:a4:b4:f7:15:a2:44:7a:82:52:01:55: 99:7c:4d:89:cc:67:30:2b:d2:7a:05:2d:bd:16:bf: 61:05:a0:54:c8:00:35:40:08:f2:50:f5:f7:10:82: c4:40:e7:11:56:2b:66:9e:32:ef:af:a2:bb:4b:b2: ff:7c:12:cb:18:47:ea:12:db:5a:1e:2d:9e:ee:e0: 65:f1:e1:2d:74:5c:50:24:5c:fc:75:db:00:f1:b1: 8e:ac:35:ce:d1:52:58:e2:ca:05:51:d7:66:6a:29: 7f:fd:9c:cd:90:4c:33:56:87:a2:78:d0:96:7c:bc: dd:11:48:bc:42:76:09:cd:6b:7b:73:c2:34:ad:1e: 20:91:bb:bf:b0:f3:b5:5c:38:b2:4e:8e:32:1a:27: 4c:f1:3f:28:fc:5c:46:9d:b0:01:97:36:7a:c2:d2: 5f:4c:0b:39:25:87:b8:6f:39:d4:09:54:65:e4:e1: b1:44:d1:9b:ac:25:99:64:ef:78:fe:06:53:42:34: 0d:dd:1b:ee:d2:6d:17:c6:9d:2d:b4:ec:1c:76:50: 25:ec:dd:15:e2:bd:dc:09:4f:84:fa:03:f0:6d:63: 2e:76:c3:c2:cc:80:e4:80:ec:d6:ea:b0:00:a7:34: f7:d1:14:0e:40:6c:0b:1f:41:51:ce:ad:28:9e:ea: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CF:60:0B:DF:8B:52:31:EB:6E:68:30:48:BC:D5:2A:0A:7B:D9:8E X509v3 Authority Key Identifier: keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:41:e4:0a:5a:9b:bb:f7:a0:71:55:78:fb:0d:38:3c:31:35: ac:77:96:0a:e4:0d:0c:57:0f:08:fc:64:a4:69:83:d0:e4:50: 2b:81:69:a4:7d:41:ff:7e:27:d3:3d:70:b0:89:1a:b6:83:17: 50:af:ea:02:d9:f4:46:c3:52:51:48:6e:59:5f:b1:c0:e6:e3: 4e:fa:55:b8:cf:7e:25:d1:02:5f:83:7b:38:9a:77:8a:e0:d1: de:cd:54:e1:2c:db:29:b1:b4:19:e4:bb:07:02:15:da:a8:18: c2:f6:fa:8e:5d:97:a0:3d:5f:5b:24:24:d4:52:c0:4f:14:76: 2e:c3:a6:74:9e:43:cf:03:36:91:5b:a7:31:d9:6f:5f:63:57: e6:4e:db:1e:c4:24:aa:ee:0d:b6:a4:cf:46:fe:79:c5:0c:33: 30:b4:64:5b:3f:15:fe:3d:51:93:f3:97:b0:f2:e1:d6:55:c4: 20:35:3d:ae:fb:55:36:64:fd:b7:bd:26:a3:33:70:6b:40:e1: 5f:1d:ed:32:8e:eb:66:6a:12:9d:0d:cd:92:2e:1d:eb:95:f2: c2:fe:8c:b1:34:52:6f:34:34:39:f0:16:6b:18:85:2c:e7:db: 0f:5f:1b:35:ff:e8:63:a9:ed:91:9c:2e:05:81:a4:1d:0e:6f: bf:d8:b3:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqjP3xNERcT/RCIQYWsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTcxNzQ1MDE4N2ZmZDM4ZWY0MWI3MWFiYzAxZGNlZDhi YmJlNjQwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD EygxZGNmNjAwYmRmOGI1MjMxZWI2ZTY4MzA0OGJjZDUyYTBhN2JkOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji2apLT3FaJEeoJSAVWZfE2JzGcw K9J6BS29Fr9hBaBUyAA1QAjyUPX3EILEQOcRVitmnjLvr6K7S7L/fBLLGEfqEtta Hi2e7uBl8eEtdFxQJFz8ddsA8bGOrDXO0VJY4soFUddmail//ZzNkEwzVoeieNCW fLzdEUi8QnYJzWt7c8I0rR4gkbu/sPO1XDiyTo4yGidM8T8o/FxGnbABlzZ6wtJf TAs5JYe4bznUCVRl5OGxRNGbrCWZZO94/gZTQjQN3Rvu0m0Xxp0ttOwcdlAl7N0V 4r3cCU+E+gPwbWMudsPCzIDkgOzW6rAApzT30RQOQGwLH0FRzq0onuqADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3PYAvfi1Ix625oMEi81SoKe9mOMB8GA1UdIwQY MBaAFMWXF0UBh//TjvQbcavAHc7Yu75kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQt YTgwMmQ5ZTZiYzE2LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQtYTgwMmQ5ZTZiYzE2 LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUHkClqb u/egcVV4+w04PDE1rHeWCuQNDFcPCPxkpGmD0ORQK4FppH1B/34n0z1wsIkatoMX UK/qAtn0RsNSUUhuWV+xwObjTvpVuM9+JdECX4N7OJp3iuDR3s1U4SzbKbG0GeS7 BwIV2qgYwvb6jl2XoD1fWyQk1FLATxR2LsOmdJ5DzwM2kVunMdlvX2NX5k7bHsQk qu4NtqTPRv55xQwzMLRkWz8V/j1Rk/OXsPLh1lXEIDU9rvtVNmT9t70mozNwa0Dh Xx3tMo7rZmoSnQ3Nki4d65Xywv6MsTRSbzQ0OfAWaxiFLOfbD18bNf/oY6ntkZwu BYGkHQ5vv9izXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:51 2026 by rpki-client