This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json) Hash identifier: J5cY8/WbsG1UOgFCtHMS6vMbJgrphYBWpm6SvNmI8OU= Subject key identifier: D1:8C:15:67:E8:E5:92:EF:D9:DE:AD:44:4C:24:E7:F2:8A:E7:38:C8 Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64 Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364 Certificate serial: 019C438FAA741C7843E60DCAA7677EBE819A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft Manifest number: 06DC Signing time: Mon 09 Feb 2026 18:00:14 +0000 Manifest this update: Mon 09 Feb 2026 18:00:14 +0000 Manifest next update: Tue 10 Feb 2026 18:00:14 +0000 Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: fSWeCzTTmBJuQSX/kbmjbyVQeoMBWy+273JbImhR5Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:aa:74:1c:78:43:e6:0d:ca:a7:67:7e:be:81:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364 Validity Not Before: Feb 9 18:00:14 2026 GMT Not After : Feb 10 18:00:14 2026 GMT Subject: CN=d18c1567e8e592efd9dead444c24e7f28ae738c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:12:74:9b:4e:c1:ee:45:ff:9e:03:c4:0f: 30:a7:70:8a:e6:9f:d3:6c:40:0a:c9:6b:38:86:2a: f6:1e:54:0a:8a:11:93:e1:a7:8e:3f:42:4e:75:21: d7:21:9c:3d:f1:40:0c:e3:75:88:49:eb:ca:cb:3f: 8d:8f:3a:7b:40:c0:a2:f7:40:31:96:a9:eb:fc:83: 45:8c:df:dc:69:ef:ea:b7:df:df:60:68:50:08:c6: 5d:ae:e8:08:36:b9:5e:c5:68:05:d8:76:5c:9f:ac: 00:ac:b8:40:6d:ba:b6:9a:26:89:af:f6:76:b1:af: f2:ad:ef:0c:f5:d7:30:70:60:a8:15:5d:14:d9:db: 6a:e0:f8:37:91:38:ca:f2:dc:2b:7d:5d:13:b2:e2: b1:4f:ca:a5:5a:5f:0c:f1:84:61:52:cf:c3:56:69: ab:b7:e2:8e:1c:69:93:13:9f:8a:9d:68:33:88:79: a8:39:f5:c1:20:e2:30:3d:16:cd:c2:04:29:e5:11: cc:61:64:98:c8:bf:af:b1:b9:00:de:3a:86:14:22: 66:62:5f:92:6e:49:96:dc:80:16:d7:ce:35:fb:bb: ae:be:59:b6:21:bd:7e:22:e7:fe:31:27:99:2b:9c: fe:0c:b8:28:8c:06:bd:29:43:df:ee:bd:18:f9:5a: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8C:15:67:E8:E5:92:EF:D9:DE:AD:44:4C:24:E7:F2:8A:E7:38:C8 X509v3 Authority Key Identifier: keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:39:93:8d:1b:fa:1e:08:ce:68:f6:56:a1:02:83:c6:cf:ee: 9e:d3:f8:cf:50:49:58:b2:d2:db:2e:05:9e:bf:9e:a0:3d:77: 69:22:45:ab:6d:28:90:7c:6a:54:f5:5c:fb:62:7f:98:e3:01: ab:e6:e9:c0:18:f8:8d:75:f1:d1:22:9a:91:b7:f4:20:fa:e9: 8f:62:99:46:8d:11:54:50:9e:d3:56:b1:8d:fd:f7:89:ef:01: 93:da:d9:00:a7:1d:4b:0a:0b:37:3c:43:63:da:b5:c8:84:dc: f3:a0:e2:03:6a:a2:dc:d5:04:49:31:5b:ba:01:30:ff:41:52: c3:c8:40:89:9a:fa:2e:68:3a:e8:74:4f:99:8c:4d:fa:31:5a: 82:eb:2f:4d:dd:54:23:d7:f8:7e:2a:52:f7:05:00:40:85:14: c7:bc:b6:3f:08:83:09:58:98:5f:3d:f2:39:5d:e9:c8:08:af: 15:15:46:a0:a5:08:52:63:47:41:da:90:c7:9c:b5:2a:dd:c4: 6f:6b:ba:94:25:5d:d3:ea:ce:f7:47:9b:ca:28:96:49:e3:ab: c5:ca:fc:e3:22:7c:cc:0d:65:a7:14:89:db:8b:ca:80:df:97: 4c:d1:59:e1:20:1a:7b:d4:c1:34:f6:e1:72:d7:dc:6e:da:72: 66:76:61:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6p0HHhD5g3Kp2d+voGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYjc1N2JmNTc0NmYyNmEwN2M5MjA4NzAxYjBkNTRiNjli YzMzNjQwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD EyhkMThjMTU2N2U4ZTU5MmVmZDlkZWFkNDQ0YzI0ZTdmMjhhZTczOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8MSdJtOwe5F/54DxA8wp3CK5p/T bEAKyWs4hir2HlQKihGT4aeOP0JOdSHXIZw98UAM43WISevKyz+Njzp7QMCi90Ax lqnr/INFjN/cae/qt9/fYGhQCMZdrugINrlexWgF2HZcn6wArLhAbbq2miaJr/Z2 sa/yre8M9dcwcGCoFV0U2dtq4Pg3kTjK8twrfV0TsuKxT8qlWl8M8YRhUs/DVmmr t+KOHGmTE5+KnWgziHmoOfXBIOIwPRbNwgQp5RHMYWSYyL+vsbkA3jqGFCJmYl+S bkmW3IAW1841+7uuvlm2Ib1+Iuf+MSeZK5z+DLgojAa9KUPf7r0Y+Vqg3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGMFWfo5ZLv2d6tREwk5/KK5zjIMB8GA1UdIwQY MBaAFF23V79XRvJqB8kghwGw1UtpvDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMt M2FiNTJiM2JjYzNiLzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMtM2FiNTJiM2JjYzNi LzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzmTjRv6 HgjOaPZWoQKDxs/untP4z1BJWLLS2y4Fnr+eoD13aSJFq20okHxqVPVc+2J/mOMB q+bpwBj4jXXx0SKakbf0IPrpj2KZRo0RVFCe01axjf33ie8Bk9rZAKcdSwoLNzxD Y9q1yITc86DiA2qi3NUESTFbugEw/0FSw8hAiZr6Lmg66HRPmYxN+jFagusvTd1U I9f4fipS9wUAQIUUx7y2PwiDCViYXz3yOV3pyAivFRVGoKUIUmNHQdqQx5y1Kt3E b2u6lCVd0+rO90ebyiiWSeOrxcr84yJ8zA1lpxSJ24vKgN+XTNFZ4SAae9TBNPbh ctfcbtpyZnZhZA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:42 2026 by rpki-client