This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json) Hash identifier: p+pbQlpmSjN2B+3Gh22CmeB2Wm2R7NxYOKo8Ch+zYTg= Subject key identifier: 3A:07:D5:05:80:B2:15:02:0B:70:C9:3A:71:73:BA:50:B4:7F:43:D6 Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d Certificate serial: 019C41D8376A826ACB4E53A317FD7FDD143A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft Manifest number: 09E5 Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: JwqELZdGxKBcjuAhTaAuY7UV75AM6z9g0gA0RlQYwQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:37:6a:82:6a:cb:4e:53:a3:17:fd:7f:dd:14:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=3a07d50580b215020b70c93a7173ba50b47f43d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:4b:7d:6e:13:52:12:d6:c7:83:e3:0f:5d: 02:27:02:2b:fa:40:7b:98:56:92:e5:78:5d:d5:c3: b1:46:18:ef:76:0e:86:3f:94:a5:5c:20:59:98:17: f1:32:78:8d:0c:2c:62:e1:8e:91:01:27:64:48:d1: 54:35:f7:c3:dd:0f:20:1f:96:0d:b8:22:fc:b6:2b: 01:e8:bd:98:ba:20:e1:71:65:96:f6:b8:67:b9:8f: a6:85:0e:36:9f:39:cd:4c:4e:d6:fc:9d:7f:84:9e: c5:c2:0a:d1:f6:bc:6a:fc:5d:5f:b7:4b:80:5b:33: 53:85:14:8c:9f:da:5d:7f:09:a8:db:d1:09:15:52: c0:f1:6a:f3:6b:3f:69:9f:15:28:5b:a4:d6:e7:4c: 78:c3:41:b2:be:c2:41:2b:c5:0c:17:07:11:33:ca: 7b:dd:41:34:b6:2f:ac:a6:94:b1:5b:69:d9:43:b2: 40:b1:6a:4c:4a:e0:61:57:de:f2:61:59:f4:3f:38: 89:ab:77:fe:72:2d:a3:ac:f6:32:41:59:82:bb:cd: ba:af:6b:da:5e:af:20:71:5c:f4:f6:22:c2:0d:0e: 51:d3:05:df:45:2c:74:c2:b2:f3:66:72:78:22:65: 1a:e7:32:aa:e2:22:90:7e:c9:d4:7a:f5:7c:f8:4a: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:07:D5:05:80:B2:15:02:0B:70:C9:3A:71:73:BA:50:B4:7F:43:D6 X509v3 Authority Key Identifier: keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:28:c6:e2:bf:e7:35:3c:9f:64:e3:c2:2b:49:e1:18:23:1c: b4:d6:82:67:2c:81:6b:e0:b3:6f:0c:8f:bc:02:b8:60:61:3c: 7a:c8:47:50:81:4f:05:de:53:ef:fe:67:cd:08:8f:d4:12:6e: f7:a8:4f:2e:61:98:d8:f4:2e:f5:99:fb:63:c4:80:9c:9a:74: 89:23:9a:3b:63:eb:e7:b9:97:83:52:f0:4f:40:f8:02:fb:d2: 2b:9e:c7:d3:86:0b:9f:80:3f:f8:bb:0c:7e:bd:4a:e0:3f:f3: 54:20:9b:d5:0d:a2:8f:fc:ce:e2:ee:a3:6e:ec:29:b3:10:71: 45:83:e0:09:88:50:d8:0f:3d:27:3c:1a:74:08:65:25:a0:a4: 77:40:25:f3:85:59:de:7c:e0:81:a1:07:0d:92:c7:54:c2:65: df:fd:d3:55:5b:81:6e:7e:77:46:12:fa:66:14:59:f4:d3:2b: e1:5a:45:71:d0:65:7b:e9:d2:01:8c:c6:23:ba:88:1c:ed:6a: 5e:bc:dc:55:c9:4e:e3:2f:22:6a:28:ba:14:00:76:f3:3a:df: e5:62:a0:c0:c9:60:4f:55:3c:c1:9a:dd:73:21:fc:67:48:63: 20:42:7a:29:47:ab:9d:76:01:c8:1e:04:79:88:7a:ba:cc:a5: e6:d1:75:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DdqgmrLTlOjF/1/3RQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjhkZTU1Mjg1MGFjZTg1ZmM4YzBlMTY4NTJjYzczZGYx MDE2OWQwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD EygzYTA3ZDUwNTgwYjIxNTAyMGI3MGM5M2E3MTczYmE1MGI0N2Y0M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4VLfW4TUhLWx4PjD10CJwIr+kB7 mFaS5Xhd1cOxRhjvdg6GP5SlXCBZmBfxMniNDCxi4Y6RASdkSNFUNffD3Q8gH5YN uCL8tisB6L2YuiDhcWWW9rhnuY+mhQ42nznNTE7W/J1/hJ7FwgrR9rxq/F1ft0uA WzNThRSMn9pdfwmo29EJFVLA8Wrzaz9pnxUoW6TW50x4w0GyvsJBK8UMFwcRM8p7 3UE0ti+sppSxW2nZQ7JAsWpMSuBhV97yYVn0PziJq3f+ci2jrPYyQVmCu826r2va Xq8gcVz09iLCDQ5R0wXfRSx0wrLzZnJ4ImUa5zKq4iKQfsnUevV8+Er4mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoH1QWAshUCC3DJOnFzulC0f0PWMB8GA1UdIwQY MBaAFMa43lUoUKzoX8jA4WhSzHPfEBadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMt ZDI0MGQzNjExMDU4LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMtZDI0MGQzNjExMDU4 LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCjG4r/n NTyfZOPCK0nhGCMctNaCZyyBa+CzbwyPvAK4YGE8eshHUIFPBd5T7/5nzQiP1BJu 96hPLmGY2PQu9Zn7Y8SAnJp0iSOaO2Pr57mXg1LwT0D4AvvSK57H04YLn4A/+LsM fr1K4D/zVCCb1Q2ij/zO4u6jbuwpsxBxRYPgCYhQ2A89JzwadAhlJaCkd0Al84VZ 3nzggaEHDZLHVMJl3/3TVVuBbn53RhL6ZhRZ9NMr4VpFcdBle+nSAYzGI7qIHO1q XrzcVclO4y8iaii6FAB28zrf5WKgwMlgT1U8wZrdcyH8Z0hjIEJ6KUernXYByB4E eYh6usyl5tF14A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:47 2026 by rpki-client