This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json) Hash identifier: wvWwTqSE4VEuXtKjHRCwB45/wZ0BA/k5uypg23f+qGQ= Subject key identifier: 1C:69:EC:EF:33:88:6B:7C:5D:32:0F:B6:46:D1:C0:AF:2F:C6:E7:23 Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Certificate serial: 019C420F1F70260B0E419EB10740F920036D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft Manifest number: 0E3B Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: u3BC8uaLvmTDAwpHnhQUw1OBQRUT4C7JK+IDdYw5Lts=) 2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:1f:70:26:0b:0e:41:9e:b1:07:40:f9:20:03:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=1c69ecef33886b7c5d320fb646d1c0af2fc6e723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:e9:0a:67:f4:61:bc:f2:39:19:08:34:f0: ed:ba:d8:8b:1d:a7:ad:84:08:a0:36:3c:55:ac:73: 5f:d2:f5:24:6d:b9:5a:9d:d6:a2:c5:76:5d:c5:5d: db:34:b5:fc:84:d7:38:a5:9b:4e:52:69:25:72:ef: c8:da:08:e1:63:b7:65:fa:50:a6:e5:38:aa:8a:88: e4:27:58:21:51:5f:c6:16:71:fc:cf:96:2b:a6:f2: 4d:47:76:75:76:dc:e7:0e:6c:b2:79:cd:c3:41:c1: dc:58:08:e1:b3:7b:39:56:a9:6c:32:87:84:6f:42: fc:87:d6:5e:f9:5f:b5:2b:e6:a1:e2:39:02:01:96: 86:f8:4a:84:fc:75:2c:df:f7:0b:fe:69:17:0a:a2: b4:3c:9b:44:19:bd:84:ac:2b:04:df:c5:68:e6:4e: f7:35:8f:8f:7a:b5:a9:09:59:60:b0:5c:42:83:6e: 97:94:73:8c:11:63:49:19:67:7f:c2:9f:0e:04:08: b1:4f:9d:24:22:f6:bb:ce:84:c7:5a:1e:e0:fc:92: 54:6a:72:e7:17:71:74:e3:bb:09:8d:cc:bc:df:3a: bb:47:c0:5e:e9:b1:61:7a:f4:e4:32:de:a7:c7:83: 5b:91:8e:67:fe:51:44:b1:86:b2:f4:77:e0:3c:b3: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:69:EC:EF:33:88:6B:7C:5D:32:0F:B6:46:D1:C0:AF:2F:C6:E7:23 X509v3 Authority Key Identifier: keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:05:2f:6f:f0:a5:b8:fb:8b:9c:4b:c3:74:df:2c:33:40:52: f0:d0:60:00:19:ee:e3:dc:7f:37:40:15:6a:cd:01:1c:d7:e0: a4:3c:9e:d2:e0:0f:58:45:7e:a1:88:43:45:dc:7e:59:7c:0e: 09:09:01:92:d5:12:5b:83:0a:7b:71:b5:07:17:de:c3:99:ee: 61:40:2b:4f:97:c2:3f:bd:4b:ef:04:cb:07:2c:ab:8f:de:d4: 19:db:c8:1b:c3:15:c3:c4:2e:2b:29:1d:b4:f2:13:f8:99:eb: 9f:50:76:be:7f:09:2f:19:d7:33:09:07:37:6a:41:1d:56:d7: 68:59:bd:cf:e9:1a:cf:cf:f1:c8:91:0e:46:67:09:8b:50:a5: f4:79:84:91:20:c7:28:c0:17:3d:0a:29:3e:5e:67:f0:83:b3: 99:b9:d5:c9:c6:f3:fa:2d:e4:38:f0:c3:3a:a7:1d:0d:93:56: 2c:c7:7b:f6:96:30:a5:0b:6d:f4:2d:b1:58:fe:35:05:74:53: 54:d5:9a:21:7e:28:47:76:17:44:ea:5a:93:06:3c:ad:67:6d: d3:1d:9e:32:9a:a5:0d:13:ba:25:e9:c8:6c:8e:60:56:13:9f: 00:45:73:8f:6b:cf:60:ed:72:ad:e0:63:e7:91:b5:99:87:f0: 5c:f0:68:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDx9wJgsOQZ6xB0D5IANtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjgxM2UwOWM5OTU1ZTBiZGE3MDQxZjgzNzNhOGZjNWRh ZTZiOWQwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EygxYzY5ZWNlZjMzODg2YjdjNWQzMjBmYjY0NmQxYzBhZjJmYzZlNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR7pCmf0YbzyORkINPDtutiLHaet hAigNjxVrHNf0vUkbblandaixXZdxV3bNLX8hNc4pZtOUmklcu/I2gjhY7dl+lCm 5TiqiojkJ1ghUV/GFnH8z5YrpvJNR3Z1dtznDmyyec3DQcHcWAjhs3s5VqlsMoeE b0L8h9Ze+V+1K+ah4jkCAZaG+EqE/HUs3/cL/mkXCqK0PJtEGb2ErCsE38Vo5k73 NY+PerWpCVlgsFxCg26XlHOMEWNJGWd/wp8OBAixT50kIva7zoTHWh7g/JJUanLn F3F047sJjcy83zq7R8Be6bFhevTkMt6nx4NbkY5n/lFEsYay9HfgPLPL3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxp7O8ziGt8XTIPtkbRwK8vxucjMB8GA1UdIwQY MBaAFFy4E+CcmVXgvacEH4NzqPxdrmudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEt NmM2MmI5MzY2NzA1LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEtNmM2MmI5MzY2NzA1 LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgUvb/Cl uPuLnEvDdN8sM0BS8NBgABnu49x/N0AVas0BHNfgpDye0uAPWEV+oYhDRdx+WXwO CQkBktUSW4MKe3G1Bxfew5nuYUArT5fCP71L7wTLByyrj97UGdvIG8MVw8QuKykd tPIT+Jnrn1B2vn8JLxnXMwkHN2pBHVbXaFm9z+kaz8/xyJEORmcJi1Cl9HmEkSDH KMAXPQopPl5n8IOzmbnVycbz+i3kOPDDOqcdDZNWLMd79pYwpQtt9C2xWP41BXRT VNWaIX4oR3YXROpakwY8rWdt0x2eMpqlDRO6JenIbI5gVhOfAEVzj2vPYO1yreBj 55G1mYfwXPBoUw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:23 2026 by rpki-client