This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json) Hash identifier: wtB6WS4ib2CK80SRGvEXw5jZqrjbNfNFuqWpJM529GQ= Subject key identifier: 98:E4:F2:08:63:88:FB:2B:B9:24:67:06:FC:7F:88:D2:6C:68:1F:1C Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850 Certificate serial: 019C42B43F5476F1F4DBC1B434A08DE12241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft Manifest number: 0E1A Signing time: Mon 09 Feb 2026 14:00:34 +0000 Manifest this update: Mon 09 Feb 2026 14:00:34 +0000 Manifest next update: Tue 10 Feb 2026 14:00:34 +0000 Files and hashes: 1: HzQHYcGWjDxOlibllve70j6m1AA.roa (hash: AWc0lslL6fgHBBQI/LtfFNNcKth/VDPg2WoOoDl9sjM=) 2: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: VFeTksTHPcHhkrglMqNL9zkr2SkSzGs1L1SEBVjjeqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3f:54:76:f1:f4:db:c1:b4:34:a0:8d:e1:22:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850 Validity Not Before: Feb 9 14:00:34 2026 GMT Not After : Feb 10 14:00:34 2026 GMT Subject: CN=98e4f2086388fb2bb9246706fc7f88d26c681f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:9a:36:05:8a:69:55:b4:b6:79:8b:ad:9d: 41:10:fa:ed:1a:7f:41:78:02:59:38:bf:e8:1d:11: d6:3e:ef:d6:44:9a:f5:c1:1d:f8:f6:dc:b6:b3:0d: 57:82:e1:0e:ba:43:14:d1:49:a8:11:db:1d:84:98: 51:b6:59:86:c7:3c:ff:05:8e:b5:36:7c:9d:a2:42: 37:db:2f:a6:42:c7:a5:03:94:7d:a8:38:02:e4:4c: ad:5d:51:46:36:99:b0:f2:52:f8:7c:4f:9e:0f:36: fe:e1:a9:ef:d7:16:06:04:58:14:41:62:d9:24:b6: ad:b1:25:6f:64:d7:d4:2a:da:b1:83:bb:d2:aa:41: a4:aa:46:80:85:45:c1:80:7e:46:28:9a:4c:84:c3: e4:c4:6c:cd:27:4a:c6:fd:7c:83:73:4d:69:86:f3: c0:ad:b0:26:c7:13:ae:c5:43:70:16:27:16:c9:2b: f0:d5:21:d1:87:f5:16:a3:ea:7d:18:2b:c5:15:d0: 8d:bc:a8:d2:57:46:3c:ab:67:5f:2e:06:54:2e:c3: 4b:6d:4f:67:9c:f1:ca:d4:81:e7:c8:8a:bf:62:8b: 12:f5:b1:ba:e5:01:47:23:01:59:59:51:64:9e:00: 83:f6:02:3c:55:d3:74:12:9f:57:4d:47:ab:55:33: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E4:F2:08:63:88:FB:2B:B9:24:67:06:FC:7F:88:D2:6C:68:1F:1C X509v3 Authority Key Identifier: keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:37:8c:ca:39:cb:28:59:ff:f4:a5:90:a4:dd:14:0a:6f:87: 4f:78:ef:4f:6b:10:6a:70:6d:39:c4:c7:fc:5e:2d:0c:5f:53: ef:1b:a2:d7:76:38:9b:85:1c:89:fd:66:34:e3:c5:a0:fe:1d: 3f:74:7e:2e:49:52:41:73:75:1a:ef:e7:98:e7:29:ae:ef:8b: 6b:12:05:81:31:75:c7:48:a4:b8:83:18:66:6a:f7:00:46:12: b9:0f:27:47:7b:4e:3c:28:68:f7:f4:37:50:ce:f0:38:7e:f0: f6:20:f8:99:99:6a:4f:0f:d3:e8:b9:02:22:21:5a:11:57:7e: 13:0c:94:34:28:b1:86:3d:d4:ce:a3:59:14:b6:8a:82:05:da: 88:1d:9a:37:c4:45:44:ba:63:61:a7:4a:ee:a8:ad:4b:a5:ec: 06:70:4a:50:17:32:0a:63:20:59:ce:50:e7:f4:0b:a1:66:86: 65:d9:f4:c8:9b:c4:08:45:1a:27:5b:ca:9b:be:e3:41:df:c5: 88:8a:ca:17:24:c4:b1:b5:bd:f2:fb:1f:f1:fa:ab:34:2e:0c: 61:bf:34:32:e8:a8:57:77:0e:2d:24:25:ef:f7:8f:17:c9:9d: 4a:4c:1f:92:c1:27:d5:9b:b6:69:b9:da:e5:0c:bf:0a:fa:7e: 6c:62:e4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtD9UdvH028G0NKCN4SJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWRkNmVjNGEyZTFmMzc2Yzg1NWM1ODMxMjE5NWEwMDVj ZGI4NTAwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD Eyg5OGU0ZjIwODYzODhmYjJiYjkyNDY3MDZmYzdmODhkMjZjNjgxZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLCaNgWKaVW0tnmLrZ1BEPrtGn9B eAJZOL/oHRHWPu/WRJr1wR349ty2sw1XguEOukMU0UmoEdsdhJhRtlmGxzz/BY61 NnydokI32y+mQselA5R9qDgC5EytXVFGNpmw8lL4fE+eDzb+4anv1xYGBFgUQWLZ JLatsSVvZNfUKtqxg7vSqkGkqkaAhUXBgH5GKJpMhMPkxGzNJ0rG/XyDc01phvPA rbAmxxOuxUNwFicWySvw1SHRh/UWo+p9GCvFFdCNvKjSV0Y8q2dfLgZULsNLbU9n nPHK1IHnyIq/YosS9bG65QFHIwFZWVFkngCD9gI8VdN0Ep9XTUerVTM/XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjk8ghjiPsruSRnBvx/iNJsaB8cMB8GA1UdIwQY MBaAFFwd1uxKLh83bIVcWDEhlaAFzbhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYt Mzk2NzFlMGI2MjY2LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYtMzk2NzFlMGI2MjY2 LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjeMyjnL KFn/9KWQpN0UCm+HT3jvT2sQanBtOcTH/F4tDF9T7xui13Y4m4Ucif1mNOPFoP4d P3R+LklSQXN1Gu/nmOcpru+LaxIFgTF1x0ikuIMYZmr3AEYSuQ8nR3tOPCho9/Q3 UM7wOH7w9iD4mZlqTw/T6LkCIiFaEVd+EwyUNCixhj3UzqNZFLaKggXaiB2aN8RF RLpjYadK7qitS6XsBnBKUBcyCmMgWc5Q5/QLoWaGZdn0yJvECEUaJ1vKm77jQd/F iIrKFyTEsbW98vsf8fqrNC4MYb80MuioV3cOLSQl7/ePF8mdSkwfksEn1Zu2abna 5Qy/Cvp+bGLkcg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:20 2026 by rpki-client