This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json) Hash identifier: PykIYEWGXhpvvZcvcdEqF1etclQksJxj+DJzypC+XfQ= Subject key identifier: 58:6B:64:6C:3F:1D:F9:C5:75:8D:AE:9E:46:35:7A:C0:79:FA:01:92 Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Certificate serial: 019C4322DA1348902D7C27ABA738B32508FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft Manifest number: 0D73 Signing time: Mon 09 Feb 2026 16:01:23 +0000 Manifest this update: Mon 09 Feb 2026 16:01:23 +0000 Manifest next update: Tue 10 Feb 2026 16:01:23 +0000 Files and hashes: 1: wj36KuC4KkbAWGdbhxPcToGipcw.roa (hash: /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=) 2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: iWWcnJ9/DmWNTirKPTJ9q37Z3SGPNU7kuRJbJnz6b9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:da:13:48:90:2d:7c:27:ab:a7:38:b3:25:08:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Validity Not Before: Feb 9 16:01:23 2026 GMT Not After : Feb 10 16:01:23 2026 GMT Subject: CN=586b646c3f1df9c5758dae9e46357ac079fa0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:16:94:8b:a8:e0:7e:ce:54:80:63:91:e4: 38:da:f1:70:89:72:ab:60:c1:a2:c4:ad:d3:c8:ae: 77:fb:6a:c8:31:85:d9:d6:fc:85:54:ac:93:a6:9d: 9f:fb:57:ef:a4:84:04:24:c8:27:f5:0d:43:fb:5d: b8:47:cb:9d:05:07:e7:5e:ff:53:7e:5b:b6:c9:87: 8c:7b:c8:64:c4:d9:42:98:13:a7:4c:b4:67:3a:87: 0b:45:ea:3e:7e:5d:98:76:f5:e4:3e:88:3b:f7:3a: 6c:55:52:d9:13:4a:78:cd:e7:3e:5c:90:55:71:86: 5a:ec:61:5e:5c:62:61:30:d1:a5:1c:3b:72:4b:ac: 99:3e:59:89:85:8b:1f:11:1b:25:36:e6:5c:2a:ee: 63:29:25:51:76:97:16:bd:70:2c:8e:c3:c0:7f:21: d3:e6:8e:ac:07:51:20:67:2b:8d:44:2f:d5:20:28: 8d:db:ea:47:b3:6b:02:01:64:36:d5:aa:7b:ac:b5: 35:4a:22:b4:ca:9f:2d:1b:96:10:4e:af:49:9e:ff: 2c:6e:b8:25:cc:17:bc:44:98:fd:b5:0c:35:e4:c8: 68:3b:29:2f:9a:3b:84:ac:87:c9:c4:67:11:0a:21: 86:cb:ea:71:1a:44:78:dc:63:7f:21:f5:78:90:28: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:64:6C:3F:1D:F9:C5:75:8D:AE:9E:46:35:7A:C0:79:FA:01:92 X509v3 Authority Key Identifier: keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:08:22:95:22:b1:43:6d:82:72:a8:b4:93:f6:ba:20:c1:d3: 68:93:e0:07:ed:17:dc:ac:1d:2f:a0:bb:59:24:da:5c:2b:38: 73:9e:ab:43:bb:de:f4:aa:0e:a5:5a:c7:bd:55:67:b6:48:5f: 57:5e:3b:43:54:0e:ea:5b:4e:26:ae:42:76:a4:bf:73:21:ac: 64:33:8e:97:81:0d:b3:21:b4:9b:79:43:07:dd:a5:70:57:71: 16:67:81:3f:22:1f:ea:ce:65:0e:e7:be:fb:80:60:8a:68:30: 8d:c6:08:14:4b:3a:6d:9e:c3:03:8f:ab:97:81:df:7d:e6:43: 9a:64:79:a2:b8:67:a1:3b:e7:2a:34:6a:23:47:de:b6:78:a5: f6:27:f4:e9:cd:a2:f8:4a:0a:4a:5f:26:3c:d0:0a:78:e0:2f: 6e:ac:d2:32:7a:9f:81:54:b2:7f:ef:32:8b:29:b3:5d:37:59: c5:e7:6e:bf:71:2d:ec:2f:d4:4a:e9:f1:cf:47:94:d4:18:3e: af:43:4c:f1:61:1f:e4:fc:32:b8:d1:49:83:0e:f5:da:9e:65: ad:50:2f:c0:49:74:08:ae:8a:21:29:5a:32:cd:0c:0d:12:26: 5f:ca:26:ac:cd:ef:a2:15:f0:85:39:5f:21:25:5e:46:97:7c: 50:8f:7d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItoTSJAtfCerpzizJQj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3 MDZmODQwHhcNMjYwMjA5MTYwMTIzWhcNMjYwMjEwMTYwMTIzWjAzMTEwLwYDVQQD Eyg1ODZiNjQ2YzNmMWRmOWM1NzU4ZGFlOWU0NjM1N2FjMDc5ZmEwMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxIWlIuo4H7OVIBjkeQ42vFwiXKr YMGixK3TyK53+2rIMYXZ1vyFVKyTpp2f+1fvpIQEJMgn9Q1D+124R8udBQfnXv9T flu2yYeMe8hkxNlCmBOnTLRnOocLReo+fl2YdvXkPog79zpsVVLZE0p4zec+XJBV cYZa7GFeXGJhMNGlHDtyS6yZPlmJhYsfERslNuZcKu5jKSVRdpcWvXAsjsPAfyHT 5o6sB1EgZyuNRC/VICiN2+pHs2sCAWQ21ap7rLU1SiK0yp8tG5YQTq9Jnv8sbrgl zBe8RJj9tQw15MhoOykvmjuErIfJxGcRCiGGy+pxGkR43GN/IfV4kCj7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhrZGw/HfnFdY2unkY1esB5+gGSMB8GA1UdIwQY MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4 LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeggilSKx Q22Ccqi0k/a6IMHTaJPgB+0X3KwdL6C7WSTaXCs4c56rQ7ve9KoOpVrHvVVntkhf V147Q1QO6ltOJq5CdqS/cyGsZDOOl4ENsyG0m3lDB92lcFdxFmeBPyIf6s5lDue+ +4BgimgwjcYIFEs6bZ7DA4+rl4HffeZDmmR5orhnoTvnKjRqI0fetnil9if06c2i +EoKSl8mPNAKeOAvbqzSMnqfgVSyf+8yiymzXTdZxeduv3Et7C/USunxz0eU1Bg+ r0NM8WEf5PwyuNFJgw712p5lrVAvwEl0CK6KISlaMs0MDRImX8omrM3vohXwhTlf ISVeRpd8UI99Ww== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:29 2026 by rpki-client