This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json) Hash identifier: i3wDNFl5e8KcE3VIsv7t1wBdyKfpRXF3heUIzHWTROg= Subject key identifier: 17:87:82:09:B8:BF:FB:BB:99:2B:FB:DB:9A:AB:44:C6:31:9A:C0:58 Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Certificate serial: 019C424686212AA058264E144CAC2FFA3F13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: sI4LDL57R7oHp-cdx3_PvsnIYBk.roa (hash: Fe+5Zy6aiIJQVmo5ZjeT3vWpAqyJDqiiDCdDg0tEFQ4=) 2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: vdhjoflPMbLWD+GhmVxQPygxUZk5jjubXa4vylcOi88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:86:21:2a:a0:58:26:4e:14:4c:ac:2f:fa:3f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=17878209b8bffbbb992bfbdb9aab44c6319ac058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:06:82:37:62:46:3b:72:9e:65:4a:b2:12: 7a:57:6e:c3:0e:d7:cc:da:26:4a:f4:04:84:04:79: 70:64:7f:36:89:ea:89:4a:d8:85:ab:97:1f:7f:c3: 13:3a:10:73:f0:15:d2:7f:85:24:a7:0e:78:47:d4: 9a:15:50:e1:be:84:6a:84:42:29:ab:81:90:3d:3c: 59:ce:0d:a5:08:da:9e:b3:71:5c:7b:32:0d:01:97: a7:85:11:27:a4:f5:90:0a:a7:41:51:dc:37:5f:cf: cb:76:16:6b:88:a6:88:0a:46:f4:43:b2:a1:04:41: 88:a8:37:93:b6:68:bb:0b:bf:ee:93:ca:da:31:03: 3a:58:78:96:73:20:d1:56:9b:91:e5:bd:fd:22:b8: 0e:46:9f:9e:57:89:92:63:fe:21:10:f7:55:4a:75: fc:ce:fa:c1:bc:85:84:7a:50:ec:35:dc:b0:17:d5: 04:66:43:ca:1f:8f:8a:ca:74:ea:b8:11:0a:99:cf: 42:ff:cc:3a:ec:d8:08:71:66:5e:92:c2:e1:a4:fd: 7a:45:7d:ab:de:1b:94:ff:62:95:4c:f7:f3:b5:9b: f8:78:96:2e:17:f5:32:89:02:fe:13:54:2f:c1:70: 72:95:cb:e0:61:47:c2:c7:20:1e:62:52:e0:d0:47: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:87:82:09:B8:BF:FB:BB:99:2B:FB:DB:9A:AB:44:C6:31:9A:C0:58 X509v3 Authority Key Identifier: keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a8:57:37:5c:8b:0b:05:57:3b:f3:25:85:7a:08:dd:1c:89: 91:e9:e5:b9:72:e1:c0:1e:11:39:94:52:05:88:b0:da:a2:9f: cb:63:a0:ea:22:96:de:f1:42:1d:9f:92:14:19:5f:d2:82:4e: d6:e0:44:18:6d:d4:2d:f7:b9:fe:1a:3c:41:d3:39:fa:5c:67: 7d:5a:4c:22:b1:d6:2c:37:8d:89:05:e5:c6:7f:e6:be:b2:07: de:d0:55:3a:30:7b:3e:88:60:51:2d:63:bf:57:22:51:34:76: d2:b7:3f:ec:18:5e:4e:e2:3f:50:bc:32:c3:44:53:ba:4f:df: ec:4a:12:c8:0f:8a:35:bc:47:fe:b8:21:af:33:ff:b8:7a:ee: 67:95:e7:75:0c:57:43:df:db:fd:c0:52:91:63:82:0e:ca:75: 99:86:48:18:1c:11:90:2d:53:37:2e:3a:f1:20:b4:2b:ba:8a: 69:c9:6f:dc:e3:99:f9:5a:22:cf:f0:9c:e5:55:15:25:f7:46: cf:8b:d7:3c:7e:9d:89:1e:98:be:cb:83:a4:7c:a3:8c:eb:76: fa:78:43:fa:8b:51:09:d2:e6:be:3c:62:04:33:40:5c:f2:c6: 10:d7:32:79:33:1b:ce:be:64:89:ee:ee:cc:cf:15:32:83:63: 94:88:11:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoYhKqBYJk4UTKwv+j8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmE1ZjJiNDY4ZGIzNWViNTYyYmQzN2UxZjM2ZWNlYTgx M2NjYWMwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD EygxNzg3ODIwOWI4YmZmYmJiOTkyYmZiZGI5YWFiNDRjNjMxOWFjMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysUGgjdiRjtynmVKshJ6V27DDtfM 2iZK9ASEBHlwZH82ieqJStiFq5cff8MTOhBz8BXSf4Ukpw54R9SaFVDhvoRqhEIp q4GQPTxZzg2lCNqes3FcezINAZenhREnpPWQCqdBUdw3X8/LdhZriKaICkb0Q7Kh BEGIqDeTtmi7C7/uk8raMQM6WHiWcyDRVpuR5b39IrgORp+eV4mSY/4hEPdVSnX8 zvrBvIWEelDsNdywF9UEZkPKH4+KynTquBEKmc9C/8w67NgIcWZeksLhpP16RX2r 3huU/2KVTPfztZv4eJYuF/UyiQL+E1QvwXBylcvgYUfCxyAeYlLg0EeNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeHggm4v/u7mSv725qrRMYxmsBYMB8GA1UdIwQY MBaAFMZqXytGjbNetWK9N+Hzbs6oE8ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4Nzgt MzFmNGNjMTJkNjIwLzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81MzFhNGMtNjUyMS00ZWY5LTg4NzgtMzFmNGNjMTJkNjIw LzEveG1wZkswYU5zMTYxWXIwMzRmTnV6cWdUekt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKhXN1yL CwVXO/MlhXoI3RyJkenluXLhwB4ROZRSBYiw2qKfy2Og6iKW3vFCHZ+SFBlf0oJO 1uBEGG3ULfe5/ho8QdM5+lxnfVpMIrHWLDeNiQXlxn/mvrIH3tBVOjB7PohgUS1j v1ciUTR20rc/7BheTuI/ULwyw0RTuk/f7EoSyA+KNbxH/rghrzP/uHruZ5XndQxX Q9/b/cBSkWOCDsp1mYZIGBwRkC1TNy468SC0K7qKaclv3OOZ+Voiz/Cc5VUVJfdG z4vXPH6diR6YvsuDpHyjjOt2+nhD+otRCdLmvjxiBDNAXPLGENcyeTMbzr5kie7u zM8VMoNjlIgRcA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:08 2026 by rpki-client