This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json) Hash identifier: PFzqLy5Y6v8c84jUjontvUw4R3LXkIt7uUvjfkJwjhg= Subject key identifier: 16:28:BE:2C:5B:00:57:C5:33:7C:F9:AC:CF:42:0C:F0:CC:DE:6A:E6 Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Certificate serial: 019C4390C920B51B38A9D0E87B4242CCA79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft Manifest number: 097C Signing time: Mon 09 Feb 2026 18:01:27 +0000 Manifest this update: Mon 09 Feb 2026 18:01:27 +0000 Manifest next update: Tue 10 Feb 2026 18:01:27 +0000 Files and hashes: 1: 1K1Um4B_fpW1GkCf_gBrii6dk-U.roa (hash: /YNif+CPSNTVk1hV3V7FBKNaBXD9ZU/xIRYCuPXwkd4=) 2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: h2l/TKAGVV8G5/6XsD5yG1W5+Vv/5kFRSmvttbxdVek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c9:20:b5:1b:38:a9:d0:e8:7b:42:42:cc:a7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285 Validity Not Before: Feb 9 18:01:27 2026 GMT Not After : Feb 10 18:01:27 2026 GMT Subject: CN=1628be2c5b0057c5337cf9accf420cf0ccde6ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:37:af:d4:10:1e:00:5a:51:34:c4:6c:1b: 7c:00:d5:ae:7f:78:b7:2f:d6:28:fd:93:50:cf:fd: 53:5b:f3:e8:78:46:35:44:9a:6e:da:61:74:28:2a: d0:e9:a6:b8:69:76:77:c3:01:c9:35:9c:70:46:87: 4d:c5:9a:bf:8f:e1:41:18:00:95:9c:86:2b:ec:64: 43:26:df:f3:77:01:5c:f2:e0:89:bf:bd:80:b3:ee: ad:1e:a2:88:45:fa:45:bf:25:0a:ad:f9:74:a3:c5: 98:1a:a6:47:cb:52:c1:df:89:d8:1a:0c:98:f6:6f: 5d:87:56:29:c1:83:2e:51:c9:13:4d:fe:0b:6a:32: 3b:ca:14:db:41:9d:97:ec:4c:fe:3f:d4:6b:0f:fc: ae:4f:3b:14:89:c6:49:1f:0b:61:fe:16:02:6b:ed: 8f:b8:f0:0e:6c:f4:e1:0d:22:2f:85:6b:bf:5c:0d: da:c6:16:3a:f7:fd:8d:bc:c0:f4:97:a8:63:14:5d: 88:e9:35:2a:f1:27:91:fc:ea:bc:44:71:37:0b:61: 0c:11:f0:8c:b0:2f:2a:85:a4:00:02:2d:5e:fc:d7: 81:91:70:c1:b6:6e:1c:7c:c0:2e:de:26:16:02:16: bc:99:04:15:92:14:1a:bd:a4:eb:20:33:4a:eb:ce: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:BE:2C:5B:00:57:C5:33:7C:F9:AC:CF:42:0C:F0:CC:DE:6A:E6 X509v3 Authority Key Identifier: keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e6:9c:94:f9:8d:4e:f9:5e:00:26:76:25:9d:ad:2d:af:fd: b6:f4:d8:a6:c9:9c:b5:69:a8:65:ba:b5:fe:b2:fa:53:76:aa: 23:62:93:d9:b8:55:54:ee:76:ad:1a:cb:f5:cb:57:d0:40:f1: 93:3f:c6:c6:a5:d6:2a:25:f3:90:90:2b:f6:da:cd:42:55:0c: 77:e8:68:e2:d9:55:88:db:e2:97:c5:2b:c3:c2:1e:57:f6:c0: 24:b7:22:a7:3a:43:f2:12:f6:33:2e:fe:f2:11:f9:11:a4:c2: 8b:6b:8e:1b:ea:f6:b1:f6:1f:17:16:60:57:ef:c9:4c:ec:f0: 10:c4:7e:ce:2a:51:ea:25:18:43:c2:be:d3:96:3f:a8:15:d6: 8d:c2:cc:d6:57:53:00:bc:a9:48:ae:d9:2a:f2:63:02:89:b2: 39:f2:cf:7b:34:04:34:98:80:63:f4:7c:29:01:2c:7a:2f:83: 6b:d3:3f:00:36:6f:8a:26:29:db:e4:58:20:1a:15:a2:76:80: f9:a0:d5:bb:70:c0:11:67:fe:13:d1:2b:e1:db:fa:88:56:ac: d5:f6:f7:aa:4e:9a:8e:d5:95:9e:15:6e:47:be:ca:69:f8:a4: d1:b1:29:02:d5:b1:56:c6:42:43:73:de:03:03:0a:15:ab:a6: 12:d1:ba:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMkgtRs4qdDoe0JCzKecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4 MGYyODUwHhcNMjYwMjA5MTgwMTI3WhcNMjYwMjEwMTgwMTI3WjAzMTEwLwYDVQQD EygxNjI4YmUyYzViMDA1N2M1MzM3Y2Y5YWNjZjQyMGNmMGNjZGU2YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+M3r9QQHgBaUTTEbBt8ANWuf3i3 L9Yo/ZNQz/1TW/PoeEY1RJpu2mF0KCrQ6aa4aXZ3wwHJNZxwRodNxZq/j+FBGACV nIYr7GRDJt/zdwFc8uCJv72As+6tHqKIRfpFvyUKrfl0o8WYGqZHy1LB34nYGgyY 9m9dh1YpwYMuUckTTf4LajI7yhTbQZ2X7Ez+P9RrD/yuTzsUicZJHwth/hYCa+2P uPAObPThDSIvhWu/XA3axhY69/2NvMD0l6hjFF2I6TUq8SeR/Oq8RHE3C2EMEfCM sC8qhaQAAi1e/NeBkXDBtm4cfMAu3iYWAha8mQQVkhQavaTrIDNK687IRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYovixbAFfFM3z5rM9CDPDM3mrmMB8GA1UdIwQY MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuaclPmN TvleACZ2JZ2tLa/9tvTYpsmctWmoZbq1/rL6U3aqI2KT2bhVVO52rRrL9ctX0EDx kz/GxqXWKiXzkJAr9trNQlUMd+ho4tlViNvil8Urw8IeV/bAJLcipzpD8hL2My7+ 8hH5EaTCi2uOG+r2sfYfFxZgV+/JTOzwEMR+zipR6iUYQ8K+05Y/qBXWjcLM1ldT ALypSK7ZKvJjAomyOfLPezQENJiAY/R8KQEsei+Da9M/ADZviiYp2+RYIBoVonaA +aDVu3DAEWf+E9Er4dv6iFas1fb3qk6ajtWVnhVuR77Kafik0bEpAtWxVsZCQ3Pe AwMKFaumEtG63A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:43 2026 by rpki-client