This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json) Hash identifier: 4Ch5k9InBHrKIQi1fdf3mXyfcOMZ+WKamq4Q2ig8+DA= Subject key identifier: 3D:B6:F8:29:07:79:D7:D5:63:E1:F2:A1:4E:36:E6:D6:5A:05:4E:06 Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Certificate serial: 019C427E0D9C81006C3C96CD09CA618A9A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: i1rTJ4PqtZSy0vbSRadGOsO0L0+h/bzHdkxxeFeYBaw=) 2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0d:9c:81:00:6c:3c:96:cd:09:ca:61:8a:9a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=3db6f8290779d7d563e1f2a14e36e6d65a054e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:87:9d:b7:cf:c0:7d:eb:ae:f2:f0:ea:9d: ef:d2:c8:a9:ae:e0:18:d2:9e:e7:a9:1a:d7:d2:f1: dc:1d:74:96:2f:1d:84:d0:34:88:c5:96:c6:b2:95: ea:cb:e5:1e:9d:88:01:2e:40:e0:74:9a:75:86:6c: f2:de:0b:87:99:e3:9a:87:aa:3c:af:0d:0b:4c:fb: 1d:e4:03:32:4b:62:2c:a8:13:70:68:b7:df:b9:92: a6:61:b7:8e:9b:da:76:0a:3f:52:e5:63:9f:e4:44: a1:12:19:24:2d:a3:71:39:6e:a1:28:87:6e:78:85: 29:67:03:bd:7d:2f:ba:a0:2b:9d:94:76:99:6e:fd: 99:bf:94:9b:3e:d0:48:15:0d:82:ed:3b:e5:6f:a6: f4:fb:f2:b4:bc:7e:76:38:31:96:bd:d1:70:5a:01: c0:4f:3a:4d:ad:d1:5c:11:18:dc:33:5b:26:3d:ce: b4:32:41:dd:d5:39:3a:2f:e2:1c:31:f0:99:a3:6b: 8c:b6:e6:f0:cd:c9:97:1f:28:0c:50:30:54:67:88: 34:8c:51:ad:66:4f:d6:9f:8b:a0:96:c9:b6:5a:02: 23:46:7c:b2:9f:56:bc:1d:9a:98:7c:be:f0:88:c2: 81:2c:dd:97:5c:e0:79:cc:46:02:99:2c:35:ae:42: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:F8:29:07:79:D7:D5:63:E1:F2:A1:4E:36:E6:D6:5A:05:4E:06 X509v3 Authority Key Identifier: keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:55:c1:f2:f7:7b:da:4e:b2:b1:db:52:2f:37:c7:d6:eb:46: 89:b9:cf:3d:45:72:c3:b4:db:b5:aa:d3:8a:23:86:b6:04:42: e6:60:9f:24:44:03:eb:8c:8c:87:fe:82:f5:9f:c6:36:71:00: ed:c6:a8:5b:07:3e:ee:e3:d8:30:ac:94:a8:c1:33:75:7b:75: 5d:d9:60:05:b3:56:cf:8a:c5:b8:7a:e7:88:58:33:74:ab:35: ba:71:57:93:8f:1c:e0:17:a6:e2:08:e8:de:22:e7:b6:e3:ec: eb:d7:99:cb:3f:e0:4a:5a:8d:0a:43:62:62:47:7d:ef:bb:e8: 5a:8a:89:74:2e:35:11:db:e5:aa:45:11:4b:d9:84:9e:16:3c: ad:84:18:af:b8:ac:04:38:b6:84:33:07:1e:de:fd:ed:af:9f: 48:6f:91:5d:07:18:3f:fe:65:7b:34:c0:3f:4c:66:f3:47:1c: be:cb:b3:68:58:98:5c:4e:13:2e:9c:58:84:1d:d9:7f:04:e7: 15:19:1c:2b:a6:e3:3f:f2:bd:9c:0a:d1:a4:05:a9:f2:5c:d6: fa:7f:7c:15:aa:8a:82:dd:5a:29:c4:54:c5:f1:bc:ce:7c:0b: 36:ee:6d:91:60:e1:dc:14:95:cf:6b:b6:b4:36:63:28:1e:90: 64:54:d7:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg2cgQBsPJbNCcphipqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3 MDdhMTQwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EygzZGI2ZjgyOTA3NzlkN2Q1NjNlMWYyYTE0ZTM2ZTZkNjVhMDU0ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N2HnbfPwH3rrvLw6p3v0sipruAY 0p7nqRrX0vHcHXSWLx2E0DSIxZbGspXqy+UenYgBLkDgdJp1hmzy3guHmeOah6o8 rw0LTPsd5AMyS2IsqBNwaLffuZKmYbeOm9p2Cj9S5WOf5EShEhkkLaNxOW6hKIdu eIUpZwO9fS+6oCudlHaZbv2Zv5SbPtBIFQ2C7Tvlb6b0+/K0vH52ODGWvdFwWgHA TzpNrdFcERjcM1smPc60MkHd1Tk6L+IcMfCZo2uMtubwzcmXHygMUDBUZ4g0jFGt Zk/Wn4uglsm2WgIjRnyyn1a8HZqYfL7wiMKBLN2XXOB5zEYCmSw1rkKPFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD22+CkHedfVY+HyoU425tZaBU4GMB8GA1UdIwQY MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5 LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1XB8vd7 2k6ysdtSLzfH1utGibnPPUVyw7TbtarTiiOGtgRC5mCfJEQD64yMh/6C9Z/GNnEA 7caoWwc+7uPYMKyUqMEzdXt1XdlgBbNWz4rFuHrniFgzdKs1unFXk48c4Bem4gjo 3iLntuPs69eZyz/gSlqNCkNiYkd977voWoqJdC41EdvlqkURS9mEnhY8rYQYr7is BDi2hDMHHt797a+fSG+RXQcYP/5lezTAP0xm80ccvsuzaFiYXE4TLpxYhB3ZfwTn FRkcK6bjP/K9nArRpAWp8lzW+n98FaqKgt1aKcRUxfG8znwLNu5tkWDh3BSVz2u2 tDZjKB6QZFTXfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:23 2026 by rpki-client