This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft File: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json) Hash identifier: zEPntTdMdC52G464qpDRN2zIfxaBCD5a+fqIowwBG2U= Subject key identifier: BD:F5:BC:E1:61:1F:C3:B0:70:76:00:B3:E9:11:24:7F:91:2B:00:B8 Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Certificate serial: 019C43590F96781863BAFED633D135452993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft Manifest number: 0745 Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: THdWL7NkPv4mTySRB7BlP8UazKk.roa (hash: 1vgf1jLYUS95We+9isSyrDAIekez9YYY5fniWvh9gyE=) 2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: huqbi5ykCX4+9huE60LdLl352NKV7qz4xL2E+jUHjoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:0f:96:78:18:63:ba:fe:d6:33:d1:35:45:29:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=bdf5bce1611fc3b0707600b3e911247f912b00b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:b3:89:2b:d5:24:54:3b:8a:50:3d:52:b0: 65:dd:7d:ed:b7:1f:20:39:45:d6:e5:d8:30:e7:85: 0e:80:a7:7b:bf:90:66:02:11:f9:47:81:5a:e1:2e: 4b:73:f6:70:dc:b8:fe:34:3f:6a:57:d9:01:74:30: b2:38:25:f3:49:38:2a:92:1f:1b:49:a2:cf:db:af: dd:6f:7c:90:36:23:6a:78:03:48:c5:46:12:b2:43: bf:97:43:83:de:7f:52:7f:fc:7b:6a:62:9a:0c:21: a3:10:b9:f1:70:8d:50:f9:2b:92:f8:56:77:7f:ae: 74:d6:31:16:57:cb:8b:b7:1e:73:55:92:ce:5b:77: 61:38:31:93:a7:2d:79:14:3c:5c:05:f3:a5:40:64: 8f:dd:25:b2:88:aa:31:5a:f3:0c:ab:20:dc:37:47: 48:6d:88:47:29:c1:c6:d9:af:75:9c:f8:7d:60:7e: fe:d4:03:4b:f2:8d:32:7d:7e:6c:b8:74:1a:84:2e: 5b:81:ef:6c:b3:c8:9f:e8:4d:f0:fa:fc:0b:24:f6: 08:1d:fa:a9:f5:44:23:07:17:ec:29:0c:39:bf:83: 45:18:10:70:c0:25:76:b1:32:3b:ba:a4:1c:45:b3: fc:d0:e3:ed:15:aa:11:40:76:32:c5:e2:d4:68:13: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:BC:E1:61:1F:C3:B0:70:76:00:B3:E9:11:24:7F:91:2B:00:B8 X509v3 Authority Key Identifier: keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:35:a6:c0:2c:55:18:b9:94:d9:58:c3:fd:33:fa:7e:9e:a5: c2:63:e5:28:dd:eb:9b:87:92:d2:2f:13:96:29:15:e3:fe:64: fd:9d:2c:11:1b:19:a2:39:82:37:1d:5b:42:ec:31:83:31:19: 5f:94:1f:fd:01:3e:a5:25:0f:b0:83:27:e0:6b:7b:d5:69:d2: e2:cd:38:41:9c:59:be:65:4d:eb:90:b4:e9:56:a3:00:d3:7c: f0:02:4b:aa:3a:3e:ff:80:3a:d0:d7:56:30:a3:03:c9:bf:e1: f6:8c:c3:67:9f:8f:e1:30:78:d7:71:e2:25:72:3b:f3:cc:ef: da:c0:0c:75:da:df:54:e5:0f:1e:bd:2e:6a:82:11:72:8a:6a: db:da:46:36:c7:95:e5:8d:d0:9a:6c:d8:8a:28:87:6f:5e:97: c2:e2:0b:34:a1:51:bd:11:e9:1b:af:31:8a:1f:41:ca:e9:58: af:4b:17:4b:10:e1:ea:a5:50:e2:a5:ba:d7:97:bd:6a:32:f1: b6:47:4b:9a:65:ea:ba:60:91:4d:45:37:39:86:05:d7:88:f6: 07:56:84:9c:c7:19:26:60:0c:ee:cb:ab:11:f7:3a:e9:1f:f4: 04:a8:b5:d0:8a:8f:04:41:8a:fd:5a:5d:c8:c7:a2:f0:4e:b2: fe:a6:86:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQ+WeBhjuv7WM9E1RSmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM4ZjdjM2VjYWQyOWVjNTA2NDRiNzAwNjhiOTJhMWJl NDcwNzQwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD EyhiZGY1YmNlMTYxMWZjM2IwNzA3NjAwYjNlOTExMjQ3ZjkxMmIwMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspiziSvVJFQ7ilA9UrBl3X3ttx8g OUXW5dgw54UOgKd7v5BmAhH5R4Fa4S5Lc/Zw3Lj+ND9qV9kBdDCyOCXzSTgqkh8b SaLP26/db3yQNiNqeANIxUYSskO/l0OD3n9Sf/x7amKaDCGjELnxcI1Q+SuS+FZ3 f6501jEWV8uLtx5zVZLOW3dhODGTpy15FDxcBfOlQGSP3SWyiKoxWvMMqyDcN0dI bYhHKcHG2a91nPh9YH7+1ANL8o0yfX5suHQahC5bge9ss8if6E3w+vwLJPYIHfqp 9UQjBxfsKQw5v4NFGBBwwCV2sTI7uqQcRbP80OPtFaoRQHYyxeLUaBMQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL31vOFhH8OwcHYAs+kRJH+RKwC4MB8GA1UdIwQY MBaAFF2jj3w+ytKexQZEtwBouSob5HB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4Yjkt OTQwOGYxYmMwZDEyLzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4YjktOTQwOGYxYmMwZDEy LzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzWmwCxV GLmU2VjD/TP6fp6lwmPlKN3rm4eS0i8TlikV4/5k/Z0sERsZojmCNx1bQuwxgzEZ X5Qf/QE+pSUPsIMn4Gt71WnS4s04QZxZvmVN65C06VajANN88AJLqjo+/4A60NdW MKMDyb/h9ozDZ5+P4TB413HiJXI788zv2sAMddrfVOUPHr0uaoIRcopq29pGNseV 5Y3QmmzYiiiHb16XwuILNKFRvRHpG68xih9ByulYr0sXSxDh6qVQ4qW615e9ajLx tkdLmmXqumCRTUU3OYYF14j2B1aEnMcZJmAM7surEfc66R/0BKi10IqPBEGK/Vpd yMei8E6y/qaGmg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:03 2026 by rpki-client