This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json) Hash identifier: 4UHWFwW8po1Xs0sAKLbKpidXYCja3zYajFPoLjN2Hko= Subject key identifier: 52:98:41:D6:8D:9D:E2:71:E0:22:C9:2E:DC:54:BC:E2:EF:7C:73:40 Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Certificate serial: 019C446C0A9B87BB4980E8E3C15283C50C4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 22:00:57 +0000 Manifest this update: Mon 09 Feb 2026 22:00:57 +0000 Manifest next update: Tue 10 Feb 2026 22:00:57 +0000 Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: 7ycPriWVycwldbtJkqFRf+VoxNHBS6W/IG0oVnhxC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:0a:9b:87:bb:49:80:e8:e3:c1:52:83:c5:0c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Validity Not Before: Feb 9 22:00:57 2026 GMT Not After : Feb 10 22:00:57 2026 GMT Subject: CN=529841d68d9de271e022c92edc54bce2ef7c7340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8e:01:5e:92:4c:7b:75:80:fd:a1:2e:85:fe: 6e:42:8e:fe:e5:5c:51:45:d8:3f:e4:59:71:52:67: e2:82:75:d5:8b:7f:c3:86:48:9a:c3:74:4b:81:9d: 42:73:2e:90:14:78:0e:ec:32:6c:9e:71:72:df:73: 00:1a:aa:74:e2:16:8a:88:6a:6b:a7:2e:36:30:c8: 99:97:c0:46:10:d1:38:09:fc:f0:d5:ff:72:ff:66: fe:76:58:77:7b:38:8d:2d:7c:aa:89:31:0c:40:08: 08:e4:8c:f3:85:82:9f:32:d1:63:60:71:c7:d9:db: 87:5e:31:85:b9:31:db:0d:37:3e:9f:a6:52:7e:c8: 73:a7:7d:24:d5:6a:21:ea:07:0f:3c:b9:55:43:c9: 5f:03:f8:21:c1:da:dc:b6:71:31:bb:99:63:ef:55: 59:9a:cc:8e:19:7d:cc:41:96:b6:82:38:30:6d:bb: b8:02:62:45:fd:08:1a:39:e0:1f:40:d2:46:4d:bb: cf:7f:80:fd:aa:8d:04:29:f9:4a:bb:e0:09:fb:dd: 99:7b:cd:36:dc:9b:81:5e:d3:c1:12:2a:87:91:7f: 48:ca:65:de:e8:d1:46:5c:ce:30:ed:fd:36:7e:4b: 7c:8a:2f:d3:e1:21:a3:e3:86:b9:86:6e:11:87:80: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:41:D6:8D:9D:E2:71:E0:22:C9:2E:DC:54:BC:E2:EF:7C:73:40 X509v3 Authority Key Identifier: keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:60:f5:90:6e:18:9c:31:f8:3a:e3:2f:dc:78:34:ab:9b:58: ec:82:59:98:b5:74:47:9e:4e:2c:cb:c1:61:80:9c:02:01:2e: e6:51:79:96:1d:7f:7c:03:51:80:a3:ad:89:92:7c:3d:7a:28: 0d:a5:1c:fd:97:f1:69:3f:73:13:79:9a:ff:b9:b3:5c:63:f8: df:22:e0:65:6f:c6:c2:09:b3:50:b3:74:94:d1:36:d2:1b:4d: 44:d0:1c:8e:ab:fd:4f:30:7b:fb:37:9d:1d:b5:54:7f:14:d2: df:f1:3f:f4:96:82:1c:37:9c:c9:56:d9:a5:16:21:6d:ae:2b: b7:de:5e:4a:f0:5c:c4:92:9b:07:3b:d2:e3:01:06:46:e6:af: 57:ad:15:83:1c:17:2f:71:8e:40:8e:80:81:a5:5b:88:7b:a1: 3e:ca:fc:54:55:3e:3b:2a:7c:ae:a9:c4:36:d9:ba:90:9f:bb: ff:a4:38:28:be:2d:3d:70:39:9a:bd:e3:39:e6:2c:5b:30:49: 7a:a5:1c:6b:78:05:79:43:82:f2:d7:b2:f1:64:c1:e3:ab:08: 79:49:5f:80:71:38:37:0f:96:e8:47:c9:7d:68:38:e3:4e:1b: 00:3b:10:55:f3:41:36:e1:c9:f2:f0:51:18:e6:52:91:33:d0: 44:47:5b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbAqbh7tJgOjjwVKDxQxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MGNiY2VjZjI1YTg2NjVjMzVhNzhjODIxZDExZWIzYTY0 MjM2MjEwHhcNMjYwMjA5MjIwMDU3WhcNMjYwMjEwMjIwMDU3WjAzMTEwLwYDVQQD Eyg1Mjk4NDFkNjhkOWRlMjcxZTAyMmM5MmVkYzU0YmNlMmVmN2M3MzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx44BXpJMe3WA/aEuhf5uQo7+5VxR Rdg/5FlxUmfignXVi3/Dhkiaw3RLgZ1Ccy6QFHgO7DJsnnFy33MAGqp04haKiGpr py42MMiZl8BGENE4Cfzw1f9y/2b+dlh3eziNLXyqiTEMQAgI5IzzhYKfMtFjYHHH 2duHXjGFuTHbDTc+n6ZSfshzp30k1Woh6gcPPLlVQ8lfA/ghwdrctnExu5lj71VZ msyOGX3MQZa2gjgwbbu4AmJF/QgaOeAfQNJGTbvPf4D9qo0EKflKu+AJ+92Ze802 3JuBXtPBEiqHkX9IymXe6NFGXM4w7f02fkt8ii/T4SGj44a5hm4Rh4BWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKYQdaNneJx4CLJLtxUvOLvfHNAMB8GA1UdIwQY MBaAFMcMvOzyWoZlw1p4yCHRHrOmQjYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgt ZTY5N2JiNTc2NGMzLzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgtZTY5N2JiNTc2NGMz LzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGD1kG4Y nDH4OuMv3Hg0q5tY7IJZmLV0R55OLMvBYYCcAgEu5lF5lh1/fANRgKOtiZJ8PXoo DaUc/ZfxaT9zE3ma/7mzXGP43yLgZW/GwgmzULN0lNE20htNRNAcjqv9TzB7+zed HbVUfxTS3/E/9JaCHDecyVbZpRYhba4rt95eSvBcxJKbBzvS4wEGRuavV60VgxwX L3GOQI6AgaVbiHuhPsr8VFU+Oyp8rqnENtm6kJ+7/6Q4KL4tPXA5mr3jOeYsWzBJ eqUca3gFeUOC8tey8WTB46sIeUlfgHE4Nw+W6EfJfWg4404bADsQVfNBNuHJ8vBR GOZSkTPQREdbNA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:56 2026 by rpki-client