This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json) Hash identifier: C+5A1izynNC8hV+aqKlsOKyDmOJ9E2Hf9s3+KgpJ240= Subject key identifier: A0:FD:21:7F:25:2B:F2:F1:E3:80:24:95:76:56:37:8C:60:84:DB:D4 Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Certificate serial: 019C43FE5F7A325E0D2E005647C13802AAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft Manifest number: 0F71 Signing time: Mon 09 Feb 2026 20:01:09 +0000 Manifest this update: Mon 09 Feb 2026 20:01:09 +0000 Manifest next update: Tue 10 Feb 2026 20:01:09 +0000 Files and hashes: 1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: mISuxYVhjmJJDmc8ljHZE8LwIRbym/obKpB0TNyUigA=) 2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:5f:7a:32:5e:0d:2e:00:56:47:c1:38:02:aa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Validity Not Before: Feb 9 20:01:09 2026 GMT Not After : Feb 10 20:01:09 2026 GMT Subject: CN=a0fd217f252bf2f1e38024957656378c6084dbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:72:83:92:47:47:cb:26:c9:06:72:89:13: 71:18:41:df:88:00:a1:94:f6:7e:d9:54:a9:aa:da: 0d:15:60:eb:89:f7:8e:0f:41:a1:6f:35:9c:42:d2: 61:ab:5f:b6:1a:b1:65:1c:5f:f0:50:57:52:1b:08: fd:aa:5e:94:f2:a4:33:18:37:a9:9e:5b:a1:c0:e9: 25:11:24:65:4a:11:4c:21:82:05:df:46:85:40:f0: 69:49:0f:08:fe:6b:b8:08:68:75:74:a0:91:d0:aa: d1:50:df:52:c0:4d:19:03:1a:b8:50:ff:cf:84:b6: 36:79:ab:80:44:0a:02:66:3a:d4:b1:6c:d1:6f:61: 43:a4:61:6e:ea:69:63:9d:3a:7b:31:41:2f:aa:54: 00:61:69:e0:07:65:44:55:69:70:d5:34:3e:52:01: b9:d3:6b:52:66:55:b3:c5:32:a5:31:31:f0:93:b4: b8:3c:28:62:09:25:67:2e:0b:82:3f:2b:55:53:a7: 6d:ee:ef:f7:27:dc:c4:e7:1f:db:87:fa:ec:bd:65: 8a:c4:c4:b2:5d:5e:ea:fb:f4:8c:15:3c:93:bd:86: 7e:70:83:36:c7:17:69:f0:a3:37:94:c9:8c:f3:47: 1a:62:7a:d7:18:52:61:fb:93:b2:fe:53:1a:5b:63: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FD:21:7F:25:2B:F2:F1:E3:80:24:95:76:56:37:8C:60:84:DB:D4 X509v3 Authority Key Identifier: keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:17:44:e2:19:07:8a:d2:ea:58:b0:08:36:ad:09:6b:04:8a: bf:8f:93:9f:71:01:29:57:a7:d7:51:3a:0f:ea:b5:5c:68:9c: ae:a7:8c:69:65:c4:1e:99:bf:08:f0:21:44:86:2b:bc:13:93: e1:bd:40:3b:f2:66:85:81:64:84:f3:4a:c5:94:fe:ce:8e:22: d3:0a:fc:1e:12:11:74:0a:8c:4a:d9:06:3e:65:90:87:71:a7: ce:20:4b:f5:31:b7:16:a7:59:3b:7d:45:17:83:99:87:19:27: 45:bd:20:b5:21:ba:e4:20:aa:aa:62:61:ce:12:59:aa:67:0f: 06:82:0d:3a:e9:e5:dc:56:e6:e6:5d:af:11:9f:38:70:be:c8: f2:d3:2d:c9:59:71:62:e9:d0:b6:1b:ef:73:95:a1:0c:db:c5: 46:c8:c3:a4:e6:fa:dc:7a:9f:54:98:b7:32:cd:e4:5e:33:43: ac:49:2e:e4:7f:67:04:2e:c8:74:b5:84:74:b8:d8:f1:0c:9f: 3c:c2:5c:eb:24:59:e1:01:51:26:5c:c6:b8:76:69:66:74:1a: 44:cd:93:f2:47:78:83:d6:1a:84:77:16:4a:19:6a:8d:99:a4: e2:0c:a3:9d:96:b0:9e:0d:a3:a4:d5:d8:2e:53:23:2f:cc:d7: 76:42:1e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/l96Ml4NLgBWR8E4AqrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2NiN2Q5ODJjN2Y5ZWRiYzkzZDRjYjQyYjk0ZmEwMjlj MzgyZGYwHhcNMjYwMjA5MjAwMTA5WhcNMjYwMjEwMjAwMTA5WjAzMTEwLwYDVQQD EyhhMGZkMjE3ZjI1MmJmMmYxZTM4MDI0OTU3NjU2Mzc4YzYwODRkYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA101yg5JHR8smyQZyiRNxGEHfiACh lPZ+2VSpqtoNFWDrifeOD0GhbzWcQtJhq1+2GrFlHF/wUFdSGwj9ql6U8qQzGDep nluhwOklESRlShFMIYIF30aFQPBpSQ8I/mu4CGh1dKCR0KrRUN9SwE0ZAxq4UP/P hLY2eauARAoCZjrUsWzRb2FDpGFu6mljnTp7MUEvqlQAYWngB2VEVWlw1TQ+UgG5 02tSZlWzxTKlMTHwk7S4PChiCSVnLguCPytVU6dt7u/3J9zE5x/bh/rsvWWKxMSy XV7q+/SMFTyTvYZ+cIM2xxdp8KM3lMmM80caYnrXGFJh+5Oy/lMaW2PimwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD9IX8lK/Lx44AklXZWN4xghNvUMB8GA1UdIwQY MBaAFF48t9mCx/ntvJPUy0K5T6Apw4LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYt OWYyY2M2NGUwNzQ1LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYtOWYyY2M2NGUwNzQ1 LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0hdE4hkH itLqWLAINq0JawSKv4+Tn3EBKVen11E6D+q1XGicrqeMaWXEHpm/CPAhRIYrvBOT 4b1AO/JmhYFkhPNKxZT+zo4i0wr8HhIRdAqMStkGPmWQh3GnziBL9TG3FqdZO31F F4OZhxknRb0gtSG65CCqqmJhzhJZqmcPBoINOunl3Fbm5l2vEZ84cL7I8tMtyVlx YunQthvvc5WhDNvFRsjDpOb63HqfVJi3Ms3kXjNDrEku5H9nBC7IdLWEdLjY8Qyf PMJc6yRZ4QFRJlzGuHZpZnQaRM2T8kd4g9YahHcWShlqjZmk4gyjnZawng2jpNXY LlMjL8zXdkIeSg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:07 2026 by rpki-client