This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json) Hash identifier: 2Gn18s0HvPz8XblGawwv6NiKGyY6Rwus1jNKWB/V3Nc= Subject key identifier: 07:4A:23:EA:B3:2D:DC:3C:46:01:D6:21:79:E2:D6:56:28:1F:99:30 Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Certificate serial: 019C427DCA476D036B215169DF2A72ACE3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft Manifest number: 12AB Signing time: Mon 09 Feb 2026 13:01:05 +0000 Manifest this update: Mon 09 Feb 2026 13:01:05 +0000 Manifest next update: Tue 10 Feb 2026 13:01:05 +0000 Files and hashes: 1: B5MgyjNRD03FWnj_3gSqIo7RbDQ.roa (hash: 2XUCmJsZX49x+0/QDCsg4NgkqWj0gTX+eRsw6155dKM=) 2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 72SjAEPTVXatuIt6Y5EQDOckg5j4EgO92wSqBOJkO24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ca:47:6d:03:6b:21:51:69:df:2a:72:ac:e3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61 Validity Not Before: Feb 9 13:01:05 2026 GMT Not After : Feb 10 13:01:05 2026 GMT Subject: CN=074a23eab32ddc3c4601d62179e2d656281f9930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:9b:3e:ea:30:00:a7:2a:86:f6:7e:45:3a: 77:5b:80:4c:ae:ce:67:2b:f6:fd:bf:a2:93:fc:a2: c5:27:90:d0:85:48:cf:af:94:12:5e:29:2f:31:8e: dd:89:4a:79:d0:0b:0d:df:f1:7b:ed:a1:9e:4d:01: d5:1f:89:49:18:d8:fd:fa:38:36:95:bb:a8:58:ad: 44:ee:f8:78:94:5b:de:c5:68:4c:33:fb:c8:d9:d2: d2:fc:3d:31:90:a9:f0:4a:72:92:ae:69:fa:8d:62: 24:b8:b8:cd:f4:fa:2c:b5:e5:d6:c1:15:eb:64:ba: 92:91:f0:11:e5:1d:37:d9:a8:fa:b5:b5:80:33:87: 42:4d:84:1f:7a:7b:7c:89:d3:2f:c3:e2:89:a4:80: b2:75:61:36:8c:bb:84:e2:03:39:a2:9e:42:ad:9b: d5:32:dc:aa:92:cd:24:2b:80:85:34:30:76:0b:16: 61:10:0e:07:24:b2:f4:8e:c5:e1:ae:a5:17:11:9b: a3:9b:65:35:a8:b0:7a:7c:35:a4:8c:7e:30:7d:dc: de:72:14:bd:72:d4:c5:ad:75:23:54:af:fb:42:b8: 67:a9:0d:be:bd:b1:92:58:8a:8c:b5:05:ab:f3:17: 18:9a:9e:67:ca:e5:bc:40:76:39:b6:3f:4b:a1:47: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:23:EA:B3:2D:DC:3C:46:01:D6:21:79:E2:D6:56:28:1F:99:30 X509v3 Authority Key Identifier: keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cf:ec:e5:30:5e:71:48:1d:69:b3:a6:dc:d1:51:0f:7b:97: 7f:fb:da:bc:90:0d:1c:9b:12:ae:02:8b:93:0e:cd:73:86:aa: d0:3c:7f:34:cd:b8:dc:07:0d:f0:4a:a2:2f:e5:9d:eb:7e:0f: 0e:3d:4d:88:a9:ff:f4:5a:08:9f:d5:44:a0:e3:b9:b9:30:93: f4:49:0a:5c:34:b1:7d:c9:c3:37:39:7d:83:19:92:79:b8:61: b5:d3:96:95:65:00:0a:34:30:b7:c9:e0:77:2b:05:d0:ac:ac: 1a:a9:9c:0e:b4:b7:ef:6e:27:9b:bb:59:7a:ea:13:b9:29:31: 8e:a1:cc:ef:3d:47:1f:ea:d6:9e:aa:2c:8b:ae:c1:f1:b6:23: c6:b8:0e:12:80:1d:68:92:b1:0a:5b:da:fb:c8:55:b6:bf:2d: 40:e4:ac:88:62:5c:7e:4e:a5:a1:20:d4:c1:b4:e8:e0:dd:43: 8a:18:51:74:8e:91:9c:56:9e:48:ad:de:11:df:d0:6e:08:c8: 19:ff:b5:bf:f7:b0:fe:9f:de:2c:9a:fe:f2:9a:48:fc:45:40: ae:80:b8:f9:df:c8:8d:73:e7:56:55:db:16:85:8c:98:8f:b3: 97:73:43:47:ba:c7:fd:3b:53:8e:53:68:bd:5f:08:5c:bd:d9: f1:6f:83:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcpHbQNrIVFp3ypyrOPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2 ZTVkNjEwHhcNMjYwMjA5MTMwMTA1WhcNMjYwMjEwMTMwMTA1WjAzMTEwLwYDVQQD EygwNzRhMjNlYWIzMmRkYzNjNDYwMWQ2MjE3OWUyZDY1NjI4MWY5OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpqbPuowAKcqhvZ+RTp3W4BMrs5n K/b9v6KT/KLFJ5DQhUjPr5QSXikvMY7diUp50AsN3/F77aGeTQHVH4lJGNj9+jg2 lbuoWK1E7vh4lFvexWhMM/vI2dLS/D0xkKnwSnKSrmn6jWIkuLjN9PosteXWwRXr ZLqSkfAR5R032aj6tbWAM4dCTYQfent8idMvw+KJpICydWE2jLuE4gM5op5CrZvV Mtyqks0kK4CFNDB2CxZhEA4HJLL0jsXhrqUXEZujm2U1qLB6fDWkjH4wfdzechS9 ctTFrXUjVK/7QrhnqQ2+vbGSWIqMtQWr8xcYmp5nyuW8QHY5tj9LoUephQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdKI+qzLdw8RgHWIXni1lYoH5kwMB8GA1UdIwQY MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt YWQyMTUyODVjODY0LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0 LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8/s5TBe cUgdabOm3NFRD3uXf/vavJANHJsSrgKLkw7Nc4aq0Dx/NM243AcN8EqiL+Wd634P Dj1NiKn/9FoIn9VEoOO5uTCT9EkKXDSxfcnDNzl9gxmSebhhtdOWlWUACjQwt8ng dysF0KysGqmcDrS3724nm7tZeuoTuSkxjqHM7z1HH+rWnqosi67B8bYjxrgOEoAd aJKxClva+8hVtr8tQOSsiGJcfk6loSDUwbTo4N1DihhRdI6RnFaeSK3eEd/QbgjI Gf+1v/ew/p/eLJr+8ppI/EVAroC4+d/IjXPnVlXbFoWMmI+zl3NDR7rH/TtTjlNo vV8IXL3Z8W+DSw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:07 2026 by rpki-client