This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json) Hash identifier: gkFmeK1tFQ2uUqAOIHyuORkbysMkBdJaPAdO/hG11Fk= Subject key identifier: EA:43:8C:5A:2B:89:4D:D8:7D:E3:57:23:56:C6:EE:DF:9C:8D:02:AA Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a Certificate serial: 019C42102ACA07B18410AFD20247BCD92D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft Manifest number: 0768 Signing time: Mon 09 Feb 2026 11:01:21 +0000 Manifest this update: Mon 09 Feb 2026 11:01:21 +0000 Manifest next update: Tue 10 Feb 2026 11:01:21 +0000 Files and hashes: 1: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: JhF97AlbGUlRUEu7WuOUZf2CUrd+kdJpEpdB9QCtqD0=) 2: j0mWI7cQWBCGiDlGDSGVoZj238E.roa (hash: F2Brv8OMMvqFx8gd1Dzz6j6nuO9gaZQJk6LSgnOkIcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:2a:ca:07:b1:84:10:af:d2:02:47:bc:d9:2d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a Validity Not Before: Feb 9 11:01:21 2026 GMT Not After : Feb 10 11:01:21 2026 GMT Subject: CN=ea438c5a2b894dd87de3572356c6eedf9c8d02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:8c:9f:45:cd:e3:b3:63:ca:d7:ef:52:0d: ae:bd:e4:f3:bc:53:91:21:90:e0:7b:55:33:b3:3a: 99:cc:f6:f0:42:e3:4d:8a:64:9f:99:92:ed:ee:ea: 32:f8:55:dd:07:fb:57:27:bd:e7:b7:ee:41:06:a8: 68:d7:0f:91:71:d9:40:4c:90:37:1d:b0:89:a9:42: 35:71:2d:d4:55:d0:04:fe:ab:f2:62:02:d4:68:86: 38:69:ec:fc:f9:6f:50:a3:5a:b6:20:e9:62:49:f3: b1:06:44:01:f0:32:6e:49:44:82:15:18:02:6e:b0: c7:58:8e:f9:be:d0:e1:5d:62:db:d5:1f:64:99:7b: 13:91:d1:2b:9e:5d:f3:e3:60:8d:2c:e5:03:10:37: 80:ef:0d:00:16:2c:d3:1b:2f:65:61:60:92:a3:23: b1:65:37:38:e8:8b:40:61:50:14:80:3f:06:0b:63: d1:47:ff:8f:ad:d8:b3:23:77:67:2c:f9:47:e2:32: fe:38:5f:48:20:1f:a9:e9:3e:bb:1f:12:6b:cc:58: cd:44:e6:e9:51:07:c6:46:1b:e1:4f:91:6f:67:93: 42:85:87:75:8c:2c:57:77:ee:44:6a:e1:ce:41:d4: 39:b7:76:bb:25:30:01:e2:db:df:ca:f9:c0:f0:8f: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:8C:5A:2B:89:4D:D8:7D:E3:57:23:56:C6:EE:DF:9C:8D:02:AA X509v3 Authority Key Identifier: keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c1:2a:c0:e4:24:f0:3a:d7:7c:f5:3a:2e:7a:d5:3f:f4:b4: 80:a6:b9:db:e4:92:69:82:ce:af:b6:f2:5a:90:e5:77:bd:5b: 1e:c0:02:01:d0:b8:c2:76:ed:ce:d5:4e:99:c9:62:31:86:a3: e4:09:fb:5a:d6:36:6f:b9:e5:8d:70:7d:35:cb:f6:ad:33:8a: f8:65:5c:2f:3f:39:b3:87:98:3d:d2:28:92:9f:e4:c5:e7:76: 63:7a:82:24:ac:24:e2:ef:9d:da:32:d0:00:10:5e:52:a3:7a: 03:31:6f:b0:7c:23:0a:b9:84:b5:51:95:42:0f:66:a7:7f:a9: 3b:db:60:cb:8a:57:9b:31:31:b7:45:d9:0d:8a:4e:48:b5:aa: 90:69:74:76:36:cd:ed:28:68:8b:7b:fc:72:1d:ef:9c:14:bd: 43:66:83:87:59:ec:a0:7f:34:3e:55:24:e2:99:14:57:40:81: 2d:52:a6:8c:9f:76:84:a4:74:a3:43:6d:a5:dc:0f:2b:35:c5: 86:35:65:dd:02:2e:e8:69:1b:a1:07:42:0c:1a:b6:8e:02:72: dd:9f:b1:41:21:fd:da:d5:fb:b8:93:9e:db:b1:8c:f9:34:65: 93:c5:ae:b4:15:25:b8:c7:a9:94:9d:28:58:f0:86:e7:a0:99: 8b:01:93:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECrKB7GEEK/SAke82S0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm NzI3MmEwHhcNMjYwMjA5MTEwMTIxWhcNMjYwMjEwMTEwMTIxWjAzMTEwLwYDVQQD EyhlYTQzOGM1YTJiODk0ZGQ4N2RlMzU3MjM1NmM2ZWVkZjljOGQwMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X2Mn0XN47NjytfvUg2uveTzvFOR IZDge1UzszqZzPbwQuNNimSfmZLt7uoy+FXdB/tXJ73nt+5BBqho1w+RcdlATJA3 HbCJqUI1cS3UVdAE/qvyYgLUaIY4aez8+W9Qo1q2IOliSfOxBkQB8DJuSUSCFRgC brDHWI75vtDhXWLb1R9kmXsTkdErnl3z42CNLOUDEDeA7w0AFizTGy9lYWCSoyOx ZTc46ItAYVAUgD8GC2PRR/+PrdizI3dnLPlH4jL+OF9IIB+p6T67HxJrzFjNRObp UQfGRhvhT5FvZ5NChYd1jCxXd+5EauHOQdQ5t3a7JTAB4tvfyvnA8I8N/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpDjForiU3YfeNXI1bG7t+cjQKqMB8GA1UdIwQY MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It ZTUyMmNhZTYzNDcwLzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8EqwOQk 8DrXfPU6LnrVP/S0gKa52+SSaYLOr7byWpDld71bHsACAdC4wnbtztVOmcliMYaj 5An7WtY2b7nljXB9Ncv2rTOK+GVcLz85s4eYPdIokp/kxed2Y3qCJKwk4u+d2jLQ ABBeUqN6AzFvsHwjCrmEtVGVQg9mp3+pO9tgy4pXmzExt0XZDYpOSLWqkGl0djbN 7Shoi3v8ch3vnBS9Q2aDh1nsoH80PlUk4pkUV0CBLVKmjJ92hKR0o0NtpdwPKzXF hjVl3QIu6GkboQdCDBq2jgJy3Z+xQSH92tX7uJOe27GM+TRlk8WutBUluMeplJ0o WPCG56CZiwGTBw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:32 2026 by rpki-client