This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json) Hash identifier: J04Sny8gWkCA228ezSVoIb/a0ijPHGyX/RcT1/pVSoY= Subject key identifier: BB:BE:F0:A8:CE:87:E6:D7:43:E2:B2:FB:BE:B3:92:F5:F5:F0:65:73 Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25 Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625 Certificate serial: 019C432267B936B9A6F1D91DC4EC1D0858BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:54 +0000 Manifest this update: Mon 09 Feb 2026 16:00:54 +0000 Manifest next update: Tue 10 Feb 2026 16:00:54 +0000 Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: RWI2aOtU4tRlpoGFnknAXVKiwZeUnr2DVW93OSzwXQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:67:b9:36:b9:a6:f1:d9:1d:c4:ec:1d:08:58:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625 Validity Not Before: Feb 9 16:00:54 2026 GMT Not After : Feb 10 16:00:54 2026 GMT Subject: CN=bbbef0a8ce87e6d743e2b2fbbeb392f5f5f06573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:ae:a0:8a:2a:9f:16:e1:d6:4b:f2:a0:9f: 94:4b:c6:11:e0:99:49:d9:c6:35:35:e2:e8:a0:ed: ce:e4:de:c2:b8:a2:43:bb:f0:6e:03:72:22:ed:a9: 16:3c:e9:92:bb:2f:0e:8a:69:00:2d:3a:75:b1:78: 34:72:56:0e:b6:ec:74:ff:27:d4:51:18:db:fa:7b: 66:db:9d:5f:80:70:e3:2e:b7:f5:1b:be:5b:5f:b7: 11:3c:fa:78:28:fb:70:86:ca:78:9c:43:3f:19:c0: 30:a5:6f:bd:34:d1:79:19:4f:9c:94:dd:ca:7f:34: 6c:53:c4:7c:52:75:4b:b2:d7:ff:16:fb:99:7b:a5: 27:62:6f:36:44:8d:7c:a5:43:ff:59:81:ec:de:17: 2a:af:6f:8e:77:73:a2:af:79:e9:45:31:95:7f:ee: 16:6e:3b:30:74:b3:33:a0:bd:38:9e:07:ac:6f:a2: 08:a8:4f:1e:76:28:07:d4:2d:c0:03:69:f2:52:19: d5:7a:e8:98:6f:0d:8c:90:5c:62:aa:a1:c9:96:d1: c1:be:80:1e:95:80:1e:9d:f2:ca:8a:f8:af:3f:4a: 11:14:3d:fd:5d:d1:b9:20:94:6a:3f:cb:c4:49:81: 53:14:c8:f9:a7:5a:a7:2d:42:7e:f3:f7:3a:1b:81: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:F0:A8:CE:87:E6:D7:43:E2:B2:FB:BE:B3:92:F5:F5:F0:65:73 X509v3 Authority Key Identifier: keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:c5:1f:66:9e:94:81:8e:d5:c3:b6:d5:89:ff:c7:0e:65: fa:08:59:7b:13:e8:7f:6a:bb:e9:e8:6e:43:9d:d0:7f:69:2a: 61:0c:b4:32:b4:bc:ee:cf:7d:05:3b:89:b4:3f:fd:5e:e3:86: 68:6b:33:04:78:eb:0b:ca:ee:d1:95:89:46:ee:ec:2d:be:a3: f3:77:59:aa:d8:61:47:51:c9:61:74:de:07:74:8d:05:9b:e2: 32:02:5e:3e:9e:30:59:0a:fc:4a:87:14:a3:78:51:31:5e:1b: eb:5b:85:8f:93:00:0e:1d:bd:30:b2:dc:8c:39:25:d3:a3:cf: cd:96:be:61:7f:01:62:82:c0:3a:40:dc:cf:7a:31:f6:98:a2: 67:3a:82:73:3e:35:c9:9b:ea:9b:29:da:7b:55:e4:a8:7f:ec: 45:19:18:07:3d:6c:b8:fc:1b:56:a4:ff:3a:13:9f:8c:d7:4a: cc:4d:a3:35:c6:2f:c6:85:f0:2b:19:72:59:78:b3:df:ed:88: 77:d3:60:9f:24:6b:b7:95:65:75:29:2c:3f:ae:50:07:b2:21: b1:29:ab:7b:85:83:b7:b0:46:0b:30:b2:a6:9a:04:67:e1:a1: a9:74:bc:8b:cc:20:87:98:12:f3:ff:60:ed:3d:0c:b4:dc:a6: cf:09:3b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIme5Nrmm8dkdxOwdCFi8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDVjYmY3ZmZlYzUyNTRhNzFlZjdiMWVkZjdhNmQ3NmM3 NTk2MjUwHhcNMjYwMjA5MTYwMDU0WhcNMjYwMjEwMTYwMDU0WjAzMTEwLwYDVQQD EyhiYmJlZjBhOGNlODdlNmQ3NDNlMmIyZmJiZWIzOTJmNWY1ZjA2NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruSuoIoqnxbh1kvyoJ+US8YR4JlJ 2cY1NeLooO3O5N7CuKJDu/BuA3Ii7akWPOmSuy8OimkALTp1sXg0clYOtux0/yfU URjb+ntm251fgHDjLrf1G75bX7cRPPp4KPtwhsp4nEM/GcAwpW+9NNF5GU+clN3K fzRsU8R8UnVLstf/FvuZe6UnYm82RI18pUP/WYHs3hcqr2+Od3Oir3npRTGVf+4W bjswdLMzoL04ngesb6IIqE8edigH1C3AA2nyUhnVeuiYbw2MkFxiqqHJltHBvoAe lYAenfLKivivP0oRFD39XdG5IJRqP8vESYFTFMj5p1qnLUJ+8/c6G4F8EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu+8KjOh+bXQ+Ky+76zkvX18GVzMB8GA1UdIwQY MBaAFJnVy/f/7FJUpx73se33ptdsdZYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MjM2ZTktZmY1YS00MDE5LTk0ZDQt YWVhZTZlMzU5M2E3LzEvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81MjM2ZTktZmY1YS00MDE5LTk0ZDQtYWVhZTZlMzU5M2E3 LzEvbWRYTDlfX3NVbFNuSHZleDdmZW0xMngxbGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPTFH2ae lIGO1cO21Yn/xw5l+ghZexPof2q76ehuQ53Qf2kqYQy0MrS87s99BTuJtD/9XuOG aGszBHjrC8ru0ZWJRu7sLb6j83dZqthhR1HJYXTeB3SNBZviMgJePp4wWQr8SocU o3hRMV4b61uFj5MADh29MLLcjDkl06PPzZa+YX8BYoLAOkDcz3ox9piiZzqCcz41 yZvqmynae1XkqH/sRRkYBz1suPwbVqT/OhOfjNdKzE2jNcYvxoXwKxlyWXiz3+2I d9NgnyRrt5VldSksP65QB7IhsSmre4WDt7BGCzCyppoEZ+GhqXS8i8wgh5gS8/9g 7T0MtNymzwk7zA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:39 2026 by rpki-client