This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json) Hash identifier: KSGZ0MxsCEWtu7h/UjjNtXL5Zpw+N3W0+NhxGzBODgs= Subject key identifier: BD:E5:52:71:2E:26:33:4D:42:99:DE:FF:6E:5A:EF:BC:46:B4:A2:63 Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3 Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3 Certificate serial: 019C43902F4343E9DDEABE4BF0F0AA76D73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft Manifest number: 177D Signing time: Mon 09 Feb 2026 18:00:48 +0000 Manifest this update: Mon 09 Feb 2026 18:00:48 +0000 Manifest next update: Tue 10 Feb 2026 18:00:48 +0000 Files and hashes: 1: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: TPehP1EjTigO1KG3Dif3u5lX08ZuWmdh3+w1lXe/9a0=) 2: vIEeMsOgyhAbHtdasH9clWdBUoM.roa (hash: LNPknqC7GAKoJKuLl2I8NQhITu9vWI4/MB5dCdNLtbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2f:43:43:e9:dd:ea:be:4b:f0:f0:aa:76:d7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3 Validity Not Before: Feb 9 18:00:48 2026 GMT Not After : Feb 10 18:00:48 2026 GMT Subject: CN=bde552712e26334d4299deff6e5aefbc46b4a263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:88:2e:75:93:e1:d2:33:bb:91:f1:f2:89: ca:6f:1a:51:44:29:02:60:2d:b1:89:00:c1:75:48: ca:af:80:97:71:6c:b4:8d:b6:e6:d4:ef:51:23:aa: cc:bd:7f:7d:96:5a:5a:d1:4c:5e:66:76:2f:29:46: 66:43:cd:c9:da:55:36:1c:b5:e4:8b:ea:7a:e6:3f: a3:52:94:9c:19:be:09:44:51:71:25:9f:5f:63:2a: bb:7c:62:6b:b1:ce:3a:c0:7e:69:01:f0:09:0a:d2: 5c:4a:f0:72:a8:8d:5b:3c:87:db:5f:22:14:39:fb: e8:66:6b:c2:47:53:0e:1f:3b:8f:1c:54:43:c0:98: 13:4c:07:fd:35:9a:e5:b1:4b:7c:95:17:1b:6d:64: 0a:77:fb:ff:6e:c2:e0:da:46:5c:bf:0c:22:c9:c4: b6:27:5c:dc:fe:ba:ee:cb:e0:02:cc:d6:03:5e:34: 20:fc:4c:59:6b:94:06:cd:d0:d1:2b:73:58:2e:04: dc:1c:95:45:6b:19:79:30:8b:40:f4:b7:45:23:93: 7a:f5:94:8a:17:23:20:46:e2:b8:67:ab:45:19:7f: fc:8a:ed:c9:aa:e3:be:d0:04:3a:02:95:37:72:ac: 58:5e:cb:37:7c:15:71:53:f0:08:8b:9d:10:fe:3b: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E5:52:71:2E:26:33:4D:42:99:DE:FF:6E:5A:EF:BC:46:B4:A2:63 X509v3 Authority Key Identifier: keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:f6:f4:9e:ca:f7:38:39:43:b2:96:5f:77:65:f1:b7:18: 43:b8:a9:74:8f:4b:5a:22:c8:31:dc:22:6a:71:f5:db:a9:71: f3:a0:24:85:f7:2c:b0:6a:18:ab:5e:76:4a:55:db:c9:ba:f6: 12:ca:0a:43:eb:9c:e8:78:fe:66:19:34:f8:39:00:d6:c7:0d: 9f:a9:cd:bd:88:00:fc:a2:a7:a8:ac:f3:4c:4c:2a:ed:5e:27: 76:11:69:1b:a3:88:73:15:23:31:d1:80:c0:f1:be:87:99:0c: 02:25:b3:c1:12:a7:60:07:14:6b:62:76:d2:57:61:ce:50:bb: 92:65:af:a2:e1:73:ad:e1:f5:04:f7:55:fe:38:b8:be:dd:0a: 2c:79:f0:29:ea:b3:6d:ff:a0:c6:c6:d4:64:ec:25:62:04:c7: 0f:a2:78:e0:c4:64:55:eb:35:ca:4a:3d:35:9f:3a:55:c3:8d: a4:23:3f:cb:4f:e1:01:b7:22:44:ab:85:7c:47:4b:76:4f:ee: 7d:13:5e:8e:86:84:72:0e:4e:a4:ef:aa:8d:5f:db:27:45:35: 7d:4d:0c:e9:32:51:0f:21:ca:0e:6a:c4:3d:46:72:57:9c:18: fb:ec:12:7f:87:2c:53:f8:6c:a7:ef:49:0e:7a:33:be:c7:48: c3:0e:32:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkC9DQ+nd6r5L8PCqdtc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzgyMjM4Mjg5YTg4MDJjZjUyYjY3ZDliZjRhZTg3YTUw OTMzYzMwHhcNMjYwMjA5MTgwMDQ4WhcNMjYwMjEwMTgwMDQ4WjAzMTEwLwYDVQQD EyhiZGU1NTI3MTJlMjYzMzRkNDI5OWRlZmY2ZTVhZWZiYzQ2YjRhMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGKILnWT4dIzu5Hx8onKbxpRRCkC YC2xiQDBdUjKr4CXcWy0jbbm1O9RI6rMvX99llpa0UxeZnYvKUZmQ83J2lU2HLXk i+p65j+jUpScGb4JRFFxJZ9fYyq7fGJrsc46wH5pAfAJCtJcSvByqI1bPIfbXyIU OfvoZmvCR1MOHzuPHFRDwJgTTAf9NZrlsUt8lRcbbWQKd/v/bsLg2kZcvwwiycS2 J1zc/rruy+ACzNYDXjQg/ExZa5QGzdDRK3NYLgTcHJVFaxl5MItA9LdFI5N69ZSK FyMgRuK4Z6tFGX/8iu3JquO+0AQ6ApU3cqxYXss3fBVxU/AIi50Q/jtSdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3lUnEuJjNNQpne/25a77xGtKJjMB8GA1UdIwQY MBaAFF04IjgomogCz1K2fZv0roelCTPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDIt ODg1NzU3YzEyNDhmLzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDItODg1NzU3YzEyNDhm LzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPP29J7K 9zg5Q7KWX3dl8bcYQ7ipdI9LWiLIMdwianH126lx86AkhfcssGoYq152SlXbybr2 EsoKQ+uc6Hj+Zhk0+DkA1scNn6nNvYgA/KKnqKzzTEwq7V4ndhFpG6OIcxUjMdGA wPG+h5kMAiWzwRKnYAcUa2J20ldhzlC7kmWvouFzreH1BPdV/ji4vt0KLHnwKeqz bf+gxsbUZOwlYgTHD6J44MRkVes1yko9NZ86VcONpCM/y0/hAbciRKuFfEdLdk/u fRNejoaEcg5OpO+qjV/bJ0U1fU0M6TJRDyHKDmrEPUZyV5wY++wSf4csU/hsp+9J DnozvsdIww4yaw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:40 2026 by rpki-client