This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json) Hash identifier: rPLkGzcOwvU8PPgoZvmT+Nx47pOyuQejrM4Wx/S4aJQ= Subject key identifier: 10:0E:4F:1A:93:23:31:B3:BF:08:49:1F:E1:DE:E0:C8:CF:22:AA:4A Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84 Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284 Certificate serial: 019C42B43FFC8C49345D29EAA6884CE00B81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft Manifest number: 14C3 Signing time: Mon 09 Feb 2026 14:00:34 +0000 Manifest this update: Mon 09 Feb 2026 14:00:34 +0000 Manifest next update: Tue 10 Feb 2026 14:00:34 +0000 Files and hashes: 1: D4mNPYe_InC3dADZ__TafnXmCbA.roa (hash: 6g1alEqsAaujZY20/+cKTFN3EVqBFkIkRy8k+84+qhk=) 2: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: 0MzJWQMQzvZ68rcH/VH+dbWBTtVk5r1ITKG1Bzqx7h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3f:fc:8c:49:34:5d:29:ea:a6:88:4c:e0:0b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284 Validity Not Before: Feb 9 14:00:34 2026 GMT Not After : Feb 10 14:00:34 2026 GMT Subject: CN=100e4f1a932331b3bf08491fe1dee0c8cf22aa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:d2:08:7c:73:2b:cf:23:0e:0b:71:70:1c: c3:9e:5e:b6:b5:c4:39:e1:45:17:20:ce:c8:2f:7d: 59:8c:f8:4f:c2:7c:89:0f:f1:e0:7a:18:ff:fe:ab: 76:9c:cf:be:0b:6d:9b:05:a6:a5:4c:79:22:6b:94: d6:f7:4a:fb:78:1b:ac:cc:ef:10:55:2d:f7:4c:17: 54:18:cd:20:fe:bc:64:31:2d:e6:e6:bd:8c:af:99: f5:6e:80:3e:a0:65:fc:65:8f:73:28:4b:40:0a:f0: ab:88:39:17:a0:b4:9b:57:0a:10:60:90:e9:3c:12: f2:95:ad:46:00:92:d7:a8:53:08:34:33:6f:23:3b: ed:9f:1b:00:ce:8e:62:10:85:c6:d9:fe:b3:db:97: eb:b4:92:32:b2:2e:6e:d5:77:c4:b7:ce:f8:e3:f5: 83:36:e9:1f:6e:24:72:8a:0b:5f:f8:08:5f:96:3f: b9:89:a1:49:d0:22:87:8f:40:87:3e:7b:d2:4a:74: f4:d2:d4:96:14:05:3b:6e:15:25:2d:7c:e5:fc:7b: b9:85:a3:e0:fa:4a:f0:d5:5f:cf:07:6d:8e:b1:7e: 06:fb:d4:40:dd:63:5a:f9:d3:4b:27:fd:bd:d4:29: 22:5f:e1:f8:44:c8:9f:d0:ad:21:87:0b:62:a8:59: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0E:4F:1A:93:23:31:B3:BF:08:49:1F:E1:DE:E0:C8:CF:22:AA:4A X509v3 Authority Key Identifier: keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4a:10:d7:00:f9:c5:6c:43:a7:d4:3b:ff:59:e6:a8:01:d4: cc:68:81:0e:af:84:9f:35:57:e4:47:7b:c1:d1:46:8a:80:0d: 25:44:91:b5:a2:65:4f:9e:1f:00:54:18:4c:dc:d5:e9:bc:f7: 2f:dc:16:08:80:37:3e:08:81:ae:06:d9:b7:71:49:13:d3:6e: fd:4c:cf:14:f6:d3:87:cd:b7:88:88:2b:33:d2:c2:ec:1b:a2: 94:bb:04:6c:1c:52:18:1a:78:f7:76:a9:8e:cb:c1:ee:5c:07: 03:0d:15:04:6d:ec:91:0c:d8:60:db:f0:44:b5:06:7d:44:42: 26:c0:75:99:62:9e:86:34:66:2f:68:6d:f6:ae:0b:35:6a:7b: a5:e9:a8:df:54:10:03:aa:58:6c:a5:9f:bc:40:12:04:bc:47: 5c:33:b8:4c:d9:bd:0f:11:04:fd:f9:da:00:a7:11:c0:0b:bd: c9:b2:67:82:76:08:5e:73:48:c0:29:48:83:ac:73:03:23:34: df:4a:31:97:59:96:14:73:3b:d3:36:e6:97:92:84:c1:a6:67: 72:d4:ff:fd:a2:f9:28:8a:a4:8b:08:01:68:d4:af:d9:4b:00: 0a:1a:e4:14:2e:65:15:bf:fb:39:30:95:14:0f:db:82:d5:f4: dd:61:e6:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtD/8jEk0XSnqpohM4AuBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmE1ZjUyYjAwMmY2Mjg2YzFkNWViMjU3YmI1ZTg1MzM0 MmEyODQwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD EygxMDBlNGYxYTkzMjMzMWIzYmYwODQ5MWZlMWRlZTBjOGNmMjJhYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGzSCHxzK88jDgtxcBzDnl62tcQ5 4UUXIM7IL31ZjPhPwnyJD/Hgehj//qt2nM++C22bBaalTHkia5TW90r7eBuszO8Q VS33TBdUGM0g/rxkMS3m5r2Mr5n1boA+oGX8ZY9zKEtACvCriDkXoLSbVwoQYJDp PBLyla1GAJLXqFMINDNvIzvtnxsAzo5iEIXG2f6z25frtJIysi5u1XfEt8744/WD NukfbiRyigtf+Ahflj+5iaFJ0CKHj0CHPnvSSnT00tSWFAU7bhUlLXzl/Hu5haPg +krw1V/PB22OsX4G+9RA3WNa+dNLJ/291CkiX+H4RMif0K0hhwtiqFnsyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAOTxqTIzGzvwhJH+He4MjPIqpKMB8GA1UdIwQY MBaAFFxqX1KwAvYobB1esle7XoUzQqKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUt MDk2YzljMDdhZTE4LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNGVjYjEtYTBmNS00MjYxLWJjZGUtMDk2YzljMDdhZTE4 LzEvWEdwZlVyQUM5aWhzSFY2eVY3dGVoVE5Db29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkoQ1wD5 xWxDp9Q7/1nmqAHUzGiBDq+EnzVX5Ed7wdFGioANJUSRtaJlT54fAFQYTNzV6bz3 L9wWCIA3PgiBrgbZt3FJE9Nu/UzPFPbTh823iIgrM9LC7BuilLsEbBxSGBp493ap jsvB7lwHAw0VBG3skQzYYNvwRLUGfURCJsB1mWKehjRmL2ht9q4LNWp7pemo31QQ A6pYbKWfvEASBLxHXDO4TNm9DxEE/fnaAKcRwAu9ybJngnYIXnNIwClIg6xzAyM0 30oxl1mWFHM70zbml5KEwaZnctT//aL5KIqkiwgBaNSv2UsAChrkFC5lFb/7OTCV FA/bgtX03WHmFA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:49 2026 by rpki-client