This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json) Hash identifier: S+iIKZ+40AJPlV70MXQqAC6VgGE6zmiHvqblyFM7Bu4= Subject key identifier: EC:11:22:91:11:32:8D:F7:31:64:EC:A9:31:B7:7F:84:FA:80:7C:9E Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Certificate serial: 019C446B7E0A3A645D2071EF848110DAF19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft Manifest number: 1700 Signing time: Mon 09 Feb 2026 22:00:21 +0000 Manifest this update: Mon 09 Feb 2026 22:00:21 +0000 Manifest next update: Tue 10 Feb 2026 22:00:21 +0000 Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: vgjbCKt33CfgHTL1Ku0nFBsc9VdI9CLX/Bzo6fHfMu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:7e:0a:3a:64:5d:20:71:ef:84:81:10:da:f1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Validity Not Before: Feb 9 22:00:21 2026 GMT Not After : Feb 10 22:00:21 2026 GMT Subject: CN=ec11229111328df73164eca931b77f84fa807c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:99:b6:08:d6:ce:6b:d1:4e:4a:ee:2f:c8: 69:5e:81:3b:c4:ef:0b:aa:eb:5d:77:72:b7:30:46: e0:ac:c0:31:67:66:53:c5:3e:b5:4b:a7:6c:ce:1c: 1d:b1:31:07:f9:d3:21:a0:b6:32:85:a2:11:78:91: 85:45:d9:3d:78:53:2f:74:0a:e0:47:03:2d:00:c2: b7:c6:87:28:10:77:c8:2a:ca:3b:ed:88:cf:3c:e0: 8a:cd:87:aa:41:95:0c:0d:5e:86:ff:d4:b6:14:0d: 94:8d:50:e1:b5:a4:3f:06:27:8f:6f:d2:f3:86:37: 50:ee:90:41:bd:47:bb:7b:df:06:ff:bd:68:c9:07: 65:f7:f3:e4:f8:bf:e0:08:2f:47:df:7f:e5:6c:ea: 68:c1:de:0f:05:97:bc:7f:ee:89:74:37:6e:d5:3f: 0a:72:e0:44:4e:c2:2e:d6:9f:f6:7f:67:c6:b6:40: 84:4b:9b:f2:14:cd:15:dd:7c:99:78:f0:68:98:32: 44:0f:aa:95:26:e2:b8:66:fd:ae:27:2c:8b:23:d8: 82:48:64:76:cb:b3:99:30:0f:38:63:a7:18:4f:b0: 33:19:8b:07:0c:2e:81:36:e3:04:0c:1b:0b:53:91: 2c:62:a2:09:65:04:97:ab:5e:11:e4:d6:03:5f:f5: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:11:22:91:11:32:8D:F7:31:64:EC:A9:31:B7:7F:84:FA:80:7C:9E X509v3 Authority Key Identifier: keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:ad:e2:1a:b4:dd:d7:14:42:1b:3a:8d:e7:85:1b:96:28: bf:51:40:0f:d0:73:bd:68:cd:75:77:4d:23:c7:80:f9:20:1d: 84:0b:db:34:f8:42:df:54:39:f2:d7:2c:51:d8:00:c1:c1:f0: 4a:5c:e1:3f:cb:40:f3:01:99:ac:70:d4:03:06:f6:e8:84:d3: 90:d6:ef:05:15:54:48:fd:f3:7f:f5:ee:50:ef:fa:8d:3d:30: 3d:87:2b:fe:6f:06:81:9a:13:b4:08:5e:80:15:1d:8c:49:75: c9:e1:5a:a0:e2:fb:e9:0a:cb:c6:1e:41:ed:24:bf:57:5a:61: 0a:0c:f0:c9:e1:10:39:82:cf:af:e8:5f:bf:dd:85:a2:95:32: 64:25:4e:0d:61:7b:57:c2:fc:93:eb:b0:8f:df:f9:97:b9:97: fe:77:e8:bd:72:90:2d:fa:d9:bb:ae:67:44:5b:d2:a1:07:c7: 2f:47:0e:fc:63:80:5a:41:2c:8d:31:48:5e:66:22:80:f7:24: a8:82:a4:7a:c9:b2:c7:ef:95:97:ae:b4:51:ae:d4:55:75:b7: 18:c5:2d:65:a3:61:68:bb:0e:67:0f:d3:c1:cd:a1:63:1b:16: 6a:7f:9e:23:81:d1:e5:a7:6a:b6:47:2e:e3:f7:02:3c:ac:9e: ca:01:9f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa34KOmRdIHHvhIEQ2vGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTZmMjVhNDU1MWNmOGIyYzJlZjM5NTk0Njg4ZGFmMGE5 YjI1NmIwHhcNMjYwMjA5MjIwMDIxWhcNMjYwMjEwMjIwMDIxWjAzMTEwLwYDVQQD EyhlYzExMjI5MTExMzI4ZGY3MzE2NGVjYTkzMWI3N2Y4NGZhODA3YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWZtgjWzmvRTkruL8hpXoE7xO8L qutdd3K3MEbgrMAxZ2ZTxT61S6dszhwdsTEH+dMhoLYyhaIReJGFRdk9eFMvdArg RwMtAMK3xocoEHfIKso77YjPPOCKzYeqQZUMDV6G/9S2FA2UjVDhtaQ/BiePb9Lz hjdQ7pBBvUe7e98G/71oyQdl9/Pk+L/gCC9H33/lbOpowd4PBZe8f+6JdDdu1T8K cuBETsIu1p/2f2fGtkCES5vyFM0V3XyZePBomDJED6qVJuK4Zv2uJyyLI9iCSGR2 y7OZMA84Y6cYT7AzGYsHDC6BNuMEDBsLU5EsYqIJZQSXq14R5NYDX/WxjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwRIpERMo33MWTsqTG3f4T6gHyeMB8GA1UdIwQY MBaAFF3m8lpFUc+LLC7zlZRoja8KmyVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYt NjQ4ZGNjY2VlMDE1LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYtNjQ4ZGNjY2VlMDE1 LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbyt4hq0 3dcUQhs6jeeFG5Yov1FAD9BzvWjNdXdNI8eA+SAdhAvbNPhC31Q58tcsUdgAwcHw SlzhP8tA8wGZrHDUAwb26ITTkNbvBRVUSP3zf/XuUO/6jT0wPYcr/m8GgZoTtAhe gBUdjEl1yeFaoOL76QrLxh5B7SS/V1phCgzwyeEQOYLPr+hfv92FopUyZCVODWF7 V8L8k+uwj9/5l7mX/nfovXKQLfrZu65nRFvSoQfHL0cO/GOAWkEsjTFIXmYigPck qIKkesmyx++Vl660Ua7UVXW3GMUtZaNhaLsOZw/Twc2hYxsWan+eI4HR5adqtkcu 4/cCPKyeygGfwg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:51 2026 by rpki-client