This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json) Hash identifier: bDrIvy+Idp8GXKwZjSPczNuAJ5QJiQ9R/q2hZeOT89U= Subject key identifier: 3B:F4:08:32:33:59:4E:26:22:0E:18:B4:EB:A6:18:02:FE:6F:7E:6A Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28 Certificate serial: 019C43FE73E8E4BEF6D5A6DF0612F4114245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:01:15 +0000 Manifest this update: Mon 09 Feb 2026 20:01:15 +0000 Manifest next update: Tue 10 Feb 2026 20:01:15 +0000 Files and hashes: 1: KK6V4tkkGOTlna1jDdLR34C1144.roa (hash: VJsTur/NQjIjrIZYxVHk28VDPEOKoZ9mo1/7vuIP+oc=) 2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: s+SzQ2V3z+krKp/C5fE+1jrz5WGzL9movQxpGFyKn6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:73:e8:e4:be:f6:d5:a6:df:06:12:f4:11:42:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28 Validity Not Before: Feb 9 20:01:15 2026 GMT Not After : Feb 10 20:01:15 2026 GMT Subject: CN=3bf4083233594e26220e18b4eba61802fe6f7e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:d1:ef:6c:d0:ef:d6:f1:93:eb:e0:2f:59: 3b:1d:39:8c:f3:11:e8:e9:aa:03:cc:0a:54:95:e9: 4c:d0:24:06:20:56:d5:5d:ae:9c:ee:f2:51:d0:7e: 06:db:0b:c3:71:91:b3:ea:bb:b4:39:81:80:11:8a: a1:ab:14:17:34:62:e8:1b:dc:12:1a:07:a8:e7:23: 3c:d6:e5:ad:e2:38:d7:50:0c:55:c5:d2:b6:60:a2: b4:61:81:b5:cc:65:8a:92:ee:6b:8e:69:54:61:e0: ae:42:07:cb:b9:10:20:85:8c:ce:74:a0:cc:1c:d5: 2c:53:3a:21:d3:65:25:da:c4:b1:ea:75:48:0f:97: 94:00:fa:46:9d:d8:c5:92:9f:2c:e6:23:8f:ba:ed: 83:1f:ca:47:4a:08:cb:18:d4:dd:e3:10:ca:8f:e2: 78:7d:18:3f:6b:60:0a:2f:f5:86:26:b2:b1:fa:c7: 14:49:50:be:a1:d8:1c:8a:54:ff:ac:b5:1f:52:e0: ba:c6:44:23:f7:c2:73:ba:a5:cf:19:39:b0:bd:9b: c8:13:10:e9:de:cb:3f:88:57:f3:ae:d1:62:08:fc: d7:32:54:1a:7c:b1:c0:86:8b:38:01:3a:6c:b4:91: 5f:25:64:0d:a7:d4:cd:f2:ed:83:27:f3:46:43:25: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:08:32:33:59:4E:26:22:0E:18:B4:EB:A6:18:02:FE:6F:7E:6A X509v3 Authority Key Identifier: keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2e:a7:7b:1c:29:2a:fd:32:c2:3c:9e:7b:32:9e:fd:70:1d: a7:1b:f7:48:ca:16:7e:d6:20:51:7f:f2:02:34:44:20:1d:13: 95:69:73:b6:ec:88:7f:a3:c7:57:5d:08:66:77:e3:80:37:28: da:4b:4c:1b:a6:2c:be:3d:a4:e4:e9:b1:89:2e:93:84:ce:67: 79:26:2c:40:74:42:05:5f:f1:ab:24:96:95:37:ed:5b:fd:67: ba:ce:16:df:db:fa:c9:c5:33:40:db:2e:76:7b:e5:6b:3c:0f: a0:fd:ba:d4:82:41:27:b1:f7:4c:ed:d1:29:16:b0:34:ea:46: ec:d2:67:e4:06:d3:9c:8c:9a:93:27:11:ab:7b:01:87:96:83: 80:ad:34:b4:f3:fc:db:ed:1e:a6:d7:2b:93:18:bd:b3:a2:53: c3:8b:74:5f:50:22:34:a5:2e:a1:2f:5e:4c:45:b2:88:61:eb: fe:5e:93:a6:00:b7:ff:3f:30:79:42:f6:bf:34:77:ce:33:41: de:e2:ea:53:8e:97:3b:d7:1e:2d:e4:06:3b:85:88:38:8c:88: f1:08:3e:e9:c4:57:60:97:dc:e2:a7:15:2c:f7:c6:a6:34:27: 6f:4c:76:db:dd:19:e6:f1:47:0d:2b:bb:26:2b:df:74:c7:aa: 5b:59:4a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nPo5L721abfBhL0EUJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjI4N2M2ODQ1OGY5ODBjYTliN2MzNmQ2MWY2YWY1ODY0 NjRiMjgwHhcNMjYwMjA5MjAwMTE1WhcNMjYwMjEwMjAwMTE1WjAzMTEwLwYDVQQD EygzYmY0MDgzMjMzNTk0ZTI2MjIwZTE4YjRlYmE2MTgwMmZlNmY3ZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphLR72zQ79bxk+vgL1k7HTmM8xHo 6aoDzApUlelM0CQGIFbVXa6c7vJR0H4G2wvDcZGz6ru0OYGAEYqhqxQXNGLoG9wS Ggeo5yM81uWt4jjXUAxVxdK2YKK0YYG1zGWKku5rjmlUYeCuQgfLuRAghYzOdKDM HNUsUzoh02Ul2sSx6nVID5eUAPpGndjFkp8s5iOPuu2DH8pHSgjLGNTd4xDKj+J4 fRg/a2AKL/WGJrKx+scUSVC+odgcilT/rLUfUuC6xkQj98JzuqXPGTmwvZvIExDp 3ss/iFfzrtFiCPzXMlQafLHAhos4ATpstJFfJWQNp9TN8u2DJ/NGQyXnbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv0CDIzWU4mIg4YtOumGAL+b35qMB8GA1UdIwQY MBaAFMQih8aEWPmAypt8NtYfavWGRksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMt YjEyZDdmODkyZjViLzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMtYjEyZDdmODkyZjVi LzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC6nexwp Kv0ywjyeezKe/XAdpxv3SMoWftYgUX/yAjREIB0TlWlztuyIf6PHV10IZnfjgDco 2ktMG6Ysvj2k5OmxiS6ThM5neSYsQHRCBV/xqySWlTftW/1nus4W39v6ycUzQNsu dnvlazwPoP261IJBJ7H3TO3RKRawNOpG7NJn5AbTnIyakycRq3sBh5aDgK00tPP8 2+0eptcrkxi9s6JTw4t0X1AiNKUuoS9eTEWyiGHr/l6TpgC3/z8weUL2vzR3zjNB 3uLqU46XO9ceLeQGO4WIOIyI8Qg+6cRXYJfc4qcVLPfGpjQnb0x2290Z5vFHDSu7 JivfdMeqW1lKEg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:00 2026 by rpki-client