This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json) Hash identifier: ojaWlVLcXRd4Tj0R8g6v3oqO+BUEkTZtDEmW07QJh64= Subject key identifier: 41:D9:08:26:AF:12:0A:C2:5A:A4:AC:8C:71:B3:A8:42:23:9C:4C:61 Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Certificate serial: 019C420FA6AC6B5F2ABCA3A18B561A9FBAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft Manifest number: 10CD Signing time: Mon 09 Feb 2026 11:00:47 +0000 Manifest this update: Mon 09 Feb 2026 11:00:47 +0000 Manifest next update: Tue 10 Feb 2026 11:00:47 +0000 Files and hashes: 1: UZseksy0uhuo08VXcgnfylQC3DI.roa (hash: WI6osdG7JdUaHymm4KYLyMVR4pGV77Pctw9oWtJpBZw=) 2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: Ou/VVhumW4WxHD0PpKUzSzaJbxbaXzFSmWACImM+uy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a6:ac:6b:5f:2a:bc:a3:a1:8b:56:1a:9f:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Validity Not Before: Feb 9 11:00:47 2026 GMT Not After : Feb 10 11:00:47 2026 GMT Subject: CN=41d90826af120ac25aa4ac8c71b3a842239c4c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:46:7e:5a:10:80:d2:f0:54:09:73:59:8b: f8:03:e9:e3:67:b1:8c:ec:a5:1e:ee:ca:9d:47:aa: 8a:84:a6:ef:36:ab:e3:ab:32:e8:57:7a:2f:b9:b2: 74:85:98:42:36:25:09:ab:e1:bd:52:75:50:6e:37: 7c:e3:98:4f:06:1c:c5:5e:95:c9:97:08:e2:b1:76: ec:ed:90:a1:06:aa:78:73:f6:e9:4e:52:32:37:78: 39:93:3f:db:c3:d4:f7:cb:31:bd:c3:77:1f:29:9f: 9b:f3:09:0a:34:d5:1b:93:ba:e6:b2:1d:c0:51:7d: c1:2e:07:67:f7:cc:87:22:4b:ad:38:2b:1b:6f:f7: 31:41:bb:4f:e6:07:4c:1b:07:6d:f0:4f:89:94:e5: 13:7f:37:cd:d9:38:8a:e4:4f:ed:88:36:b7:b7:48: 19:3e:c6:d4:85:73:13:86:a1:08:f0:33:f8:84:8f: 27:12:fe:9b:b0:64:23:93:ad:0c:7b:fa:59:e6:49: 20:ce:44:46:40:eb:f4:9e:74:ec:ce:bd:8e:e0:f9: 6f:32:58:55:38:0c:83:2a:08:da:bd:55:f8:33:26: b8:ab:fe:dc:69:f0:ad:37:32:87:82:a3:1e:e5:bd: 8b:60:f9:ce:63:e5:1b:66:52:7f:f3:b1:57:01:46: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:08:26:AF:12:0A:C2:5A:A4:AC:8C:71:B3:A8:42:23:9C:4C:61 X509v3 Authority Key Identifier: keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:f0:ab:a2:b1:70:f5:2d:cc:06:f0:5e:aa:55:94:c7:a6: dc:67:ec:46:ae:ba:52:80:4c:3c:d6:6a:cd:90:0e:83:99:ba: 69:69:64:de:9d:f2:49:cd:07:b2:7a:3a:e7:94:04:41:d3:62: d8:a4:9f:73:78:54:ae:ab:cb:05:30:a3:3f:44:b3:70:61:e1: b2:66:9a:98:0e:0e:6b:3b:57:0f:ab:49:63:89:c2:26:82:fb: 26:69:7c:02:8c:b2:16:e4:27:6d:5a:43:7c:e1:a4:d7:c1:19: fc:b0:69:2e:88:68:ff:0f:1c:69:66:e1:e0:92:e0:45:ea:b8: b0:5c:92:74:e5:56:0d:5b:5b:59:32:e1:db:de:ec:a6:4a:a8: 91:a0:c2:98:71:cb:5d:7b:c9:1c:34:a5:69:41:8c:14:11:67: 76:fd:34:25:0a:c0:6b:9e:3a:a9:b2:fa:16:7b:af:9d:97:d7: 46:1b:20:00:e7:65:27:d4:b1:08:70:10:7b:ce:bd:b7:ca:7b: 63:ec:4a:e4:0e:00:df:7a:13:fd:72:16:90:b3:6d:36:0b:0b: 36:81:35:74:ff:5a:a2:23:87:76:52:63:f4:d6:c9:8b:0d:16: e2:7c:9a:99:45:6c:26:b7:0e:37:a5:70:df:98:8c:90:55:3e: 1a:c8:fe:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6asa18qvKOhi1Yan7quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj NDY5Y2YwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD Eyg0MWQ5MDgyNmFmMTIwYWMyNWFhNGFjOGM3MWIzYTg0MjIzOWM0YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVGfloQgNLwVAlzWYv4A+njZ7GM 7KUe7sqdR6qKhKbvNqvjqzLoV3ovubJ0hZhCNiUJq+G9UnVQbjd845hPBhzFXpXJ lwjisXbs7ZChBqp4c/bpTlIyN3g5kz/bw9T3yzG9w3cfKZ+b8wkKNNUbk7rmsh3A UX3BLgdn98yHIkutOCsbb/cxQbtP5gdMGwdt8E+JlOUTfzfN2TiK5E/tiDa3t0gZ PsbUhXMThqEI8DP4hI8nEv6bsGQjk60Me/pZ5kkgzkRGQOv0nnTszr2O4PlvMlhV OAyDKgjavVX4Mya4q/7cafCtNzKHgqMe5b2LYPnOY+UbZlJ/87FXAUY/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHZCCavEgrCWqSsjHGzqEIjnExhMB8GA1UdIwQY MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt Y2VlNGM1MTg3NzBkLzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrfwq6Kx cPUtzAbwXqpVlMem3GfsRq66UoBMPNZqzZAOg5m6aWlk3p3ySc0Hsno655QEQdNi 2KSfc3hUrqvLBTCjP0SzcGHhsmaamA4OaztXD6tJY4nCJoL7Jml8AoyyFuQnbVpD fOGk18EZ/LBpLoho/w8caWbh4JLgReq4sFySdOVWDVtbWTLh297spkqokaDCmHHL XXvJHDSlaUGMFBFndv00JQrAa546qbL6FnuvnZfXRhsgAOdlJ9SxCHAQe869t8p7 Y+xK5A4A33oT/XIWkLNtNgsLNoE1dP9aoiOHdlJj9NbJiw0W4nyamUVsJrcON6Vw 35iMkFU+Gsj+Eg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:52 2026 by rpki-client