This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json) Hash identifier: I4vGr//pR+C60gIZAj5Qgi5bakGKgfgxuUc3souU8Gk= Subject key identifier: 8C:9C:51:55:F7:E0:10:74:F9:45:F1:4C:73:4C:42:8F:D2:82:9D:28 Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c Certificate serial: 019C43596DCB58B3356CD73E350B59DE9394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft Manifest number: 07DF Signing time: Mon 09 Feb 2026 17:01:00 +0000 Manifest this update: Mon 09 Feb 2026 17:01:00 +0000 Manifest next update: Tue 10 Feb 2026 17:01:00 +0000 Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: gwq+pigh2QdwOYXjWQuUmM7mUSgKgZYm3YguoAg92m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:6d:cb:58:b3:35:6c:d7:3e:35:0b:59:de:93:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c Validity Not Before: Feb 9 17:01:00 2026 GMT Not After : Feb 10 17:01:00 2026 GMT Subject: CN=8c9c5155f7e01074f945f14c734c428fd2829d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:15:31:26:a8:2d:20:2f:6c:3c:9c:92:fd: 74:6c:5f:47:8e:f2:6c:ef:f4:98:a8:0f:d9:30:8b: e3:c4:39:09:04:1c:c4:44:90:d2:01:5b:dd:b4:cd: ba:9f:ea:80:24:ab:b4:33:e5:04:3a:06:25:20:0f: ca:98:87:c2:7f:a7:74:49:97:19:ec:e6:1b:9a:e3: cc:e2:75:fa:f4:17:02:83:76:e2:17:c4:8a:21:a3: ea:b2:6d:31:b3:16:62:b1:7c:58:58:6c:76:29:bd: 5c:b2:17:90:80:b5:05:11:54:a1:8c:26:a3:3b:05: 48:e3:01:39:c0:ff:d6:81:4d:ca:2e:e3:6b:54:89: 8f:14:eb:fb:da:db:83:cf:4e:8f:ec:39:d1:1e:c4: 2e:28:fe:0f:13:9a:13:55:25:4e:cb:e7:7d:c8:82: cc:bd:d9:5e:9d:de:02:42:26:5b:e5:c7:48:8d:f0: b8:d3:51:6f:46:37:de:3a:90:14:89:99:9a:c9:f7: 7a:d3:92:aa:36:2c:b9:1d:4f:62:16:bc:5f:d9:1d: c1:83:db:d8:37:25:aa:06:e5:41:01:87:99:d8:2c: 50:44:96:d5:9d:cc:c1:82:b0:bf:9f:6f:7f:74:d1: 1b:73:63:a1:02:86:22:dc:39:39:28:e0:23:aa:ed: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9C:51:55:F7:E0:10:74:F9:45:F1:4C:73:4C:42:8F:D2:82:9D:28 X509v3 Authority Key Identifier: keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1b:bc:85:0e:2a:a5:40:7a:43:53:7e:16:72:ac:ea:27:65: b0:93:03:aa:f5:60:b0:c2:dc:9c:67:b9:6d:3b:ef:5a:91:f5: 04:99:a1:e8:c5:30:79:9a:c1:93:40:02:e1:c6:70:6c:a9:7f: a7:95:7b:b7:33:b7:da:24:4e:20:be:22:88:55:52:2e:2b:5e: cb:ab:ec:28:2d:d1:bd:ff:70:96:8d:92:ad:05:b2:b6:80:2f: fe:d7:fd:93:a8:09:35:3b:4e:20:10:ca:cd:42:60:5a:05:9a: 13:91:ba:3e:e9:73:f9:74:d8:2b:a2:56:4e:b7:0d:ff:d0:72: 89:b0:c3:86:e4:18:2e:0d:b8:ae:63:30:8a:2a:38:a7:5c:d3: 49:a4:3e:a2:3d:63:c5:ae:61:36:33:c5:ee:ba:67:1e:5f:b2: 20:55:6e:fc:bb:e8:78:49:38:a3:53:d1:e0:16:68:6c:3a:eb: 5e:ec:af:f8:44:4a:d4:49:04:8e:39:fb:60:a1:ee:80:ba:aa: 1f:e0:08:cd:a4:f2:65:a0:d1:05:34:e0:bf:0c:95:79:44:de: 97:ab:f3:c8:3f:0f:af:81:32:c9:43:61:60:00:de:4d:28:7e: d2:fc:7c:90:e1:48:46:25:04:ea:bb:9c:0c:48:9d:6d:b6:68: d1:9d:de:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWW3LWLM1bNc+NQtZ3pOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OGVjOTU5ZmRlYThmZGM4OTg1MmQ0MmQ1MDYyMmQ4MmQ2 Y2ExMmMwHhcNMjYwMjA5MTcwMTAwWhcNMjYwMjEwMTcwMTAwWjAzMTEwLwYDVQQD Eyg4YzljNTE1NWY3ZTAxMDc0Zjk0NWYxNGM3MzRjNDI4ZmQyODI5ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0YVMSaoLSAvbDyckv10bF9HjvJs 7/SYqA/ZMIvjxDkJBBzERJDSAVvdtM26n+qAJKu0M+UEOgYlIA/KmIfCf6d0SZcZ 7OYbmuPM4nX69BcCg3biF8SKIaPqsm0xsxZisXxYWGx2Kb1csheQgLUFEVShjCaj OwVI4wE5wP/WgU3KLuNrVImPFOv72tuDz06P7DnRHsQuKP4PE5oTVSVOy+d9yILM vdlend4CQiZb5cdIjfC401FvRjfeOpAUiZmayfd605KqNiy5HU9iFrxf2R3Bg9vY NyWqBuVBAYeZ2CxQRJbVnczBgrC/n29/dNEbc2OhAoYi3Dk5KOAjqu06iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIycUVX34BB0+UXxTHNMQo/Sgp0oMB8GA1UdIwQY MBaAFMSOyVn96o/ciYUtQtUGItgtbKEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMt NDMzM2FkNGUyMTNhLzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMtNDMzM2FkNGUyMTNh LzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxu8hQ4q pUB6Q1N+FnKs6idlsJMDqvVgsMLcnGe5bTvvWpH1BJmh6MUweZrBk0AC4cZwbKl/ p5V7tzO32iROIL4iiFVSLitey6vsKC3Rvf9wlo2SrQWytoAv/tf9k6gJNTtOIBDK zUJgWgWaE5G6Pulz+XTYK6JWTrcN/9ByibDDhuQYLg24rmMwiio4p1zTSaQ+oj1j xa5hNjPF7rpnHl+yIFVu/LvoeEk4o1PR4BZobDrrXuyv+ERK1EkEjjn7YKHugLqq H+AIzaTyZaDRBTTgvwyVeUTel6vzyD8Pr4EyyUNhYADeTSh+0vx8kOFIRiUE6ruc DEidbbZo0Z3e3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:22 2026 by rpki-client