This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json) Hash identifier: ctRx97VzQ0Xb9FAdZoiD3V7GQz/eVaTBr+0KD8PSDpU= Subject key identifier: 14:8B:62:5D:F2:19:93:1E:45:4E:B4:AC:28:CA:0A:7B:18:86:0D:02 Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a Certificate serial: 019C427DA639466D96C6B7C50B73C02A64E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft Manifest number: 0178 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa (hash: Buoj/gVa9VpkIZHwN4cu0QEoROO7EbtKc1cRDJ64dfw=) 2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: bU6KGjUsZrl+sHy5mupkfzO0UWOo0xIoOV3pc4/zq+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a6:39:46:6d:96:c6:b7:c5:0b:73:c0:2a:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=148b625df219931e454eb4ac28ca0a7b18860d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:65:d4:92:ba:1a:ed:42:a2:a4:dd:8c:e7: 30:8c:21:c4:12:76:45:86:ba:96:84:6b:f1:e2:08: 53:d7:dd:85:80:de:50:e2:2d:0a:c7:c9:58:e1:77: b4:43:51:f6:03:33:36:de:ce:94:3f:81:91:d9:a5: 7f:4e:b1:99:75:7c:ba:6c:6c:09:07:76:91:8d:e2: 09:32:d8:32:aa:92:7d:7b:38:8b:38:29:a9:4f:86: 78:49:83:7e:33:5b:59:8b:05:16:e3:6f:a8:39:3c: 32:64:9d:4e:2f:93:a1:e5:2a:1d:e6:d0:44:0f:b9: d7:10:1b:6e:e1:f0:72:2d:dc:5f:a9:a7:c2:e6:4d: 6c:9c:21:ae:1e:92:c4:2a:a2:fc:09:37:a3:76:1a: 0e:8a:63:a7:ce:9a:95:20:fb:3c:db:34:e8:05:66: c5:b0:d9:98:0b:ec:1c:f0:e9:54:b3:6a:ae:09:5f: 6d:e3:e6:58:33:79:85:f2:20:41:40:0b:47:2b:b8: e1:66:aa:a3:5f:20:5b:97:24:71:84:fc:56:75:de: 6d:08:d8:2c:0e:74:35:36:fc:a5:00:68:f0:5f:e2: e0:b2:98:74:d4:a3:08:e1:a0:fb:08:3d:e8:ef:d1: 63:8b:4a:ef:e7:cb:b6:51:2e:69:56:d4:eb:31:50: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:62:5D:F2:19:93:1E:45:4E:B4:AC:28:CA:0A:7B:18:86:0D:02 X509v3 Authority Key Identifier: keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b6:fd:da:59:75:a4:46:66:b2:a2:0e:00:0f:91:ad:58:6d: 19:91:7d:f8:18:4e:1f:4d:a3:e6:ad:c6:76:c2:c4:e6:b1:b1: a4:ef:d6:2f:c2:ce:8c:ad:82:3b:17:8a:5e:27:ef:2d:7c:a8: a3:81:a0:e6:95:cc:6c:0c:97:d9:48:8e:2e:f8:81:28:75:74: 79:64:6b:8d:d1:a2:1c:d6:e9:bc:4a:13:7f:6b:85:13:4a:2f: 03:63:cf:25:92:64:83:83:d9:40:34:49:62:96:94:2f:47:ef: 14:dd:c1:1a:65:17:a0:ff:23:09:80:8a:2d:d3:2b:13:2d:f9: f4:cd:51:41:0a:ae:78:df:80:2e:b1:af:f0:08:3c:91:94:c5: 1a:30:01:7b:9d:80:9c:0c:c6:0f:a3:05:d1:bc:cc:0c:ab:73: 71:b6:18:6b:e0:2a:32:19:b8:57:7d:0f:79:02:71:85:8c:50: fb:af:d5:ee:62:8b:2d:79:a1:dd:9b:ff:98:5f:d4:d5:1b:00: b3:f4:8d:bc:c5:78:8d:68:40:c1:b6:e7:01:b9:fe:6b:90:d6: a5:d1:24:fb:45:2a:83:49:f9:e5:19:8c:54:f9:f8:17:a4:f7: 8a:07:c8:c1:5b:dc:58:1d:46:4e:e8:8b:97:f3:5c:f1:3c:56: 49:37:c7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaY5Rm2WxrfFC3PAKmTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ODcyZGEwMzIyNTFiYWUwZGU1MTBhYzVlYTYxNTdlNGU0 ZTg2OGEwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EygxNDhiNjI1ZGYyMTk5MzFlNDU0ZWI0YWMyOGNhMGE3YjE4ODYwZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7pl1JK6Gu1CoqTdjOcwjCHEEnZF hrqWhGvx4ghT192FgN5Q4i0Kx8lY4Xe0Q1H2AzM23s6UP4GR2aV/TrGZdXy6bGwJ B3aRjeIJMtgyqpJ9eziLOCmpT4Z4SYN+M1tZiwUW42+oOTwyZJ1OL5Oh5Sod5tBE D7nXEBtu4fByLdxfqafC5k1snCGuHpLEKqL8CTejdhoOimOnzpqVIPs82zToBWbF sNmYC+wc8OlUs2quCV9t4+ZYM3mF8iBBQAtHK7jhZqqjXyBblyRxhPxWdd5tCNgs DnQ1NvylAGjwX+Lgsph01KMI4aD7CD3o79Fji0rv58u2US5pVtTrMVBPXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSLYl3yGZMeRU60rCjKCnsYhg0CMB8GA1UdIwQY MBaAFMeHLaAyJRuuDeUQrF6mFX5OToaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2Qt YTllNGE3ZGRmZTU5LzEveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZTNlMTYtNjkxNi00Y2E0LWI2Y2QtYTllNGE3ZGRmZTU5 LzEveDRjdG9ESWxHNjRONVJDc1hxWVZmazVPaG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLb92ll1 pEZmsqIOAA+RrVhtGZF9+BhOH02j5q3GdsLE5rGxpO/WL8LOjK2COxeKXifvLXyo o4Gg5pXMbAyX2UiOLviBKHV0eWRrjdGiHNbpvEoTf2uFE0ovA2PPJZJkg4PZQDRJ YpaUL0fvFN3BGmUXoP8jCYCKLdMrEy359M1RQQqueN+ALrGv8Ag8kZTFGjABe52A nAzGD6MF0bzMDKtzcbYYa+AqMhm4V30PeQJxhYxQ+6/V7mKLLXmh3Zv/mF/U1RsA s/SNvMV4jWhAwbbnAbn+a5DWpdEk+0Uqg0n55RmMVPn4F6T3igfIwVvcWB1GTuiL l/Nc8TxWSTfHog== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:50 2026 by rpki-client