This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json) Hash identifier: KiNy9YvQPv4KPQ8hu46CKn0IgoAPM3kSxSxFuOlfHhw= Subject key identifier: 58:3F:E9:FF:7A:3B:AE:8A:B6:7A:E5:EF:33:C2:81:0F:E8:78:C8:80 Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea Certificate serial: 019C43C6CD3D5D90D6B353E4187AA27EBA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft Manifest number: 05F5 Signing time: Mon 09 Feb 2026 19:00:27 +0000 Manifest this update: Mon 09 Feb 2026 19:00:27 +0000 Manifest next update: Tue 10 Feb 2026 19:00:27 +0000 Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: EPQD2/tWH+BUcsawt7LZFhrUeW5yHm9leemFTcsms3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:cd:3d:5d:90:d6:b3:53:e4:18:7a:a2:7e:ba:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea Validity Not Before: Feb 9 19:00:27 2026 GMT Not After : Feb 10 19:00:27 2026 GMT Subject: CN=583fe9ff7a3bae8ab67ae5ef33c2810fe878c880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:60:ec:09:eb:2d:27:bd:f2:79:c9:9b:f9: 25:53:3a:f9:78:fb:78:03:a1:3d:c0:5b:4c:f4:44: e3:90:1d:fb:69:d5:d1:66:78:97:cb:9c:f0:3e:45: a3:65:d3:f3:fa:75:38:40:0b:b9:d2:48:ea:9f:db: bc:b0:28:76:97:f3:a3:9e:4c:a0:ee:65:af:b8:ac: 5b:32:a1:de:a9:b2:50:c2:1b:dd:2f:8d:24:00:ac: 0c:4c:ee:0a:c0:20:56:88:7b:2a:ad:3e:58:b6:27: 92:61:0c:e4:47:75:9d:f5:a5:1b:cd:d7:82:2d:f1: c0:96:e3:a3:5b:48:bf:2b:82:9a:fa:be:e2:53:53: 3c:96:b2:3a:ea:83:35:f2:f3:9f:f0:f0:65:ca:c4: 8a:d6:3d:89:79:b6:19:05:db:4e:b7:cd:44:44:af: 49:82:8c:38:64:c2:eb:b0:35:32:3e:1e:0b:e1:f4: c7:9d:85:28:88:90:b0:b8:ab:5d:af:e6:f2:bd:49: ad:30:9d:3a:a7:3d:6b:d0:af:35:f0:e5:cc:f0:cc: 93:c1:e4:62:d6:3a:de:8c:6d:be:15:07:14:59:62: e8:d1:d0:c3:00:ce:32:b0:88:5c:a5:a2:f4:13:18: f8:16:e1:e8:14:5e:e9:a8:0e:5d:d7:73:54:47:27: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3F:E9:FF:7A:3B:AE:8A:B6:7A:E5:EF:33:C2:81:0F:E8:78:C8:80 X509v3 Authority Key Identifier: keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:05:ed:63:73:5c:88:20:9a:7f:f0:29:dc:8a:a4:95:01:1b: b6:07:33:89:9c:1d:c1:f6:0c:08:a3:5b:b7:b4:49:30:3a:86: e4:32:46:f2:7f:48:0a:98:09:0d:b0:71:68:d2:d3:d7:09:28: 1b:de:1d:91:c5:7c:27:c5:b3:0e:1c:9f:ea:f8:b4:62:02:76: 6f:f8:e9:04:45:83:8d:ff:26:df:db:9e:03:ae:2d:d2:0c:9a: c3:76:93:d1:15:d8:8c:d2:bd:f3:bf:5d:70:a8:09:27:f8:a8: 10:73:cc:ca:f6:23:3a:dc:aa:29:39:1a:f6:6e:8b:6f:ff:a1: 50:a0:7d:a9:0c:a7:47:a1:1b:f0:3d:b4:60:af:d9:e2:af:d8: 7d:7c:46:7a:4f:64:34:75:b9:01:e6:64:83:57:ac:d5:87:7c: ca:4a:b1:15:f6:ac:01:d5:a4:d7:55:98:3e:96:80:57:33:ba: 2d:cd:3d:bb:55:f2:9b:e9:51:6e:ce:df:ea:45:cf:b4:c4:2f: 7c:6d:e0:c3:92:52:07:49:8c:65:1f:ff:e4:1c:27:e4:61:30: e2:8a:22:f7:9f:8c:18:28:58:7b:0b:06:b5:aa:fa:88:a6:b7: 83:20:ca:37:54:c1:a4:d9:19:76:66:32:2f:3a:78:68:53:c6: 87:b1:e5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxs09XZDWs1PkGHqifrpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk NmIzZWEwHhcNMjYwMjA5MTkwMDI3WhcNMjYwMjEwMTkwMDI3WjAzMTEwLwYDVQQD Eyg1ODNmZTlmZjdhM2JhZThhYjY3YWU1ZWYzM2MyODEwZmU4NzhjODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt5g7AnrLSe98nnJm/klUzr5ePt4 A6E9wFtM9ETjkB37adXRZniXy5zwPkWjZdPz+nU4QAu50kjqn9u8sCh2l/Ojnkyg 7mWvuKxbMqHeqbJQwhvdL40kAKwMTO4KwCBWiHsqrT5YtieSYQzkR3Wd9aUbzdeC LfHAluOjW0i/K4Ka+r7iU1M8lrI66oM18vOf8PBlysSK1j2JebYZBdtOt81ERK9J gow4ZMLrsDUyPh4L4fTHnYUoiJCwuKtdr+byvUmtMJ06pz1r0K818OXM8MyTweRi 1jrejG2+FQcUWWLo0dDDAM4ysIhcpaL0Exj4FuHoFF7pqA5d13NURycmWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg/6f96O66Ktnrl7zPCgQ/oeMiAMB8GA1UdIwQY MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQXtY3Nc iCCaf/Ap3IqklQEbtgcziZwdwfYMCKNbt7RJMDqG5DJG8n9ICpgJDbBxaNLT1wko G94dkcV8J8WzDhyf6vi0YgJ2b/jpBEWDjf8m39ueA64t0gyaw3aT0RXYjNK9879d cKgJJ/ioEHPMyvYjOtyqKTka9m6Lb/+hUKB9qQynR6Eb8D20YK/Z4q/YfXxGek9k NHW5AeZkg1es1Yd8ykqxFfasAdWk11WYPpaAVzO6Lc09u1Xym+lRbs7f6kXPtMQv fG3gw5JSB0mMZR//5Bwn5GEw4ooi95+MGChYewsGtar6iKa3gyDKN1TBpNkZdmYy Lzp4aFPGh7HlvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:36 2026 by rpki-client