This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json) Hash identifier: 7EEricu37ucjL0BL46og6XbdrxNr1NRHstpK62S3BbE= Subject key identifier: E6:0B:FB:98:9D:86:EA:48:2B:19:B0:DA:C8:45:C1:1F:55:23:32:2E Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c Certificate serial: 019C4246D301E10653837CB32E7E57E4EB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:01:03 +0000 Manifest this update: Mon 09 Feb 2026 12:01:03 +0000 Manifest next update: Tue 10 Feb 2026 12:01:03 +0000 Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: Cxcj0Nuc9ZGdb1EHdb5krRlJ5XsobdxlFMVeGxvBkKA=) 2: y7-vDXrLqMjnhTrFIm_Q1_GinG0.roa (hash: NpfzJpBL32LooDZs+/fN3t0x26rbFmNfH1jzdmZ+xH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:d3:01:e1:06:53:83:7c:b3:2e:7e:57:e4:eb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c Validity Not Before: Feb 9 12:01:03 2026 GMT Not After : Feb 10 12:01:03 2026 GMT Subject: CN=e60bfb989d86ea482b19b0dac845c11f5523322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:d1:07:31:dc:06:51:53:a5:7e:1f:08:15: d7:b3:e1:8b:24:d1:2d:d5:32:60:45:95:ab:99:b6: 2a:f8:97:20:90:7f:cd:f1:3f:78:1d:b6:47:1b:31: 95:7c:32:65:7e:65:85:6b:37:9d:96:e9:bc:e7:07: 98:36:ff:20:83:e9:55:90:fb:72:3a:4d:2a:ae:b4: 51:a2:d8:e3:86:c4:19:52:76:11:72:49:cd:02:2a: 1e:87:d8:ff:a2:96:b6:7a:21:cf:22:76:2a:9d:2a: cc:4c:3a:25:dd:bc:66:81:d5:a4:9b:b0:3c:ec:09: b1:3a:28:8d:09:a8:8e:3e:01:95:2d:c3:60:8d:3d: ea:32:c7:6b:e5:fd:2b:9a:2c:d3:b5:d1:27:4b:63: 93:46:b2:6c:a9:56:d4:83:f4:5f:2f:84:10:f3:02: 0a:c8:76:2c:f6:9e:03:ef:7b:61:af:f0:c1:93:18: b2:3b:90:e2:26:cf:f3:28:19:15:99:7b:e7:6b:50: 5c:8d:5b:57:6c:d2:91:b0:b3:b3:b2:72:76:75:a7: db:e2:bb:43:7b:ba:b2:f4:e3:2e:08:98:78:d6:66: 12:37:a4:27:0f:85:80:08:d4:33:7c:ed:b2:f4:94: 2a:84:0f:fa:a7:da:92:3f:78:3c:69:46:5d:03:f0: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:FB:98:9D:86:EA:48:2B:19:B0:DA:C8:45:C1:1F:55:23:32:2E X509v3 Authority Key Identifier: keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:67:85:05:88:37:4a:e9:0f:e5:40:b0:d5:f7:5b:30:43:cd: 23:71:c2:55:01:eb:34:2a:a2:f1:c2:e0:1e:f2:5f:14:a6:fe: 73:d8:cd:f0:3d:3c:05:15:6d:a4:98:98:1f:d1:86:45:3f:4e: e1:ba:a1:a6:52:bb:91:89:ee:ff:14:bd:2a:a4:f5:66:4c:04: 45:4a:c2:c5:ee:ab:a9:16:bd:3a:74:f1:e6:0e:a0:39:04:68: b4:d1:35:25:4b:63:49:fd:47:cf:3d:10:1f:78:b9:5c:c4:4b: 5d:60:c3:c7:91:63:ce:cc:9b:7b:68:bf:1c:bf:1a:5b:f6:a1: 69:77:2d:b4:b8:01:8b:90:86:8f:7b:ea:f5:da:e4:a7:ec:16: aa:94:4e:e2:9f:ea:c9:72:d4:f6:69:d4:cd:cc:a2:c2:99:7e: f5:4c:03:79:86:5a:34:4c:dd:f2:e7:5f:11:49:65:c6:3d:ef: 22:37:fd:75:b9:9e:af:4a:31:c1:55:3e:64:cb:49:e1:c3:1d: 77:27:58:c0:1c:c0:10:bc:dc:29:9f:88:af:00:36:cb:1a:f2: 1c:03:02:27:97:b4:3c:2f:5f:13:e5:3a:2a:72:9c:97:9e:ac: 42:ff:2e:17:f6:68:41:8a:53:b5:e9:ed:12:b9:37:1c:8e:ff: 47:e1:54:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRtMB4QZTg3yzLn5X5OtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTM2YmVhMWIwYzNhMjA4YWJhMjdkOGIxMGIyNzVlNDc0 ZGRlMmMwHhcNMjYwMjA5MTIwMTAzWhcNMjYwMjEwMTIwMTAzWjAzMTEwLwYDVQQD EyhlNjBiZmI5ODlkODZlYTQ4MmIxOWIwZGFjODQ1YzExZjU1MjMzMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaHRBzHcBlFTpX4fCBXXs+GLJNEt 1TJgRZWrmbYq+JcgkH/N8T94HbZHGzGVfDJlfmWFazedlum85weYNv8gg+lVkPty Ok0qrrRRotjjhsQZUnYRcknNAioeh9j/opa2eiHPInYqnSrMTDol3bxmgdWkm7A8 7AmxOiiNCaiOPgGVLcNgjT3qMsdr5f0rmizTtdEnS2OTRrJsqVbUg/RfL4QQ8wIK yHYs9p4D73thr/DBkxiyO5DiJs/zKBkVmXvna1BcjVtXbNKRsLOzsnJ2dafb4rtD e7qy9OMuCJh41mYSN6QnD4WACNQzfO2y9JQqhA/6p9qSP3g8aUZdA/AiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYL+5idhupIKxmw2shFwR9VIzIuMB8GA1UdIwQY MBaAFF6Ta+obDDogiron2LELJ15HTd4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjct OTg0NzdhODY1M2M3LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjctOTg0NzdhODY1M2M3 LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWeFBYg3 SukP5UCw1fdbMEPNI3HCVQHrNCqi8cLgHvJfFKb+c9jN8D08BRVtpJiYH9GGRT9O 4bqhplK7kYnu/xS9KqT1ZkwERUrCxe6rqRa9OnTx5g6gOQRotNE1JUtjSf1Hzz0Q H3i5XMRLXWDDx5Fjzsybe2i/HL8aW/ahaXcttLgBi5CGj3vq9drkp+wWqpRO4p/q yXLU9mnUzcyiwpl+9UwDeYZaNEzd8udfEUllxj3vIjf9dbmer0oxwVU+ZMtJ4cMd dydYwBzAELzcKZ+IrwA2yxryHAMCJ5e0PC9fE+U6KnKcl56sQv8uF/ZoQYpTtent Erk3HI7/R+FUhA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:46 2026 by rpki-client