This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft File: xf9_LizUq2EooxIgpTBBqUmlbDk.mft (raw, json) Hash identifier: /PegQW8ajhpqWU9patxP+Sj2prrnGSEldiLJn9I/pEI= Subject key identifier: F8:11:85:10:F1:1A:3C:17:F2:FA:30:5D:31:AE:4A:86:56:F7:0A:6D Authority key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39 Certificate issuer: /CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39 Certificate serial: 019C41A1BFB5B47B4B20941B3A4C8FAAD3BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft Manifest number: 01A8 Signing time: Mon 09 Feb 2026 09:00:45 +0000 Manifest this update: Mon 09 Feb 2026 09:00:45 +0000 Manifest next update: Tue 10 Feb 2026 09:00:45 +0000 Files and hashes: 1: xf9_LizUq2EooxIgpTBBqUmlbDk.crl (hash: NIHDO8+/BJAhz9TkdzFtR1OX44FKErsNRiTgzy2TBvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:bf:b5:b4:7b:4b:20:94:1b:3a:4c:8f:aa:d3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39 Validity Not Before: Feb 9 09:00:45 2026 GMT Not After : Feb 10 09:00:45 2026 GMT Subject: CN=f8118510f11a3c17f2fa305d31ae4a8656f70a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:96:b2:6e:aa:84:fe:03:1c:cc:21:62:7a: 6f:11:7f:32:d4:67:68:d4:95:0b:04:79:ad:2d:d6: 1e:3b:10:9d:d3:37:67:20:40:e1:25:0f:ae:82:94: 60:e5:f0:67:23:56:36:2b:06:ec:24:b0:4b:be:c1: 71:f4:5f:a5:c1:5f:af:41:86:71:23:80:cf:df:55: 14:1e:6e:ef:1b:b3:77:2e:c3:7b:92:ae:ff:7c:58: dd:a6:6a:53:ed:33:00:af:28:5d:88:f5:cf:5b:e5: da:8c:ee:6b:a5:a2:86:46:cd:e1:65:85:73:02:21: 36:92:d8:b0:c2:37:5f:6f:bc:f7:88:1d:ec:6d:f5: ce:96:8b:7c:9e:b4:37:ca:cd:a6:1f:d7:8c:8d:9f: 4f:85:85:98:d1:8b:76:54:d6:97:95:cf:f3:ac:c4: 83:21:4d:6b:ca:fa:e7:84:e5:97:0c:fa:85:ea:e4: d9:c6:5d:b5:a2:5e:c4:30:6e:69:64:cd:75:00:22: e3:b5:b7:73:b9:65:0e:5d:3f:a0:6a:c8:97:53:c1: 63:af:41:3e:a1:ac:87:f5:a7:0f:c7:38:36:db:07: 78:92:9b:da:9d:2a:be:33:b6:c7:9e:0e:b7:47:93: 8a:a7:5d:f5:35:13:c2:9c:59:4f:6a:b7:96:ef:38: 95:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:85:10:F1:1A:3C:17:F2:FA:30:5D:31:AE:4A:86:56:F7:0A:6D X509v3 Authority Key Identifier: keyid:C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dc:52:6f:d3:78:51:45:e9:5c:be:35:a5:d1:7d:b7:e4:9d: 4d:3d:d6:19:7b:3a:4a:f0:58:e6:10:bb:5c:f6:bc:1a:cc:4f: 9f:f6:29:d4:3e:77:d7:dd:ae:33:82:92:84:e0:50:79:3f:3d: 5a:38:d1:0d:27:29:84:c9:d9:33:e3:86:46:33:20:55:a7:ba: ae:07:16:c7:9e:4c:18:83:74:ea:79:3b:cf:b0:1a:19:e5:2b: d8:6a:8e:8e:00:96:30:ee:83:44:a2:06:a4:2d:44:94:19:7b: 7a:de:26:5c:3e:d6:26:0e:82:0d:9a:74:5e:a5:41:a8:ba:db: 40:c1:66:b8:6e:06:eb:7a:92:5b:73:9c:b0:f4:67:fd:b9:9d: cd:bb:c6:4e:0f:d5:22:48:ae:5f:cd:60:0b:c1:84:fa:a7:67: cc:c4:8f:f0:ec:d3:e9:0b:17:df:33:d6:7c:7e:80:62:eb:3c: 24:1e:8c:7c:96:31:a2:1d:15:47:ca:40:82:aa:79:a0:3c:a6: d6:36:e7:9c:5e:18:8d:37:1c:e0:a2:71:89:81:bb:d3:fa:49: 0f:03:36:ee:ba:d6:59:ab:30:03:cf:ae:ed:1e:80:0e:54:4b: 56:9b:2a:02:09:a5:9d:f1:2e:eb:14:bb:d3:92:a8:47:cc:86: c1:33:cb:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBob+1tHtLIJQbOkyPqtO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZmY3ZjJlMmNkNGFiNjEyOGEzMTIyMGE1MzA0MWE5NDlh NTZjMzkwHhcNMjYwMjA5MDkwMDQ1WhcNMjYwMjEwMDkwMDQ1WjAzMTEwLwYDVQQD EyhmODExODUxMGYxMWEzYzE3ZjJmYTMwNWQzMWFlNGE4NjU2ZjcwYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44GWsm6qhP4DHMwhYnpvEX8y1Gdo 1JULBHmtLdYeOxCd0zdnIEDhJQ+ugpRg5fBnI1Y2KwbsJLBLvsFx9F+lwV+vQYZx I4DP31UUHm7vG7N3LsN7kq7/fFjdpmpT7TMAryhdiPXPW+XajO5rpaKGRs3hZYVz AiE2ktiwwjdfb7z3iB3sbfXOlot8nrQ3ys2mH9eMjZ9PhYWY0Yt2VNaXlc/zrMSD IU1ryvrnhOWXDPqF6uTZxl21ol7EMG5pZM11ACLjtbdzuWUOXT+gasiXU8Fjr0E+ oayH9acPxzg22wd4kpvanSq+M7bHng63R5OKp131NRPCnFlPareW7ziVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgRhRDxGjwX8vowXTGuSoZW9wptMB8GA1UdIwQY MBaAFMX/fy4s1KthKKMSIKUwQalJpWw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOGEzZTEtZjgxOC00NmZhLThlZWIt ZDFkMzkxZDZmY2M1LzEveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zOGEzZTEtZjgxOC00NmZhLThlZWItZDFkMzkxZDZmY2M1 LzEveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtxSb9N4 UUXpXL41pdF9t+SdTT3WGXs6SvBY5hC7XPa8GsxPn/Yp1D53192uM4KShOBQeT89 WjjRDScphMnZM+OGRjMgVae6rgcWx55MGIN06nk7z7AaGeUr2GqOjgCWMO6DRKIG pC1ElBl7et4mXD7WJg6CDZp0XqVBqLrbQMFmuG4G63qSW3OcsPRn/bmdzbvGTg/V IkiuX81gC8GE+qdnzMSP8OzT6QsX3zPWfH6AYus8JB6MfJYxoh0VR8pAgqp5oDym 1jbnnF4YjTcc4KJxiYG70/pJDwM27rrWWaswA8+u7R6ADlRLVpsqAgmlnfEu6xS7 05KoR8yGwTPLrw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:55 2026 by rpki-client