This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json) Hash identifier: tQjE5xD3ZuJGGz5F8uvhw/Y0s9DYgQ6LELm+y/+3qXE= Subject key identifier: 50:34:F2:25:E7:02:8B:A7:2B:2F:4D:FC:58:E4:B2:61:79:94:5E:04 Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4 Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4 Certificate serial: 019C1B02A228093C36A0FFF51F1F340C2399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft Manifest number: 074C Signing time: Sun 01 Feb 2026 21:01:23 +0000 Manifest this update: Sun 01 Feb 2026 21:01:23 +0000 Manifest next update: Mon 02 Feb 2026 21:01:23 +0000 Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: dT8MuTaYNAUxf+8+OyCKDK3qq4h7bzxq6bPqQLx6dL8=) 2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:02:a2:28:09:3c:36:a0:ff:f5:1f:1f:34:0c:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4 Validity Not Before: Feb 1 21:01:23 2026 GMT Not After : Feb 2 21:01:23 2026 GMT Subject: CN=5034f225e7028ba72b2f4dfc58e4b26179945e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:a6:2f:44:87:76:b2:63:a2:2b:5c:e7:29: f0:0a:da:d8:7f:95:d6:6c:02:46:b0:1d:fe:f1:76: a2:ae:97:12:29:37:2e:2d:a7:2d:5c:db:19:46:46: 7f:d1:ab:27:c2:fe:5e:c2:99:95:a4:ea:8a:59:ed: 9d:88:f0:ed:05:12:e3:4b:d7:f9:4d:8a:01:63:c3: e7:f8:14:7f:bc:b6:4e:53:d8:a2:f6:50:fe:90:3d: ed:9c:49:72:dd:eb:0d:83:6a:fb:f3:03:34:d7:66: f7:4a:71:f0:94:87:61:f9:70:b1:8e:ee:34:5b:fb: 5b:cf:3b:3d:51:67:a1:0f:89:40:91:3a:25:b0:09: a7:bb:6e:cd:e6:25:12:ad:42:63:74:cf:f3:c3:af: 4e:5d:12:cf:2e:b4:cb:6d:5c:98:8b:26:9b:78:a4: b2:cb:fe:95:d8:3e:5f:2d:07:eb:05:b3:e6:ca:62: 71:17:ef:d3:ce:41:56:3f:6e:2e:41:50:1f:cd:1d: 71:cd:f9:87:88:ab:8b:21:89:30:61:40:a3:58:dc: 2d:39:dc:88:4b:b7:db:6a:d3:12:68:a2:fb:bf:b6: b6:0d:e3:31:04:2a:13:e6:b1:62:64:22:13:ed:72: c8:ec:69:40:63:a2:25:40:85:a6:77:3e:82:45:4b: 89:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:F2:25:E7:02:8B:A7:2B:2F:4D:FC:58:E4:B2:61:79:94:5E:04 X509v3 Authority Key Identifier: keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b9:eb:72:17:34:aa:9f:ea:92:e4:2b:d6:8f:1b:9f:c5:6e: 7a:81:7f:cd:f7:c5:7e:8d:2a:8c:86:65:b7:46:e8:cb:43:ea: 60:37:88:54:65:57:13:c5:c5:b5:50:8e:df:0b:59:f8:24:eb: a8:ed:b3:6d:4b:33:b6:62:dc:67:d5:a6:08:81:52:32:95:8a: 5c:72:57:f6:91:ba:2d:a3:8d:ed:0c:66:1d:4c:a2:77:28:ea: 74:a2:99:b6:2e:ff:be:b2:95:89:a7:0a:fc:b6:44:ff:33:38: 84:4b:5f:a3:bb:9b:47:10:dd:81:8d:e8:3e:0a:d8:36:d7:3a: 08:ea:cc:e9:16:06:04:5c:56:69:e6:7e:88:a7:b2:1d:f6:90: a1:53:f4:7e:51:0f:d8:8a:e1:f7:28:d4:28:6f:9c:3e:69:78: aa:f5:eb:79:c9:fa:e3:f0:67:c6:3f:5a:ea:8e:d3:f9:85:85: e9:10:05:a8:bf:a0:10:71:31:59:8f:1c:71:41:b3:43:8f:50: 55:9e:2f:fa:9d:af:b8:41:aa:d2:bd:be:d0:3c:5e:5b:54:8d: 5f:c1:23:42:f3:88:d7:85:87:d4:6e:c1:cf:c7:9e:82:3f:bb: ca:a0:cc:64:79:41:cf:99:8c:85:ee:28:72:fc:47:2c:74:9a: 4b:e1:63:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAqIoCTw2oP/1Hx80DCOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTViZGE4Y2U5ODdkN2U0YWFiMWMzNTUxNzhkY2EzM2Uz YjhlYTQwHhcNMjYwMjAxMjEwMTIzWhcNMjYwMjAyMjEwMTIzWjAzMTEwLwYDVQQD Eyg1MDM0ZjIyNWU3MDI4YmE3MmIyZjRkZmM1OGU0YjI2MTc5OTQ1ZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs2mL0SHdrJjoitc5ynwCtrYf5XW bAJGsB3+8XairpcSKTcuLactXNsZRkZ/0asnwv5ewpmVpOqKWe2diPDtBRLjS9f5 TYoBY8Pn+BR/vLZOU9ii9lD+kD3tnEly3esNg2r78wM012b3SnHwlIdh+XCxju40 W/tbzzs9UWehD4lAkTolsAmnu27N5iUSrUJjdM/zw69OXRLPLrTLbVyYiyabeKSy y/6V2D5fLQfrBbPmymJxF+/TzkFWP24uQVAfzR1xzfmHiKuLIYkwYUCjWNwtOdyI S7fbatMSaKL7v7a2DeMxBCoT5rFiZCIT7XLI7GlAY6IlQIWmdz6CRUuJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA08iXnAounKy9N/FjksmF5lF4EMB8GA1UdIwQY MBaAFF0VvajOmH1+SqscNVF43KM+O46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2Yt YmJhM2M4Y2IwZjdhLzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2YtYmJhM2M4Y2IwZjdh LzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7nrchc0 qp/qkuQr1o8bn8VueoF/zffFfo0qjIZlt0boy0PqYDeIVGVXE8XFtVCO3wtZ+CTr qO2zbUsztmLcZ9WmCIFSMpWKXHJX9pG6LaON7QxmHUyidyjqdKKZti7/vrKViacK /LZE/zM4hEtfo7ubRxDdgY3oPgrYNtc6COrM6RYGBFxWaeZ+iKeyHfaQoVP0flEP 2Irh9yjUKG+cPml4qvXrecn64/Bnxj9a6o7T+YWF6RAFqL+gEHExWY8ccUGzQ49Q VZ4v+p2vuEGq0r2+0DxeW1SNX8EjQvOI14WH1G7Bz8eegj+7yqDMZHlBz5mMhe4o cvxHLHSaS+Fj7Q== -----END CERTIFICATE-----Generated at Mon Feb 2 08:16:04 2026 by rpki-client