This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json) Hash identifier: H1hXluYty0af8yQGk3BNLGgGSKpCTb2tk0/6t+QTGz0= Subject key identifier: 25:8D:6C:72:C5:06:67:8A:F9:4E:F7:B4:06:DD:EC:59:27:29:D9:01 Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85 Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85 Certificate serial: 019C4510AC015F5778B53955345B308D7173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft Manifest number: 0E8D Signing time: Tue 10 Feb 2026 01:00:46 +0000 Manifest this update: Tue 10 Feb 2026 01:00:46 +0000 Manifest next update: Wed 11 Feb 2026 01:00:46 +0000 Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: up7rIX3cnfPXvzk1Vl67sBZ8Y++qIYildPEfTD9T9SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:ac:01:5f:57:78:b5:39:55:34:5b:30:8d:71:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85 Validity Not Before: Feb 10 01:00:46 2026 GMT Not After : Feb 11 01:00:46 2026 GMT Subject: CN=258d6c72c506678af94ef7b406ddec592729d901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:cf:a7:23:d0:ee:ea:c9:06:2f:20:92:7e: 78:4c:e5:22:ee:02:16:2a:41:98:11:40:e3:d2:6b: 21:1d:14:49:c2:64:4c:51:81:6d:f4:3a:43:72:6a: 95:c1:4b:67:ff:3e:f7:cf:01:08:fd:3c:05:0e:d6: 0d:37:52:53:9a:a5:97:00:de:06:69:29:82:cd:50: db:fa:3a:19:7b:2a:d2:65:f2:b2:7e:30:0c:6b:09: 00:0e:b1:12:77:14:e9:f3:03:3e:08:04:51:5d:38: ad:7e:de:de:1d:7a:3d:b5:a5:fa:a6:0b:ec:fa:f2: 18:0f:71:b7:23:c9:43:f1:a1:d5:5a:b6:03:5a:da: a2:ff:73:20:af:b6:5c:69:8f:05:09:3e:b9:1b:ac: 1f:40:48:f2:66:21:66:5e:aa:e4:79:02:76:24:06: c0:94:59:22:38:33:e9:9d:78:8e:2c:2c:f3:04:b9: 94:2d:8f:5d:87:6b:ac:01:6d:ae:64:8f:e2:04:8b: fd:59:0d:ce:86:2c:5f:18:52:76:68:50:5f:82:fb: 63:49:24:aa:47:8a:9c:ed:07:35:39:43:93:79:cb: 73:79:9c:91:af:df:49:8d:08:fa:2c:e1:32:5d:d5: a9:06:a6:e8:97:11:f3:60:f7:9b:c6:89:c7:8a:93: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8D:6C:72:C5:06:67:8A:F9:4E:F7:B4:06:DD:EC:59:27:29:D9:01 X509v3 Authority Key Identifier: keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f3:7e:9b:cc:28:d0:d4:39:f7:12:f9:ed:9d:f4:32:46:e1: 09:3b:a9:55:dc:96:76:83:95:1c:09:d8:52:68:74:5e:01:37: 11:8d:49:02:84:e0:19:5c:f4:ba:2f:5e:3b:e9:92:88:7b:27: f3:de:7b:d6:c8:15:77:58:6b:81:e4:a8:9e:7e:5f:c7:b3:1f: 1d:70:a7:ae:91:a0:86:81:35:09:a0:15:b7:84:72:f7:a5:41: 48:4f:ae:87:16:e4:97:af:a0:2f:a3:cc:c0:1b:65:30:94:24: f4:b9:c9:c0:72:e6:ad:a1:f2:5c:7a:79:d2:e8:0a:8b:bf:da: 7a:78:11:fe:c2:c7:b3:a5:40:dd:ec:f9:1d:62:7e:4f:92:8d: 90:02:7b:a1:35:9e:fb:bf:67:6d:2e:90:b5:33:7e:76:6d:b3: 9d:12:93:a1:ce:32:cc:d8:95:65:de:15:71:9a:4f:ea:23:46: c9:77:1b:72:21:fb:bf:3e:ce:4a:cb:7c:66:c0:54:44:36:be: ed:73:5f:95:09:6d:54:e6:cb:89:4e:ce:a8:ab:75:40:dc:de: ce:ac:02:c8:eb:e1:4d:47:19:05:30:94:8e:ad:58:1d:5e:df: 07:73:ce:10:7a:5f:13:9c:23:31:e9:16:50:6b:64:de:f5:50: 94:34:48:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEKwBX1d4tTlVNFswjXFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYjc5Mjc1NjU5ZGQ5NjFjNzQyYmYyMWQ4ZGNhMTg0YTQ0 MzBkODUwHhcNMjYwMjEwMDEwMDQ2WhcNMjYwMjExMDEwMDQ2WjAzMTEwLwYDVQQD EygyNThkNmM3MmM1MDY2NzhhZjk0ZWY3YjQwNmRkZWM1OTI3MjlkOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC3PpyPQ7urJBi8gkn54TOUi7gIW KkGYEUDj0mshHRRJwmRMUYFt9DpDcmqVwUtn/z73zwEI/TwFDtYNN1JTmqWXAN4G aSmCzVDb+joZeyrSZfKyfjAMawkADrESdxTp8wM+CARRXTitft7eHXo9taX6pgvs +vIYD3G3I8lD8aHVWrYDWtqi/3Mgr7ZcaY8FCT65G6wfQEjyZiFmXqrkeQJ2JAbA lFkiODPpnXiOLCzzBLmULY9dh2usAW2uZI/iBIv9WQ3OhixfGFJ2aFBfgvtjSSSq R4qc7Qc1OUOTectzeZyRr99JjQj6LOEyXdWpBqbolxHzYPebxonHipPfOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWNbHLFBmeK+U73tAbd7FknKdkBMB8GA1UdIwQY MBaAFF23knVlndlhx0K/IdjcoYSkQw2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEt YTA5NjdhNDM1YTZhLzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEtYTA5NjdhNDM1YTZh LzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfN+m8wo 0NQ59xL57Z30MkbhCTupVdyWdoOVHAnYUmh0XgE3EY1JAoTgGVz0ui9eO+mSiHsn 89571sgVd1hrgeSonn5fx7MfHXCnrpGghoE1CaAVt4Ry96VBSE+uhxbkl6+gL6PM wBtlMJQk9LnJwHLmraHyXHp50ugKi7/aengR/sLHs6VA3ez5HWJ+T5KNkAJ7oTWe +79nbS6QtTN+dm2znRKToc4yzNiVZd4VcZpP6iNGyXcbciH7vz7OSst8ZsBURDa+ 7XNflQltVObLiU7OqKt1QNzezqwCyOvhTUcZBTCUjq1YHV7fB3POEHpfE5wjMekW UGtk3vVQlDRItg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:22:28 2026 by rpki-client