This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json) Hash identifier: RMPuEZf8acz4MLFdv7Rx0vljYNz4Cs0vV7TJ8qKTESY= Subject key identifier: 86:C1:BF:61:F6:1F:EA:24:B1:F9:CF:A0:3C:28:0B:20:40:E2:D8:DC Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Certificate serial: 019C42EB124113D1E69A07A6409C53F656E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 15:00:27 +0000 Manifest this update: Mon 09 Feb 2026 15:00:27 +0000 Manifest next update: Tue 10 Feb 2026 15:00:27 +0000 Files and hashes: 1: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: T611sivBAq+MO56B0y/z5R3o1bHXXW/du/X5wF1hN80=) 2: y5TDm0AbnF5uW1VYqN6HJrhTGH0.roa (hash: lqxFRYQnP+n1wormol/wg9R3mZ0oBovnPQrrpsaBhek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:12:41:13:d1:e6:9a:07:a6:40:9c:53:f6:56:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Validity Not Before: Feb 9 15:00:27 2026 GMT Not After : Feb 10 15:00:27 2026 GMT Subject: CN=86c1bf61f61fea24b1f9cfa03c280b2040e2d8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:dd:62:11:74:e9:01:1f:8b:f9:ab:36:d5: b9:93:dc:7e:44:29:54:bb:fd:dd:1b:1d:70:38:e2: 71:0b:2b:a4:8d:7e:67:ea:50:a5:cf:7f:62:9e:71: a0:f9:17:04:d7:fa:84:d2:35:27:ad:85:96:b4:83: 8d:69:31:d6:55:2b:e3:93:60:a2:be:c2:f0:98:2c: b0:1f:c4:e7:6c:e0:1c:07:39:cb:a0:6c:9f:74:5c: ce:d8:e6:95:82:f0:b1:d3:3c:7d:b3:5e:e5:31:39: 44:40:db:ef:61:2a:9d:58:2e:5b:c0:aa:a5:fa:0d: 8a:73:a2:d0:a9:b8:ee:18:95:b5:ab:50:38:64:40: ff:30:aa:c1:a0:ca:7b:80:ea:c1:1b:45:93:90:b2: 61:b0:59:0e:d0:04:f0:7a:03:d8:38:e9:ba:e7:aa: 1f:58:0a:44:ec:c8:86:8d:6f:18:64:33:1f:23:56: d3:f9:30:ab:6f:b1:18:ce:92:38:2c:f6:f2:e1:ac: 30:27:c8:71:97:19:f9:e3:4a:be:74:4a:b2:a4:59: af:c7:eb:d0:59:63:bb:8b:0e:6a:b5:21:e5:72:78: 3d:08:eb:e9:ac:99:36:36:bb:57:43:82:ad:78:ba: 67:9a:a8:61:b0:ee:b1:bc:ce:e8:98:06:c1:81:7d: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C1:BF:61:F6:1F:EA:24:B1:F9:CF:A0:3C:28:0B:20:40:E2:D8:DC X509v3 Authority Key Identifier: keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8b:cb:1e:e4:f6:c4:46:cb:0a:70:21:2a:36:62:dc:02:a7: 26:7a:a2:eb:05:03:62:45:25:47:f5:04:c4:cc:49:b5:90:8b: 51:58:64:08:09:9c:a4:3a:4b:a7:26:7a:cd:b1:0d:57:1e:4d: 13:a3:43:af:e9:2d:40:5c:6b:56:d0:b6:bb:c3:93:9d:90:3c: d2:47:06:cf:24:8e:14:8f:1c:ca:51:db:ee:63:48:4e:c2:a6: 58:70:fb:82:b0:92:8f:3b:8d:c2:48:f6:36:b2:c5:38:18:ee: 92:44:6d:61:0d:7b:28:b8:b9:49:0c:bf:4f:f3:80:36:3d:f7: 12:ff:54:64:df:80:26:df:e7:1d:13:21:54:69:77:98:15:a8: 2d:27:55:e7:b4:d2:a4:c5:00:1a:6b:58:73:69:14:76:e8:25: 49:5e:c7:ff:9d:f2:4b:86:29:78:12:fa:aa:b8:c4:2e:17:d6: 21:16:1f:fb:71:6a:59:62:90:07:22:12:a0:63:51:8d:5d:be: 15:3b:6f:7e:ec:76:bd:12:83:eb:e9:e3:32:12:e0:1a:b2:44: f8:47:0e:62:50:c9:b5:20:1f:40:f4:0e:b2:d6:dd:50:e5:e4: 84:03:c4:c5:9d:6f:07:76:3b:60:73:bc:ac:e1:e7:f8:ea:4c: f4:59:30:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xJBE9HmmgemQJxT9lblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz NGZkZDkwHhcNMjYwMjA5MTUwMDI3WhcNMjYwMjEwMTUwMDI3WjAzMTEwLwYDVQQD Eyg4NmMxYmY2MWY2MWZlYTI0YjFmOWNmYTAzYzI4MGIyMDQwZTJkOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolLdYhF06QEfi/mrNtW5k9x+RClU u/3dGx1wOOJxCyukjX5n6lClz39innGg+RcE1/qE0jUnrYWWtIONaTHWVSvjk2Ci vsLwmCywH8TnbOAcBznLoGyfdFzO2OaVgvCx0zx9s17lMTlEQNvvYSqdWC5bwKql +g2Kc6LQqbjuGJW1q1A4ZED/MKrBoMp7gOrBG0WTkLJhsFkO0ATwegPYOOm656of WApE7MiGjW8YZDMfI1bT+TCrb7EYzpI4LPby4awwJ8hxlxn540q+dEqypFmvx+vQ WWO7iw5qtSHlcng9COvprJk2NrtXQ4KteLpnmqhhsO6xvM7omAbBgX1/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbBv2H2H+oksfnPoDwoCyBA4tjcMB8GA1UdIwQY MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIvLHuT2 xEbLCnAhKjZi3AKnJnqi6wUDYkUlR/UExMxJtZCLUVhkCAmcpDpLpyZ6zbENVx5N E6NDr+ktQFxrVtC2u8OTnZA80kcGzySOFI8cylHb7mNITsKmWHD7grCSjzuNwkj2 NrLFOBjukkRtYQ17KLi5SQy/T/OANj33Ev9UZN+AJt/nHRMhVGl3mBWoLSdV57TS pMUAGmtYc2kUduglSV7H/53yS4YpeBL6qrjELhfWIRYf+3FqWWKQByISoGNRjV2+ FTtvfux2vRKD6+njMhLgGrJE+EcOYlDJtSAfQPQOstbdUOXkhAPExZ1vB3Y7YHO8 rOHn+OpM9Fkwjw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:35 2026 by rpki-client