This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft File: XVD5SGhvOBoJxg1NlogMD45LFIU.mft (raw, json) Hash identifier: aGQ3/hQvOdVHXZIIeliEGrpqagw8eCm9CNGzQpxCQC4= Subject key identifier: 18:4E:F5:71:89:C1:66:B3:F7:68:04:E1:21:8D:E5:EF:15:43:AB:FD Authority key identifier: 5D:50:F9:48:68:6F:38:1A:09:C6:0D:4D:96:88:0C:0F:8E:4B:14:85 Certificate issuer: /CN=5d50f948686f381a09c60d4d96880c0f8e4b1485 Certificate serial: 019C42EB79ED8514396413FFD75473078588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft Manifest number: 5B Signing time: Mon 09 Feb 2026 15:00:54 +0000 Manifest this update: Mon 09 Feb 2026 15:00:54 +0000 Manifest next update: Tue 10 Feb 2026 15:00:54 +0000 Files and hashes: 1: XVD5SGhvOBoJxg1NlogMD45LFIU.crl (hash: iTeZZJnDn30ciCKRCwNevUY0Vm5oWeDEZP5TILPtgS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:79:ed:85:14:39:64:13:ff:d7:54:73:07:85:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d50f948686f381a09c60d4d96880c0f8e4b1485 Validity Not Before: Feb 9 15:00:54 2026 GMT Not After : Feb 10 15:00:54 2026 GMT Subject: CN=184ef57189c166b3f76804e1218de5ef1543abfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:bb:d1:fa:3f:83:80:ec:31:46:e2:b4:fc: 01:96:20:4a:4a:8b:25:0f:7a:0f:b4:f3:6a:10:fe: 43:fd:57:a6:57:e7:6d:73:1d:88:21:d2:4e:54:1e: 53:17:53:97:06:d7:53:14:d2:3c:36:f4:6a:40:5c: c2:ab:a6:c1:42:e6:30:3d:1f:6b:8c:1e:87:40:8f: 74:a1:ad:65:34:3d:10:73:f8:e9:9c:00:7a:41:8e: ae:d7:c6:cd:0c:f9:0f:7f:fb:e3:42:17:26:62:79: 4d:65:08:2d:bc:55:78:ef:2b:1f:bb:ea:fd:36:45: fd:bc:ca:95:90:d8:0b:98:8a:62:f2:17:03:fe:96: 92:eb:16:11:e4:bd:41:71:b6:64:15:a3:80:70:04: 46:25:f4:3e:53:ac:2b:d3:1c:5e:91:77:9c:af:28: ba:50:e1:85:ac:c5:e0:0c:c1:b4:fd:7f:55:26:d9: f3:59:e4:01:f8:68:4f:76:2c:34:00:39:1e:25:de: a1:52:e0:37:cb:41:2c:c9:30:30:99:54:11:04:cb: 12:b9:2b:ee:5b:ed:3c:dd:40:5c:54:f8:04:61:c6: 42:99:c4:67:3d:31:34:fa:02:b3:c5:74:5e:0b:41: e4:32:e0:36:f8:89:f9:ea:f3:c8:92:0c:95:7b:61: 42:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:F5:71:89:C1:66:B3:F7:68:04:E1:21:8D:E5:EF:15:43:AB:FD X509v3 Authority Key Identifier: keyid:5D:50:F9:48:68:6F:38:1A:09:C6:0D:4D:96:88:0C:0F:8E:4B:14:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVD5SGhvOBoJxg1NlogMD45LFIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e44508-1f2b-4668-a51e-0e921418c1b5/1/XVD5SGhvOBoJxg1NlogMD45LFIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:62:66:a2:63:3c:78:e1:7c:d7:30:e0:15:9c:86:51:2b: 14:b8:22:e4:47:d7:71:34:5d:6b:28:e9:fd:72:9c:5b:36:8c: d2:a3:31:ff:19:74:49:03:76:8b:fc:35:07:65:42:2f:0d:29: 77:34:9f:90:f8:ee:13:18:40:b8:87:40:ec:e9:b7:5b:97:fa: 01:48:18:41:45:56:fb:3c:17:54:b5:e7:42:f4:cc:a4:27:92: 37:c2:2f:e1:64:7d:14:7a:ae:64:8a:2a:c7:b9:b8:a4:68:31: 7c:45:74:8a:05:95:26:4f:f2:3d:1f:90:d5:5e:91:b6:0e:05: 47:a5:8a:b4:22:1f:76:c0:a0:6b:a4:b4:db:dd:2d:7c:e7:b4: 6a:9e:db:cc:d6:ff:6d:a5:7e:b0:88:59:95:e2:cc:ff:8e:32: 87:7c:2a:2c:b9:b8:ab:e5:53:18:44:6a:c5:a1:6f:99:3d:f0: ec:eb:8b:e5:95:b9:a5:40:b2:bd:2b:10:84:dc:b6:eb:b9:c6: 3c:58:8b:0c:c9:62:c9:0b:a1:be:47:2b:36:2a:df:f8:40:d9: ea:76:c6:52:28:17:38:ff:63:a2:13:93:5b:5a:02:0e:6d:04: 5b:e5:9b:86:55:c7:d1:d9:2d:de:aa:6a:6f:28:1e:63:ad:ea: 5e:b1:9d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63nthRQ5ZBP/11RzB4WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNTBmOTQ4Njg2ZjM4MWEwOWM2MGQ0ZDk2ODgwYzBmOGU0 YjE0ODUwHhcNMjYwMjA5MTUwMDU0WhcNMjYwMjEwMTUwMDU0WjAzMTEwLwYDVQQD EygxODRlZjU3MTg5YzE2NmIzZjc2ODA0ZTEyMThkZTVlZjE1NDNhYmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqne70fo/g4DsMUbitPwBliBKSosl D3oPtPNqEP5D/VemV+dtcx2IIdJOVB5TF1OXBtdTFNI8NvRqQFzCq6bBQuYwPR9r jB6HQI90oa1lND0Qc/jpnAB6QY6u18bNDPkPf/vjQhcmYnlNZQgtvFV47ysfu+r9 NkX9vMqVkNgLmIpi8hcD/paS6xYR5L1BcbZkFaOAcARGJfQ+U6wr0xxekXecryi6 UOGFrMXgDMG0/X9VJtnzWeQB+GhPdiw0ADkeJd6hUuA3y0EsyTAwmVQRBMsSuSvu W+083UBcVPgEYcZCmcRnPTE0+gKzxXReC0HkMuA2+In56vPIkgyVe2FCfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhO9XGJwWaz92gE4SGN5e8VQ6v9MB8GA1UdIwQY MBaAFF1Q+UhobzgaCcYNTZaIDA+OSxSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFZENVNHaHZPQm9KeGcxTmxvZ01ENDVMRklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNDQ1MDgtMWYyYi00NjY4LWE1MWUt MGU5MjE0MThjMWI1LzEvWFZENVNHaHZPQm9KeGcxTmxvZ01ENDVMRklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lNDQ1MDgtMWYyYi00NjY4LWE1MWUtMGU5MjE0MThjMWI1 LzEvWFZENVNHaHZPQm9KeGcxTmxvZ01ENDVMRklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoViZqJj PHjhfNcw4BWchlErFLgi5EfXcTRdayjp/XKcWzaM0qMx/xl0SQN2i/w1B2VCLw0p dzSfkPjuExhAuIdA7Om3W5f6AUgYQUVW+zwXVLXnQvTMpCeSN8Iv4WR9FHquZIoq x7m4pGgxfEV0igWVJk/yPR+Q1V6Rtg4FR6WKtCIfdsCga6S0290tfOe0ap7bzNb/ baV+sIhZleLM/44yh3wqLLm4q+VTGERqxaFvmT3w7OuL5ZW5pUCyvSsQhNy267nG PFiLDMliyQuhvkcrNirf+EDZ6nbGUigXOP9johOTW1oCDm0EW+WbhlXH0dkt3qpq bygeY63qXrGdcg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:38 2026 by rpki-client