This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json) Hash identifier: 5cP9RmaMd62RIGVWBQP4RtV/a8SJmODniBrowXrT9xw= Subject key identifier: 24:2A:1D:83:33:B8:99:69:61:62:79:F0:57:7B:71:8E:82:A5:94:31 Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Certificate serial: 019C4133B021BAEAA4264685588F110901D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 07:00:32 +0000 Manifest this update: Mon 09 Feb 2026 07:00:32 +0000 Manifest next update: Tue 10 Feb 2026 07:00:32 +0000 Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: YkIi5+dQQgs+jrk4XJU4ps1DKe0dGk+60EumjfEfuWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:b0:21:ba:ea:a4:26:46:85:58:8f:11:09:01:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Validity Not Before: Feb 9 07:00:32 2026 GMT Not After : Feb 10 07:00:32 2026 GMT Subject: CN=242a1d8333b89969616279f0577b718e82a59431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:66:95:a7:b4:15:5a:0f:20:45:11:aa:28: 68:f1:45:b0:19:81:a6:de:3d:58:e5:e7:fc:e3:50: e4:15:7b:d7:0e:1e:ef:f8:b0:97:94:3e:f8:7b:91: 09:2e:d8:29:3b:87:af:7c:86:f9:92:22:54:5f:1b: e9:d5:65:7c:60:cb:4b:8c:46:a8:52:69:b3:2c:1c: ca:22:5b:6b:12:22:0f:62:f5:7a:d5:39:f7:8b:7d: 17:04:00:23:3a:a9:a3:0c:06:8c:16:ce:ad:49:f9: b9:cb:dd:46:6e:e3:bc:2c:15:84:da:18:4f:c1:31: 5f:0b:5d:e8:33:a5:05:78:44:62:60:2e:0c:fc:5d: ad:2e:f9:f9:65:a3:ea:a7:d0:9f:ff:5b:56:56:4a: 45:72:45:90:91:66:06:f6:55:09:c3:da:a5:d1:1e: c5:40:ff:53:74:f2:aa:d5:42:e7:96:c4:56:bb:52: 1d:4f:7a:95:1e:28:a4:41:99:40:a2:32:c8:d1:8d: 9b:8e:5c:63:04:7c:b5:e9:e3:0f:f9:36:61:bf:c9: 19:61:76:33:82:16:ea:3e:17:33:e7:95:45:74:4f: 8a:50:fd:ce:ca:95:ee:01:0f:57:f7:6d:ba:63:ab: 60:6e:10:d1:ea:4c:d2:32:6a:92:27:a6:b3:41:27: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:1D:83:33:B8:99:69:61:62:79:F0:57:7B:71:8E:82:A5:94:31 X509v3 Authority Key Identifier: keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:ca:a4:c5:20:60:9d:83:41:11:7b:28:c5:df:05:32:48: 54:71:ed:9f:33:62:2e:a1:97:0a:35:4f:b1:18:c0:eb:21:31: eb:a0:9a:f3:7b:0e:2e:56:e6:74:c8:ed:6d:e7:d0:dd:6b:77: 5d:af:bf:e6:97:d4:cd:8c:5f:f0:e3:91:bf:74:17:95:44:11: a9:3b:a9:71:58:06:eb:09:ea:ea:af:66:b5:ea:a9:eb:c5:fd: c3:96:1e:0a:cb:e5:55:9d:2e:14:18:6e:3e:54:6f:90:63:f2: 3a:d7:e1:f8:61:19:8b:0b:03:c4:59:78:32:9a:ec:ea:4e:be: 99:b7:0c:ae:a1:73:74:6c:9d:ef:a1:74:62:71:15:a0:19:d5: e5:41:c2:91:ab:8a:1c:dd:a2:9b:a8:18:44:48:48:f2:89:67: d2:b8:de:a2:5b:30:74:54:15:52:6c:04:6e:f9:9c:ed:a2:e9: 77:cd:a1:d5:40:15:d9:ec:5c:29:c1:37:01:01:9f:4e:53:4e: 42:eb:c3:8e:b8:3a:b2:87:34:7b:a5:c5:e7:9f:63:b3:c4:d6: b8:ee:11:51:85:60:26:0f:1e:cd:ff:3b:8f:4f:3e:a0:f2:6d: 48:4c:b6:82:13:90:00:3e:df:c3:f1:c1:3d:99:19:a6:0e:07: da:3a:ff:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM7AhuuqkJkaFWI8RCQHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDI0NmJmZmUwNGUyZDZmMWUxOTM5ZmU2Mzg2YTI0ZGZj ZGY3YWUwHhcNMjYwMjA5MDcwMDMyWhcNMjYwMjEwMDcwMDMyWjAzMTEwLwYDVQQD EygyNDJhMWQ4MzMzYjg5OTY5NjE2Mjc5ZjA1NzdiNzE4ZTgyYTU5NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCNmlae0FVoPIEURqiho8UWwGYGm 3j1Y5ef841DkFXvXDh7v+LCXlD74e5EJLtgpO4evfIb5kiJUXxvp1WV8YMtLjEao UmmzLBzKIltrEiIPYvV61Tn3i30XBAAjOqmjDAaMFs6tSfm5y91GbuO8LBWE2hhP wTFfC13oM6UFeERiYC4M/F2tLvn5ZaPqp9Cf/1tWVkpFckWQkWYG9lUJw9ql0R7F QP9TdPKq1ULnlsRWu1IdT3qVHiikQZlAojLI0Y2bjlxjBHy16eMP+TZhv8kZYXYz ghbqPhcz55VFdE+KUP3OypXuAQ9X9226Y6tgbhDR6kzSMmqSJ6azQScZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQqHYMzuJlpYWJ58Fd7cY6CpZQxMB8GA1UdIwQY MBaAFF4CRr/+BOLW8eGTn+Y4aiTfzfeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQt NGM5MWNiOWVjOThiLzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQtNGM5MWNiOWVjOThi LzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIjKpMUg YJ2DQRF7KMXfBTJIVHHtnzNiLqGXCjVPsRjA6yEx66Ca83sOLlbmdMjtbefQ3Wt3 Xa+/5pfUzYxf8OORv3QXlUQRqTupcVgG6wnq6q9mteqp68X9w5YeCsvlVZ0uFBhu PlRvkGPyOtfh+GEZiwsDxFl4Mprs6k6+mbcMrqFzdGyd76F0YnEVoBnV5UHCkauK HN2im6gYREhI8oln0rjeolswdFQVUmwEbvmc7aLpd82h1UAV2excKcE3AQGfTlNO QuvDjrg6soc0e6XF559js8TWuO4RUYVgJg8ezf87j08+oPJtSEy2ghOQAD7fw/HB PZkZpg4H2jr/Jg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:27 2026 by rpki-client