This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json) Hash identifier: sAQpnnQnnG3ytHXqgwXMaHFyzXFf+Tx2vU3vTE/cr8k= Subject key identifier: 39:67:7A:8C:31:7D:B6:4E:94:5A:8A:8D:BE:F5:C3:36:9A:29:70:89 Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Certificate serial: 019C43FE1E134E4DF0E5698A3B3FF6680A1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 20:00:53 +0000 Manifest this update: Mon 09 Feb 2026 20:00:53 +0000 Manifest next update: Tue 10 Feb 2026 20:00:53 +0000 Files and hashes: 1: V8ZoCsWD9muj8NjFFgc6JWYGaJQ.roa (hash: ry1QmNgsoyY18ZwPnwsZ1kzSR5GRuG7sj4PvQ3AErOM=) 2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: xT4tpj33irB0LwNDppRX47PuWlPUSXHoUjJeeRfN6+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:1e:13:4e:4d:f0:e5:69:8a:3b:3f:f6:68:0a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Validity Not Before: Feb 9 20:00:53 2026 GMT Not After : Feb 10 20:00:53 2026 GMT Subject: CN=39677a8c317db64e945a8a8dbef5c3369a297089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:4b:b9:3e:4a:9f:a3:dd:62:d4:9f:07:c8: e5:f5:86:de:12:73:ed:92:f3:a9:ee:7b:50:53:22: 3a:8b:3b:4c:90:db:d7:b1:7a:f2:5b:4a:31:cd:35: 6f:17:81:da:11:b0:bb:b0:fd:e1:13:ab:ea:d6:f3: c4:f1:c5:39:bb:08:06:d6:14:6a:1a:5f:09:66:40: 46:ea:6d:2a:79:ee:80:72:20:4a:ab:32:5e:ad:89: 1e:23:af:ee:95:8e:0b:47:f5:05:0b:e7:dd:42:81: 75:dd:d9:c2:7d:33:ca:a5:46:e6:bf:af:2f:00:4c: 08:d5:92:ea:b9:cb:99:aa:29:c7:85:69:d4:9e:3e: 7f:56:4c:92:68:d8:fb:b2:3e:c8:fa:1d:0c:13:86: e4:83:db:48:ba:dd:f6:7e:aa:f7:1b:cb:5c:a1:a7: b1:fd:ca:f5:83:e1:ea:89:e6:cb:25:d4:25:39:a3: 91:39:78:7a:fb:71:e6:a4:cc:3d:cf:0f:90:a6:6a: 77:93:a2:12:7c:04:eb:ff:07:af:12:f3:95:94:0f: 77:86:9f:f1:9d:ea:ed:e6:3f:d8:93:0d:0e:a3:3c: b3:13:0f:f6:20:83:82:05:93:be:19:98:92:d4:87: 44:d9:b8:6c:9e:58:7b:05:fd:33:97:b6:e8:c1:f5: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:67:7A:8C:31:7D:B6:4E:94:5A:8A:8D:BE:F5:C3:36:9A:29:70:89 X509v3 Authority Key Identifier: keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:2c:10:1d:81:ef:34:a6:6c:bc:c9:99:5c:23:53:a9:c2: 6e:ad:46:a3:d6:18:96:b6:60:4d:0a:06:a0:1e:cb:12:58:b3: c4:4b:1b:b4:3f:ee:4b:d4:8d:8a:00:5b:0f:f0:c0:da:89:ec: ec:48:8c:e9:ed:85:f4:e7:83:11:60:7c:cd:d5:b0:4a:57:7b: 7a:66:43:f2:60:bb:a6:0d:91:8a:31:6b:d6:82:b0:d8:4e:14: 02:5c:bb:df:2d:a2:05:45:cb:d6:1c:40:99:7c:ed:94:d8:37: c9:16:c8:29:1c:ec:7e:04:ad:7d:03:24:73:b7:7b:89:6e:63: cd:c8:6f:95:9b:79:2a:cf:55:f3:50:12:e4:14:6b:23:34:6d: 69:55:02:56:03:f7:66:55:5c:4f:e2:db:75:03:b8:b5:c8:08: 3c:fa:5a:01:f8:01:6c:c3:c0:8f:f5:0d:62:29:f6:fa:82:d2: be:0a:bb:4c:46:a1:b3:5b:b8:90:02:81:c3:5d:2a:b4:cd:c6: 1f:08:a0:e6:75:96:a1:22:c0:6e:c6:15:1b:f7:b3:7e:0b:d7: 76:59:51:56:f9:27:34:c6:1b:88:bb:85:c4:c1:f4:38:da:dd: 25:de:b7:45:78:7b:90:6a:3f:24:c2:41:c9:5e:3c:1e:6e:c2: b5:aa:8c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/h4TTk3w5WmKOz/2aAocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk ODFiNDgwHhcNMjYwMjA5MjAwMDUzWhcNMjYwMjEwMjAwMDUzWjAzMTEwLwYDVQQD EygzOTY3N2E4YzMxN2RiNjRlOTQ1YThhOGRiZWY1YzMzNjlhMjk3MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGdLuT5Kn6PdYtSfB8jl9YbeEnPt kvOp7ntQUyI6iztMkNvXsXryW0oxzTVvF4HaEbC7sP3hE6vq1vPE8cU5uwgG1hRq Gl8JZkBG6m0qee6AciBKqzJerYkeI6/ulY4LR/UFC+fdQoF13dnCfTPKpUbmv68v AEwI1ZLqucuZqinHhWnUnj5/VkySaNj7sj7I+h0ME4bkg9tIut32fqr3G8tcoaex /cr1g+HqiebLJdQlOaOROXh6+3HmpMw9zw+Qpmp3k6ISfATr/wevEvOVlA93hp/x nert5j/Ykw0OozyzEw/2IIOCBZO+GZiS1IdE2bhsnlh7Bf0zl7bowfX1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlneowxfbZOlFqKjb71wzaaKXCJMB8GA1UdIwQY MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNIsEB2B 7zSmbLzJmVwjU6nCbq1Go9YYlrZgTQoGoB7LElizxEsbtD/uS9SNigBbD/DA2ons 7EiM6e2F9OeDEWB8zdWwSld7emZD8mC7pg2RijFr1oKw2E4UAly73y2iBUXL1hxA mXztlNg3yRbIKRzsfgStfQMkc7d7iW5jzchvlZt5Ks9V81AS5BRrIzRtaVUCVgP3 ZlVcT+LbdQO4tcgIPPpaAfgBbMPAj/UNYin2+oLSvgq7TEahs1u4kAKBw10qtM3G Hwig5nWWoSLAbsYVG/ezfgvXdllRVvknNMYbiLuFxMH0ONrdJd63RXh7kGo/JMJB yV48Hm7CtaqMOA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:59:45 2026 by rpki-client