This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json) Hash identifier: EAQR6xfzB3I9QoJId+74bssjS7YZlYEVh0yiEuU4Sx4= Subject key identifier: 85:35:A0:F6:04:C4:30:60:A1:C5:D3:10:B3:61:30:43:F2:4D:C9:4D Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Certificate serial: 019C4322561721D0A8F35DEA9C01FC9E766A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: +2V0a6Tieu4Y535gOH4vIWCucJn5yIhWDF68gS/rcJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:56:17:21:d0:a8:f3:5d:ea:9c:01:fc:9e:76:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=8535a0f604c43060a1c5d310b3613043f24dc94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:62:1d:6c:5a:70:e0:39:81:a4:10:fc:ed: 0e:59:bc:71:b0:41:06:b8:0a:57:e9:17:5d:28:5b: b8:65:28:07:10:6b:64:c5:c5:69:24:7e:21:52:1d: 6f:86:20:12:b5:90:18:40:7f:91:68:6d:10:4b:06: e4:9f:25:1d:f8:3b:12:ea:ef:0d:2d:5c:01:9a:fe: ff:9f:0b:2b:ea:db:49:a9:d8:c1:7c:5d:15:f5:36: fc:1d:1f:43:f3:90:f9:70:78:44:67:79:f5:94:17: ec:97:f9:7f:14:2e:54:2a:8b:f2:f6:36:5e:6c:ef: 24:a0:47:0c:2b:6a:a0:4d:11:cf:23:e4:1e:f7:1f: b5:3b:99:db:7e:bb:1b:9b:f6:39:66:61:82:6d:27: 78:a4:0a:47:cd:73:b8:de:29:44:40:d0:65:bf:48: b7:5c:35:91:f9:dd:22:33:06:08:2b:59:a3:c3:46: d4:52:a1:ed:58:65:61:4d:75:1e:bb:26:fe:91:85: 32:b6:cd:d2:d6:83:de:65:0f:54:db:ab:7f:d6:a8: bf:0d:54:c7:e4:a0:7c:57:e7:e3:cf:02:f6:b2:c6: f4:e1:bc:f3:41:e9:72:f7:d5:4e:c1:3e:51:ae:a9: c5:6f:f2:41:16:b5:65:c0:28:0c:58:80:f6:a7:9a: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:35:A0:F6:04:C4:30:60:A1:C5:D3:10:B3:61:30:43:F2:4D:C9:4D X509v3 Authority Key Identifier: keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9f:ac:65:ef:18:97:e0:75:21:ca:1e:a7:9b:84:44:88:22: ec:dc:e2:76:42:56:4a:64:6a:ae:df:27:75:ee:76:3b:84:06: e3:9d:3b:5d:39:0c:bb:2e:2b:78:25:56:b4:f3:31:25:90:05: 7e:55:e3:9d:db:3c:12:35:a2:39:4a:87:a9:73:6f:df:97:c4: 27:b8:db:74:a1:9d:77:83:b6:86:34:15:9f:97:fa:fe:e8:3a: 12:86:1d:e0:3f:ce:86:9f:2b:11:41:81:ca:b6:0f:91:73:4d: d3:3c:0b:48:5f:90:e0:67:c1:e2:12:45:fe:e6:a7:c2:df:7f: 5e:e4:9b:65:ae:9c:db:2f:ea:b5:ea:41:ae:2b:c3:c4:5a:5b: 6d:fa:06:63:b7:c7:41:d5:78:68:2a:46:14:4b:40:b1:9a:9e: 26:49:d4:93:c9:25:ad:17:22:24:c9:f0:74:f6:ae:a5:66:9b: e4:1d:5b:ea:36:85:72:57:b5:64:2e:92:e7:e2:4f:26:75:e6: 4f:be:75:a9:d4:8e:3a:83:0f:27:d6:b5:a6:b7:d8:30:7c:02: 94:b5:4d:ae:a9:7e:36:28:44:15:ab:13:11:55:72:54:4a:83: 47:92:f5:b3:d8:a6:ed:71:47:ce:ea:b5:6b:17:32:3e:bc:e8: 83:7f:11:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlYXIdCo813qnAH8nnZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2NhNjlkNGRkOGVlZGNmNjAzZTM2MzI5NWIxOWI2OTAy OWVmNWMwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD Eyg4NTM1YTBmNjA0YzQzMDYwYTFjNWQzMTBiMzYxMzA0M2YyNGRjOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcRiHWxacOA5gaQQ/O0OWbxxsEEG uApX6RddKFu4ZSgHEGtkxcVpJH4hUh1vhiAStZAYQH+RaG0QSwbknyUd+DsS6u8N LVwBmv7/nwsr6ttJqdjBfF0V9Tb8HR9D85D5cHhEZ3n1lBfsl/l/FC5UKovy9jZe bO8koEcMK2qgTRHPI+Qe9x+1O5nbfrsbm/Y5ZmGCbSd4pApHzXO43ilEQNBlv0i3 XDWR+d0iMwYIK1mjw0bUUqHtWGVhTXUeuyb+kYUyts3S1oPeZQ9U26t/1qi/DVTH 5KB8V+fjzwL2ssb04bzzQely99VOwT5RrqnFb/JBFrVlwCgMWID2p5rZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU1oPYExDBgocXTELNhMEPyTclNMB8GA1UdIwQY MBaAFMXMpp1N2O7c9gPjYylbGbaQKe9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEt NzZmNzBkODMzZGQ0LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEtNzZmNzBkODMzZGQ0 LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp+sZe8Y l+B1Icoep5uERIgi7NzidkJWSmRqrt8nde52O4QG4507XTkMuy4reCVWtPMxJZAF flXjnds8EjWiOUqHqXNv35fEJ7jbdKGdd4O2hjQVn5f6/ug6EoYd4D/Ohp8rEUGB yrYPkXNN0zwLSF+Q4GfB4hJF/uanwt9/XuSbZa6c2y/qtepBrivDxFpbbfoGY7fH QdV4aCpGFEtAsZqeJknUk8klrRciJMnwdPaupWab5B1b6jaFcle1ZC6S5+JPJnXm T751qdSOOoMPJ9a1prfYMHwClLVNrql+NihEFasTEVVyVEqDR5L1s9im7XFHzuq1 axcyPrzog38R5g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:47 2026 by rpki-client