This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json) Hash identifier: rAbVhJHpB6jP2uNdXkbSmZvWPEEazfCiRubDW9Kk+eE= Subject key identifier: 02:4B:07:62:20:34:12:59:68:05:42:AC:98:85:A6:05:6C:4C:7D:33 Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a Certificate serial: 019C4322BD6A06043BDA70F6EB824C4947CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (hash: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0=) 2: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: zd0G9RPrHbHKxyLmX6rGGiAqL58ydKWKw2nLOgBVZrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bd:6a:06:04:3b:da:70:f6:eb:82:4c:49:47:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=024b076220341259680542ac9885a6056c4c7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:af:d1:27:4c:d9:dc:03:c9:ec:ba:fc:fc: 5e:03:1c:d3:f5:07:a0:35:cf:4d:10:a4:79:9c:66: 80:f0:69:b1:8b:71:ff:d5:f7:91:46:4c:31:89:bc: 43:ea:f0:27:e4:57:8a:1d:4f:13:64:4e:a2:4a:8c: 6a:9f:ae:8a:a3:e6:45:9a:a2:68:aa:96:6f:74:7f: 02:e2:51:c8:6e:7c:88:53:6d:95:c0:6d:a3:9b:6a: 1c:73:79:37:a8:67:3e:bc:ba:88:14:a3:03:8e:87: a8:c6:06:24:6b:1c:c0:6d:47:2c:88:a7:ce:aa:60: 55:5a:f9:ad:a5:c8:77:90:25:ce:b1:ef:7b:c1:43: 7f:65:7d:48:74:e8:54:2d:58:02:74:44:7a:36:c1: 06:45:92:25:03:f7:1a:64:9b:3e:a9:e1:90:be:0e: 49:77:de:8f:b5:99:4d:85:8c:a2:d7:7e:c8:10:8b: e6:c9:73:a7:0b:04:56:ee:8f:14:1c:31:14:67:6d: 5b:e2:19:49:d5:50:e3:88:5c:dd:cf:c1:e9:06:5e: 80:71:96:b7:12:c1:d8:58:d9:a8:c3:f0:85:5d:e8: a2:b0:af:af:f0:e1:ff:82:bf:ef:7c:dc:2f:58:c4: 5f:d6:de:ef:d0:3c:9c:00:83:ae:ce:5f:00:3b:18: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:07:62:20:34:12:59:68:05:42:AC:98:85:A6:05:6C:4C:7D:33 X509v3 Authority Key Identifier: keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:7a:a7:d5:d9:06:90:2c:c7:bb:88:e1:ca:7f:3c:66:77: 12:6b:0a:f3:ad:33:a5:95:46:97:ab:56:d4:b6:68:d9:c9:64: d4:2c:07:e2:4f:c0:28:fc:e2:74:61:37:be:41:0d:b4:08:be: 7e:f9:5e:e0:69:08:a8:7f:bb:54:62:a3:61:81:5e:e5:96:0e: 42:ca:cb:3d:7a:5a:d6:3c:bb:81:ce:cc:c7:9e:bc:6c:b5:e5: 69:72:65:55:61:cb:b1:8b:24:9a:c6:76:41:ca:42:35:db:13: b1:b0:ed:02:6c:16:fd:12:45:e7:9b:92:21:f5:46:a5:10:bd: 7f:b5:b6:a8:ed:cf:a5:17:50:ce:ac:cd:d3:57:15:9e:b7:0e: dd:40:c8:2a:e9:b3:f1:9a:d7:a6:2a:b1:6c:2f:1a:aa:27:03: be:f2:46:51:03:d3:78:98:ef:f4:ff:4f:59:39:24:36:57:92: fe:17:76:fd:c6:51:6c:20:74:1a:5d:c7:12:c8:07:2a:26:6a: 5d:df:3e:12:26:fa:cd:1e:37:57:8d:22:cd:51:dd:d2:83:01: 5f:0a:56:f9:ae:4d:1e:d7:a9:a5:14:46:06:b7:a0:92:32:b4: 00:b1:66:60:87:c6:f7:fb:72:36:d2:35:f4:32:08:ce:36:54: 62:e1:bc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr1qBgQ72nD264JMSUfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw OTAzMWEwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD EygwMjRiMDc2MjIwMzQxMjU5NjgwNTQyYWM5ODg1YTYwNTZjNGM3ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmev0SdM2dwDyey6/PxeAxzT9Qeg Nc9NEKR5nGaA8Gmxi3H/1feRRkwxibxD6vAn5FeKHU8TZE6iSoxqn66Ko+ZFmqJo qpZvdH8C4lHIbnyIU22VwG2jm2occ3k3qGc+vLqIFKMDjoeoxgYkaxzAbUcsiKfO qmBVWvmtpch3kCXOse97wUN/ZX1IdOhULVgCdER6NsEGRZIlA/caZJs+qeGQvg5J d96PtZlNhYyi137IEIvmyXOnCwRW7o8UHDEUZ21b4hlJ1VDjiFzdz8HpBl6AcZa3 EsHYWNmow/CFXeiisK+v8OH/gr/vfNwvWMRf1t7v0DycAIOuzl8AOxioYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJLB2IgNBJZaAVCrJiFpgVsTH0zMB8GA1UdIwQY MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIt6p9XZ BpAsx7uI4cp/PGZ3EmsK860zpZVGl6tW1LZo2clk1CwH4k/AKPzidGE3vkENtAi+ fvle4GkIqH+7VGKjYYFe5ZYOQsrLPXpa1jy7gc7Mx568bLXlaXJlVWHLsYskmsZ2 QcpCNdsTsbDtAmwW/RJF55uSIfVGpRC9f7W2qO3PpRdQzqzN01cVnrcO3UDIKumz 8ZrXpiqxbC8aqicDvvJGUQPTeJjv9P9PWTkkNleS/hd2/cZRbCB0Gl3HEsgHKiZq Xd8+Eib6zR43V40izVHd0oMBXwpW+a5NHteppRRGBregkjK0ALFmYIfG9/tyNtI1 9DIIzjZUYuG8ZA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:32 2026 by rpki-client