This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json) Hash identifier: 9xU8G814q/kTFQ20jKndxV0bgl3FEljbgL3k9FGCzl0= Subject key identifier: 38:C4:1E:94:6C:49:C8:15:E9:78:59:FF:45:75:2C:7B:56:23:83:85 Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22 Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422 Certificate serial: 019C43909B4E027E6E65BA535820EA182F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft Manifest number: 07E1 Signing time: Mon 09 Feb 2026 18:01:16 +0000 Manifest this update: Mon 09 Feb 2026 18:01:16 +0000 Manifest next update: Tue 10 Feb 2026 18:01:16 +0000 Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: uL8vtbacAAmp+JpTSCZvlm1x8H6DHx6bT4id/DEvNg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:9b:4e:02:7e:6e:65:ba:53:58:20:ea:18:2f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422 Validity Not Before: Feb 9 18:01:16 2026 GMT Not After : Feb 10 18:01:16 2026 GMT Subject: CN=38c41e946c49c815e97859ff45752c7b56238385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0a:63:0b:4c:60:cd:64:81:ed:a9:9a:37:ed: 40:a6:15:b7:6a:6c:97:5d:ab:1b:46:67:bd:15:cd: be:24:1c:ae:8c:cb:18:3d:d0:fd:d1:d0:e2:a4:11: e8:09:a1:9c:99:05:59:a2:56:4b:23:f9:65:62:a2: 26:3e:80:a2:ca:5f:0f:60:70:ca:e3:d3:5a:9e:16: d4:dd:db:28:3f:ba:12:bd:2c:89:37:11:9c:e9:fc: f1:91:38:25:50:8d:29:f2:6c:0b:c4:6e:1b:c0:f1: 3d:d9:f6:49:60:cf:dd:a4:b4:ea:3e:64:a1:e7:f5: db:d5:0c:f4:bf:eb:90:60:29:6b:ea:06:0f:b7:c1: 84:2f:33:6f:37:23:40:3a:e7:ba:c2:0a:22:11:ea: 7e:e2:78:bb:84:90:ac:74:09:91:45:03:86:40:86: 0c:87:89:cc:f9:7b:61:24:1c:9a:49:78:57:8a:42: 84:93:dd:98:0e:a7:9d:3a:46:9f:61:20:fc:e4:38: 7e:ac:6f:4c:c5:28:4c:33:a1:0a:a4:f8:3f:85:0b: 52:dd:7b:d6:85:09:e2:91:0e:6e:63:1f:2a:81:6d: a0:4c:cf:e8:17:db:86:f4:ca:80:90:bf:f7:79:02: b1:33:db:83:e4:53:27:ee:85:5a:1c:0f:b8:6d:2a: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C4:1E:94:6C:49:C8:15:E9:78:59:FF:45:75:2C:7B:56:23:83:85 X509v3 Authority Key Identifier: keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:30:6e:fb:1e:61:05:ce:74:8d:46:fb:b5:0d:62:7f:5f:0b: 1f:2a:a6:ff:0c:c2:bb:61:86:6f:ba:c3:ce:83:d2:bb:6e:e2: a2:9d:9e:0c:14:50:a5:0d:15:a3:af:93:5f:a9:0d:6f:5a:d0: 49:ed:d7:16:20:db:46:6f:b7:3b:5a:0f:cc:5d:db:46:74:38: 3d:4d:e4:51:a0:f4:8c:a2:52:3c:a8:f7:c1:0c:c3:1a:33:5a: b3:0c:97:dd:bd:00:1e:11:11:2d:5b:ec:1b:6f:39:6f:2c:17: 32:66:fd:3a:54:91:d1:23:bb:cd:e4:34:bd:a0:81:ce:10:65: 47:a9:f0:ae:57:d1:3a:28:72:7b:5e:d3:87:85:46:de:47:af: e8:90:4b:dc:83:f0:6e:58:52:95:c7:46:36:f9:45:25:04:91: d5:b4:4b:e1:a3:12:51:16:fe:83:a0:ef:ed:32:2a:40:a6:51: 3a:67:49:2a:57:b1:d4:31:01:dc:71:0d:41:61:1a:89:0f:8d: 99:4e:02:6a:21:c2:13:e8:76:a2:a6:39:f1:c5:d6:90:57:50: 50:99:2d:72:ea:85:31:f6:a1:92:52:7b:1e:a9:15:00:79:bf: 24:ab:30:bb:b5:9e:33:4a:6c:f7:ef:81:a8:97:71:3d:75:0d: 37:62:2a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkJtOAn5uZbpTWCDqGC8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTRkNTFhMzI0N2IxN2Y2Zjk2YTBjY2UyNTMwMTkyZGM5 Zjc0MjIwHhcNMjYwMjA5MTgwMTE2WhcNMjYwMjEwMTgwMTE2WjAzMTEwLwYDVQQD EygzOGM0MWU5NDZjNDljODE1ZTk3ODU5ZmY0NTc1MmM3YjU2MjM4Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QpjC0xgzWSB7amaN+1AphW3amyX XasbRme9Fc2+JByujMsYPdD90dDipBHoCaGcmQVZolZLI/llYqImPoCiyl8PYHDK 49NanhbU3dsoP7oSvSyJNxGc6fzxkTglUI0p8mwLxG4bwPE92fZJYM/dpLTqPmSh 5/Xb1Qz0v+uQYClr6gYPt8GELzNvNyNAOue6wgoiEep+4ni7hJCsdAmRRQOGQIYM h4nM+XthJByaSXhXikKEk92YDqedOkafYSD85Dh+rG9MxShMM6EKpPg/hQtS3XvW hQnikQ5uYx8qgW2gTM/oF9uG9MqAkL/3eQKxM9uD5FMn7oVaHA+4bSr0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjEHpRsScgV6XhZ/0V1LHtWI4OFMB8GA1UdIwQY MBaAFF5U1RoyR7F/b5agzOJTAZLcn3QiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMt NzJlMWZjNGEzMDZlLzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMtNzJlMWZjNGEzMDZl LzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODBu+x5h Bc50jUb7tQ1if18LHyqm/wzCu2GGb7rDzoPSu27iop2eDBRQpQ0Vo6+TX6kNb1rQ Se3XFiDbRm+3O1oPzF3bRnQ4PU3kUaD0jKJSPKj3wQzDGjNaswyX3b0AHhERLVvs G285bywXMmb9OlSR0SO7zeQ0vaCBzhBlR6nwrlfROihye17Th4VG3kev6JBL3IPw blhSlcdGNvlFJQSR1bRL4aMSURb+g6Dv7TIqQKZROmdJKlex1DEB3HENQWEaiQ+N mU4CaiHCE+h2oqY58cXWkFdQUJktcuqFMfahklJ7HqkVAHm/JKswu7WeM0ps9++B qJdxPXUNN2IqKw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:11 2026 by rpki-client