This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json) Hash identifier: XCxscMihZSfdUXG9qPvpi9KLLb9XZPcB9Z/Z/cTZFAo= Subject key identifier: 0D:66:88:38:0C:00:A5:6E:35:7B:AC:EA:BD:B4:84:43:B6:A5:42:A7 Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Certificate serial: 019C435941970224970BE3906B26974DEE8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft Manifest number: 03CB Signing time: Mon 09 Feb 2026 17:00:48 +0000 Manifest this update: Mon 09 Feb 2026 17:00:48 +0000 Manifest next update: Tue 10 Feb 2026 17:00:48 +0000 Files and hashes: 1: _JmA3MK8G0qpLNQyx391y06vnEs.roa (hash: U5oRmfOjkS3ly10lkGGT2q8Cjcu7ymVj/6KBitfSLE0=) 2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: T8Rz5mY3vUbRFt7KSXX+SywaiGK2B+dglpS+jWbuBtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:41:97:02:24:97:0b:e3:90:6b:26:97:4d:ee:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414 Validity Not Before: Feb 9 17:00:48 2026 GMT Not After : Feb 10 17:00:48 2026 GMT Subject: CN=0d6688380c00a56e357baceabdb48443b6a542a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:46:37:0f:92:f0:fc:2a:ae:b9:d3:f1:19: e0:a0:d0:84:47:65:36:92:4f:78:64:db:ef:37:11: eb:c8:38:69:04:f6:5b:2e:45:a0:7d:b7:d0:62:ea: 1f:14:6f:43:33:11:bd:de:51:96:da:df:54:95:be: 54:fc:04:9b:36:af:ab:e9:64:db:67:84:62:72:d5: 85:73:9b:bc:2a:54:ee:6a:80:da:24:d6:3c:55:42: 18:d7:10:3c:e7:c3:25:bd:f0:73:a2:66:58:1b:63: 08:93:f7:39:5f:85:31:a1:37:07:d7:fe:67:dd:01: f8:a4:3f:ad:ee:de:ff:41:46:52:b4:2c:5b:20:89: 78:a0:e4:16:71:fb:d1:36:90:93:47:28:9a:30:55: 9d:de:0b:4e:fe:2b:6a:0f:a1:b9:8d:c2:1c:eb:c0: 3a:c5:88:2e:12:cf:bf:9c:71:4c:71:00:36:22:79: af:5d:4c:fc:aa:d7:74:6b:a3:93:eb:d3:58:c1:25: be:23:34:96:3f:b4:61:41:72:49:e0:13:a0:cb:89: 0f:da:9f:c5:2c:14:d8:76:bf:71:09:bd:2f:44:ca: 74:e2:0d:60:34:5e:6b:3f:5a:c8:0f:93:9f:af:26: 25:80:b3:4e:79:19:53:e6:65:2b:d0:4a:27:0d:a0: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:88:38:0C:00:A5:6E:35:7B:AC:EA:BD:B4:84:43:B6:A5:42:A7 X509v3 Authority Key Identifier: keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:37:fd:aa:94:c5:e2:b5:66:f0:0d:eb:94:56:d2:16:8a:b4: fc:0a:d4:29:7f:cd:cd:17:eb:a8:3b:07:c2:41:3f:8a:8c:a3: bc:69:80:2e:86:7e:55:b4:8c:c3:52:b2:4c:f3:f2:c9:fe:54: 95:cb:69:d6:c4:fa:6e:78:52:86:bd:1c:cd:a2:4c:85:a6:66: d1:26:28:2f:c4:2c:b5:d7:91:d8:0b:b6:f2:e8:93:11:b9:1d: f1:21:65:9f:b4:5d:7a:c4:bd:9d:ab:27:a8:3b:ae:ed:40:f4: 77:66:e2:a5:3a:f4:0d:1e:33:76:aa:19:a9:22:c0:7a:49:4e: 9a:39:f7:0f:26:0d:47:7a:22:22:7f:6c:63:83:a4:ce:8d:f3: 23:2d:8b:2a:af:9b:62:25:9b:a9:80:ce:b2:a9:e5:d3:92:92: 0c:6f:11:9f:9c:ed:61:01:63:35:a3:0e:6a:3d:3a:1b:5d:e5: e0:e1:0a:93:45:97:15:f1:92:eb:4d:c9:2e:79:5d:ca:92:6e: 2d:26:24:64:03:aa:55:74:72:d1:66:5a:6d:d0:39:75:5c:c2: 5b:c6:0c:85:5b:02:1b:fa:5e:0a:b4:b9:d6:ad:43:d1:06:f5: 3a:7c:ee:c4:d9:97:37:18:56:ad:db:ad:0b:44:38:63:17:8f: 90:43:c6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUGXAiSXC+OQayaXTe6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YWNjOWUyOTk5NjQ3ZDgwMWQ0NjA2ZWM5NGQ2YjcyMWY3 YTY0MTQwHhcNMjYwMjA5MTcwMDQ4WhcNMjYwMjEwMTcwMDQ4WjAzMTEwLwYDVQQD EygwZDY2ODgzODBjMDBhNTZlMzU3YmFjZWFiZGI0ODQ0M2I2YTU0MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7BGNw+S8PwqrrnT8RngoNCER2U2 kk94ZNvvNxHryDhpBPZbLkWgfbfQYuofFG9DMxG93lGW2t9Ulb5U/ASbNq+r6WTb Z4RictWFc5u8KlTuaoDaJNY8VUIY1xA858MlvfBzomZYG2MIk/c5X4UxoTcH1/5n 3QH4pD+t7t7/QUZStCxbIIl4oOQWcfvRNpCTRyiaMFWd3gtO/itqD6G5jcIc68A6 xYguEs+/nHFMcQA2InmvXUz8qtd0a6OT69NYwSW+IzSWP7RhQXJJ4BOgy4kP2p/F LBTYdr9xCb0vRMp04g1gNF5rP1rID5OfryYlgLNOeRlT5mUr0EonDaAA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1miDgMAKVuNXus6r20hEO2pUKnMB8GA1UdIwQY MBaAFMSsyeKZlkfYAdRgbslNa3IfemQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEt YTA0YTJjOWFmZGVlLzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEtYTA0YTJjOWFmZGVl LzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjf9qpTF 4rVm8A3rlFbSFoq0/ArUKX/NzRfrqDsHwkE/ioyjvGmALoZ+VbSMw1KyTPPyyf5U lctp1sT6bnhShr0czaJMhaZm0SYoL8QstdeR2Au28uiTEbkd8SFln7RdesS9nasn qDuu7UD0d2bipTr0DR4zdqoZqSLAeklOmjn3DyYNR3oiIn9sY4Okzo3zIy2LKq+b YiWbqYDOsqnl05KSDG8Rn5ztYQFjNaMOaj06G13l4OEKk0WXFfGS603JLnldypJu LSYkZAOqVXRy0WZabdA5dVzCW8YMhVsCG/peCrS51q1D0Qb1OnzuxNmXNxhWrdut C0Q4YxePkEPGtw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:29 2026 by rpki-client