This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft File: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft (raw, json) Hash identifier: Z8f7JOBXhEDaGyl1sJPCX/1azbMxExCqsgtNs8csGq0= Subject key identifier: DF:E9:D9:24:B9:35:63:F4:A7:68:97:5D:E8:84:E7:56:9C:12:BB:E4 Authority key identifier: 5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99 Certificate issuer: /CN=5fb4fc39d528f4920e218b5567d416463e8a7399 Certificate serial: 019C42B41EB38CD39855886988F210D8DB02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft Manifest number: 33 Signing time: Mon 09 Feb 2026 14:00:26 +0000 Manifest this update: Mon 09 Feb 2026 14:00:26 +0000 Manifest next update: Tue 10 Feb 2026 14:00:26 +0000 Files and hashes: 1: X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl (hash: 2uQOZhOrHNHnfkTnZJeB6cjpMWez8aIBQk9CJa0H4WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1e:b3:8c:d3:98:55:88:69:88:f2:10:d8:db:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb4fc39d528f4920e218b5567d416463e8a7399 Validity Not Before: Feb 9 14:00:26 2026 GMT Not After : Feb 10 14:00:26 2026 GMT Subject: CN=dfe9d924b93563f4a768975de884e7569c12bbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:41:41:ac:0c:41:52:cc:7a:ee:58:3c:fd: 57:37:45:73:28:1e:14:5f:ae:25:45:47:1f:c3:62: 45:21:53:74:50:23:39:bc:92:79:24:e0:c7:70:b7: f3:cc:5d:90:bd:82:1c:6b:77:ea:68:91:26:54:f1: ba:7c:07:8d:10:02:51:f9:dc:f1:aa:96:16:65:3f: 1f:12:b8:ef:61:a0:dc:5a:ed:cb:bc:31:7a:91:dc: 7d:3d:d4:cb:ff:93:f8:a5:07:3d:f9:40:7c:d2:69: 81:b6:03:2b:66:69:23:81:f4:d7:a5:8f:b4:23:f4: a0:0e:6a:d7:15:3d:70:97:24:af:39:9e:24:e7:96: 78:3b:8c:9e:66:36:b9:c9:54:2b:7b:2a:99:d3:b0: 4b:4d:57:f1:07:b9:1c:5f:9a:ed:85:79:cd:5e:bc: 6a:4e:88:52:79:96:e0:f5:96:d4:17:fc:e8:f4:4c: 63:dc:19:e3:10:10:f8:80:7c:c4:a9:b7:8e:3a:11: 61:cd:47:00:c3:18:80:04:bb:ce:50:cd:8a:96:f1: 99:9a:3c:00:d4:5f:df:f1:cd:58:71:71:41:17:8c: 55:f4:e4:5a:a7:75:8a:ea:75:2f:70:4a:ad:f5:73: 4b:c4:29:ef:9d:e6:4b:5b:b4:8b:14:70:88:ac:76: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:D9:24:B9:35:63:F4:A7:68:97:5D:E8:84:E7:56:9C:12:BB:E4 X509v3 Authority Key Identifier: keyid:5F:B4:FC:39:D5:28:F4:92:0E:21:8B:55:67:D4:16:46:3E:8A:73:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d263b3-d26f-4afa-9671-ec51350d1bd0/1/X7T8OdUo9JIOIYtVZ9QWRj6Kc5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:6a:7e:30:6e:1c:3f:30:cc:56:d7:dd:53:46:69:c9:d8: 3c:a9:98:63:2d:aa:ab:3c:60:25:0a:32:3c:ce:81:fa:a1:3d: 7c:92:9b:62:d7:0e:93:36:f6:59:e7:9e:4a:f3:ca:a2:28:32: ab:a0:36:7a:60:41:99:0b:50:ff:09:26:b8:df:11:3b:41:36: aa:9f:e7:7b:65:1c:d8:ca:7c:55:a4:1f:bd:ac:c2:89:35:61: aa:77:29:4a:21:7a:2e:aa:87:65:0b:31:f1:74:06:8e:fc:48: 05:f9:20:bb:14:c5:ae:c0:00:a0:d0:aa:d3:eb:a0:9a:2e:ac: fb:e8:f3:25:c1:98:ea:2d:eb:2a:44:e9:cd:19:90:a5:d4:5b: 16:33:26:f4:78:7a:c3:5a:d1:08:77:74:b1:55:ac:89:f3:07: eb:29:23:8f:d6:6d:bb:e6:6a:11:89:8b:4a:4d:10:3d:9a:c6: 40:48:fc:66:1e:77:5e:38:38:75:86:0d:f1:fa:04:89:0b:9b: c9:76:d5:65:7c:87:da:83:b0:59:08:da:d8:9f:65:e8:0f:74: 7f:d5:5d:3e:67:71:19:69:f3:1a:fe:2f:02:7a:66:39:1a:e0: 03:8a:58:94:f2:ad:ce:0d:9e:09:eb:f5:ad:c8:4c:32:41:4e: e4:b2:63:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtB6zjNOYVYhpiPIQ2NsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjRmYzM5ZDUyOGY0OTIwZTIxOGI1NTY3ZDQxNjQ2M2U4 YTczOTkwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD EyhkZmU5ZDkyNGI5MzU2M2Y0YTc2ODk3NWRlODg0ZTc1NjljMTJiYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs1BQawMQVLMeu5YPP1XN0VzKB4U X64lRUcfw2JFIVN0UCM5vJJ5JODHcLfzzF2QvYIca3fqaJEmVPG6fAeNEAJR+dzx qpYWZT8fErjvYaDcWu3LvDF6kdx9PdTL/5P4pQc9+UB80mmBtgMrZmkjgfTXpY+0 I/SgDmrXFT1wlySvOZ4k55Z4O4yeZja5yVQreyqZ07BLTVfxB7kcX5rthXnNXrxq TohSeZbg9ZbUF/zo9Exj3BnjEBD4gHzEqbeOOhFhzUcAwxiABLvOUM2KlvGZmjwA 1F/f8c1YcXFBF4xV9ORap3WK6nUvcEqt9XNLxCnvneZLW7SLFHCIrHYtywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/p2SS5NWP0p2iXXeiE51acErvkMB8GA1UdIwQY MBaAFF+0/DnVKPSSDiGLVWfUFkY+inOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdUOE9kVW85SklPSVl0Vlo5UVdSajZLYzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kMjYzYjMtZDI2Zi00YWZhLTk2NzEt ZWM1MTM1MGQxYmQwLzEvWDdUOE9kVW85SklPSVl0Vlo5UVdSajZLYzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kMjYzYjMtZDI2Zi00YWZhLTk2NzEtZWM1MTM1MGQxYmQw LzEvWDdUOE9kVW85SklPSVl0Vlo5UVdSajZLYzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6tqfjBu HD8wzFbX3VNGacnYPKmYYy2qqzxgJQoyPM6B+qE9fJKbYtcOkzb2WeeeSvPKoigy q6A2emBBmQtQ/wkmuN8RO0E2qp/ne2Uc2Mp8VaQfvazCiTVhqncpSiF6LqqHZQsx 8XQGjvxIBfkguxTFrsAAoNCq0+ugmi6s++jzJcGY6i3rKkTpzRmQpdRbFjMm9Hh6 w1rRCHd0sVWsifMH6ykjj9Ztu+ZqEYmLSk0QPZrGQEj8Zh53Xjg4dYYN8foEiQub yXbVZXyH2oOwWQja2J9l6A90f9VdPmdxGWnzGv4vAnpmORrgA4pYlPKtzg2eCev1 rchMMkFO5LJj1A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:38 2026 by rpki-client