This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json) Hash identifier: r1ipO9HOaSZO30krJIssh4wpxGSu7mS5nekzRMtcRFI= Subject key identifier: 9F:1B:8A:30:4C:C3:8D:7A:15:B0:24:84:9E:19:FC:AA:ED:9A:37:C7 Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Certificate serial: 019C41A216E543DC912A8EAC21554B4FDAB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft Manifest number: 1819 Signing time: Mon 09 Feb 2026 09:01:07 +0000 Manifest this update: Mon 09 Feb 2026 09:01:07 +0000 Manifest next update: Tue 10 Feb 2026 09:01:07 +0000 Files and hashes: 1: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (hash: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8=) 2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: TSB8JhUQfZf1wGid718h17mlfRTBvmtyLFsZpeEaLAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:16:e5:43:dc:91:2a:8e:ac:21:55:4b:4f:da:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Validity Not Before: Feb 9 09:01:07 2026 GMT Not After : Feb 10 09:01:07 2026 GMT Subject: CN=9f1b8a304cc38d7a15b024849e19fcaaed9a37c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:9a:60:07:9f:ed:23:ff:1a:ff:8a:82:1f: 70:31:4f:3c:24:c6:81:e0:e0:6c:25:2f:fd:7d:ef: a9:97:24:ee:56:3d:2f:6f:a1:ed:7d:79:b9:02:7c: f9:5d:1c:08:0f:d1:81:7f:19:33:01:0a:b0:83:fe: c4:9f:b2:d2:19:40:0e:c3:3b:c1:0d:80:cd:23:eb: 75:ca:d7:df:c6:21:ec:75:5f:48:bd:60:8e:5c:79: 18:62:7b:10:84:9a:3c:69:23:b7:59:03:e0:33:ce: 15:15:fd:b9:4b:40:19:96:73:c9:3f:dc:66:83:f0: 8d:f3:80:62:be:f5:c5:be:3b:44:75:ca:0d:fe:d0: 71:e6:0b:ec:6c:f9:87:20:b7:1f:13:39:09:43:63: eb:b5:71:70:e7:86:aa:01:ef:21:46:ca:8e:a2:7b: 9c:3e:d0:7e:dd:0a:5b:10:d4:e4:73:96:29:82:96: f8:00:f0:53:6f:e8:8e:9c:52:86:57:f1:f8:44:96: 64:46:db:ca:7e:6d:c6:29:12:9d:a7:7b:a7:8c:c2: 6d:ab:82:d6:ef:18:6b:56:d4:98:e4:42:be:95:b5: f5:eb:6f:6a:e4:39:fc:24:c1:f7:a2:8f:10:b7:a3: 44:db:d7:43:9f:67:5a:8e:97:d5:11:5e:f9:f8:b3: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1B:8A:30:4C:C3:8D:7A:15:B0:24:84:9E:19:FC:AA:ED:9A:37:C7 X509v3 Authority Key Identifier: keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:2e:3d:db:07:4d:b7:b0:ee:b0:af:40:e0:4a:c1:4e:5f: 7a:ff:95:e0:6c:54:dd:56:47:6b:67:9f:54:d3:99:ba:be:c8: 52:3f:c2:42:eb:54:9f:71:a9:0d:67:95:82:40:2a:e6:c4:70: 1d:93:af:d8:e0:6a:e6:cc:bd:2a:ef:fd:f1:c4:3c:88:7d:e9: 60:51:c4:59:42:70:85:78:3b:77:53:e2:c1:68:9a:8a:34:14: d4:14:ca:c4:1e:d9:df:65:fc:c9:8e:9a:8f:3c:b4:03:02:25: 3a:b7:73:86:0b:6a:79:22:7f:6a:ba:cc:74:de:b2:39:2d:79: 3a:4f:19:fc:18:59:f8:51:ed:4f:e9:80:f7:6d:b6:49:0b:39: b1:1f:a7:bc:bf:4d:95:02:1b:4c:fb:f8:0d:4d:93:5e:c5:95: b1:06:bd:e5:85:22:c6:68:26:3c:3b:82:53:39:4a:43:7f:ef: 27:11:10:2b:bb:7b:c2:05:36:e7:8f:91:7b:8a:fe:e2:21:8c: 74:61:be:21:e4:1a:4c:cd:5d:28:c0:42:12:a5:4a:c2:3d:bc: 40:bb:02:9e:5a:e2:54:f4:fb:1f:e8:c2:a6:ba:6f:91:bf:28: 05:77:5c:6e:62:b7:28:c0:cb:69:68:5d:6d:a6:05:9f:87:c8: 07:e3:dd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohblQ9yRKo6sIVVLT9q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj OWYwY2YwHhcNMjYwMjA5MDkwMTA3WhcNMjYwMjEwMDkwMTA3WjAzMTEwLwYDVQQD Eyg5ZjFiOGEzMDRjYzM4ZDdhMTViMDI0ODQ5ZTE5ZmNhYWVkOWEzN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IeaYAef7SP/Gv+Kgh9wMU88JMaB 4OBsJS/9fe+plyTuVj0vb6HtfXm5Anz5XRwID9GBfxkzAQqwg/7En7LSGUAOwzvB DYDNI+t1ytffxiHsdV9IvWCOXHkYYnsQhJo8aSO3WQPgM84VFf25S0AZlnPJP9xm g/CN84BivvXFvjtEdcoN/tBx5gvsbPmHILcfEzkJQ2PrtXFw54aqAe8hRsqOonuc PtB+3QpbENTkc5Ypgpb4APBTb+iOnFKGV/H4RJZkRtvKfm3GKRKdp3unjMJtq4LW 7xhrVtSY5EK+lbX1629q5Dn8JMH3oo8Qt6NE29dDn2dajpfVEV75+LMfdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8bijBMw416FbAkhJ4Z/KrtmjfHMB8GA1UdIwQY MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct OGFkNzRjYzZhNmI5LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5 LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2UuPdsH Tbew7rCvQOBKwU5fev+V4GxU3VZHa2efVNOZur7IUj/CQutUn3GpDWeVgkAq5sRw HZOv2OBq5sy9Ku/98cQ8iH3pYFHEWUJwhXg7d1PiwWiaijQU1BTKxB7Z32X8yY6a jzy0AwIlOrdzhgtqeSJ/arrMdN6yOS15Ok8Z/BhZ+FHtT+mA9222SQs5sR+nvL9N lQIbTPv4DU2TXsWVsQa95YUixmgmPDuCUzlKQ3/vJxEQK7t7wgU254+Re4r+4iGM dGG+IeQaTM1dKMBCEqVKwj28QLsCnlriVPT7H+jCprpvkb8oBXdcbmK3KMDLaWhd baYFn4fIB+PdMg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:00 2026 by rpki-client