This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json) Hash identifier: 2h/zVqhQuN+GkV7qp18tP90FJN7MT0szJKBrNVFAkiA= Subject key identifier: BF:22:18:A6:9C:C8:13:6E:09:E6:03:BA:92:31:58:FF:D7:FF:90:C5 Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Certificate serial: 019C438FDB232430D26E9E917BF57ED20E64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft Manifest number: 0E29 Signing time: Mon 09 Feb 2026 18:00:27 +0000 Manifest this update: Mon 09 Feb 2026 18:00:27 +0000 Manifest next update: Tue 10 Feb 2026 18:00:27 +0000 Files and hashes: 1: 4Kxd8dm-CWu1jCIsUqmZWt5sIc4.roa (hash: RVAhzYMBRgQ2W1wIbtL6Kztr89B+xTCwvr6xBM79OwQ=) 2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: djmdBSoztw8ymcSF167kxM2TVHdvUwBEQ+G1cEhqNJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:db:23:24:30:d2:6e:9e:91:7b:f5:7e:d2:0e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb Validity Not Before: Feb 9 18:00:27 2026 GMT Not After : Feb 10 18:00:27 2026 GMT Subject: CN=bf2218a69cc8136e09e603ba923158ffd7ff90c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:a3:8e:72:a1:71:8a:e5:22:89:22:2d:47: 1d:41:b9:5f:86:ac:fc:bd:fb:46:8f:e2:31:af:3f: 71:22:de:23:2f:66:db:ac:63:98:dd:69:7a:5d:51: f4:53:b1:8e:ca:90:0b:30:e2:f0:33:54:42:30:0c: 92:bb:76:ca:29:3b:6d:3c:7b:0e:b0:60:cb:85:e8: ae:5c:bb:9b:be:7c:e9:41:bd:53:51:47:5b:26:9d: 99:fd:60:f5:e7:56:05:31:48:6d:68:9b:f6:50:2d: 26:64:21:52:f7:9d:a4:c1:e6:0a:6c:85:1a:c9:7d: 94:ad:99:eb:87:7a:b0:09:65:19:b4:43:72:a5:c3: b7:39:0a:87:e8:c0:dc:42:ce:16:32:fc:8f:3d:86: 9f:58:46:e4:c6:0a:3c:cb:05:56:1e:28:aa:91:8c: cd:e0:37:3e:04:c7:bf:0c:c6:e6:c9:eb:3a:d8:c7: 67:a2:97:41:ae:b1:21:15:a6:32:6a:47:f5:b5:ec: 82:9e:a0:a3:a6:ed:05:99:03:b1:b0:79:ea:78:90: 02:2e:c3:4a:c7:e8:38:c2:f4:92:d4:0b:eb:42:bc: 31:0a:31:d8:5f:5f:c0:e5:98:43:28:df:09:9a:81: 69:4f:21:b0:ef:cd:b3:1a:c2:32:53:e9:d5:3c:8e: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:18:A6:9C:C8:13:6E:09:E6:03:BA:92:31:58:FF:D7:FF:90:C5 X509v3 Authority Key Identifier: keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:61:30:04:2b:b7:db:7c:e3:d5:a0:e6:f2:16:a3:9c:bf: ce:f6:05:f5:de:24:47:3c:73:6a:aa:24:4a:d1:c8:99:10:1a: ba:c3:5c:ec:a3:98:28:d6:a3:e4:10:9d:4f:91:31:b0:47:23: ae:fe:21:b1:a4:5b:b0:b4:e4:06:8f:d1:86:43:4e:88:16:8b: 5c:38:75:58:8c:32:1a:11:91:57:21:50:61:0e:72:db:64:5c: 42:5a:bd:c6:cf:22:79:72:45:23:f8:ee:e6:02:5f:87:00:24: d8:5d:5d:a6:c8:c9:b3:55:aa:e6:b5:19:f9:8e:fa:77:ba:3c: 17:f9:f3:01:1e:74:36:75:6e:56:97:e5:92:e3:38:ea:1d:d1: 72:8e:4f:d2:91:01:55:08:1b:9a:c0:cf:3f:44:c4:2e:ff:79: bb:70:24:46:75:a5:fe:69:7c:ce:66:36:10:53:29:40:7b:4b: 2e:16:af:d4:70:80:00:40:91:fd:69:9b:28:db:56:f3:ff:ed: 61:cd:36:3a:c0:be:33:5b:7c:51:8b:52:4a:6c:e4:2e:28:da: 99:07:dc:f5:3b:de:5f:cf:7f:5a:40:09:0e:c1:2b:65:40:6b: 22:0b:99:2e:6a:91:be:ad:3b:24:2c:9b:44:30:46:ab:10:60: c5:95:3c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9sjJDDSbp6Re/V+0g5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0 MmI3YmIwHhcNMjYwMjA5MTgwMDI3WhcNMjYwMjEwMTgwMDI3WjAzMTEwLwYDVQQD EyhiZjIyMThhNjljYzgxMzZlMDllNjAzYmE5MjMxNThmZmQ3ZmY5MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MejjnKhcYrlIokiLUcdQblfhqz8 vftGj+Ixrz9xIt4jL2bbrGOY3Wl6XVH0U7GOypALMOLwM1RCMAySu3bKKTttPHsO sGDLheiuXLubvnzpQb1TUUdbJp2Z/WD151YFMUhtaJv2UC0mZCFS952kweYKbIUa yX2UrZnrh3qwCWUZtENypcO3OQqH6MDcQs4WMvyPPYafWEbkxgo8ywVWHiiqkYzN 4Dc+BMe/DMbmyes62MdnopdBrrEhFaYyakf1teyCnqCjpu0FmQOxsHnqeJACLsNK x+g4wvSS1AvrQrwxCjHYX1/A5ZhDKN8JmoFpTyGw782zGsIyU+nVPI5cuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8iGKacyBNuCeYDupIxWP/X/5DFMB8GA1UdIwQY MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBJhMAQr t9t849Wg5vIWo5y/zvYF9d4kRzxzaqokStHImRAausNc7KOYKNaj5BCdT5ExsEcj rv4hsaRbsLTkBo/RhkNOiBaLXDh1WIwyGhGRVyFQYQ5y22RcQlq9xs8ieXJFI/ju 5gJfhwAk2F1dpsjJs1Wq5rUZ+Y76d7o8F/nzAR50NnVuVpflkuM46h3Rco5P0pEB VQgbmsDPP0TELv95u3AkRnWl/ml8zmY2EFMpQHtLLhav1HCAAECR/WmbKNtW8//t Yc02OsC+M1t8UYtSSmzkLijamQfc9TveX89/WkAJDsErZUBrIguZLmqRvq07JCyb RDBGqxBgxZU8qA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:37 2026 by rpki-client