This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json) Hash identifier: ZSfMWF5JeCPFUp6W75kWTfNaKTwc0/P80iu0r0aKeJM= Subject key identifier: 99:26:DA:F9:FE:DE:97:EC:2A:D5:9E:F3:60:4C:94:24:60:3F:3F:A0 Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425 Certificate serial: 019C4246216F1302D528472A24A83D6CD25A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft Manifest number: 0D19 Signing time: Mon 09 Feb 2026 12:00:18 +0000 Manifest this update: Mon 09 Feb 2026 12:00:18 +0000 Manifest next update: Tue 10 Feb 2026 12:00:18 +0000 Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 9vO6NPeHX4CIyaa3i388qG+rTo92EtuJ2cHFsHU7Kh4=) 2: 7KYP34wmJxSAxpxN5TJWnn10TaI.roa (hash: kRP35rR2IusbtLXnd/iyDag2PoeLXCHjgTayPC6GmLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:21:6f:13:02:d5:28:47:2a:24:a8:3d:6c:d2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425 Validity Not Before: Feb 9 12:00:18 2026 GMT Not After : Feb 10 12:00:18 2026 GMT Subject: CN=9926daf9fede97ec2ad59ef3604c9424603f3fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:aa:b4:df:7f:d6:36:eb:b0:bd:03:ca:50: fb:2a:16:5b:de:2e:e4:b3:46:bd:d4:cc:af:d9:ce: 50:7a:d2:80:cd:f2:17:c9:80:97:dc:3f:fa:36:a6: e2:65:94:a7:12:22:a0:fc:fe:47:37:f5:31:48:d6: fe:d0:4b:22:d2:e6:ca:a0:ac:28:22:b0:06:e5:44: 19:a3:11:93:13:30:7a:8f:b7:dd:52:23:62:83:49: df:bd:ea:52:c8:0c:f9:37:a0:05:10:5f:80:d9:03: ba:fe:c4:cb:60:f0:8a:28:4f:f1:c4:58:b7:d3:46: f6:22:69:4a:c8:ef:18:b8:f1:94:f7:d8:98:17:a0: 36:b8:b1:97:10:a3:b5:2e:6c:ef:c3:05:95:f6:20: f9:fb:cf:e4:9a:18:2f:01:1d:78:80:29:bd:14:09: 6e:1b:89:85:03:f5:17:16:3c:d9:9f:8c:50:e4:cb: 1d:79:a5:c4:e7:93:76:0f:90:d9:1f:ce:24:20:69: f4:27:4f:47:c0:d6:fa:92:3f:3e:f0:e1:53:84:24: a6:f7:80:50:20:bc:c0:a2:7d:8d:11:1f:90:5f:11: 19:6b:e9:a1:8b:d9:13:25:a0:32:c7:39:04:ce:5d: 7c:d0:f5:78:95:bd:be:61:63:6c:5f:c5:7e:cd:ce: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:26:DA:F9:FE:DE:97:EC:2A:D5:9E:F3:60:4C:94:24:60:3F:3F:A0 X509v3 Authority Key Identifier: keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5f:85:ab:da:c1:f6:c8:22:59:0f:c6:5a:0d:14:08:2d:c2: fb:08:5f:b4:a1:23:4c:f2:d3:93:19:ce:b8:67:74:2f:fa:76: 5e:35:5c:9c:8c:fc:c3:be:09:13:2c:2c:6e:0b:96:ef:71:30: e8:f0:43:ab:5a:10:38:4f:f0:43:40:90:d4:c3:e0:14:53:c4: fe:de:bc:78:45:23:7b:15:92:6a:0f:d2:a9:91:ba:08:dc:ee: dc:22:e9:33:80:d9:43:df:f0:df:11:a3:7f:0a:92:2b:0e:f7: d7:8d:96:48:05:e7:48:01:44:8e:5f:7c:8b:78:9c:f7:58:7c: ba:8e:91:32:8f:40:f1:e1:56:b0:3f:f9:be:f7:67:4a:75:9f: 1b:d8:d8:02:42:5d:80:54:b8:de:a3:48:16:34:0b:72:d4:cf: 9b:e7:58:00:eb:f9:33:22:89:c4:d5:1d:88:be:c9:d0:43:7a: d7:82:81:f8:b0:20:d2:63:35:89:f9:0c:cb:09:65:d9:6f:74: 8d:da:6b:1f:f7:76:84:35:2a:d3:40:44:1d:e5:8c:94:ee:e9: 7c:78:9a:12:9c:1c:00:61:51:ae:ed:d8:7f:80:1c:52:5e:10: 8c:f0:6f:6f:d2:f0:52:38:02:b2:c6:80:c2:01:41:ca:b6:2b: c5:41:e3:03 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCRiFvEwLVKEcqJKg9bNJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk OWE0MjUwHhcNMjYwMjA5MTIwMDE4WhcNMjYwMjEwMTIwMDE4WjAzMTEwLwYDVQQD Eyg5OTI2ZGFmOWZlZGU5N2VjMmFkNTllZjM2MDRjOTQyNDYwM2YzZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNOqtN9/1jbrsL0DylD7KhZb3i7k s0a91Myv2c5QetKAzfIXyYCX3D/6NqbiZZSnEiKg/P5HN/UxSNb+0Esi0ubKoKwo IrAG5UQZoxGTEzB6j7fdUiNig0nfvepSyAz5N6AFEF+A2QO6/sTLYPCKKE/xxFi3 00b2ImlKyO8YuPGU99iYF6A2uLGXEKO1LmzvwwWV9iD5+8/kmhgvAR14gCm9FAlu G4mFA/UXFjzZn4xQ5MsdeaXE55N2D5DZH84kIGn0J09HwNb6kj8+8OFThCSm94BQ ILzAon2NER+QXxEZa+mhi9kTJaAyxzkEzl180PV4lb2+YWNsX8V+zc4OkQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJkm2vn+3pfsKtWe82BMlCRgPz+gMB8GA1UdIwQY MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1 LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApV+F q9rB9sgiWQ/GWg0UCC3C+whftKEjTPLTkxnOuGd0L/p2XjVcnIz8w74JEywsbguW 73Ew6PBDq1oQOE/wQ0CQ1MPgFFPE/t68eEUjexWSag/SqZG6CNzu3CLpM4DZQ9/w 3xGjfwqSKw73142WSAXnSAFEjl98i3ic91h8uo6RMo9A8eFWsD/5vvdnSnWfG9jY AkJdgFS43qNIFjQLctTPm+dYAOv5MyKJxNUdiL7J0EN614KB+LAg0mM1ifkMywll 2W90jdprH/d2hDUq00BEHeWMlO7pfHiaEpwcAGFRru3Yf4AcUl4QjPBvb9LwUjgC ssaAwgFByrYrxUHjAw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:58 2026 by rpki-client