This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json) Hash identifier: fnpYYTNQm24C3xDAK/EuEbzfk5JTOuNxzauTUfeiM58= Subject key identifier: 71:78:96:91:4A:D2:BD:F2:07:D2:64:A0:F6:4F:1F:8D:F7:3F:A5:F3 Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64 Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764 Certificate serial: 019C420FA8BF5D439284A4F791F1A1A3B503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: BUbWLT2NP9j8kRBSwIzNPNGRZtqjxNRppYvNdvvWJuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a8:bf:5d:43:92:84:a4:f7:91:f1:a1:a3:b5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=717896914ad2bdf207d264a0f64f1f8df73fa5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7e:1e:b4:58:36:cc:f1:c2:26:51:3b:23:42: e4:27:52:7f:19:18:2b:b7:2c:10:3c:5d:f7:af:80: 41:65:f2:9b:0a:83:0e:e2:85:20:5f:70:33:cb:e3: 28:d5:32:65:fe:d2:ed:43:7e:b9:61:9d:5c:6e:82: 0d:fc:53:62:61:41:c9:fc:fd:55:6b:40:5a:2f:3c: 9b:14:40:87:27:ed:36:8a:3f:e2:5f:5e:59:c0:2c: eb:28:74:6a:de:cb:71:91:eb:1e:f9:8d:5a:64:ba: 69:24:bd:84:56:6f:8f:de:83:4b:b5:54:8f:cc:7d: 15:17:9d:1b:42:c8:25:64:ab:1e:51:fc:bd:77:b2: 64:5e:a3:2e:f4:ed:a6:89:6d:5b:10:b6:b7:91:3d: f4:47:f2:9a:aa:8b:92:cb:3a:c9:66:ab:49:5a:21: 9f:8f:0f:d8:a2:60:c4:ae:d4:de:83:cd:c6:1d:2a: 32:e1:20:17:10:03:e3:2b:fe:a9:21:a2:a0:95:00: fe:69:81:2e:d8:a2:89:56:a5:53:f4:de:18:35:8d: dd:7a:4b:6c:f4:32:95:14:9a:7b:8a:24:7c:9c:0c: e9:73:34:62:9d:af:a7:dd:2a:44:f7:b8:8f:6f:4b: c7:1d:b3:e6:65:e7:0c:17:93:0c:c7:b2:f9:7b:65: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:96:91:4A:D2:BD:F2:07:D2:64:A0:F6:4F:1F:8D:F7:3F:A5:F3 X509v3 Authority Key Identifier: keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e4:96:5d:bb:68:76:2f:4f:f1:f6:ae:84:62:a3:9c:e9:10: ce:0f:7d:4b:6e:c8:52:b6:73:fc:05:6b:7c:52:5f:3c:a9:04: 17:cd:52:f1:fe:52:03:25:db:e9:8a:4a:72:5c:42:50:bb:a2: 84:73:b5:25:c0:66:11:e4:5b:04:4b:d4:d2:82:2b:11:1a:4b: e9:5e:c6:38:2e:28:8c:fe:61:3a:33:cb:d3:f2:5e:01:d2:54: bf:ae:b3:c8:34:cb:20:9c:42:6a:b0:9e:28:5a:95:5e:dd:c8: d0:b0:df:dd:55:95:57:ff:20:e1:6d:38:ab:01:fd:f6:65:8d: 3f:0a:ab:7d:89:b2:90:04:25:7d:ca:57:24:5d:bb:f2:cd:aa: 22:ef:a8:f1:2e:fc:9b:ac:a7:8f:47:3a:5f:39:14:f2:ca:df: c7:e7:e2:cb:43:e3:f4:15:e0:46:0c:fc:d3:b5:a7:67:4e:d2: 1a:d4:10:68:8d:16:bb:a5:82:5d:13:39:80:b5:5d:bb:4b:96: 5a:9d:4e:dd:ca:1a:b3:61:25:08:e9:4d:bf:68:84:3c:2c:f3: be:8c:5b:ab:fa:8a:91:c7:17:45:7b:bf:a3:51:bc:7c:fd:d6: e6:8e:08:0a:1f:63:bf:8e:18:4c:d5:10:b1:8d:9d:72:7c:2b: 48:87:3c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6i/XUOShKT3kfGho7UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl NzQ3NjQwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg3MTc4OTY5MTRhZDJiZGYyMDdkMjY0YTBmNjRmMWY4ZGY3M2ZhNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA334etFg2zPHCJlE7I0LkJ1J/GRgr tywQPF33r4BBZfKbCoMO4oUgX3Azy+Mo1TJl/tLtQ365YZ1cboIN/FNiYUHJ/P1V a0BaLzybFECHJ+02ij/iX15ZwCzrKHRq3stxkese+Y1aZLppJL2EVm+P3oNLtVSP zH0VF50bQsglZKseUfy9d7JkXqMu9O2miW1bELa3kT30R/KaqouSyzrJZqtJWiGf jw/YomDErtTeg83GHSoy4SAXEAPjK/6pIaKglQD+aYEu2KKJVqVT9N4YNY3dekts 9DKVFJp7iiR8nAzpczRina+n3SpE97iPb0vHHbPmZecMF5MMx7L5e2W/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF4lpFK0r3yB9JkoPZPH433P6XzMB8GA1UdIwQY MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuSWXbto di9P8fauhGKjnOkQzg99S27IUrZz/AVrfFJfPKkEF81S8f5SAyXb6YpKclxCULui hHO1JcBmEeRbBEvU0oIrERpL6V7GOC4ojP5hOjPL0/JeAdJUv66zyDTLIJxCarCe KFqVXt3I0LDf3VWVV/8g4W04qwH99mWNPwqrfYmykAQlfcpXJF278s2qIu+o8S78 m6ynj0c6XzkU8srfx+fiy0Pj9BXgRgz807WnZ07SGtQQaI0Wu6WCXRM5gLVdu0uW Wp1O3coas2ElCOlNv2iEPCzzvoxbq/qKkccXRXu/o1G8fP3W5o4ICh9jv44YTNUQ sY2dcnwrSIc82Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:31 2026 by rpki-client