This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json) Hash identifier: GHXd72qE4j3hqXTOrNIum9Vpkhymc4je4fIcvML+M+c= Subject key identifier: 42:0C:09:DB:9E:4E:41:D6:B5:A6:20:D7:CF:FE:BE:91:DD:21:A3:68 Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Certificate serial: 019C4133730AC188110D10399714A663B0DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft Manifest number: 0BCB Signing time: Mon 09 Feb 2026 07:00:16 +0000 Manifest this update: Mon 09 Feb 2026 07:00:16 +0000 Manifest next update: Tue 10 Feb 2026 07:00:16 +0000 Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: F21aeozLVDBOwnPcVdMNZ0a2Ur3RKAVOMzpCwHvCmlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:73:0a:c1:88:11:0d:10:39:97:14:a6:63:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Validity Not Before: Feb 9 07:00:16 2026 GMT Not After : Feb 10 07:00:16 2026 GMT Subject: CN=420c09db9e4e41d6b5a620d7cffebe91dd21a368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:fd:7a:52:02:4e:1b:14:7b:4b:42:fb:85: 23:27:e6:64:f9:31:94:fe:01:8c:e5:ff:4e:1e:1d: f9:ea:6e:b8:6c:42:32:55:2e:01:b3:61:3d:34:a8: 63:f9:68:5e:01:bc:35:c9:e1:d7:51:df:2a:8a:df: 3e:89:2e:f4:4b:bd:35:e9:25:b3:5b:e7:e3:13:da: 7b:d9:18:f8:34:9c:e3:7f:1d:91:3c:1b:31:da:ba: 21:17:8c:b7:4d:b5:c8:1d:32:09:bd:12:d7:26:76: 84:66:48:af:fa:a5:a4:57:49:cb:9e:ff:d6:ed:08: b8:5c:31:91:c0:49:a9:c9:46:ef:80:1b:86:0c:3b: 9f:0d:d4:e0:94:6c:62:ea:d6:22:7b:e5:7e:dc:85: 9c:73:69:d4:36:b1:b2:1e:cf:0f:d6:b6:72:64:90: c8:9f:b3:ed:ba:8f:db:92:45:b0:e1:b2:b2:09:dd: 92:3c:ed:ea:3d:cb:33:a5:18:66:5e:48:93:3b:dc: c8:d4:50:f4:b1:5a:2e:fa:ed:9a:0a:33:0e:74:9f: 00:77:b3:59:0e:b6:f8:67:50:7a:b6:04:b3:cc:a8: 05:81:e9:37:39:49:de:75:73:d5:cd:e9:c4:3a:22: 79:a4:36:1a:b9:74:12:d1:fa:b8:63:92:f4:c2:45: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:09:DB:9E:4E:41:D6:B5:A6:20:D7:CF:FE:BE:91:DD:21:A3:68 X509v3 Authority Key Identifier: keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:21:28:ba:5b:09:53:19:e2:f1:45:87:22:f2:08:da:fc:d7: 95:88:8e:4c:c3:d0:07:80:d2:86:78:c2:ee:5f:45:04:6f:bd: c1:20:77:86:c6:5a:08:91:55:82:e9:81:61:8d:7b:cb:89:b4: a9:43:ba:b2:47:0d:88:ff:de:b7:7f:24:38:e8:76:f2:54:44: 15:02:e8:7e:95:b0:f3:c3:ff:83:75:0d:76:b7:97:b0:cb:d0: b4:47:98:a6:dc:4b:bd:50:2a:4e:88:44:c5:8d:c5:12:e0:8c: d8:a0:75:1c:e6:ca:ba:ed:f3:16:06:e1:7e:a9:dd:aa:9e:6c: 16:c1:44:33:a5:92:35:8f:31:0f:29:8f:3f:b1:62:81:d9:52: 53:6d:54:33:63:06:b1:77:b5:d9:b2:ef:19:ca:a3:db:94:33: 5c:37:4f:80:9f:2c:4c:d0:67:ac:3e:cb:23:9d:13:7c:5f:0c: 3b:84:6b:e6:8d:d7:7a:23:b7:30:54:4a:4a:49:8b:86:08:e4: b4:78:9d:76:c0:0e:df:af:78:d6:77:f5:a8:91:9f:5b:ed:ee: 2d:bf:7c:c7:aa:24:e4:8c:58:18:0b:40:0b:56:e9:56:0b:dc: 84:e0:84:5c:0d:53:5a:29:25:61:0a:36:f1:36:70:b4:61:f0: bf:5a:6a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3MKwYgRDRA5lxSmY7DaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh ZmQ2ODgwHhcNMjYwMjA5MDcwMDE2WhcNMjYwMjEwMDcwMDE2WjAzMTEwLwYDVQQD Eyg0MjBjMDlkYjllNGU0MWQ2YjVhNjIwZDdjZmZlYmU5MWRkMjFhMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG/9elICThsUe0tC+4UjJ+Zk+TGU /gGM5f9OHh356m64bEIyVS4Bs2E9NKhj+WheAbw1yeHXUd8qit8+iS70S7016SWz W+fjE9p72Rj4NJzjfx2RPBsx2rohF4y3TbXIHTIJvRLXJnaEZkiv+qWkV0nLnv/W 7Qi4XDGRwEmpyUbvgBuGDDufDdTglGxi6tYie+V+3IWcc2nUNrGyHs8P1rZyZJDI n7Ptuo/bkkWw4bKyCd2SPO3qPcszpRhmXkiTO9zI1FD0sVou+u2aCjMOdJ8Ad7NZ Drb4Z1B6tgSzzKgFgek3OUnedXPVzenEOiJ5pDYauXQS0fq4Y5L0wkWwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIMCdueTkHWtaYg18/+vpHdIaNoMB8GA1UdIwQY MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3 LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSEoulsJ Uxni8UWHIvII2vzXlYiOTMPQB4DShnjC7l9FBG+9wSB3hsZaCJFVgumBYY17y4m0 qUO6skcNiP/et38kOOh28lREFQLofpWw88P/g3UNdreXsMvQtEeYptxLvVAqTohE xY3FEuCM2KB1HObKuu3zFgbhfqndqp5sFsFEM6WSNY8xDymPP7FigdlSU21UM2MG sXe12bLvGcqj25QzXDdPgJ8sTNBnrD7LI50TfF8MO4Rr5o3XeiO3MFRKSkmLhgjk tHiddsAO36941nf1qJGfW+3uLb98x6ok5IxYGAtAC1bpVgvchOCEXA1TWiklYQo2 8TZwtGHwv1pqaA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:09 2026 by rpki-client