This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json) Hash identifier: dhSqCXYmaSHr/NQY9XXlBxugnqGTMZdqVxJDqAdHoxo= Subject key identifier: 5E:45:96:E9:C4:67:7F:B2:F4:28:48:F6:08:FD:6B:C9:7F:A6:27:9A Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610 Certificate serial: 019C432295D5BFE179E24FC9912B2140D742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft Manifest number: 0EF0 Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: O9nR9Bltd5J35B/qoQl4uzfQMIK9nf/D+Jjt5S/zQSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:95:d5:bf:e1:79:e2:4f:c9:91:2b:21:40:d7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610 Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=5e4596e9c4677fb2f42848f608fd6bc97fa6279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:7a:e4:86:9d:98:ba:a1:78:13:9b:82:b9: 58:1c:c2:af:5c:53:b1:88:d3:7b:35:80:c8:46:14: cc:a6:6e:be:04:15:4c:01:59:7c:cb:8f:d3:ba:46: 6a:62:2b:95:d8:ad:9e:bb:cc:25:db:84:eb:4a:cc: 73:0d:ce:45:45:82:f6:5f:4c:c0:84:37:69:76:6e: 42:fa:1b:7b:f6:3d:3b:ad:1f:b4:91:a0:34:b6:72: 5f:95:43:e5:4e:d4:8d:81:a0:24:22:cc:7f:0a:2c: dd:c5:7a:ff:61:15:c5:bb:48:79:59:49:b4:2e:fb: d2:97:de:ad:e6:34:5e:f1:51:42:77:3d:d3:de:74: 9f:95:b2:b2:e4:67:7f:3b:91:a5:f5:db:15:86:e7: cf:42:52:cc:cc:dd:1b:f9:bc:22:ec:a1:da:6d:6a: 98:95:c7:63:41:28:49:0d:25:41:22:d3:ec:a9:86: 24:38:4b:bb:91:ca:41:a3:47:50:51:b7:cd:28:1c: b9:ec:8f:de:b1:d1:46:fd:8c:1c:fa:95:9d:5a:d1: 8f:b8:4d:5e:aa:99:2a:52:47:75:17:db:3a:87:16: f7:1d:e1:ef:cf:47:e1:b2:62:db:1a:06:44:c2:12: e4:42:4d:9e:38:f8:e2:da:3e:2b:ba:3d:5f:4d:47: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:96:E9:C4:67:7F:B2:F4:28:48:F6:08:FD:6B:C9:7F:A6:27:9A X509v3 Authority Key Identifier: keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:61:b3:a7:fe:4a:25:67:c6:f7:f5:1c:3a:47:28:30:1a:a4: 7f:bf:76:bb:23:9d:1e:7e:66:57:bd:1e:f0:b4:67:e4:ad:e0: 84:96:a4:4f:b4:4f:22:b2:dc:37:57:32:5a:5d:f5:8f:1d:10: cd:9b:aa:74:d7:32:95:07:6f:ab:cf:ca:e1:4d:20:10:c0:1e: f2:9d:d9:42:6b:60:a2:15:a5:99:e3:bb:cc:15:35:b8:38:59: 21:6f:19:d3:68:a8:8c:b8:70:7e:72:c5:66:ef:d1:bc:f7:ba: dc:79:c7:49:2a:48:b2:84:a6:24:84:f3:4a:56:45:6a:8b:96: 4d:16:ed:78:b8:d5:a1:fd:e7:7c:c2:21:1d:aa:22:bf:a2:bc: 79:f0:cc:73:e7:ae:00:fe:2e:c6:61:87:e6:bc:e2:7b:ae:2d: 79:98:5d:04:4d:ae:a2:ad:c8:ef:2b:9e:8e:c3:55:b9:7e:be: 69:15:af:55:ab:ee:e7:e9:55:87:bb:ec:4b:0a:a5:d5:4b:3e: e4:e5:aa:d6:69:7b:93:c5:e3:93:b2:6a:e6:95:10:9a:89:80: 1f:9c:7b:c4:72:ee:b0:95:15:ef:40:fe:e1:53:24:31:64:e1: 29:51:c0:06:0e:03:b9:59:a1:12:a3:53:79:7e:f7:64:f1:94: ae:6d:69:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpXVv+F54k/JkSshQNdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx Mjk2MTAwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD Eyg1ZTQ1OTZlOWM0Njc3ZmIyZjQyODQ4ZjYwOGZkNmJjOTdmYTYyNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooJ65IadmLqheBObgrlYHMKvXFOx iNN7NYDIRhTMpm6+BBVMAVl8y4/TukZqYiuV2K2eu8wl24TrSsxzDc5FRYL2X0zA hDdpdm5C+ht79j07rR+0kaA0tnJflUPlTtSNgaAkIsx/CizdxXr/YRXFu0h5WUm0 LvvSl96t5jRe8VFCdz3T3nSflbKy5Gd/O5Gl9dsVhufPQlLMzN0b+bwi7KHabWqY lcdjQShJDSVBItPsqYYkOEu7kcpBo0dQUbfNKBy57I/esdFG/Ywc+pWdWtGPuE1e qpkqUkd1F9s6hxb3HeHvz0fhsmLbGgZEwhLkQk2eOPji2j4ruj1fTUekZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5FlunEZ3+y9ChI9gj9a8l/pieaMB8GA1UdIwQY MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3 LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmGzp/5K JWfG9/UcOkcoMBqkf792uyOdHn5mV70e8LRn5K3ghJakT7RPIrLcN1cyWl31jx0Q zZuqdNcylQdvq8/K4U0gEMAe8p3ZQmtgohWlmeO7zBU1uDhZIW8Z02iojLhwfnLF Zu/RvPe63HnHSSpIsoSmJITzSlZFaouWTRbteLjVof3nfMIhHaoiv6K8efDMc+eu AP4uxmGH5rzie64teZhdBE2uoq3I7yuejsNVuX6+aRWvVavu5+lVh7vsSwql1Us+ 5OWq1ml7k8Xjk7Jq5pUQmomAH5x7xHLusJUV70D+4VMkMWThKVHABg4DuVmhEqNT eX73ZPGUrm1pUw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:04 2026 by rpki-client