This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json) Hash identifier: 8EGHyKlsTAeu8dASZhFQ9Jba/VNWT1/BAzgDE23kEsY= Subject key identifier: 30:56:E5:3F:7E:D1:3B:09:81:1E:6E:A1:B7:70:AB:A9:28:75:23:FF Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Certificate serial: 019C44DA447B14F4ED9FBAEB7A3D966FE031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft Manifest number: 1811 Signing time: Tue 10 Feb 2026 00:01:20 +0000 Manifest this update: Tue 10 Feb 2026 00:01:20 +0000 Manifest next update: Wed 11 Feb 2026 00:01:20 +0000 Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=) 2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: 3m+BEAPaKqoxY1Zw4cwcw15OQ9QlTDvCzYo5bpIhA2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:44:7b:14:f4:ed:9f:ba:eb:7a:3d:96:6f:e0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Validity Not Before: Feb 10 00:01:20 2026 GMT Not After : Feb 11 00:01:20 2026 GMT Subject: CN=3056e53f7ed13b09811e6ea1b770aba9287523ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:83:7a:2e:39:15:fa:93:16:11:38:8a:d7: 68:9a:85:9e:72:2f:78:20:ca:3e:74:0f:de:c5:bf: 39:d0:e2:3a:56:80:37:73:4b:2c:09:d9:4c:63:2d: c3:d6:4a:0a:fa:87:70:02:95:1a:df:8b:53:5d:e1: 9e:04:1b:62:96:b8:99:75:cd:8c:ab:61:7b:58:05: 6e:89:3d:3d:41:ff:29:34:38:6f:84:01:a9:67:5b: f1:f1:3a:7b:99:50:4e:35:84:95:10:18:40:10:3e: 75:92:6d:ea:c2:44:5b:8e:ad:a6:1b:f2:d4:4c:62: a4:9e:39:50:a0:a1:b8:02:d8:11:3b:05:1e:cc:e4: fd:be:aa:9d:6b:ee:6f:bc:d0:10:67:c1:23:b1:d8: 42:30:53:12:1a:a2:99:f3:ec:c6:dc:31:b4:f9:6b: 61:d7:5d:ff:30:3b:dc:1a:0c:a7:fd:08:4e:f1:67: 8a:04:40:be:51:7d:5a:38:16:f6:12:9d:30:f0:90: df:b8:a2:17:8d:fc:8b:75:fd:16:b8:af:51:c1:bd: 96:f4:cc:1c:3b:fb:75:b4:4b:80:a3:b2:e1:d4:e2: 79:c9:d3:77:79:6b:67:b8:a2:98:25:7d:a8:95:fd: b3:f4:7e:13:69:b0:13:ba:69:48:39:e1:4c:53:0b: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:56:E5:3F:7E:D1:3B:09:81:1E:6E:A1:B7:70:AB:A9:28:75:23:FF X509v3 Authority Key Identifier: keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:05:87:e7:81:60:7e:2b:22:77:a5:c5:50:c9:cf:7f:c4:2f: 44:db:09:bb:ff:a6:08:98:0a:06:a8:9d:55:49:90:e4:36:54: 63:7a:39:21:92:79:01:b1:cd:cb:a4:f7:aa:8c:09:be:93:d4: 80:63:7e:40:56:bb:67:32:c2:42:fb:90:e7:fb:c5:6c:80:8d: 58:b8:4f:b4:58:52:df:b9:88:81:f2:cf:90:dd:33:15:09:47: fa:1f:99:3e:6f:6b:e0:58:17:53:7a:6b:43:09:1d:c2:3d:1b: 6f:ca:d9:8b:5f:a6:8c:52:bf:c6:12:20:f9:91:15:63:f0:c5: 1d:66:93:1b:b5:87:8f:24:bc:49:29:56:be:d8:e6:86:d4:e1: a5:07:6c:ed:e7:9c:a0:8f:63:eb:b0:85:e8:5d:af:9a:fc:87: 9a:40:2d:82:fe:25:26:13:98:65:d4:18:27:32:9a:63:a3:2d: 46:79:6d:2c:18:e4:d0:01:77:2a:85:8f:7a:5c:6d:57:76:00: e5:9b:b1:a5:bc:44:04:45:96:aa:f6:4d:34:32:7c:58:86:10: 0c:05:18:ad:10:c0:59:04:81:64:f7:62:fb:4b:a6:71:20:37: 86:3f:fa:88:a2:6b:b2:4b:df:82:ed:c6:5b:84:70:f4:27:84: fa:c2:7a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2kR7FPTtn7rrej2Wb+AxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0 YTZiMDQwHhcNMjYwMjEwMDAwMTIwWhcNMjYwMjExMDAwMTIwWjAzMTEwLwYDVQQD EygzMDU2ZTUzZjdlZDEzYjA5ODExZTZlYTFiNzcwYWJhOTI4NzUyM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfuDei45FfqTFhE4itdomoWeci94 IMo+dA/exb850OI6VoA3c0ssCdlMYy3D1koK+odwApUa34tTXeGeBBtilriZdc2M q2F7WAVuiT09Qf8pNDhvhAGpZ1vx8Tp7mVBONYSVEBhAED51km3qwkRbjq2mG/LU TGKknjlQoKG4AtgROwUezOT9vqqda+5vvNAQZ8EjsdhCMFMSGqKZ8+zG3DG0+Wth 113/MDvcGgyn/QhO8WeKBEC+UX1aOBb2Ep0w8JDfuKIXjfyLdf0WuK9Rwb2W9Mwc O/t1tEuAo7Lh1OJ5ydN3eWtnuKKYJX2olf2z9H4TabATumlIOeFMUwtXYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBW5T9+0TsJgR5uobdwq6kodSP/MB8GA1UdIwQY MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgWH54Fg fisid6XFUMnPf8QvRNsJu/+mCJgKBqidVUmQ5DZUY3o5IZJ5AbHNy6T3qowJvpPU gGN+QFa7ZzLCQvuQ5/vFbICNWLhPtFhS37mIgfLPkN0zFQlH+h+ZPm9r4FgXU3pr Qwkdwj0bb8rZi1+mjFK/xhIg+ZEVY/DFHWaTG7WHjyS8SSlWvtjmhtThpQds7eec oI9j67CF6F2vmvyHmkAtgv4lJhOYZdQYJzKaY6MtRnltLBjk0AF3KoWPelxtV3YA 5ZuxpbxEBEWWqvZNNDJ8WIYQDAUYrRDAWQSBZPdi+0umcSA3hj/6iKJrskvfgu3G W4Rw9CeE+sJ6Gw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:18:58 2026 by rpki-client