This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json) Hash identifier: 8Ij4o5u+UqZ1V2IQ4+Aoshv2UCA5g1+/avdVM1bSyRo= Subject key identifier: CB:0D:4F:F9:A5:51:AE:E6:49:62:25:71:C8:F3:87:21:CB:B0:D5:A8 Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7 Certificate serial: 019C40FD14EB449719CFC54E8CEDF7E98889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft Manifest number: 1611 Signing time: Mon 09 Feb 2026 06:00:53 +0000 Manifest this update: Mon 09 Feb 2026 06:00:53 +0000 Manifest next update: Tue 10 Feb 2026 06:00:53 +0000 Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=) 2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: oLQknu1rvlQz9C2bgfSAcQVxs0gkUVGdKxltYV8zDkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:14:eb:44:97:19:cf:c5:4e:8c:ed:f7:e9:88:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7 Validity Not Before: Feb 9 06:00:53 2026 GMT Not After : Feb 10 06:00:53 2026 GMT Subject: CN=cb0d4ff9a551aee649622571c8f38721cbb0d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:e4:43:f6:a2:0d:02:4d:5d:36:cf:d6:5a: 60:91:68:36:27:89:9b:27:d6:2a:7b:9f:36:35:70: c7:a5:45:8d:07:db:2f:88:1d:51:34:74:17:bc:8c: a7:b6:71:38:80:78:6a:3d:1b:e9:27:e4:49:90:95: cc:c5:69:a1:35:05:5f:c3:92:ff:d3:fb:83:5f:04: ac:80:40:ab:08:3f:5d:24:9a:d9:93:36:aa:8b:66: 7d:7c:1f:e2:38:2a:2b:79:bd:74:54:c5:54:84:f5: 73:b2:43:5a:56:8b:89:73:1f:2e:68:eb:d5:08:d8: f6:81:db:3d:68:25:af:13:0e:32:57:20:ca:cf:92: 54:2d:98:e5:62:aa:b8:af:75:d6:8a:cc:1b:97:1e: 91:36:29:6b:fd:ce:de:c6:d6:a6:4a:38:fe:01:78: 4f:18:27:8d:6d:35:d3:01:90:30:d5:ba:31:d6:c2: 1c:19:c3:6c:b3:0e:09:ed:67:ab:00:1f:d4:b0:94: a0:59:b4:be:02:f9:2a:6e:cb:46:84:55:1a:fa:5a: d1:77:5e:f3:6b:02:3f:e4:9e:92:26:a9:84:4d:0b: ee:a8:89:59:e4:a4:cb:fa:6b:60:3c:db:0e:08:09: 08:51:64:f7:61:05:67:aa:62:02:83:db:4a:e4:72: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:4F:F9:A5:51:AE:E6:49:62:25:71:C8:F3:87:21:CB:B0:D5:A8 X509v3 Authority Key Identifier: keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:07:59:d0:d0:97:c6:9e:74:a5:56:c7:be:49:11:a5:6d:2f: 9c:e4:ec:0e:2d:56:86:5c:73:1a:6d:c0:66:01:52:4e:c7:f7: 16:47:dd:30:fe:48:43:0a:b7:26:8f:eb:05:b9:c4:a0:bf:39: 83:54:7c:0f:10:ab:53:ee:a6:e7:01:e7:90:3a:13:ff:95:6f: 32:57:ab:da:e7:c8:d0:04:91:ed:7e:fb:c4:eb:de:fb:e2:fb: 90:61:18:2f:13:e4:d6:e4:77:a4:38:f4:22:d9:de:a9:65:b3: 69:39:c2:23:e8:9f:4a:a2:e4:d5:77:0d:fb:85:25:ef:2b:3e: db:e7:b5:6c:98:d3:d2:6b:8e:73:68:5f:a9:35:d5:84:06:be: bf:c4:c5:9e:13:9d:4e:ea:0c:31:91:06:27:a3:c5:7f:95:ad: 0a:d6:84:ea:96:3b:eb:dd:02:aa:96:e8:0f:42:97:5f:19:9c: 6a:a1:a1:b8:b2:93:11:b8:75:e3:a7:27:c2:57:a5:54:61:5d: aa:7b:48:66:d0:fc:b5:ff:35:fa:78:aa:c8:89:31:63:d3:88: 39:c3:52:bd:c4:81:a4:23:21:3c:f4:e1:07:d2:38:02:b8:11: a3:81:ec:1b:4c:33:ff:57:68:68:3b:99:eb:70:69:dc:11:cc: 08:26:eb:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/RTrRJcZz8VOjO336YiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTY3NGZlZTU1NTY3MjgxNzVlZmI1NmVhYThiOTlmMzgx NWFmYTcwHhcNMjYwMjA5MDYwMDUzWhcNMjYwMjEwMDYwMDUzWjAzMTEwLwYDVQQD EyhjYjBkNGZmOWE1NTFhZWU2NDk2MjI1NzFjOGYzODcyMWNiYjBkNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUnkQ/aiDQJNXTbP1lpgkWg2J4mb J9Yqe582NXDHpUWNB9sviB1RNHQXvIyntnE4gHhqPRvpJ+RJkJXMxWmhNQVfw5L/ 0/uDXwSsgECrCD9dJJrZkzaqi2Z9fB/iOCoreb10VMVUhPVzskNaVouJcx8uaOvV CNj2gds9aCWvEw4yVyDKz5JULZjlYqq4r3XWiswblx6RNilr/c7extamSjj+AXhP GCeNbTXTAZAw1box1sIcGcNssw4J7WerAB/UsJSgWbS+AvkqbstGhFUa+lrRd17z awI/5J6SJqmETQvuqIlZ5KTL+mtgPNsOCAkIUWT3YQVnqmICg9tK5HILlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsNT/mlUa7mSWIlccjzhyHLsNWoMB8GA1UdIwQY MBaAFMUWdP7lVWcoF177VuqouZ84Fa+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYt M2NiZTFhZjNiODJjLzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81ZmIwODktMjU4OS00YzcxLWIwMjYtM2NiZTFhZjNiODJj LzEveFJaMF91VlZaeWdYWHZ0VzZxaTVuemdWcjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagdZ0NCX xp50pVbHvkkRpW0vnOTsDi1WhlxzGm3AZgFSTsf3FkfdMP5IQwq3Jo/rBbnEoL85 g1R8DxCrU+6m5wHnkDoT/5VvMler2ufI0ASR7X77xOve++L7kGEYLxPk1uR3pDj0 ItneqWWzaTnCI+ifSqLk1XcN+4Ul7ys+2+e1bJjT0muOc2hfqTXVhAa+v8TFnhOd TuoMMZEGJ6PFf5WtCtaE6pY7690CqpboD0KXXxmcaqGhuLKTEbh146cnwlelVGFd qntIZtD8tf81+niqyIkxY9OIOcNSvcSBpCMhPPThB9I4ArgRo4HsG0wz/1doaDuZ 63Bp3BHMCCbrsA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client