This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json) Hash identifier: UHW+eaNGoGSUXnMuMQOW3TiRo23n5HqBqxsuaUToyoU= Subject key identifier: D2:07:C8:5F:C4:CC:D3:43:F0:63:C2:6F:BA:2F:0C:BD:05:ED:AC:E1 Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Certificate serial: 019C42B43156ABFBA9FA3F3EC9020273DD81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft Manifest number: 0D88 Signing time: Mon 09 Feb 2026 14:00:31 +0000 Manifest this update: Mon 09 Feb 2026 14:00:31 +0000 Manifest next update: Tue 10 Feb 2026 14:00:31 +0000 Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: msO/3rGv3zS5GhUbocipAQLyPqXwWlAeV6Jc2Ij44/I=) 2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:31:56:ab:fb:a9:fa:3f:3e:c9:02:02:73:dd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800 Validity Not Before: Feb 9 14:00:31 2026 GMT Not After : Feb 10 14:00:31 2026 GMT Subject: CN=d207c85fc4ccd343f063c26fba2f0cbd05edace1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:9c:e2:27:99:3a:24:7d:86:c6:20:3d:61: 3a:a9:dd:31:86:f9:ab:f9:c4:62:42:03:8f:b1:6f: 38:9d:3c:3a:22:3b:33:c5:3e:86:9a:d1:97:45:e6: 7a:a2:16:13:88:e3:44:7b:6c:d7:bf:fb:45:77:8c: 87:8b:f5:5b:53:57:31:8c:fd:e3:4b:8f:f7:e4:d3: 7d:e4:2c:a2:4b:ee:11:09:ed:89:71:33:81:b3:4c: c9:aa:6c:2c:f9:d0:9c:d9:f6:9a:ab:45:28:a4:32: 49:10:d4:45:ad:b3:8c:31:f8:32:58:d6:85:c3:33: b3:c3:17:45:a3:3f:e2:65:53:76:49:7a:c7:d5:2e: 4a:43:57:67:29:15:96:da:72:4e:3d:3e:03:23:db: 61:20:e8:4d:72:b1:03:c6:09:2c:a2:4d:a9:22:8c: 8f:36:ae:46:9f:d3:99:2d:0b:05:5e:64:28:dc:f1: 78:d4:40:7e:b8:ef:78:85:65:d7:1b:94:cc:d8:79: 23:e6:39:9b:4e:4d:ed:48:13:2d:bd:ac:06:6d:41: 91:73:2f:84:b4:93:35:6a:f7:54:a6:cf:73:fc:75: 96:44:7a:09:3f:54:df:ce:53:18:c9:02:6e:9f:71: b3:8a:57:26:fc:06:18:e2:9f:cd:d9:b5:6f:2a:21: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:07:C8:5F:C4:CC:D3:43:F0:63:C2:6F:BA:2F:0C:BD:05:ED:AC:E1 X509v3 Authority Key Identifier: keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9d:b2:2f:b4:ec:bf:27:f1:c1:84:56:86:46:e7:b7:df:2f: cc:dc:54:6e:67:b3:40:97:50:6b:75:14:1f:ef:ad:a4:7e:50: 26:06:a3:96:0a:5e:75:58:2a:e9:59:5a:af:16:90:f3:2a:24: ef:3f:6d:90:eb:20:db:c2:ce:eb:0f:2e:bf:e7:dc:ca:52:d5: f5:ab:f9:0b:ef:a9:c9:4e:78:44:d7:0f:05:08:e9:27:42:07: d2:0e:96:1d:15:f6:a8:fd:e1:76:b7:ab:16:66:fb:64:9e:2a: 7a:b5:5c:bd:62:21:96:b9:53:34:0f:46:84:af:f4:e5:fc:87: 39:7b:2d:39:bc:22:45:4d:71:83:60:42:c2:aa:a5:e6:f8:93: 56:0f:fe:2c:25:ad:fe:a9:e4:4b:1b:ca:34:5c:f8:92:17:f9: 03:af:a0:78:67:d9:4e:36:01:16:9c:28:80:86:00:2c:0d:11: 6e:dd:a0:75:70:e0:a3:29:35:90:e1:90:7f:b3:2c:34:0f:44: 38:ae:b8:2a:be:44:02:50:f1:1c:6b:e1:86:51:d4:40:cc:f7: 95:da:45:cc:50:aa:86:d9:40:02:ef:87:24:fd:32:de:04:0f: 43:60:42:bc:8f:cc:7f:3b:98:fc:52:a5:ed:d0:8c:52:24:94: d7:c2:ac:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDFWq/up+j8+yQICc92BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZTZkZGRhNDBkNzgyNTU5ZWU2NWU1MGY5MDhlMTY4OWE2 NWE4MDAwHhcNMjYwMjA5MTQwMDMxWhcNMjYwMjEwMTQwMDMxWjAzMTEwLwYDVQQD EyhkMjA3Yzg1ZmM0Y2NkMzQzZjA2M2MyNmZiYTJmMGNiZDA1ZWRhY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2c4ieZOiR9hsYgPWE6qd0xhvmr +cRiQgOPsW84nTw6IjszxT6GmtGXReZ6ohYTiONEe2zXv/tFd4yHi/VbU1cxjP3j S4/35NN95CyiS+4RCe2JcTOBs0zJqmws+dCc2faaq0UopDJJENRFrbOMMfgyWNaF wzOzwxdFoz/iZVN2SXrH1S5KQ1dnKRWW2nJOPT4DI9thIOhNcrEDxgksok2pIoyP Nq5Gn9OZLQsFXmQo3PF41EB+uO94hWXXG5TM2Hkj5jmbTk3tSBMtvawGbUGRcy+E tJM1avdUps9z/HWWRHoJP1TfzlMYyQJun3Gzilcm/AYY4p/N2bVvKiG+WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIHyF/EzNND8GPCb7ovDL0F7azhMB8GA1UdIwQY MBaAFNLm3dpA14JVnuZeUPkI4WiaZagAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAt Y2NmOWI4OWUyMmUyLzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83MzM1ZDItM2MzZi00ZmNhLTgwMDAtY2NmOWI4OWUyMmUy LzEvMHViZDJrRFhnbFdlNWw1US1RamhhSnBscUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ2yL7Ts vyfxwYRWhkbnt98vzNxUbmezQJdQa3UUH++tpH5QJgajlgpedVgq6VlarxaQ8yok 7z9tkOsg28LO6w8uv+fcylLV9av5C++pyU54RNcPBQjpJ0IH0g6WHRX2qP3hdrer Fmb7ZJ4qerVcvWIhlrlTNA9GhK/05fyHOXstObwiRU1xg2BCwqql5viTVg/+LCWt /qnkSxvKNFz4khf5A6+geGfZTjYBFpwogIYALA0Rbt2gdXDgoyk1kOGQf7MsNA9E OK64Kr5EAlDxHGvhhlHUQMz3ldpFzFCqhtlAAu+HJP0y3gQPQ2BCvI/MfzuY/FKl 7dCMUiSU18KsBg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:55 2026 by rpki-client