This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft (raw, json) Hash identifier: /+64+5u72tqXwz32w0o00zEccMsKKK5Zb2Kfqs4fmAM= Subject key identifier: 4F:D8:19:D5:A9:DA:CB:CE:30:FA:02:AB:04:5C:8C:6C:ED:7C:56:A6 Authority key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 Certificate issuer: /CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Certificate serial: 019C432233C31089D9736DA2D5067E45A31D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft Manifest number: 02A1 Signing time: Mon 09 Feb 2026 16:00:40 +0000 Manifest this update: Mon 09 Feb 2026 16:00:40 +0000 Manifest next update: Tue 10 Feb 2026 16:00:40 +0000 Files and hashes: 1: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl (hash: LXPMNCU9DI7N6HMEqsSSFav9+Qnc5fgNynJ4GTTCL8c=) 2: hTGE6ELHbieMT0G0iN4y8hwxQe0.roa (hash: jd1Qf3dWz2x2zfCoL963jsCndX0EAqODH84Hv7SXhcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:33:c3:10:89:d9:73:6d:a2:d5:06:7e:45:a3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Validity Not Before: Feb 9 16:00:40 2026 GMT Not After : Feb 10 16:00:40 2026 GMT Subject: CN=4fd819d5a9dacbce30fa02ab045c8c6ced7c56a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:74:ac:2a:2c:00:82:eb:b5:c9:6f:6c:47: 99:bb:bb:da:a1:7a:9a:36:72:49:f9:47:ec:49:64: 72:7e:44:90:57:5a:42:d7:6c:20:da:94:ba:da:e3: 7f:41:1b:09:ce:4d:ed:04:9a:5c:21:86:59:d6:41: c2:6e:f8:39:56:e7:7a:e4:4a:3e:b9:d6:f0:11:4d: e6:24:0a:6e:a2:46:a7:a7:25:33:d0:2f:ff:a0:48: 5b:5f:7f:a2:5a:59:93:15:5a:e3:40:ed:43:f0:5e: d1:b0:d8:98:76:48:98:6e:35:f2:c8:05:8f:a8:19: a8:6d:46:af:65:a3:5a:de:86:e4:67:64:e2:54:d7: b2:1e:8f:d6:5d:74:b8:21:6a:29:66:b4:9d:6e:b7: 24:30:8a:16:3b:6e:ae:ad:f8:dd:ad:02:71:32:df: a4:75:31:01:70:70:1f:fb:4e:cc:0b:6e:e8:6a:79: 67:df:69:13:89:cc:09:d0:cb:78:54:36:b0:c9:ec: 1b:0a:a3:4b:61:d2:eb:5c:b8:d2:e4:a8:99:9a:8e: de:e7:e4:e3:b8:7d:a2:d7:7e:f2:26:a7:ad:23:0f: 09:f3:6f:dd:09:a0:db:21:89:36:af:5e:c0:95:06: 32:3a:e8:13:9b:06:f6:91:f3:23:7a:ee:09:76:51: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D8:19:D5:A9:DA:CB:CE:30:FA:02:AB:04:5C:8C:6C:ED:7C:56:A6 X509v3 Authority Key Identifier: keyid:51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4a:a1:b1:20:f7:c4:8f:57:4d:dc:7d:7b:74:35:4c:cc:5a: 53:03:90:2f:2a:db:e7:4b:a7:8d:c7:c2:62:6b:76:15:12:0c: f0:ab:0d:ac:29:18:65:3d:53:6b:45:77:43:33:64:c8:67:86: b9:e9:b8:f6:21:d0:fa:3f:89:ec:7c:9a:0e:83:70:30:46:9e: a6:38:90:b6:63:95:f2:ba:54:f6:1f:b4:e3:7e:da:84:e2:58: 25:6e:64:24:2d:5c:8c:b6:fa:8c:e4:bc:3c:cd:80:e9:16:a1: c1:e2:9e:a9:da:f5:fc:cc:a5:91:8e:20:6d:e3:0a:34:6d:5d: 1f:a7:cd:61:a2:8a:10:76:63:c8:6b:0e:da:dd:12:82:65:b8: be:96:96:02:50:6c:3d:28:96:fb:5e:68:e0:ce:ed:ea:90:9b: 87:24:db:20:88:cd:72:64:d5:40:49:f1:47:c4:4a:16:52:53: e4:35:c7:0e:9b:0c:eb:82:99:e0:c0:eb:55:2f:cb:ab:b4:c6: 56:52:5d:b5:e5:87:cf:16:b2:4e:eb:53:5a:11:5c:71:e3:0e: b3:84:e8:78:5d:1e:cb:46:62:d6:99:59:a4:5b:cb:20:13:e2: 3e:b4:74:1b:4e:11:44:99:ee:08:ab:6e:f7:56:e1:48:23:cc: 3f:90:55:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIjPDEInZc22i1QZ+RaMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjgzYjgwMGJmNWQ2NmNjNzZkMGU2MjQ4NDdmYjY2OGUx NzdjNzEwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD Eyg0ZmQ4MTlkNWE5ZGFjYmNlMzBmYTAyYWIwNDVjOGM2Y2VkN2M1NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+F0rCosAILrtclvbEeZu7vaoXqa NnJJ+UfsSWRyfkSQV1pC12wg2pS62uN/QRsJzk3tBJpcIYZZ1kHCbvg5Vud65Eo+ udbwEU3mJApuokanpyUz0C//oEhbX3+iWlmTFVrjQO1D8F7RsNiYdkiYbjXyyAWP qBmobUavZaNa3obkZ2TiVNeyHo/WXXS4IWopZrSdbrckMIoWO26urfjdrQJxMt+k dTEBcHAf+07MC27oanln32kTicwJ0Mt4VDawyewbCqNLYdLrXLjS5KiZmo7e5+Tj uH2i137yJqetIw8J82/dCaDbIYk2r17AlQYyOugTmwb2kfMjeu4JdlFozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/YGdWp2svOMPoCqwRcjGztfFamMB8GA1UdIwQY MBaAFFH4O4AL9dZsx20OYkhH+2aOF3xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYt ZTY5NThlZDVhN2EwLzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84OTM4ODctZjg2My00YThiLWJkOTYtZTY5NThlZDVhN2Ew LzEvVWZnN2dBdjExbXpIYlE1aVNFZjdabzRYZkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEqhsSD3 xI9XTdx9e3Q1TMxaUwOQLyrb50unjcfCYmt2FRIM8KsNrCkYZT1Ta0V3QzNkyGeG uem49iHQ+j+J7HyaDoNwMEaepjiQtmOV8rpU9h+0437ahOJYJW5kJC1cjLb6jOS8 PM2A6RahweKeqdr1/MylkY4gbeMKNG1dH6fNYaKKEHZjyGsO2t0SgmW4vpaWAlBs PSiW+15o4M7t6pCbhyTbIIjNcmTVQEnxR8RKFlJT5DXHDpsM64KZ4MDrVS/Lq7TG VlJdteWHzxayTutTWhFcceMOs4ToeF0ey0Zi1plZpFvLIBPiPrR0G04RRJnuCKtu 91bhSCPMP5BVNg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:37 2026 by rpki-client