This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json) Hash identifier: N9InoYv+VamEZBv9zW/SDOOIUXRyP6AF/JVaa0POfyY= Subject key identifier: 62:77:6D:F4:DD:DA:B2:6C:16:A2:82:C5:59:0C:78:21:31:45:2E:9F Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7 Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7 Certificate serial: 019C4321F80B898150763F1BEE6FA696EACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft Manifest number: 0A0A Signing time: Mon 09 Feb 2026 16:00:25 +0000 Manifest this update: Mon 09 Feb 2026 16:00:25 +0000 Manifest next update: Tue 10 Feb 2026 16:00:25 +0000 Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: jrqi+hETS8qkN2sFPqZVVVFEOlWV4+DD6CENTdrGmKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f8:0b:89:81:50:76:3f:1b:ee:6f:a6:96:ea:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7 Validity Not Before: Feb 9 16:00:25 2026 GMT Not After : Feb 10 16:00:25 2026 GMT Subject: CN=62776df4dddab26c16a282c5590c782131452e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:7d:f5:89:fe:73:fe:42:b6:13:c6:01:2c: f3:06:78:da:a6:d2:3b:02:d9:aa:fa:2c:ef:90:2e: 1b:92:03:28:a3:23:cf:5d:11:26:f6:1e:d3:23:6b: 5d:e7:60:ad:31:01:e0:ed:a0:95:29:19:a6:68:c0: 6b:f8:9e:c9:cf:6c:f6:12:14:2d:43:93:ad:96:1e: dc:72:23:71:94:c7:b5:c0:8b:62:3a:03:7d:0c:0a: 45:83:0c:dd:b9:7a:0f:49:ff:e3:83:41:e9:af:1f: 0a:41:d0:84:32:ff:cd:da:9b:6a:cf:bd:9c:4e:7b: 3e:2d:dd:39:d4:5e:b5:c9:40:71:52:99:0b:29:fd: 17:8b:c9:08:91:b5:ac:50:d2:8a:99:b9:69:7c:cb: 8b:21:3d:5c:e0:49:bb:d4:3c:49:69:66:19:15:18: 19:43:91:be:5f:bd:f6:27:85:ea:e9:8e:cc:20:e8: 47:c8:98:41:e2:72:d3:ae:1d:44:0b:89:b8:e9:d1: 2b:d6:e3:44:44:8c:72:01:b6:ff:95:4e:b3:8d:ea: 18:2b:96:e3:51:9d:99:e9:19:a3:22:47:a8:3b:dd: 89:11:77:7d:d9:94:6f:fd:84:3e:1c:62:bd:01:06: 21:5c:de:8e:86:5d:f6:56:0d:8a:ae:0a:42:6d:78: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:6D:F4:DD:DA:B2:6C:16:A2:82:C5:59:0C:78:21:31:45:2E:9F X509v3 Authority Key Identifier: keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:15:23:a5:b6:89:b8:39:da:fd:5a:cc:eb:5d:c6:87:39: 19:cf:02:98:73:5f:3b:0c:82:cf:02:07:cb:6e:f6:f9:ee:b9: 6b:26:d3:3d:c2:f7:92:df:c3:4d:d4:85:81:85:91:fd:07:e9: 15:51:5f:f3:9e:43:15:b8:6a:20:ac:4a:58:0b:2d:8a:56:42: 2a:be:bc:25:e6:1f:42:23:fe:9f:24:48:04:18:56:c7:ed:8f: 58:0d:4c:f9:b1:05:d4:bd:04:b3:b4:ef:1b:f7:b7:56:63:cc: 9b:7c:77:7e:10:9d:bf:71:19:3d:0f:b0:13:38:7a:22:e3:a5: eb:ca:56:6c:53:72:6b:e6:e9:9d:d7:5f:90:3e:d1:c4:91:9c: d5:82:84:72:4f:b5:f5:19:d3:e7:19:91:41:d0:0d:61:38:d7: e6:14:12:4b:d9:d5:7e:a6:7c:14:ba:1e:0a:ed:60:b2:21:20: b1:29:20:05:71:e5:58:ad:fd:7d:10:3a:86:33:36:6f:e8:a2: 7e:a7:07:af:d5:e0:60:d9:24:73:11:1e:16:4d:a1:7e:dc:01: 06:9b:c7:3c:67:0f:fa:30:ac:62:ab:88:c8:ee:23:e2:9b:f8: ca:1f:d8:e3:d0:8d:ca:96:3b:3f:0a:c8:2d:e5:26:d9:db:9f: 59:b1:e6:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfgLiYFQdj8b7m+mlurLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmYyNzIxYTVkNzgzMzViN2I5N2RiNjNhZWM0MzVjOWNh MzhiYzcwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD Eyg2Mjc3NmRmNGRkZGFiMjZjMTZhMjgyYzU1OTBjNzgyMTMxNDUyZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRx99Yn+c/5CthPGASzzBnjaptI7 Atmq+izvkC4bkgMooyPPXREm9h7TI2td52CtMQHg7aCVKRmmaMBr+J7Jz2z2EhQt Q5Otlh7cciNxlMe1wItiOgN9DApFgwzduXoPSf/jg0Hprx8KQdCEMv/N2ptqz72c Tns+Ld051F61yUBxUpkLKf0Xi8kIkbWsUNKKmblpfMuLIT1c4Em71DxJaWYZFRgZ Q5G+X732J4Xq6Y7MIOhHyJhB4nLTrh1EC4m46dEr1uNERIxyAbb/lU6zjeoYK5bj UZ2Z6RmjIkeoO92JEXd92ZRv/YQ+HGK9AQYhXN6Ohl32Vg2KrgpCbXjYswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ3bfTd2rJsFqKCxVkMeCExRS6fMB8GA1UdIwQY MBaAFLq/JyGl14M1t7l9tjrsQ1yco4vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMt ZDdiZmYxMTlmZDVkLzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jZmQ3YTMtNDYyNC00MGJlLWJiMjMtZDdiZmYxMTlmZDVk LzEvdXI4bklhWFhnelczdVgyMk91eERYSnlqaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQYVI6W2 ibg52v1azOtdxoc5Gc8CmHNfOwyCzwIHy272+e65aybTPcL3kt/DTdSFgYWR/Qfp FVFf855DFbhqIKxKWAstilZCKr68JeYfQiP+nyRIBBhWx+2PWA1M+bEF1L0Es7Tv G/e3VmPMm3x3fhCdv3EZPQ+wEzh6IuOl68pWbFNya+bpnddfkD7RxJGc1YKEck+1 9RnT5xmRQdANYTjX5hQSS9nVfqZ8FLoeCu1gsiEgsSkgBXHlWK39fRA6hjM2b+ii fqcHr9XgYNkkcxEeFk2hftwBBpvHPGcP+jCsYquIyO4j4pv4yh/Y49CNypY7PwrI LeUm2dufWbHmUg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:19 2026 by rpki-client