This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json) Hash identifier: RLc8owBO0f/BANcnb1chx/lGWUiTNEsB1Z+gnYj472k= Subject key identifier: AA:77:39:83:4E:72:05:0E:A3:4B:26:88:24:68:89:56:E2:E6:9C:B3 Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b Certificate serial: 019C43C6CC24CA5EC9475AEC5DEA3F0A588A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft Manifest number: 0EF0 Signing time: Mon 09 Feb 2026 19:00:27 +0000 Manifest this update: Mon 09 Feb 2026 19:00:27 +0000 Manifest next update: Tue 10 Feb 2026 19:00:27 +0000 Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: QGEhGJ+ZoGB/WCORj8vO6vsd52/MbFid6JdiEzjzt5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:cc:24:ca:5e:c9:47:5a:ec:5d:ea:3f:0a:58:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54a6558d6923be429d9389531adc1008795270b Validity Not Before: Feb 9 19:00:27 2026 GMT Not After : Feb 10 19:00:27 2026 GMT Subject: CN=aa7739834e72050ea34b268824688956e2e69cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:6c:03:11:cb:db:96:8c:e2:7e:1f:89:36: 26:44:6a:6c:be:87:c5:cf:da:92:8b:8b:80:33:13: 20:09:89:f5:a5:cd:6f:7a:1a:d6:e2:74:80:1f:5d: 55:5d:4e:d1:aa:e5:98:29:52:5a:15:da:c2:1e:b9: 73:b2:84:9d:fa:b7:6c:2e:79:2f:cb:2a:ad:91:d5: fb:ca:a4:6c:f9:90:cd:4a:23:d0:b9:38:bc:a2:d5: ca:d3:60:f6:84:e3:d8:8a:c5:9f:d2:74:0b:59:21: 8c:52:9e:84:1b:8f:b0:2e:88:f6:49:a1:c2:a6:eb: 0c:f0:55:e6:f6:44:2d:eb:95:b9:0a:ab:92:28:77: d6:ce:7a:dc:92:3f:f6:9a:10:2f:da:7e:99:8a:0d: 2f:79:56:36:5a:3e:75:1b:55:3f:da:bd:55:d7:57: 69:03:0b:a0:41:53:90:9a:dc:42:dc:5e:57:75:7f: 2a:22:8c:2f:ad:1b:a5:59:da:0a:5f:93:f7:28:00: ff:a1:d0:aa:f4:b4:f8:5f:70:7e:ae:bc:da:66:a5: 62:92:13:a4:7a:b9:61:46:c5:ea:fc:ec:7a:1f:4f: dc:f3:2b:37:5a:10:9c:2d:79:1f:01:6f:6a:6a:9f: 78:97:b6:18:76:ed:d8:31:90:1f:1e:9c:2b:80:a6: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:77:39:83:4E:72:05:0E:A3:4B:26:88:24:68:89:56:E2:E6:9C:B3 X509v3 Authority Key Identifier: keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1c:b0:fb:b2:ab:74:e3:9e:10:81:ec:75:23:50:e5:75:29: 82:eb:26:60:c4:51:0f:e4:b0:8b:7c:22:0f:d2:9f:5a:60:3f: 55:44:92:a6:ae:43:51:b1:78:ba:e9:84:dc:1a:09:e2:3b:6d: 0d:1e:c3:4d:1a:47:4b:bd:6b:ff:4b:80:06:a3:2a:81:4c:e2: dc:b3:22:be:e8:42:e4:29:64:9a:ea:5e:53:b1:d4:7e:af:5c: da:55:54:f5:22:f4:0c:59:c9:29:35:b2:6c:24:89:96:2a:7f: 42:cf:7c:f2:d2:94:21:ed:be:d4:76:f4:b1:64:0e:1d:42:63: e8:71:4e:de:4d:fd:a2:28:ea:0a:a2:07:a7:d0:42:24:b5:1a: 6b:39:8e:5d:fb:fb:9a:88:bf:27:5b:1e:0f:02:3b:6f:df:16: af:40:59:e2:36:ee:74:0c:da:94:4e:ce:7e:5a:11:36:1f:0c: dd:25:de:41:0c:a9:bf:7e:e9:26:7b:a7:16:16:af:e7:07:d8: 08:dc:01:72:1c:ad:e1:76:aa:ce:ec:a6:fe:d4:e5:6a:a7:81: 25:4b:5c:80:ae:c8:60:97:55:46:d2:04:d6:1d:95:84:df:51: 0d:50:ba:96:c3:34:97:18:09:15:72:ad:02:aa:31:31:9b:74: f5:50:4c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxswkyl7JR1rsXeo/CliKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGE2NTU4ZDY5MjNiZTQyOWQ5Mzg5NTMxYWRjMTAwODc5 NTI3MGIwHhcNMjYwMjA5MTkwMDI3WhcNMjYwMjEwMTkwMDI3WjAzMTEwLwYDVQQD EyhhYTc3Mzk4MzRlNzIwNTBlYTM0YjI2ODgyNDY4ODk1NmUyZTY5Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveJsAxHL25aM4n4fiTYmRGpsvofF z9qSi4uAMxMgCYn1pc1vehrW4nSAH11VXU7RquWYKVJaFdrCHrlzsoSd+rdsLnkv yyqtkdX7yqRs+ZDNSiPQuTi8otXK02D2hOPYisWf0nQLWSGMUp6EG4+wLoj2SaHC pusM8FXm9kQt65W5CquSKHfWznrckj/2mhAv2n6Zig0veVY2Wj51G1U/2r1V11dp AwugQVOQmtxC3F5XdX8qIowvrRulWdoKX5P3KAD/odCq9LT4X3B+rrzaZqVikhOk erlhRsXq/Ox6H0/c8ys3WhCcLXkfAW9qap94l7YYdu3YMZAfHpwrgKZOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp3OYNOcgUOo0smiCRoiVbi5pyzMB8GA1UdIwQY MBaAFMVKZVjWkjvkKdk4lTGtwQCHlScLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2Mt ZWMyZWQwYjc4MmI3LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2MtZWMyZWQwYjc4MmI3 LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhyw+7Kr dOOeEIHsdSNQ5XUpgusmYMRRD+Swi3wiD9KfWmA/VUSSpq5DUbF4uumE3BoJ4jtt DR7DTRpHS71r/0uABqMqgUzi3LMivuhC5ClkmupeU7HUfq9c2lVU9SL0DFnJKTWy bCSJlip/Qs988tKUIe2+1Hb0sWQOHUJj6HFO3k39oijqCqIHp9BCJLUaazmOXfv7 moi/J1seDwI7b98Wr0BZ4jbudAzalE7OfloRNh8M3SXeQQypv37pJnunFhav5wfY CNwBchyt4Xaqzuym/tTlaqeBJUtcgK7IYJdVRtIE1h2VhN9RDVC6lsM0lxgJFXKt AqoxMZt09VBMJA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:07 2026 by rpki-client