This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json) Hash identifier: wvtaP1JdD3JcsZnghSEM8h+X5ahWUMrE3JE5gHwWDYM= Subject key identifier: D4:4E:5B:AC:F5:10:FF:45:BB:23:52:0B:A6:DC:2E:77:93:EE:ED:0B Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e Certificate serial: 019C432291D70A507BA467B1C4507474E7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft Manifest number: 11CD Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: 2W1lDQyaaG7hhIk62/OzC9edC6j7y2gMfplZ9b7/kxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:91:d7:0a:50:7b:a4:67:b1:c4:50:74:74:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=d44e5bacf510ff45bb23520ba6dc2e7793eeed0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:3e:8a:01:b0:08:42:a4:cb:b7:25:6d:f9: 28:32:9c:10:7a:83:5e:39:26:76:f8:59:93:a7:10: f5:14:1f:14:86:da:df:5b:ec:cd:24:d0:15:93:f7: 20:3a:21:9c:68:67:bd:bd:46:e0:73:8f:68:74:91: 6c:20:7a:68:4c:da:23:9e:8a:bf:4e:c5:67:8f:d9: b2:00:9f:70:81:95:18:5c:ce:01:5b:3b:0a:91:f8: ca:1d:7e:13:91:8e:d4:f6:f7:62:68:df:f1:2d:f8: 08:88:cb:b3:47:3d:a7:a1:56:a1:11:ad:a7:ac:aa: ea:66:a1:5b:66:31:1b:e8:ea:e8:db:76:4f:f4:14: a5:4e:fc:b1:5b:79:4a:15:49:a4:69:b6:7c:e7:89: c0:60:b6:50:62:37:a3:41:72:f6:20:be:b0:be:24: 78:17:c9:44:3e:33:0f:2f:0b:5d:f1:1b:a6:1f:ef: 1f:0f:cb:fa:f6:d7:ff:54:22:20:28:27:8c:77:14: 55:9e:61:e1:ab:0e:05:27:d4:ea:e2:65:83:ac:87: 10:57:97:a6:00:4e:66:4f:de:40:28:e8:3b:c7:2c: 59:6d:be:f0:1b:56:2a:6b:68:89:18:4d:4d:eb:c0: 1e:89:26:69:2a:b3:2e:0f:36:89:0f:bc:74:75:1d: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4E:5B:AC:F5:10:FF:45:BB:23:52:0B:A6:DC:2E:77:93:EE:ED:0B X509v3 Authority Key Identifier: keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:94:65:9a:45:a2:62:28:ec:fd:ec:4b:7d:3b:fa:d0:d0: 0b:b6:83:60:41:8a:8d:73:79:d8:8c:27:29:b9:ff:8f:49:59: 72:23:21:39:9d:a8:64:3a:25:21:6e:77:50:51:a0:37:b6:f4: a4:d3:ff:25:c0:ac:cf:3f:1a:c3:cb:6f:39:f6:e3:8f:5d:48: 6c:ce:50:37:d8:a2:8d:a1:91:9b:be:af:b4:a7:98:0c:b8:8b: e4:12:fc:98:8e:28:7f:4e:8d:9b:21:52:ce:42:66:4f:be:68: 20:66:f0:45:6b:1f:d2:72:e9:d6:e8:b3:bf:7d:40:bb:cf:72: 6f:1c:ba:59:54:a1:a4:0a:e0:16:bc:49:1f:d0:6d:3f:94:78: fc:be:2f:50:c5:3a:85:e3:5f:7d:4d:3f:67:82:25:48:78:2b: 07:26:fa:0e:a3:ef:17:7a:9c:9e:c8:56:97:de:5b:96:0b:3b: 06:86:0b:d3:ba:47:e9:27:f4:36:d6:b2:56:44:e1:4d:74:eb: a5:7f:25:47:d4:84:5e:30:28:b5:bc:9f:20:75:e5:55:73:3d: a4:a8:96:ee:3e:21:f9:7a:b7:68:ae:fc:91:50:f1:a9:73:85: 94:5b:3f:d7:e4:6f:c8:26:2f:03:01:24:8b:22:fc:3c:8a:2c: f1:98:84:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpHXClB7pGexxFB0dOfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTNjYTE4ZTNhMDQ4ZDU5ZmE2Y2Y1OTY2N2NmZDM5YTA1 Nzk3M2UwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EyhkNDRlNWJhY2Y1MTBmZjQ1YmIyMzUyMGJhNmRjMmU3NzkzZWVlZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT4+igGwCEKky7clbfkoMpwQeoNe OSZ2+FmTpxD1FB8UhtrfW+zNJNAVk/cgOiGcaGe9vUbgc49odJFsIHpoTNojnoq/ TsVnj9myAJ9wgZUYXM4BWzsKkfjKHX4TkY7U9vdiaN/xLfgIiMuzRz2noVahEa2n rKrqZqFbZjEb6Oro23ZP9BSlTvyxW3lKFUmkabZ854nAYLZQYjejQXL2IL6wviR4 F8lEPjMPLwtd8RumH+8fD8v69tf/VCIgKCeMdxRVnmHhqw4FJ9Tq4mWDrIcQV5em AE5mT95AKOg7xyxZbb7wG1Yqa2iJGE1N68AeiSZpKrMuDzaJD7x0dR3YFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNROW6z1EP9FuyNSC6bcLneT7u0LMB8GA1UdIwQY MBaAFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMt MWIyMDQ1NGEyODYyLzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMtMWIyMDQ1NGEyODYy LzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwWUZZpF omIo7P3sS307+tDQC7aDYEGKjXN52IwnKbn/j0lZciMhOZ2oZDolIW53UFGgN7b0 pNP/JcCszz8aw8tvOfbjj11IbM5QN9iijaGRm76vtKeYDLiL5BL8mI4of06NmyFS zkJmT75oIGbwRWsf0nLp1uizv31Au89ybxy6WVShpArgFrxJH9BtP5R4/L4vUMU6 heNffU0/Z4IlSHgrByb6DqPvF3qcnshWl95blgs7BoYL07pH6Sf0NtayVkThTXTr pX8lR9SEXjAotbyfIHXlVXM9pKiW7j4h+Xq3aK78kVDxqXOFlFs/1+RvyCYvAwEk iyL8PIos8ZiEJg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:53 2026 by rpki-client