This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft File: U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft (raw, json) Hash identifier: b1Uv/MbUIQzVXNlVoYtyjUURf4FSJY+LNc0jyePKFgI= Subject key identifier: D4:19:65:02:4A:25:70:50:4A:92:55:40:3B:64:1B:73:C6:6C:45:EB Authority key identifier: 53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB Certificate issuer: /CN=53f66601b7ceac08c1820784064e571db9887beb Certificate serial: 019C420F478AFBEE2A4897AA234C513674FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft Manifest number: 0138 Signing time: Mon 09 Feb 2026 11:00:23 +0000 Manifest this update: Mon 09 Feb 2026 11:00:23 +0000 Manifest next update: Tue 10 Feb 2026 11:00:23 +0000 Files and hashes: 1: U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl (hash: v7qslRLoWMa/vXG4fAnggS8XtI5FrKLL6zxErFHxgf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:47:8a:fb:ee:2a:48:97:aa:23:4c:51:36:74:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f66601b7ceac08c1820784064e571db9887beb Validity Not Before: Feb 9 11:00:23 2026 GMT Not After : Feb 10 11:00:23 2026 GMT Subject: CN=d41965024a2570504a9255403b641b73c66c45eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:03:2f:f3:f6:36:97:d3:31:dd:08:e9:f1: 87:37:6a:6f:67:47:9a:0b:83:a1:fe:90:bd:ea:af: d8:04:a4:93:b4:c2:8c:1d:36:28:bb:79:da:38:79: f9:c8:3d:51:fd:99:72:0e:d5:2c:be:36:13:4f:72: 99:2e:e0:a2:7e:e4:08:2e:88:ea:4c:7e:b0:ec:84: d7:11:b3:10:21:23:14:21:d5:f6:97:dd:15:c8:aa: 01:89:63:59:26:68:70:c4:96:44:14:76:58:de:cf: c0:af:d5:fc:f3:68:e4:54:3d:6b:8d:3b:26:60:62: 20:e7:3f:68:0e:bd:4a:0a:8a:d7:f8:82:34:18:9a: 08:b3:63:2a:ac:fe:68:80:17:58:7f:da:78:e6:e7: b7:bf:32:a3:1c:6b:44:ab:6d:9c:0a:31:ab:dd:f4: cf:dd:c5:71:a7:a8:62:9b:9d:4c:5b:48:1a:57:0a: 33:96:40:51:09:ff:0d:e1:83:a4:cc:11:74:c6:ef: 0e:ab:b2:6d:ae:48:8f:e1:e5:bf:d6:2b:7e:74:0c: f9:1a:97:54:87:f4:dd:70:55:c4:51:14:14:25:2d: 1a:3a:a0:41:ad:70:d6:ac:d8:58:6a:9c:25:62:67: 76:5a:6c:76:b4:bd:29:85:a4:1c:c5:22:df:ab:0b: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:65:02:4A:25:70:50:4A:92:55:40:3B:64:1B:73:C6:6C:45:EB X509v3 Authority Key Identifier: keyid:53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:0c:ff:ed:1e:b5:6e:bb:8b:0c:99:d0:eb:e3:2d:66:2a:ab: 99:03:17:87:33:d7:26:33:b2:f5:20:d4:18:e6:d8:37:05:b1: 9b:71:35:2f:b8:6a:2b:e1:c3:89:51:1b:0a:f1:58:34:b8:3a: 02:9a:2f:67:bb:43:9d:96:a4:b2:d0:a2:f2:10:14:95:c4:4d: b3:04:83:72:4b:f1:42:9c:02:a5:30:ba:33:aa:a6:ad:bc:b9: e2:ef:a4:14:46:31:cb:5a:30:79:bd:12:7a:b1:14:ba:38:03: 0d:44:2c:0b:0f:d3:a9:77:7a:8a:7c:2c:d2:88:1e:ef:c9:a5: c4:ec:7f:aa:e8:29:a5:cc:13:86:71:af:03:10:9b:03:cb:c1: b5:93:4e:49:0c:ba:7e:85:b9:34:e6:20:34:7c:1c:2d:69:57: 4c:44:4a:f9:55:45:da:8c:ef:66:28:1b:f3:89:47:ae:cc:d7: 42:85:77:c3:34:72:e9:92:68:35:8d:fa:64:4f:d5:d1:ab:dd: 26:65:7a:ee:64:dd:92:a7:64:77:29:80:ae:91:fd:c1:09:31: 47:c0:5e:d1:b8:70:95:94:41:76:e9:b3:f4:04:a8:e4:8b:90: 92:28:45:37:98:b3:a3:63:a4:45:bc:56:8c:b5:b6:ee:85:4c: 52:03:b1:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0eK++4qSJeqI0xRNnT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjY2NjAxYjdjZWFjMDhjMTgyMDc4NDA2NGU1NzFkYjk4 ODdiZWIwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD EyhkNDE5NjUwMjRhMjU3MDUwNGE5MjU1NDAzYjY0MWI3M2M2NmM0NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FIDL/P2NpfTMd0I6fGHN2pvZ0ea C4Oh/pC96q/YBKSTtMKMHTYou3naOHn5yD1R/ZlyDtUsvjYTT3KZLuCifuQILojq TH6w7ITXEbMQISMUIdX2l90VyKoBiWNZJmhwxJZEFHZY3s/Ar9X882jkVD1rjTsm YGIg5z9oDr1KCorX+II0GJoIs2MqrP5ogBdYf9p45ue3vzKjHGtEq22cCjGr3fTP 3cVxp6him51MW0gaVwozlkBRCf8N4YOkzBF0xu8Oq7JtrkiP4eW/1it+dAz5GpdU h/TdcFXEURQUJS0aOqBBrXDWrNhYapwlYmd2Wmx2tL0phaQcxSLfqwtCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQZZQJKJXBQSpJVQDtkG3PGbEXrMB8GA1UdIwQY MBaAFFP2ZgG3zqwIwYIHhAZOVx25iHvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNDNjMmYtZmZhOS00ZjJiLWE4MzEt YWQwYjVkY2YzMzAzLzEvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kNDNjMmYtZmZhOS00ZjJiLWE4MzEtYWQwYjVkY2YzMzAz LzEvVV9abUFiZk9yQWpCZ2dlRUJrNVhIYm1JZS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wz/7R61 bruLDJnQ6+MtZiqrmQMXhzPXJjOy9SDUGObYNwWxm3E1L7hqK+HDiVEbCvFYNLg6 ApovZ7tDnZakstCi8hAUlcRNswSDckvxQpwCpTC6M6qmrby54u+kFEYxy1oweb0S erEUujgDDUQsCw/TqXd6inws0oge78mlxOx/qugppcwThnGvAxCbA8vBtZNOSQy6 foW5NOYgNHwcLWlXTERK+VVF2ozvZigb84lHrszXQoV3wzRy6ZJoNY36ZE/V0avd JmV67mTdkqdkdymArpH9wQkxR8Be0bhwlZRBdumz9ASo5IuQkihFN5izo2OkRbxW jLW27oVMUgOxZw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:47 2026 by rpki-client