This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json) Hash identifier: KiWlq/2+N7aBwCmdpHS45cx/x1UYFqQ90+1j+3sRW3I= Subject key identifier: 47:F9:98:F2:CD:E2:3E:AB:F0:D0:A6:E5:9E:0D:89:17:CC:70:F1:E3 Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87 Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87 Certificate serial: 019C427D8044E8381B1675359A49D140E8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft Manifest number: 1562 Signing time: Mon 09 Feb 2026 13:00:46 +0000 Manifest this update: Mon 09 Feb 2026 13:00:46 +0000 Manifest next update: Tue 10 Feb 2026 13:00:46 +0000 Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: g1Yrusw5tUOV6y7wyeDdbYhlRIIuhzsw3ljsKFDlyj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:80:44:e8:38:1b:16:75:35:9a:49:d1:40:e8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87 Validity Not Before: Feb 9 13:00:46 2026 GMT Not After : Feb 10 13:00:46 2026 GMT Subject: CN=47f998f2cde23eabf0d0a6e59e0d8917cc70f1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:6e:a3:61:6c:9c:24:74:bf:b7:4b:41:3a: 16:82:ae:6a:92:e9:9e:fa:53:26:a3:3d:7f:b0:13: 52:ad:18:d3:8b:a8:b7:fd:e8:e7:b7:ff:ef:fd:1b: d4:e1:86:03:e5:c4:aa:41:c1:8a:8a:37:83:cb:8d: 64:2d:c5:69:a9:94:54:73:a2:0c:f9:fb:0b:84:72: 90:7f:60:08:1e:a8:db:f0:e8:86:79:b0:36:76:db: 03:4d:26:0e:fd:94:bd:d8:ac:f7:ba:b6:da:9f:ba: 36:2a:3c:f1:5b:b7:4f:d5:0e:db:1a:15:72:b6:fd: f5:16:53:b4:4f:72:a7:e1:6b:d1:69:98:53:bf:a4: 89:f3:28:66:d7:ba:04:46:1c:c7:91:a0:9b:59:9a: f0:33:40:6f:0c:3e:c8:06:9e:76:ca:5c:83:8c:d2: 69:dd:a4:ae:c4:38:aa:b4:73:04:66:43:33:ae:21: 4a:ed:e8:d4:2f:e3:da:89:15:a7:76:df:5c:5c:05: 0a:95:59:de:97:e4:45:0f:4b:7e:1a:a0:9a:b1:74: bc:07:a3:8c:e0:89:12:f8:d6:16:5f:d2:8b:a2:92: cb:b8:c0:13:10:67:fe:b5:f7:30:e3:28:4d:bc:03: a4:9e:84:43:5d:b4:d3:3f:67:cb:63:09:66:c0:de: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F9:98:F2:CD:E2:3E:AB:F0:D0:A6:E5:9E:0D:89:17:CC:70:F1:E3 X509v3 Authority Key Identifier: keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:95:39:b2:ce:a9:ab:55:bf:2c:d1:78:1a:0b:fb:c9:fc:99: a5:5f:a0:2b:6d:e2:cc:63:2f:f1:1c:cf:7a:71:0b:4b:c4:a3: bc:b4:21:d8:e4:7e:9f:2c:10:d7:fa:d3:f1:9d:1c:a8:c4:3d: fd:9f:15:b2:04:59:5d:7a:4e:95:38:48:86:a5:9c:48:32:b2: 82:5a:fe:b3:ec:fb:6d:7e:68:c9:04:fb:37:99:ab:2b:3e:5f: 95:46:ea:6a:7d:37:16:10:d4:d7:6d:ba:cd:88:00:58:38:f7: 39:14:be:72:96:9c:9e:ed:5d:8c:32:01:85:94:13:78:11:65: 72:cd:c9:c6:b2:f8:3f:39:ee:3a:c2:e3:ff:ae:7f:ce:17:86: 37:cb:94:70:3a:1b:62:fd:89:24:ba:dd:b2:2e:9a:be:0c:8d: de:26:13:7b:61:a6:4c:83:db:38:ed:f8:34:ab:92:8a:48:47: 64:3f:8e:fc:e0:66:f1:ca:f3:0e:66:90:59:0e:33:18:14:57: fa:07:41:ad:57:ad:bc:d2:d3:df:7e:19:ba:59:fb:e6:1c:c4: 4f:1e:10:c7:82:98:cd:e4:92:36:4d:0a:d6:37:4f:29:2f:b8: 94:c8:b2:f5:9d:a5:54:00:0e:41:ed:98:84:ea:a4:16:da:02: e8:b0:e8:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYBE6DgbFnU1mknRQOjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWI1MjAyYTBlZDQ2ZjY0MTFlMWVkYTdjN2I1OWRkOGNj NmNkODcwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD Eyg0N2Y5OThmMmNkZTIzZWFiZjBkMGE2ZTU5ZTBkODkxN2NjNzBmMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnotuo2FsnCR0v7dLQToWgq5qkume +lMmoz1/sBNSrRjTi6i3/ejnt//v/RvU4YYD5cSqQcGKijeDy41kLcVpqZRUc6IM +fsLhHKQf2AIHqjb8OiGebA2dtsDTSYO/ZS92Kz3urban7o2KjzxW7dP1Q7bGhVy tv31FlO0T3Kn4WvRaZhTv6SJ8yhm17oERhzHkaCbWZrwM0BvDD7IBp52ylyDjNJp 3aSuxDiqtHMEZkMzriFK7ejUL+PaiRWndt9cXAUKlVnel+RFD0t+GqCasXS8B6OM 4IkS+NYWX9KLopLLuMATEGf+tfcw4yhNvAOknoRDXbTTP2fLYwlmwN7P6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf5mPLN4j6r8NCm5Z4NiRfMcPHjMB8GA1UdIwQY MBaAFFAbUgKg7Ub2QR4e2nx7Wd2Mxs2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzct YjE3NmQ2YmI1N2RiLzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zNmIxZjMtNmM5Zi00MjQ5LWEwYzctYjE3NmQ2YmI1N2Ri LzEvVUJ0U0FxRHRSdlpCSGg3YWZIdFozWXpHelljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZU5ss6p q1W/LNF4Ggv7yfyZpV+gK23izGMv8RzPenELS8SjvLQh2OR+nywQ1/rT8Z0cqMQ9 /Z8VsgRZXXpOlThIhqWcSDKyglr+s+z7bX5oyQT7N5mrKz5flUbqan03FhDU1226 zYgAWDj3ORS+cpacnu1djDIBhZQTeBFlcs3JxrL4PznuOsLj/65/zheGN8uUcDob Yv2JJLrdsi6avgyN3iYTe2GmTIPbOO34NKuSikhHZD+O/OBm8crzDmaQWQ4zGBRX +gdBrVetvNLT334Zuln75hzETx4Qx4KYzeSSNk0K1jdPKS+4lMiy9Z2lVAAOQe2Y hOqkFtoC6LDoqg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:45 2026 by rpki-client