This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft File: UxaLNBXn3zj4R7W0mDv1lGixsjE.mft (raw, json) Hash identifier: RtQXjgSAGymuDjovLiSG2Q0mPskU13J6RaEjyXT6Vxs= Subject key identifier: D2:20:13:80:FA:49:6F:56:FF:2A:28:8C:B4:B9:E9:F4:55:F1:AF:97 Authority key identifier: 53:16:8B:34:15:E7:DF:38:F8:47:B5:B4:98:3B:F5:94:68:B1:B2:31 Certificate issuer: /CN=53168b3415e7df38f847b5b4983bf59468b1b231 Certificate serial: 019C40FD00E825093D1566C970A19921ABE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxaLNBXn3zj4R7W0mDv1lGixsjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft Manifest number: 5A Signing time: Mon 09 Feb 2026 06:00:48 +0000 Manifest this update: Mon 09 Feb 2026 06:00:48 +0000 Manifest next update: Tue 10 Feb 2026 06:00:48 +0000 Files and hashes: 1: UxaLNBXn3zj4R7W0mDv1lGixsjE.crl (hash: FrwqrfrDpoeQzkHqNrX3kimAnEz5PtcWbftD4KlSJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft rsync://rpki.ripe.net/repository/DEFAULT/UxaLNBXn3zj4R7W0mDv1lGixsjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:00:e8:25:09:3d:15:66:c9:70:a1:99:21:ab:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53168b3415e7df38f847b5b4983bf59468b1b231 Validity Not Before: Feb 9 06:00:48 2026 GMT Not After : Feb 10 06:00:48 2026 GMT Subject: CN=d2201380fa496f56ff2a288cb4b9e9f455f1af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:15:3c:08:47:d7:1c:29:0c:ad:5c:02:5d: a3:44:e2:4d:24:13:59:51:aa:c5:92:15:fa:0e:d5: 7c:05:35:b3:92:42:82:25:c0:d6:d5:cf:62:03:7a: eb:ee:e8:0e:cf:7d:ec:99:c7:18:0c:46:3d:d8:49: 00:29:0e:04:4d:2a:5a:00:fb:05:02:bb:99:fe:2e: 75:6a:30:92:f2:32:0b:18:a3:07:ae:f8:6d:73:dc: 71:16:e1:a9:a7:9e:44:99:3f:fd:ae:2c:77:13:3e: 30:a7:ff:48:68:e9:bf:fb:e0:e9:d3:d5:b0:12:b8: 0f:dd:bc:d3:c0:c8:7c:a8:63:28:4b:58:a5:cd:bd: 73:97:17:ff:2d:ff:5d:ad:09:a4:97:2a:55:8b:6d: 6f:6a:3c:dc:d9:cd:6e:f7:8f:70:60:30:cd:d8:ae: 7c:d8:8d:fa:0f:e1:50:e2:af:e3:c4:5f:b9:ef:f2: be:ab:9d:63:03:ac:1a:38:52:bc:ae:78:04:cb:0f: ce:5a:4e:d8:6e:1e:75:9a:92:84:65:2d:6f:37:a2: 0b:32:13:7d:d7:1d:65:31:d5:b1:6e:cd:92:77:61: a3:62:23:60:32:05:91:50:f7:18:b4:30:dc:9d:07: de:0d:c8:6d:6f:45:8c:07:39:b3:7b:69:b8:30:96: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:20:13:80:FA:49:6F:56:FF:2A:28:8C:B4:B9:E9:F4:55:F1:AF:97 X509v3 Authority Key Identifier: keyid:53:16:8B:34:15:E7:DF:38:F8:47:B5:B4:98:3B:F5:94:68:B1:B2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxaLNBXn3zj4R7W0mDv1lGixsjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/31a5a9-a9cb-464a-9a82-16d827dd6117/1/UxaLNBXn3zj4R7W0mDv1lGixsjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e1:98:f2:f8:e4:65:b1:4d:d2:5a:ce:e0:29:3f:f4:40:6f: bb:e6:93:27:7f:d1:c2:62:0d:6d:01:00:bf:82:a3:6f:25:39: 52:4f:49:cb:cf:c9:7a:55:d3:a1:03:c4:4b:23:ad:b1:0b:24: 1d:b0:60:89:33:77:18:cf:37:70:23:0f:fc:3c:32:93:2b:47: 99:a0:c9:7c:a1:d8:7b:65:ec:ef:8f:4a:60:07:c1:b0:ae:1f: 68:d8:89:2d:91:7f:50:fc:77:d0:52:9f:75:9f:63:a6:4c:49: 4f:c8:0a:53:a1:b1:91:bf:d9:9c:03:f3:8a:5f:de:ad:e5:3f: db:33:5e:15:b3:7d:ca:c8:6d:74:77:82:ba:1c:7b:67:8c:6f: db:30:e6:41:60:2b:52:e5:62:c8:74:e5:94:2a:ec:ec:a6:63: b2:5e:86:74:30:cf:ad:a9:e0:72:c7:f2:8b:4e:ef:45:b0:ba: 32:e2:97:de:7f:36:d3:9a:8c:dd:97:46:a6:88:df:87:16:65: ab:93:7a:f8:2e:65:b9:90:ab:01:f9:1d:ba:32:28:85:a3:f5: 76:1d:4b:b7:25:44:c1:b0:8a:8a:e0:2d:61:0d:89:a4:88:dc: 50:92:88:f6:27:f7:31:99:5f:51:90:7e:cf:ad:9a:db:16:cb: 70:67:ad:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/QDoJQk9FWbJcKGZIavhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTY4YjM0MTVlN2RmMzhmODQ3YjViNDk4M2JmNTk0Njhi MWIyMzEwHhcNMjYwMjA5MDYwMDQ4WhcNMjYwMjEwMDYwMDQ4WjAzMTEwLwYDVQQD EyhkMjIwMTM4MGZhNDk2ZjU2ZmYyYTI4OGNiNGI5ZTlmNDU1ZjFhZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IMVPAhH1xwpDK1cAl2jROJNJBNZ UarFkhX6DtV8BTWzkkKCJcDW1c9iA3rr7ugOz33smccYDEY92EkAKQ4ETSpaAPsF AruZ/i51ajCS8jILGKMHrvhtc9xxFuGpp55EmT/9rix3Ez4wp/9IaOm/++Dp09Ww ErgP3bzTwMh8qGMoS1ilzb1zlxf/Lf9drQmklypVi21vajzc2c1u949wYDDN2K58 2I36D+FQ4q/jxF+57/K+q51jA6waOFK8rngEyw/OWk7Ybh51mpKEZS1vN6ILMhN9 1x1lMdWxbs2Sd2GjYiNgMgWRUPcYtDDcnQfeDchtb0WMBzmze2m4MJbRMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIgE4D6SW9W/yoojLS56fRV8a+XMB8GA1UdIwQY MBaAFFMWizQV5984+Ee1tJg79ZRosbIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhhTE5CWG4zemo0UjdXMG1EdjFsR2l4c2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zMWE1YTktYTljYi00NjRhLTlhODIt MTZkODI3ZGQ2MTE3LzEvVXhhTE5CWG4zemo0UjdXMG1EdjFsR2l4c2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zMWE1YTktYTljYi00NjRhLTlhODItMTZkODI3ZGQ2MTE3 LzEvVXhhTE5CWG4zemo0UjdXMG1EdjFsR2l4c2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+GY8vjk ZbFN0lrO4Ck/9EBvu+aTJ3/RwmINbQEAv4KjbyU5Uk9Jy8/JelXToQPESyOtsQsk HbBgiTN3GM83cCMP/DwykytHmaDJfKHYe2Xs749KYAfBsK4faNiJLZF/UPx30FKf dZ9jpkxJT8gKU6Gxkb/ZnAPzil/ereU/2zNeFbN9yshtdHeCuhx7Z4xv2zDmQWAr UuViyHTllCrs7KZjsl6GdDDPrangcsfyi07vRbC6MuKX3n8205qM3ZdGpojfhxZl q5N6+C5luZCrAfkdujIohaP1dh1LtyVEwbCKiuAtYQ2JpIjcUJKI9if3MZlfUZB+ z62a2xbLcGetQA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:47:55 2026 by rpki-client