This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json) Hash identifier: EGcpRjRH0JH5/l7cgF/6Q+w0WDUzUFgi1OqnWGBP3oE= Subject key identifier: 66:9B:84:D4:AB:1D:8F:11:70:77:47:33:11:4E:9E:32:B4:EC:76:32 Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Certificate serial: 019C420FF6E284FB3D9BF992181DB04BD6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft Manifest number: 06E0 Signing time: Mon 09 Feb 2026 11:01:08 +0000 Manifest this update: Mon 09 Feb 2026 11:01:08 +0000 Manifest next update: Tue 10 Feb 2026 11:01:08 +0000 Files and hashes: 1: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: hPj7rDKvlo4jDj8sZTSw5/9tKiMpt8W31tfoR0Twzvc=) 2: kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa (hash: TCL6ozSUuPbHKcQL9MhFYjm+l3Ilnl3GbAL+XQhGlFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f6:e2:84:fb:3d:9b:f9:92:18:1d:b0:4b:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Validity Not Before: Feb 9 11:01:08 2026 GMT Not After : Feb 10 11:01:08 2026 GMT Subject: CN=669b84d4ab1d8f1170774733114e9e32b4ec7632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:0a:e3:b7:51:38:f9:fe:fb:6c:23:ba:42: 2b:cd:48:1f:1e:b5:b3:03:e9:26:0c:91:ae:2b:1f: 4b:f7:25:3f:38:98:f0:68:dc:ef:8d:51:b6:6c:56: 51:93:4a:81:75:c8:30:6d:57:22:b2:8a:13:d4:6c: 29:d3:55:8f:e3:1a:ce:87:45:e0:e3:02:c2:eb:47: d1:0a:12:46:22:96:e5:84:79:b7:f3:71:cd:a3:23: f7:48:02:24:18:f9:9c:dd:25:88:72:7b:a6:77:0e: ff:d4:fc:e8:6d:d6:f1:f1:f4:19:b3:9b:1b:76:06: 9b:88:e8:4b:61:ab:71:5b:e4:63:d8:16:fc:64:92: 4b:75:f5:09:bc:5f:c1:76:9a:8a:8b:59:61:2a:17: 4b:a3:d2:89:90:2b:bb:ab:a9:a5:f0:ab:0f:25:d7: ee:98:d9:ad:29:48:2b:ca:6f:80:41:1c:1b:86:8d: f5:c5:0c:f4:63:fe:5a:7d:35:53:e3:de:7d:ff:c4: ff:0a:3b:1f:9a:5e:7d:19:7a:0c:3a:8b:c6:d1:40: 9e:fd:78:08:6b:5d:8a:80:99:0d:16:88:3d:04:e4: f6:3c:5b:c0:54:60:2d:02:c6:19:af:6f:07:20:01: 83:23:eb:76:b1:69:cf:a7:02:b8:7a:9b:96:8a:5c: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:84:D4:AB:1D:8F:11:70:77:47:33:11:4E:9E:32:B4:EC:76:32 X509v3 Authority Key Identifier: keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c2:be:65:2b:ab:0f:e7:b4:b2:91:14:85:23:3e:78:1e:2e: 3d:17:9d:2a:26:27:c8:ad:52:2c:03:38:59:56:7e:76:be:91: 3d:7c:c4:42:b0:5c:dc:15:75:78:ac:0d:4b:ce:27:c0:f7:3e: 33:d1:1c:d3:cb:c6:b5:d6:e2:82:d2:39:dd:8f:21:f8:95:cf: 11:85:0b:01:79:b6:af:61:a3:ce:97:3b:63:4a:3c:70:70:94: 6e:ab:48:75:da:5c:03:60:f3:fd:96:59:b4:3c:78:42:b5:27: 01:c5:6c:95:33:0f:36:42:1d:19:01:d5:78:f5:4d:79:36:a2: f9:1e:c1:18:dd:3a:83:c6:53:7e:bd:82:a2:1c:c9:9f:9f:b9: fe:9f:b0:99:91:3f:20:e0:3e:07:4c:53:17:64:6a:c5:82:58: 14:65:a7:ab:bd:a2:84:a9:de:70:a9:9e:29:66:b7:f8:b0:49: 81:0e:e6:61:18:19:c2:c3:67:6d:0b:61:6a:3f:a0:92:7e:08: bc:14:3d:97:e6:d7:28:93:c7:26:5f:d7:dd:cd:ea:b6:f5:32: e6:3c:4f:0b:5d:d6:bd:07:2a:5e:1a:d5:fa:36:29:01:20:e5: 91:fd:57:fb:11:31:3a:4a:7e:34:1d:eb:d9:e8:ed:8e:86:0e: dc:67:ca:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/bihPs9m/mSGB2wS9b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWMxMDU3YmNiOWQxZTBkMTU3NDhiN2YzMmM1OWY4Yzdi NzJhNGUwHhcNMjYwMjA5MTEwMTA4WhcNMjYwMjEwMTEwMTA4WjAzMTEwLwYDVQQD Eyg2NjliODRkNGFiMWQ4ZjExNzA3NzQ3MzMxMTRlOWUzMmI0ZWM3NjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw0K47dROPn++2wjukIrzUgfHrWz A+kmDJGuKx9L9yU/OJjwaNzvjVG2bFZRk0qBdcgwbVcisooT1Gwp01WP4xrOh0Xg 4wLC60fRChJGIpblhHm383HNoyP3SAIkGPmc3SWIcnumdw7/1Pzobdbx8fQZs5sb dgabiOhLYatxW+Rj2Bb8ZJJLdfUJvF/BdpqKi1lhKhdLo9KJkCu7q6ml8KsPJdfu mNmtKUgrym+AQRwbho31xQz0Y/5afTVT4959/8T/Cjsfml59GXoMOovG0UCe/XgI a12KgJkNFog9BOT2PFvAVGAtAsYZr28HIAGDI+t2sWnPpwK4epuWilzxnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGabhNSrHY8RcHdHMxFOnjK07HYyMB8GA1UdIwQY MBaAFFAcEFe8udHg0VdIt/MsWfjHtypOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzkt ZDcxN2U0ZGZjYjNkLzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iYTNmYTEtZjlkMC00MDk3LWJkYzktZDcxN2U0ZGZjYjNk LzEvVUJ3UVY3eTUwZURSVjBpMzh5eFotTWUzS2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMK+ZSur D+e0spEUhSM+eB4uPRedKiYnyK1SLAM4WVZ+dr6RPXzEQrBc3BV1eKwNS84nwPc+ M9Ec08vGtdbigtI53Y8h+JXPEYULAXm2r2Gjzpc7Y0o8cHCUbqtIddpcA2Dz/ZZZ tDx4QrUnAcVslTMPNkIdGQHVePVNeTai+R7BGN06g8ZTfr2CohzJn5+5/p+wmZE/ IOA+B0xTF2RqxYJYFGWnq72ihKnecKmeKWa3+LBJgQ7mYRgZwsNnbQthaj+gkn4I vBQ9l+bXKJPHJl/X3c3qtvUy5jxPC13WvQcqXhrV+jYpASDlkf1X+xExOkp+NB3r 2ejtjoYO3GfKNA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:44 2026 by rpki-client