This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json) Hash identifier: ti7TDIO1Mt1qQZG0ruFqduNPH3/IgpIryBJo8KIVs04= Subject key identifier: 38:48:E0:E8:CF:8E:DE:9B:41:A2:DC:80:69:BD:88:6E:9F:0E:59:85 Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea Certificate serial: 019C1E035002F44AE81A49640B1B50063232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft Manifest number: 1801 Signing time: Mon 02 Feb 2026 11:00:59 +0000 Manifest this update: Mon 02 Feb 2026 11:00:59 +0000 Manifest next update: Tue 03 Feb 2026 11:00:59 +0000 Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=) 2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: DKvec/mJoq0RXqcpEhTFaeVVSXx/ZW4u5Qh//WpGGsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:50:02:f4:4a:e8:1a:49:64:0b:1b:50:06:32:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea Validity Not Before: Feb 2 11:00:59 2026 GMT Not After : Feb 3 11:00:59 2026 GMT Subject: CN=3848e0e8cf8ede9b41a2dc8069bd886e9f0e5985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:3f:cb:64:f6:77:8d:75:c8:c6:83:1c:5d: ac:45:1c:f1:33:75:64:ea:d1:6a:8f:38:06:cf:ad: 2e:06:15:62:c5:5c:d8:ce:07:c5:70:2d:a4:05:88: f5:0c:e2:9c:bf:f3:8c:a8:ba:7f:a9:c2:f7:43:c3: 25:e5:ae:9b:b8:90:d0:b9:cf:85:69:1f:59:bc:f1: db:ab:2e:8f:91:40:6a:65:15:ee:94:c0:18:69:fe: 4f:d0:3c:bc:a2:5e:f2:32:a6:70:c4:5c:f0:be:8f: 0d:e9:c7:f6:a6:2c:0c:bb:1f:0a:e7:df:e8:f9:d5: bc:77:a1:fc:27:20:be:5e:23:c6:06:37:d3:07:15: c9:9a:67:b6:3a:a1:38:2b:eb:c0:54:17:97:08:66: 6f:90:72:56:42:2a:e6:66:0d:de:35:93:7f:a2:36: 5a:ac:e0:37:25:91:bf:c9:46:6a:1f:37:87:11:d9: c6:6f:78:c2:dc:0f:93:5a:d2:3e:f1:c1:ac:0a:7f: 62:ec:e8:aa:24:16:e3:00:f9:26:4b:2e:cc:cc:8c: eb:d8:8c:d9:69:a9:40:48:b1:1e:f5:39:8b:39:fa: 70:53:dc:95:87:59:0f:0e:91:b5:82:e7:d1:7c:ac: f8:95:25:50:3d:66:dd:14:b5:bc:9b:72:01:13:a7: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:48:E0:E8:CF:8E:DE:9B:41:A2:DC:80:69:BD:88:6E:9F:0E:59:85 X509v3 Authority Key Identifier: keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:92:98:d8:0a:bd:3d:58:9b:28:d5:20:63:11:dd:77:b9:b8: 24:be:65:bc:b8:79:b4:87:d3:d8:b5:0b:d6:30:3a:ac:20:a8: 0e:1a:65:6f:28:89:b1:6c:fc:53:fe:cb:5a:3f:c1:18:61:17: 43:59:6b:c8:4e:81:48:c8:0b:0e:09:7b:65:77:fb:dd:c7:16: 75:87:84:43:32:67:89:ba:4f:33:0f:9d:b9:8a:6e:84:7e:24: f2:4a:22:a2:eb:e2:42:ed:1d:f8:bd:cd:8a:79:18:fd:de:eb: a8:12:5a:d0:a2:82:8d:b1:ed:77:ad:43:5a:eb:55:5d:4a:b8: 5b:12:76:c0:8c:e5:b3:24:87:e2:42:c1:50:f8:2d:96:83:b3: bd:6a:c3:0c:6a:67:c4:e3:67:e2:55:05:84:dc:34:3c:a4:74: 3f:e0:3e:93:f9:f9:39:a5:f1:70:e5:8f:e9:60:52:39:70:a4: ea:a3:cf:12:83:c1:21:d8:73:21:7b:5d:ac:f4:05:88:a3:c1: 64:db:d2:52:cc:c4:03:d3:28:88:40:95:9d:fb:6d:df:13:ff: 87:3a:df:7e:8c:b6:77:a4:bd:6c:73:a1:49:bb:f3:2c:14:67: fc:0f:b0:fc:8e:66:17:75:06:cc:2b:3e:93:07:aa:01:d0:9c: f1:d4:20:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA1AC9EroGklkCxtQBjIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli NWJjZWEwHhcNMjYwMjAyMTEwMDU5WhcNMjYwMjAzMTEwMDU5WjAzMTEwLwYDVQQD EygzODQ4ZTBlOGNmOGVkZTliNDFhMmRjODA2OWJkODg2ZTlmMGU1OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp90/y2T2d411yMaDHF2sRRzxM3Vk 6tFqjzgGz60uBhVixVzYzgfFcC2kBYj1DOKcv/OMqLp/qcL3Q8Ml5a6buJDQuc+F aR9ZvPHbqy6PkUBqZRXulMAYaf5P0Dy8ol7yMqZwxFzwvo8N6cf2piwMux8K59/o +dW8d6H8JyC+XiPGBjfTBxXJmme2OqE4K+vAVBeXCGZvkHJWQirmZg3eNZN/ojZa rOA3JZG/yUZqHzeHEdnGb3jC3A+TWtI+8cGsCn9i7OiqJBbjAPkmSy7MzIzr2IzZ aalASLEe9TmLOfpwU9yVh1kPDpG1gufRfKz4lSVQPWbdFLW8m3IBE6fm/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhI4OjPjt6bQaLcgGm9iG6fDlmFMB8GA1UdIwQY MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4 LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJKY2Aq9 PVibKNUgYxHdd7m4JL5lvLh5tIfT2LUL1jA6rCCoDhplbyiJsWz8U/7LWj/BGGEX Q1lryE6BSMgLDgl7ZXf73ccWdYeEQzJnibpPMw+duYpuhH4k8koiouviQu0d+L3N inkY/d7rqBJa0KKCjbHtd61DWutVXUq4WxJ2wIzlsySH4kLBUPgtloOzvWrDDGpn xONn4lUFhNw0PKR0P+A+k/n5OaXxcOWP6WBSOXCk6qPPEoPBIdhzIXtdrPQFiKPB ZNvSUszEA9MoiECVnftt3xP/hzrffoy2d6S9bHOhSbvzLBRn/A+w/I5mF3UGzCs+ kweqAdCc8dQgHA== -----END CERTIFICATE-----Generated at Mon Feb 2 17:23:44 2026 by rpki-client