This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json) Hash identifier: b+3dfy6p5e+wAqn8zGBxaMCFKcapFdi8q6nBZMyqYoM= Subject key identifier: 36:A4:4D:10:5E:09:AD:B8:BA:83:3D:FB:47:B8:9E:41:57:6F:01:FC Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Certificate serial: 019C43C72CD261D9B2369ACEFA3362D6E9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft Manifest number: 1127 Signing time: Mon 09 Feb 2026 19:00:52 +0000 Manifest this update: Mon 09 Feb 2026 19:00:52 +0000 Manifest next update: Tue 10 Feb 2026 19:00:52 +0000 Files and hashes: 1: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (hash: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ=) 2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: GBfFDRzs7kPomV8ipO/LlCuG1S9Ii63QLv1dMmezwgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2c:d2:61:d9:b2:36:9a:ce:fa:33:62:d6:e9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15 Validity Not Before: Feb 9 19:00:52 2026 GMT Not After : Feb 10 19:00:52 2026 GMT Subject: CN=36a44d105e09adb8ba833dfb47b89e41576f01fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:ee:0b:be:6b:fb:c6:b3:02:40:9c:c7:b8: 47:fb:3f:d9:5b:e1:4b:85:7a:1c:33:98:be:32:64: 83:1d:a5:97:45:75:1d:de:30:e1:15:51:80:9b:1a: 34:6c:d0:e0:20:b4:f9:ba:af:76:20:d4:14:bb:83: fe:60:b7:76:93:e1:2b:7a:5f:9d:16:d1:4c:cd:91: ba:e2:92:ca:a3:f1:74:3c:79:c2:8f:5d:40:92:1d: 56:b8:29:7f:40:ba:9e:5d:fb:2b:44:a3:04:fa:96: 47:c9:fb:ec:ec:11:af:4b:58:5a:20:44:f6:bf:8a: 5d:1c:e1:1e:5f:ef:1b:7b:c2:28:dc:bc:df:33:1f: ee:5d:c5:94:f0:e8:dd:0e:e1:a6:f5:3f:e5:79:87: 31:a5:7e:d8:e4:15:17:4f:da:70:69:9e:68:17:92: 82:56:95:4b:0d:88:ba:75:5d:28:f7:46:d8:1f:ac: ec:84:b0:09:9e:63:db:6d:be:46:12:6a:45:77:ca: f3:1f:33:a3:e3:cc:b4:a5:62:ea:ae:19:de:01:b0: 37:9f:95:7e:59:52:a9:a0:c2:bd:e1:42:f0:46:38: d4:1f:f0:c9:86:8d:fe:64:53:5b:38:d1:e7:0b:51: 1c:35:0a:6b:1b:cb:fa:3c:e0:9a:73:1c:a3:d8:e9: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:4D:10:5E:09:AD:B8:BA:83:3D:FB:47:B8:9E:41:57:6F:01:FC X509v3 Authority Key Identifier: keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9d:7d:50:f1:ff:d2:4e:03:1b:2a:d2:77:6b:3b:b9:31:14: 9e:d3:12:99:86:08:61:80:1d:47:13:5e:85:15:82:d1:36:1a: 63:17:f9:b3:50:13:bd:0e:a0:b3:ce:b8:5b:21:e9:79:b6:df: e7:54:e3:00:f1:d8:cf:d5:ad:ed:a2:e2:18:14:97:bb:38:2f: d2:e8:3b:8d:81:f8:ed:80:71:e9:38:9e:21:44:81:d7:e4:d6: 7f:bf:b9:0e:3e:7a:fb:08:4a:f7:a7:c5:13:8c:57:26:4e:01: 30:2b:19:09:20:6d:ff:eb:7a:ea:4a:d7:65:c0:d2:f7:fd:63: f9:30:3e:95:bb:2c:b8:d1:f3:e1:28:5c:d5:76:b1:53:3e:90: ef:73:7d:ca:0f:c5:b4:38:b8:ef:fa:37:92:41:59:e3:49:60: 87:b3:82:3a:c2:bf:71:ae:43:b4:43:e8:91:8d:12:d1:44:44: a8:3f:a7:7e:99:95:20:74:9f:aa:ed:1c:18:47:ca:06:ca:3d: c6:43:02:f3:ff:2e:b3:51:e3:ac:7b:37:fa:f5:79:2b:86:65: 0d:e0:fd:02:cc:a6:e2:41:87:06:e3:3a:ce:2b:ce:09:7f:d5: d5:55:dd:e3:b8:24:2c:b9:0b:10:1f:1b:74:79:0c:1c:bb:c3: 6a:1d:03:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyzSYdmyNprO+jNi1unjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4 NTZhMTUwHhcNMjYwMjA5MTkwMDUyWhcNMjYwMjEwMTkwMDUyWjAzMTEwLwYDVQQD EygzNmE0NGQxMDVlMDlhZGI4YmE4MzNkZmI0N2I4OWU0MTU3NmYwMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzuC75r+8azAkCcx7hH+z/ZW+FL hXocM5i+MmSDHaWXRXUd3jDhFVGAmxo0bNDgILT5uq92INQUu4P+YLd2k+Erel+d FtFMzZG64pLKo/F0PHnCj11Akh1WuCl/QLqeXfsrRKME+pZHyfvs7BGvS1haIET2 v4pdHOEeX+8be8Io3LzfMx/uXcWU8OjdDuGm9T/leYcxpX7Y5BUXT9pwaZ5oF5KC VpVLDYi6dV0o90bYH6zshLAJnmPbbb5GEmpFd8rzHzOj48y0pWLqrhneAbA3n5V+ WVKpoMK94ULwRjjUH/DJho3+ZFNbONHnC1EcNQprG8v6POCacxyj2OmOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDakTRBeCa24uoM9+0e4nkFXbwH8MB8GA1UdIwQY MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It MjE1OWVmZWU2YTA3LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3 LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG519UPH/ 0k4DGyrSd2s7uTEUntMSmYYIYYAdRxNehRWC0TYaYxf5s1ATvQ6gs864WyHpebbf 51TjAPHYz9Wt7aLiGBSXuzgv0ug7jYH47YBx6TieIUSB1+TWf7+5Dj56+whK96fF E4xXJk4BMCsZCSBt/+t66krXZcDS9/1j+TA+lbssuNHz4Shc1XaxUz6Q73N9yg/F tDi47/o3kkFZ40lgh7OCOsK/ca5DtEPokY0S0UREqD+nfpmVIHSfqu0cGEfKBso9 xkMC8/8us1HjrHs3+vV5K4ZlDeD9Asym4kGHBuM6zivOCX/V1VXd47gkLLkLEB8b dHkMHLvDah0DLg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:22 2026 by rpki-client