This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json) Hash identifier: 6mIsMPW5bAGsd8In0kMKmGeau3V1w6iXgk9/thu4Jz0= Subject key identifier: E8:2F:3D:80:55:D5:F2:6A:E0:FF:1D:84:E2:9E:34:C8:A7:63:E6:6E Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db Certificate serial: 019C432257CDA870BB456893F182AED74313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft Manifest number: 0850 Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: F0e0dJj7pzWAxxo5sybA6FriZwnByJdsUgVMeXFZXvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:57:cd:a8:70:bb:45:68:93:f1:82:ae:d7:43:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=e82f3d8055d5f26ae0ff1d84e29e34c8a763e66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:c1:8d:cf:96:aa:20:ea:5b:1d:a5:e5:ee: c1:8d:ad:11:df:7b:45:ca:21:60:8f:97:49:e3:39: 37:a2:ee:d2:fe:ea:84:eb:94:e4:42:7b:cf:c1:87: 47:14:8c:28:cc:b8:fb:75:67:f0:50:3a:73:cb:44: 5e:92:29:5c:59:4b:80:64:cb:e9:e9:6e:37:83:d3: 7d:99:2a:05:77:7e:ad:3b:92:6d:10:c1:df:54:a0: 51:8e:3d:07:f7:87:90:92:b1:35:cd:5b:ef:81:7a: 66:85:93:e0:2a:8d:e1:4e:60:4c:ff:52:4c:ac:7a: 29:a0:0f:47:f8:fb:4e:ee:d1:d1:05:fd:65:96:95: 70:97:6e:8c:ac:f6:b0:ab:8c:e4:e0:80:78:3b:db: 6e:45:b0:03:db:84:e6:86:5a:1c:8f:bb:80:80:38: 35:c1:cc:4b:ec:11:3e:68:70:55:32:89:4a:1c:b0: 18:5d:6e:04:68:31:61:f6:1a:11:01:ae:b4:ad:0f: d2:25:69:ac:b0:9d:c6:16:ec:73:8f:eb:c1:12:e5: b7:84:d4:2f:fa:d7:6e:50:ba:f6:7f:e2:b3:b7:9a: 44:35:ba:9d:61:28:9b:24:3d:d1:4d:74:cf:50:a8: 97:fe:6e:dc:f0:09:c9:2c:2c:89:27:13:15:dd:f2: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:3D:80:55:D5:F2:6A:E0:FF:1D:84:E2:9E:34:C8:A7:63:E6:6E X509v3 Authority Key Identifier: keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:1f:72:a7:a1:94:30:bf:77:d9:7d:16:de:38:f1:fc:2b: 11:c6:65:ee:e4:d1:16:c9:8b:fe:72:e7:d0:98:4e:af:e2:ac: 06:47:ce:1d:03:6b:2f:3c:97:4d:98:f4:c5:a6:b1:b7:eb:56: a7:c8:59:cf:d6:fc:43:8c:6b:45:dd:bd:79:63:6b:4d:24:55: 7e:45:ed:96:33:e6:ab:08:5f:ff:e2:ed:8a:e0:1f:d2:6e:ea: 0c:d0:fc:2b:64:31:a7:35:07:83:16:52:f1:85:d4:95:4e:80: 50:41:5b:e9:bd:9e:65:b3:f2:c5:b0:4f:05:64:bb:2a:8b:64: 1e:49:ad:8f:a0:31:68:a3:3e:58:f3:19:d1:af:7a:28:e8:9e: b8:7e:55:02:48:4b:34:a7:a4:05:88:4e:50:50:97:30:34:10: 88:72:25:a5:58:1c:49:06:c4:bb:b4:a6:54:c4:15:39:72:32: 40:24:be:13:11:20:19:ef:bb:d0:05:88:92:b4:39:bc:5c:e5: cd:11:59:88:af:d8:19:42:8d:d4:43:e8:b5:3a:93:f3:1b:be: ce:f5:36:94:7a:19:7a:6c:8f:52:00:00:25:b6:5b:fb:86:df: ca:88:9f:e7:40:8e:88:27:f2:4b:86:db:d1:14:83:ee:78:3c: 4d:76:f4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlfNqHC7RWiT8YKu10MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NDFmNTVjMTY1OTA0MjRmYjM0YzY1ZTBlMmVhYzIyODgy NDcwZGIwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD EyhlODJmM2Q4MDU1ZDVmMjZhZTBmZjFkODRlMjllMzRjOGE3NjNlNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKTBjc+WqiDqWx2l5e7Bja0R33tF yiFgj5dJ4zk3ou7S/uqE65TkQnvPwYdHFIwozLj7dWfwUDpzy0RekilcWUuAZMvp 6W43g9N9mSoFd36tO5JtEMHfVKBRjj0H94eQkrE1zVvvgXpmhZPgKo3hTmBM/1JM rHopoA9H+PtO7tHRBf1llpVwl26MrPawq4zk4IB4O9tuRbAD24Tmhlocj7uAgDg1 wcxL7BE+aHBVMolKHLAYXW4EaDFh9hoRAa60rQ/SJWmssJ3GFuxzj+vBEuW3hNQv +tduULr2f+Kzt5pENbqdYSibJD3RTXTPUKiX/m7c8AnJLCyJJxMV3fI96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgvPYBV1fJq4P8dhOKeNMinY+ZuMB8GA1UdIwQY MBaAFEVB9VwWWQQk+zTGXg4urCKIJHDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQt Nzg5ZDA3YzE5ODA4LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQtNzg5ZDA3YzE5ODA4 LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2ofcqeh lDC/d9l9Ft448fwrEcZl7uTRFsmL/nLn0JhOr+KsBkfOHQNrLzyXTZj0xaaxt+tW p8hZz9b8Q4xrRd29eWNrTSRVfkXtljPmqwhf/+LtiuAf0m7qDND8K2QxpzUHgxZS 8YXUlU6AUEFb6b2eZbPyxbBPBWS7KotkHkmtj6AxaKM+WPMZ0a96KOieuH5VAkhL NKekBYhOUFCXMDQQiHIlpVgcSQbEu7SmVMQVOXIyQCS+ExEgGe+70AWIkrQ5vFzl zRFZiK/YGUKN1EPotTqT8xu+zvU2lHoZemyPUgAAJbZb+4bfyoif50COiCfyS4bb 0RSD7ng8TXb0sw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:17 2026 by rpki-client