This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json) Hash identifier: BOrMtj2KdvSzzC1DCGRNkISvtGBnZxZff87TE+PiKhs= Subject key identifier: C9:2E:59:37:D3:49:45:7F:63:C2:99:FC:40:E4:EF:8F:8F:AF:BC:43 Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Certificate serial: 019C427D5B0CB74C50EE6CAD400DA5B57C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:00:37 +0000 Manifest this update: Mon 09 Feb 2026 13:00:37 +0000 Manifest next update: Tue 10 Feb 2026 13:00:37 +0000 Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=) 2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: Ye7Og/Ehl0FFFDzZAvriHwL+RilgJf+3m8iDFnSb4Sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:5b:0c:b7:4c:50:ee:6c:ad:40:0d:a5:b5:7c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Validity Not Before: Feb 9 13:00:37 2026 GMT Not After : Feb 10 13:00:37 2026 GMT Subject: CN=c92e5937d349457f63c299fc40e4ef8f8fafbc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:e1:c7:b6:1e:b4:aa:98:05:b6:04:f4:52: 00:11:e5:1b:af:9b:0d:6f:99:a3:14:1c:3f:4f:d5: e8:33:5d:5c:ec:3e:aa:53:ef:c6:d6:e7:8e:d8:9d: f3:56:a7:58:74:04:69:22:50:a7:73:0b:77:fa:57: 0c:49:48:e1:15:dd:9f:55:91:15:0c:3b:ff:61:c8: f0:a3:6b:da:6e:22:85:7a:6c:5a:ff:9f:2a:bb:c9: 9a:f3:32:c2:f4:fc:fa:8d:77:1b:71:be:94:cf:9d: e1:5c:30:9e:72:ad:7d:b2:6c:7c:50:c8:5b:37:97: f5:b0:ee:d3:09:bd:9f:9b:55:97:ce:5f:59:94:fd: c2:54:2f:38:c3:42:4a:df:9c:a2:06:3a:3e:f4:8d: 85:63:ab:10:10:b3:84:15:28:c7:b5:bc:07:fb:c9: e7:a5:0a:68:3b:a9:e7:c4:db:cf:0a:9a:d0:b7:70: 25:5c:6a:af:6c:86:27:c3:df:b8:d0:a8:bd:35:2c: 20:c8:51:b2:98:74:98:86:68:18:24:e7:f5:5a:f2: 0e:bc:0f:f5:1a:63:27:0d:94:17:0e:25:86:58:c7: f6:4e:fc:6c:10:cb:15:56:c2:2c:7a:0a:30:15:57: 25:99:c6:db:69:c9:29:1f:7b:59:c5:3f:4f:b8:ef: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:59:37:D3:49:45:7F:63:C2:99:FC:40:E4:EF:8F:8F:AF:BC:43 X509v3 Authority Key Identifier: keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:b4:6b:ed:70:aa:8e:5b:4c:8e:90:96:62:cb:04:86:6b: 93:da:7d:9a:a3:63:bf:60:35:a7:eb:f5:ab:57:6c:3c:cc:6a: 2b:42:37:49:6f:9d:20:bc:a3:c2:5b:f4:5c:e0:4c:4b:11:66: 3d:64:02:97:d9:3a:1c:d3:d1:23:62:26:15:28:b9:72:b0:cb: c6:31:05:f1:e0:18:a0:d3:ba:76:8f:f1:f0:d7:0c:9e:26:ef: 44:24:06:28:91:ba:6d:ce:cf:f8:00:23:a9:5a:6a:29:79:cc: c4:79:ac:61:e1:97:94:ec:71:19:8a:64:78:a1:2b:8e:4b:3f: 40:1a:cb:b1:1e:68:8e:26:97:c9:0c:8a:e0:bf:6d:30:16:d8: 85:9d:a5:5e:e7:d5:66:d1:e7:88:ed:11:a1:47:65:d6:f9:9a: ee:d1:96:a5:14:dc:15:8a:65:18:b0:8d:2b:12:61:98:12:64: 07:07:a7:ad:c1:b3:12:3c:38:cd:d7:dd:e2:9c:77:1a:37:63: 15:3a:0b:2b:b4:3f:d3:bc:c7:f7:b7:40:06:a9:fd:56:2d:d6: 40:dd:2f:a7:fb:8e:51:43:1c:d7:c7:51:27:5e:a3:0f:9b:99: cb:8a:87:3f:6a:ff:ff:3f:0c:9e:99:4b:ab:7f:fd:f5:15:01: 87:01:70:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVsMt0xQ7mytQA2ltXxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDZjNGQyMDBmZTUwMzVjNjFiMGM4OTRiOTQ1NGU3MmQy N2M5MWYwHhcNMjYwMjA5MTMwMDM3WhcNMjYwMjEwMTMwMDM3WjAzMTEwLwYDVQQD EyhjOTJlNTkzN2QzNDk0NTdmNjNjMjk5ZmM0MGU0ZWY4ZjhmYWZiYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkjhx7YetKqYBbYE9FIAEeUbr5sN b5mjFBw/T9XoM11c7D6qU+/G1ueO2J3zVqdYdARpIlCncwt3+lcMSUjhFd2fVZEV DDv/Ycjwo2vabiKFemxa/58qu8ma8zLC9Pz6jXcbcb6Uz53hXDCecq19smx8UMhb N5f1sO7TCb2fm1WXzl9ZlP3CVC84w0JK35yiBjo+9I2FY6sQELOEFSjHtbwH+8nn pQpoO6nnxNvPCprQt3AlXGqvbIYnw9+40Ki9NSwgyFGymHSYhmgYJOf1WvIOvA/1 GmMnDZQXDiWGWMf2TvxsEMsVVsIsegowFVclmcbbackpH3tZxT9PuO8ShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkuWTfTSUV/Y8KZ/EDk74+Pr7xDMB8GA1UdIwQY MBaAFFNGxNIA/lA1xhsMiUuUVOctJ8kfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzkt MjRhYWI0NGYyNTM5LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzktMjRhYWI0NGYyNTM5 LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEa0a+1w qo5bTI6QlmLLBIZrk9p9mqNjv2A1p+v1q1dsPMxqK0I3SW+dILyjwlv0XOBMSxFm PWQCl9k6HNPRI2ImFSi5crDLxjEF8eAYoNO6do/x8NcMnibvRCQGKJG6bc7P+AAj qVpqKXnMxHmsYeGXlOxxGYpkeKErjks/QBrLsR5ojiaXyQyK4L9tMBbYhZ2lXufV ZtHniO0RoUdl1vma7tGWpRTcFYplGLCNKxJhmBJkBwenrcGzEjw4zdfd4px3Gjdj FToLK7Q/07zH97dABqn9Vi3WQN0vp/uOUUMc18dRJ16jD5uZy4qHP2r//z8MnplL q3/99RUBhwFwhw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:57 2026 by rpki-client