This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json) Hash identifier: Jek2vo9TQKKR8vZJ+Uux6rgL6m1njwBGNmC9a8X1EJU= Subject key identifier: 13:F7:79:8A:2A:B2:B4:38:FB:AC:E6:CE:DC:AE:FF:97:B2:4A:71:32 Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Certificate serial: 019C42B412CE7F5B5769E4FB1CEB95C1611E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft Manifest number: 0581 Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: fo884vd7qv/Vs2pJ913qFPlBtHTJQU/RN6oX/uZXvic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:12:ce:7f:5b:57:69:e4:fb:1c:eb:95:c1:61:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=13f7798a2ab2b438fbace6cedcaeff97b24a7132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:49:fd:cf:ed:24:6c:b6:d2:66:93:87:3d: 59:19:ae:48:47:56:ed:b9:d7:58:02:77:b2:19:2f: a0:35:90:08:23:64:84:25:6e:13:5d:4a:39:51:8c: 6c:a0:ec:4f:2c:cd:14:df:09:58:a3:2c:be:3a:bf: f3:76:ab:00:19:96:65:bb:ce:22:a5:14:79:63:20: 61:18:5b:d1:f3:1f:9c:e6:2a:64:6b:c2:7a:e4:a8: f2:fc:e9:eb:50:7e:cf:72:36:b6:ed:a9:dc:31:f9: 29:c9:95:60:65:44:f7:ac:55:79:28:e5:bd:b7:fc: d1:dd:b7:b2:04:57:20:26:7a:8d:cd:d8:d4:76:26: 4b:ec:7e:1d:4a:50:12:2f:ea:f3:b8:16:a5:3a:5c: 7e:ce:cc:f6:f4:24:dc:22:9a:da:6a:fe:c3:9c:c1: fc:2d:62:d5:bd:5b:55:e9:25:1f:a8:ae:ca:a1:c7: 85:bc:29:3b:24:9b:4b:c9:11:ad:aa:d6:10:40:f0: b5:7e:87:e5:97:c7:a9:86:09:ec:0c:54:ff:49:e8: 33:76:39:1a:15:ff:23:f4:cc:60:71:73:b4:dd:2b: e6:7f:2f:74:35:66:cd:af:3b:71:d2:4e:0f:1c:3a: eb:ad:15:8c:66:34:0e:73:62:2d:9f:70:eb:40:ac: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F7:79:8A:2A:B2:B4:38:FB:AC:E6:CE:DC:AE:FF:97:B2:4A:71:32 X509v3 Authority Key Identifier: keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:5d:77:ee:25:19:89:9c:72:88:67:c7:9d:0d:e2:fb:70: 93:5a:fc:ac:0c:ef:bc:95:80:c5:a6:d4:e3:c9:6d:f8:ce:ee: 93:28:0a:25:57:99:1c:7c:44:58:b6:76:1b:d6:e4:6d:34:89: 1a:e8:60:0c:93:9a:a2:25:bc:2a:b7:29:61:b3:88:91:50:26: 5c:dc:b1:99:14:24:e4:60:bb:b5:9b:37:40:a1:72:d3:5d:52: 33:f4:eb:63:38:30:8a:20:3d:73:ea:aa:9e:54:ac:93:d1:96: 22:06:ed:87:55:17:d0:f4:f2:c3:e9:60:c5:10:9e:09:36:fe: d3:21:61:87:d8:c5:0f:40:1e:4e:4f:6e:a4:04:e5:47:d1:52: b7:32:44:82:e2:4f:3f:50:56:8b:5b:e9:8a:69:c7:d9:b8:54: 46:48:70:8a:71:1b:99:e2:a5:d4:5d:48:05:75:49:66:00:27: ce:65:31:6d:bc:b9:6c:ad:d1:9d:94:b1:8c:c9:1e:b4:4a:4e: 9e:03:88:94:19:b0:7b:6a:52:91:70:11:d3:40:ae:e7:42:0f: f8:e6:e8:b0:5f:b8:c8:c3:f3:d2:4b:b8:e6:ec:89:c9:e9:0f: f0:6c:d2:c0:b5:14:f8:8f:39:76:df:fd:01:0b:34:36:9e:fd: 5e:4b:e6:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBLOf1tXaeT7HOuVwWEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjg0M2E4ZDkxYjE1ODI0ZTYwZTJjZDY4OWE2ZjQ1MWUy NTZhNWUwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD EygxM2Y3Nzk4YTJhYjJiNDM4ZmJhY2U2Y2VkY2FlZmY5N2IyNGE3MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoghJ/c/tJGy20maThz1ZGa5IR1bt uddYAneyGS+gNZAII2SEJW4TXUo5UYxsoOxPLM0U3wlYoyy+Or/zdqsAGZZlu84i pRR5YyBhGFvR8x+c5ipka8J65Kjy/OnrUH7Pcja27ancMfkpyZVgZUT3rFV5KOW9 t/zR3beyBFcgJnqNzdjUdiZL7H4dSlASL+rzuBalOlx+zsz29CTcIpraav7DnMH8 LWLVvVtV6SUfqK7KoceFvCk7JJtLyRGtqtYQQPC1fofll8ephgnsDFT/Segzdjka Ff8j9MxgcXO03Svmfy90NWbNrztx0k4PHDrrrRWMZjQOc2Itn3DrQKwBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP3eYoqsrQ4+6zmztyu/5eySnEyMB8GA1UdIwQY MBaAFFC4Q6jZGxWCTmDizWiab0UeJWpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgt MjUxODY3YmRjMTNmLzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wZmU3YTMtNmZjZS00MmI2LThhMTgtMjUxODY3YmRjMTNm LzEvVUxoRHFOa2JGWUpPWU9MTmFKcHZSUjRsYWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCJdd+4l GYmccohnx50N4vtwk1r8rAzvvJWAxabU48lt+M7ukygKJVeZHHxEWLZ2G9bkbTSJ GuhgDJOaoiW8KrcpYbOIkVAmXNyxmRQk5GC7tZs3QKFy011SM/TrYzgwiiA9c+qq nlSsk9GWIgbth1UX0PTyw+lgxRCeCTb+0yFhh9jFD0AeTk9upATlR9FStzJEguJP P1BWi1vpimnH2bhURkhwinEbmeKl1F1IBXVJZgAnzmUxbby5bK3RnZSxjMketEpO ngOIlBmwe2pSkXAR00Cu50IP+ObosF+4yMPz0ku45uyJyekP8GzSwLUU+I85dt/9 AQs0Np79XkvmqA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:35 2026 by rpki-client