This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft File: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft (raw, json) Hash identifier: cQxh+TyeWvKQ8DuDiAMQ+BFjn1WuSde2O23Cv98lXns= Subject key identifier: FA:09:DB:AF:00:94:22:B8:53:BE:A4:20:E7:C2:BE:5A:3E:03:E7:66 Authority key identifier: FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 Certificate issuer: /CN=fd4d6f06bb1237e26907e6402d2bd0d889372505 Certificate serial: 019C4133C1E231EE7E6827245445F3D06EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft Manifest number: 0126 Signing time: Mon 09 Feb 2026 07:00:36 +0000 Manifest this update: Mon 09 Feb 2026 07:00:36 +0000 Manifest next update: Tue 10 Feb 2026 07:00:36 +0000 Files and hashes: 1: _U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl (hash: SSPg771zYTDZe8eF7WY5RDzgbsTxBqz/yG+WmK1ZT50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:c1:e2:31:ee:7e:68:27:24:54:45:f3:d0:6e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4d6f06bb1237e26907e6402d2bd0d889372505 Validity Not Before: Feb 9 07:00:36 2026 GMT Not After : Feb 10 07:00:36 2026 GMT Subject: CN=fa09dbaf009422b853bea420e7c2be5a3e03e766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:ed:24:eb:ad:f9:7e:c6:98:80:07:19:ad: 19:f9:b7:92:9d:52:f6:9e:40:de:81:00:71:5a:19: 5d:11:17:be:4b:b7:0f:f7:9b:22:49:95:8e:86:6a: 29:e4:d6:2b:14:81:7f:df:c3:d5:74:de:9b:29:55: e6:20:fa:47:ff:97:56:29:fd:e2:dc:24:db:f1:a2: 7d:c1:8b:83:38:6a:2d:fc:af:33:45:3c:b0:6b:a4: 3c:b3:0c:12:65:47:4a:49:ad:93:a8:1e:7a:76:dd: c7:60:ce:a7:fb:66:ca:c7:a3:f1:ca:2f:87:97:19: d4:c3:70:97:45:51:73:50:79:d8:e0:fd:4c:bc:00: e8:f7:2d:c6:18:ec:6a:f5:ba:ef:60:82:54:f0:19: 01:dd:7c:c0:12:77:26:96:85:5d:eb:f9:47:43:6f: a6:3a:a7:52:7a:0c:52:09:cc:f8:1d:8e:50:db:f9: 65:b9:b1:d1:11:2b:4a:11:4f:cb:85:82:d6:c5:88: 0e:16:6a:63:39:54:34:f2:3d:32:ec:c7:72:47:92: 17:a0:48:b9:d4:52:c2:0b:fe:6b:9f:cd:e9:db:01: f2:bd:b0:e5:b3:b2:9b:7f:c1:76:5b:c8:da:1c:86: ad:a7:9e:bf:ef:86:7e:ad:d4:9a:19:79:3b:e7:d7: e2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:09:DB:AF:00:94:22:B8:53:BE:A4:20:E7:C2:BE:5A:3E:03:E7:66 X509v3 Authority Key Identifier: keyid:FD:4D:6F:06:BB:12:37:E2:69:07:E6:40:2D:2B:D0:D8:89:37:25:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e535ec-8052-43f5-88dd-cb25a31db7fb/1/_U1vBrsSN-JpB-ZALSvQ2Ik3JQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:be:26:91:bc:b1:ab:ee:d5:34:1c:f2:72:f6:0c:0d:ca:d0: 0c:94:a8:00:51:fa:64:a3:d6:9a:03:e6:a0:b6:ea:df:89:7f: 61:21:21:ab:63:74:ea:59:72:eb:37:a0:1e:89:68:c7:8a:ca: c1:86:9b:c2:76:a0:1f:69:dd:87:e6:6a:56:f5:d8:16:c6:f5: 6e:fa:53:31:8e:dc:25:b7:3f:42:09:3b:95:a9:e8:e3:a7:84: b0:72:76:3a:fe:80:4c:2a:fa:74:1f:df:8c:b9:d1:d4:3d:53: 85:3f:30:72:32:ca:94:37:97:81:a7:da:3e:0a:15:ac:7c:d7: b8:dd:c7:ea:00:05:f4:0a:69:f7:48:d3:d4:1d:98:1c:b1:a6: 9f:ae:f2:95:b8:57:32:e4:c4:59:15:c0:8d:18:7e:43:d9:7c: 3e:99:b0:29:29:0f:f4:99:7d:b6:4c:99:b5:1e:11:fe:0c:c5: 4d:ef:3f:7a:59:f8:c0:f3:a6:5d:bd:27:00:40:ab:7c:03:55: 0a:c5:ba:48:d6:b5:72:88:77:25:c6:5f:98:5a:ad:91:26:f2: 58:1f:85:0d:78:75:aa:9f:39:37:26:c7:47:43:b9:bb:74:e0: 4f:48:4c:4f:1b:cd:8d:ce:56:de:ea:b4:dd:b2:30:da:63:f0: d6:9f:0e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM8HiMe5+aCckVEXz0G6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGQ2ZjA2YmIxMjM3ZTI2OTA3ZTY0MDJkMmJkMGQ4ODkz NzI1MDUwHhcNMjYwMjA5MDcwMDM2WhcNMjYwMjEwMDcwMDM2WjAzMTEwLwYDVQQD EyhmYTA5ZGJhZjAwOTQyMmI4NTNiZWE0MjBlN2MyYmU1YTNlMDNlNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLftJOut+X7GmIAHGa0Z+beSnVL2 nkDegQBxWhldERe+S7cP95siSZWOhmop5NYrFIF/38PVdN6bKVXmIPpH/5dWKf3i 3CTb8aJ9wYuDOGot/K8zRTywa6Q8swwSZUdKSa2TqB56dt3HYM6n+2bKx6Pxyi+H lxnUw3CXRVFzUHnY4P1MvADo9y3GGOxq9brvYIJU8BkB3XzAEncmloVd6/lHQ2+m OqdSegxSCcz4HY5Q2/llubHREStKEU/LhYLWxYgOFmpjOVQ08j0y7MdyR5IXoEi5 1FLCC/5rn83p2wHyvbDls7Kbf8F2W8jaHIatp56/74Z+rdSaGXk759fidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoJ268AlCK4U76kIOfCvlo+A+dmMB8GA1UdIwQY MBaAFP1Nbwa7EjfiaQfmQC0r0NiJNyUFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lNTM1ZWMtODA1Mi00M2Y1LTg4ZGQt Y2IyNWEzMWRiN2ZiLzEvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lNTM1ZWMtODA1Mi00M2Y1LTg4ZGQtY2IyNWEzMWRiN2Zi LzEvX1UxdkJyc1NOLUpwQi1aQUxTdlEySWszSlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr4mkbyx q+7VNBzycvYMDcrQDJSoAFH6ZKPWmgPmoLbq34l/YSEhq2N06lly6zegHolox4rK wYabwnagH2ndh+ZqVvXYFsb1bvpTMY7cJbc/Qgk7lano46eEsHJ2Ov6ATCr6dB/f jLnR1D1ThT8wcjLKlDeXgafaPgoVrHzXuN3H6gAF9App90jT1B2YHLGmn67ylbhX MuTEWRXAjRh+Q9l8PpmwKSkP9Jl9tkyZtR4R/gzFTe8/eln4wPOmXb0nAECrfANV CsW6SNa1coh3JcZfmFqtkSbyWB+FDXh1qp85NybHR0O5u3TgT0hMTxvNjc5W3uq0 3bIw2mPw1p8OeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:29 2026 by rpki-client