This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json) Hash identifier: ekTBHsQKGhVF2UQwcJpVCjyunhh46umVPk2au5ghhXs= Subject key identifier: 7F:8F:C4:D7:A2:B7:E8:89:46:FE:C2:67:E5:0D:60:A7:BF:F6:37:8B Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Certificate serial: 019C43FE95F00C91B7A022E963AD1E29B9B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft Manifest number: 0525 Signing time: Mon 09 Feb 2026 20:01:23 +0000 Manifest this update: Mon 09 Feb 2026 20:01:23 +0000 Manifest next update: Tue 10 Feb 2026 20:01:23 +0000 Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: aXKC6N++mAZqL0Wev0y7r3I0km80mBloxZNapWteILc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:95:f0:0c:91:b7:a0:22:e9:63:ad:1e:29:b9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b Validity Not Before: Feb 9 20:01:23 2026 GMT Not After : Feb 10 20:01:23 2026 GMT Subject: CN=7f8fc4d7a2b7e88946fec267e50d60a7bff6378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:5d:3b:46:09:5a:79:5e:95:7e:c6:a6:2b: 73:a1:31:75:c6:46:bd:64:b2:b3:d8:97:31:33:72: 29:2d:f0:d0:24:5c:65:23:c5:20:4a:dc:10:36:a3: bf:da:2d:dd:04:d4:50:28:a1:04:5f:cd:0e:d0:99: 47:6b:ea:ae:13:c2:40:d0:c4:46:cd:2e:82:bf:71: fe:ff:49:f7:b4:3a:8d:a2:31:f9:51:ee:02:9f:f3: fb:a8:a6:f3:7b:d3:b9:83:61:fe:66:d2:66:98:87: 1d:5d:29:74:42:d2:e3:f0:02:6d:1e:7b:5d:13:3b: fb:66:e1:6c:62:49:7c:84:05:53:84:05:ee:b4:ff: e0:0e:d5:a5:56:a1:b3:7b:b2:d0:f3:ad:c5:50:99: d9:fa:d5:dc:c1:07:38:ed:b3:5a:22:62:bb:7e:d1: 5e:ec:23:c4:9d:4e:3b:30:89:15:cb:40:44:58:e6: 1e:6d:81:fc:3d:fa:eb:37:ac:9c:c9:4e:35:fe:a6: 9f:93:78:07:bf:5c:7d:ea:8b:18:c7:d0:1b:62:ec: 6b:ca:66:fb:f6:17:f0:9d:0a:73:44:d4:3b:3c:43: c7:7c:36:de:44:f6:e5:cd:2e:da:54:05:f6:37:99: d1:e8:dc:bc:fa:9c:5a:b0:34:f1:db:e9:66:ee:f2: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:C4:D7:A2:B7:E8:89:46:FE:C2:67:E5:0D:60:A7:BF:F6:37:8B X509v3 Authority Key Identifier: keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:10:12:95:10:6b:0a:4c:0f:3a:5f:ae:b1:72:d7:4b:21:e0: 81:e7:5e:f7:76:95:36:ba:fe:19:08:3e:de:8b:8f:1b:b6:9d: ae:85:0c:35:63:c7:a5:7c:ec:0d:0c:dd:31:21:51:2f:c8:07: 32:ca:69:af:d4:0d:5a:c7:df:45:b4:fb:3e:7a:5d:48:f5:74: ce:bb:1f:20:f5:a8:cd:c7:ce:28:fa:00:4a:92:26:c7:c8:0d: 3d:3f:40:e1:b4:cf:af:94:c9:d3:a7:72:33:9c:56:33:98:e8: 35:c8:ff:59:bf:a5:1d:cb:a6:61:2b:40:cd:52:3e:0e:61:79: b3:50:c5:db:68:3c:72:b6:72:b5:d3:27:03:f4:79:55:68:c2: ac:27:0f:96:d8:7a:1c:7d:d8:7e:a8:94:5b:cc:cc:11:c9:8b: a2:76:c5:ef:c5:2d:83:20:dc:fa:c0:03:92:cf:aa:14:cf:de: 7b:35:1b:fb:19:54:a7:b9:ad:0f:10:43:de:04:02:fb:38:3f: 5a:cc:b1:be:70:44:d9:a9:ee:5a:a9:ea:a2:9f:ab:64:35:3f: 80:bf:75:26:72:a4:31:18:e2:f7:19:85:fa:d4:a6:1f:00:84: d7:8f:6d:29:1e:27:9f:2b:12:b4:d9:77:1e:95:3e:de:b5:94: 7a:3a:02:ab -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxD/pXwDJG3oCLpY60eKbmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTExNWMzMDJiZTBiNGI4YmNjYTBiMzJhODI5M2EwNWM2 OWQ3MGIwHhcNMjYwMjA5MjAwMTIzWhcNMjYwMjEwMjAwMTIzWjAzMTEwLwYDVQQD Eyg3ZjhmYzRkN2EyYjdlODg5NDZmZWMyNjdlNTBkNjBhN2JmZjYzNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RZdO0YJWnlelX7GpitzoTF1xka9 ZLKz2JcxM3IpLfDQJFxlI8UgStwQNqO/2i3dBNRQKKEEX80O0JlHa+quE8JA0MRG zS6Cv3H+/0n3tDqNojH5Ue4Cn/P7qKbze9O5g2H+ZtJmmIcdXSl0QtLj8AJtHntd Ezv7ZuFsYkl8hAVThAXutP/gDtWlVqGze7LQ863FUJnZ+tXcwQc47bNaImK7ftFe 7CPEnU47MIkVy0BEWOYebYH8PfrrN6ycyU41/qafk3gHv1x96osYx9AbYuxrymb7 9hfwnQpzRNQ7PEPHfDbeRPblzS7aVAX2N5nR6Ny8+pxasDTx2+lm7vI+MwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH+PxNeit+iJRv7CZ+UNYKe/9jeLMB8GA1UdIwQY MBaAFPrhFcMCvgtLi8ygsyqCk6BcadcLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11RVZ3d0stQzB1THpLQ3pLb0tUb0Z4cDF3cy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5LTZhYjgtNDdlMS1hNWZl LWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6S29LVG9GeHAxd3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2RkZWI3OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMw OWYvMS8xLXVFVnd3Sy1DMHVMektDektvS1RvRnhwMXdzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRAS lRBrCkwPOl+usXLXSyHggede93aVNrr+GQg+3ouPG7adroUMNWPHpXzsDQzdMSFR L8gHMsppr9QNWsffRbT7PnpdSPV0zrsfIPWozcfOKPoASpImx8gNPT9A4bTPr5TJ 06dyM5xWM5joNcj/Wb+lHcumYStAzVI+DmF5s1DF22g8crZytdMnA/R5VWjCrCcP lth6HH3YfqiUW8zMEcmLonbF78UtgyDc+sADks+qFM/eezUb+xlUp7mtDxBD3gQC +zg/WsyxvnBE2anuWqnqop+rZDU/gL91JnKkMRji9xmF+tSmHwCE149tKR4nnysS tNl3HpU+3rWUejoCqw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:34 2026 by rpki-client