This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json) Hash identifier: 4Sqx79Tg26wCeMEDCTvRkI77I5KPnFTGXC2Qm8lnlmw= Subject key identifier: CA:07:BA:B0:83:20:8B:79:66:DA:8F:EE:68:A8:DF:83:3E:A9:FE:15 Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37 Certificate serial: 019C427D75E87DF3FA43EC186A7517C5A9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft Manifest number: 04DD Signing time: Mon 09 Feb 2026 13:00:44 +0000 Manifest this update: Mon 09 Feb 2026 13:00:44 +0000 Manifest next update: Tue 10 Feb 2026 13:00:44 +0000 Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=) 2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: LB5kYA8Je0F6m/A+2tMavH0zDiFdNUG8li9YrmovMpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:75:e8:7d:f3:fa:43:ec:18:6a:75:17:c5:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37 Validity Not Before: Feb 9 13:00:44 2026 GMT Not After : Feb 10 13:00:44 2026 GMT Subject: CN=ca07bab083208b7966da8fee68a8df833ea9fe15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:0c:8d:e4:f4:77:b2:31:9f:e2:9a:23:18: 37:9d:b1:85:4b:6b:f9:49:08:45:4e:88:f9:0b:73: f7:69:09:84:c4:c5:00:06:88:a7:2c:ad:71:69:df: d9:2d:e8:b4:06:54:91:f6:d9:d3:53:dc:a9:ff:1c: cb:86:68:4c:1a:59:2c:79:5f:34:b2:9a:cc:7e:d6: 4f:cf:f9:b8:09:bb:ef:dc:01:41:0b:30:1f:4b:7d: 35:16:7e:9e:0f:40:f8:4a:a4:65:d8:e2:73:f5:e3: b4:9f:fc:88:6f:83:08:43:88:22:9c:af:f2:55:c3: 65:5a:6d:86:d1:13:63:75:d3:28:4e:10:5e:af:ac: ef:6c:98:df:a0:cb:1a:78:75:91:e3:cd:aa:a0:76: d9:85:57:fe:96:30:8d:93:03:19:f4:a2:70:6b:b4: 49:1a:af:13:0a:73:4c:9d:ae:eb:c8:3e:5d:6a:8f: 01:87:a1:86:8b:cf:8b:da:a9:e3:2b:fb:0c:2e:18: 5b:80:ef:34:8d:a7:18:92:5f:35:8c:e2:69:2c:32: d1:84:6c:6f:01:f2:02:d7:3b:26:a8:b0:d8:e9:21: 7e:b1:1f:79:ea:3d:aa:5a:b9:b2:99:f7:b0:dc:7b: 61:df:db:22:d9:d1:3f:ac:a0:78:2a:dd:94:80:24: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:07:BA:B0:83:20:8B:79:66:DA:8F:EE:68:A8:DF:83:3E:A9:FE:15 X509v3 Authority Key Identifier: keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:84:01:0e:cc:7b:88:c2:80:2b:52:43:fc:ae:a7:a1:e7:e6: 9c:c7:71:6f:45:c3:69:c9:31:39:72:a8:6a:82:f6:c3:54:42: 41:41:51:e8:42:ae:7a:47:cb:3e:78:ad:f8:04:45:34:68:48: 7e:dd:80:e9:26:cd:97:82:90:bc:20:41:28:6f:54:e4:df:af: 14:33:31:90:bd:0e:fa:25:4a:f4:1d:91:f8:7d:c5:08:70:9a: 1d:5e:df:93:32:a0:b5:7b:72:e4:0d:6c:dd:3a:64:a9:cf:ad: f7:6f:26:21:ba:0a:b0:f5:31:49:39:ac:96:63:01:8f:5f:03: c4:aa:0a:d6:b4:1a:c1:fa:ef:2a:0d:eb:93:8c:53:25:a2:71: 23:4b:26:67:fe:bd:fe:32:75:9a:e8:00:c0:dd:d1:df:45:7d: af:93:5c:be:b2:68:ea:82:91:a9:7d:95:cf:ed:09:c1:e2:5b: ae:76:c0:00:51:12:8d:0b:cf:35:5f:97:59:28:97:c2:5a:7a: 49:ab:67:13:19:a9:98:79:22:a9:8d:95:d5:91:b4:2a:22:07: 3d:34:4a:52:88:25:27:43:c2:a6:14:55:52:dd:b1:8d:5b:5a: 24:8e:30:4e:be:d4:56:1b:2d:b5:18:0e:b5:79:72:ce:78:86: 2f:0d:5c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfXXoffP6Q+wYanUXxangMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1 NTFkMzcwHhcNMjYwMjA5MTMwMDQ0WhcNMjYwMjEwMTMwMDQ0WjAzMTEwLwYDVQQD EyhjYTA3YmFiMDgzMjA4Yjc5NjZkYThmZWU2OGE4ZGY4MzNlYTlmZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQwMjeT0d7Ixn+KaIxg3nbGFS2v5 SQhFToj5C3P3aQmExMUABoinLK1xad/ZLei0BlSR9tnTU9yp/xzLhmhMGlkseV80 sprMftZPz/m4Cbvv3AFBCzAfS301Fn6eD0D4SqRl2OJz9eO0n/yIb4MIQ4ginK/y VcNlWm2G0RNjddMoThBer6zvbJjfoMsaeHWR482qoHbZhVf+ljCNkwMZ9KJwa7RJ Gq8TCnNMna7ryD5dao8Bh6GGi8+L2qnjK/sMLhhbgO80jacYkl81jOJpLDLRhGxv AfIC1zsmqLDY6SF+sR956j2qWrmymfew3Hth39si2dE/rKB4Kt2UgCTl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoHurCDIIt5ZtqP7mio34M+qf4VMB8GA1UdIwQY MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt YmU1ZjEyOWVhODFhLzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYQBDsx7 iMKAK1JD/K6noefmnMdxb0XDackxOXKoaoL2w1RCQUFR6EKuekfLPnit+ARFNGhI ft2A6SbNl4KQvCBBKG9U5N+vFDMxkL0O+iVK9B2R+H3FCHCaHV7fkzKgtXty5A1s 3Tpkqc+t928mIboKsPUxSTmslmMBj18DxKoK1rQawfrvKg3rk4xTJaJxI0smZ/69 /jJ1mugAwN3R30V9r5NcvrJo6oKRqX2Vz+0JweJbrnbAAFESjQvPNV+XWSiXwlp6 SatnExmpmHkiqY2V1ZG0KiIHPTRKUoglJ0PCphRVUt2xjVtaJI4wTr7UVhsttRgO tXlyzniGLw1cDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:11 2026 by rpki-client