This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json) Hash identifier: X/9sOBnP/v3fh7UAxkF9U5FN85Iqurrh4r9G0GO8X60= Subject key identifier: E8:EB:08:E7:C0:2E:6E:C3:36:26:F6:A1:87:96:44:8A:B2:0C:3A:4E Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0 Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0 Certificate serial: 019C432214366AC06C974769304FF7447B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 16:00:32 +0000 Manifest this update: Mon 09 Feb 2026 16:00:32 +0000 Manifest next update: Tue 10 Feb 2026 16:00:32 +0000 Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: n9o2qzDODiPSvjUxDrycNwfYELiQ860sujbDLR4Y9h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:14:36:6a:c0:6c:97:47:69:30:4f:f7:44:7b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0 Validity Not Before: Feb 9 16:00:32 2026 GMT Not After : Feb 10 16:00:32 2026 GMT Subject: CN=e8eb08e7c02e6ec33626f6a18796448ab20c3a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:f9:61:b0:3a:34:73:6c:a2:ed:c9:89:e9: 0a:9a:2d:04:ba:5f:d6:f2:f9:11:71:37:ee:55:3c: 49:ac:ca:10:07:f6:ed:2a:f2:a7:d1:bd:5c:ca:ea: 2a:c4:1b:43:0c:a8:ad:a0:8e:de:04:dd:bc:01:23: ec:8d:7a:9e:ab:53:fc:5d:af:e9:74:8b:5b:57:d0: 8d:20:96:b1:b1:d9:29:05:84:4c:77:e3:60:57:e0: 44:b3:45:4a:ec:5e:8f:46:c1:7c:8d:6f:74:46:f5: 99:d9:01:62:70:b5:49:82:c3:9d:ea:14:99:13:65: 18:8f:4d:3d:a6:68:45:51:d1:b7:d9:f9:6c:a8:58: 5a:6c:45:c5:48:88:ce:63:42:f6:a8:78:88:72:77: 52:15:3e:7c:63:0f:f5:98:7e:db:75:4a:92:77:c5: 0e:7a:72:e0:5f:52:45:e1:b7:26:3d:a4:47:9b:9a: 4f:b5:57:7e:8e:56:09:54:21:e8:b7:42:7d:39:cb: ac:ad:42:20:f0:84:17:90:ef:0c:64:10:cc:33:57: cc:53:8c:7a:2d:d1:ce:91:5e:30:62:ff:49:b7:24: fc:27:d9:71:cb:78:b0:33:52:04:d3:7d:57:43:a5: 6b:8d:b4:ff:9d:88:4d:8f:95:59:93:10:91:8e:5f: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EB:08:E7:C0:2E:6E:C3:36:26:F6:A1:87:96:44:8A:B2:0C:3A:4E X509v3 Authority Key Identifier: keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c7:a9:c1:a9:af:0e:67:bb:74:ea:db:71:9c:87:8d:bb:5c: f2:66:15:c4:22:9d:78:91:64:72:70:40:ee:68:68:75:d6:97: 86:db:77:bd:d5:4e:bf:cd:8e:e4:84:0a:e9:35:84:1f:5b:a6: e5:32:bb:4c:41:d7:b8:a5:0b:12:05:d4:d5:2b:66:9e:40:72: 6a:41:37:f7:65:bd:bc:c1:93:23:ae:65:95:c5:eb:1d:be:4f: 2f:f0:43:40:d0:9c:96:50:fd:96:b5:6d:1f:41:02:9b:50:54: 4c:de:c0:bb:4e:5d:73:32:03:4d:01:14:c1:db:98:eb:0e:86: e8:f4:48:c1:b9:b8:25:e0:91:f2:85:ac:f9:6d:8e:fc:13:b4: a5:06:ea:a6:0c:70:95:db:94:2b:55:db:59:64:1d:5d:09:98: 12:54:16:92:32:8f:b2:2c:6e:98:ac:e7:22:a2:b4:65:fc:af: f1:58:e7:a1:f3:26:0c:07:d8:41:92:1f:5a:4a:e6:94:6b:b8: a8:2e:6e:df:37:79:34:b6:43:3d:f7:ae:7e:3e:bf:d1:72:48: 07:c9:b5:2c:b3:1e:c3:83:19:27:87:08:68:05:7b:3f:5e:84: 7b:99:09:d5:4e:60:d8:2e:d8:a9:3e:1d:3c:84:50:99:69:3c: 06:1b:ed:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhQ2asBsl0dpME/3RHuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMWVkZTJkNDdkNzdlMTQwYTk3YmYyOTg5ZGE4MmE1ODc3 M2M4YzAwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD EyhlOGViMDhlN2MwMmU2ZWMzMzYyNmY2YTE4Nzk2NDQ4YWIyMGMzYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGb5YbA6NHNsou3JiekKmi0Eul/W 8vkRcTfuVTxJrMoQB/btKvKn0b1cyuoqxBtDDKitoI7eBN28ASPsjXqeq1P8Xa/p dItbV9CNIJaxsdkpBYRMd+NgV+BEs0VK7F6PRsF8jW90RvWZ2QFicLVJgsOd6hSZ E2UYj009pmhFUdG32flsqFhabEXFSIjOY0L2qHiIcndSFT58Yw/1mH7bdUqSd8UO enLgX1JF4bcmPaRHm5pPtVd+jlYJVCHot0J9OcusrUIg8IQXkO8MZBDMM1fMU4x6 LdHOkV4wYv9JtyT8J9lxy3iwM1IE031XQ6VrjbT/nYhNj5VZkxCRjl+gGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjrCOfALm7DNib2oYeWRIqyDDpOMB8GA1UdIwQY MBaAFFAe3i1H134UCpe/KYnagqWHc8jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8wMWI3OWMtNzIyNS00OTE2LTgyMjEt MTJlZGQwZTBkMjFiLzEvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8wMWI3OWMtNzIyNS00OTE2LTgyMjEtMTJlZGQwZTBkMjFi LzEvVUI3ZUxVZlhmaFFLbDc4cGlkcUNwWWR6eU1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccepwamv Dme7dOrbcZyHjbtc8mYVxCKdeJFkcnBA7mhoddaXhtt3vdVOv82O5IQK6TWEH1um 5TK7TEHXuKULEgXU1StmnkByakE392W9vMGTI65llcXrHb5PL/BDQNCcllD9lrVt H0ECm1BUTN7Au05dczIDTQEUwduY6w6G6PRIwbm4JeCR8oWs+W2O/BO0pQbqpgxw lduUK1XbWWQdXQmYElQWkjKPsixumKznIqK0Zfyv8VjnofMmDAfYQZIfWkrmlGu4 qC5u3zd5NLZDPfeufj6/0XJIB8m1LLMew4MZJ4cIaAV7P16Ee5kJ1U5g2C7YqT4d PIRQmWk8Bhvtmw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:37 2026 by rpki-client