This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json) Hash identifier: cfg3AXqq4JwB9QxTiv4GTz0GU4LZ2XhSbxxXo2RX29o= Subject key identifier: E4:1E:44:8D:CF:7E:5B:61:F5:8B:D6:9A:CC:2E:0C:E2:A8:C9:4B:CD Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 Certificate issuer: /CN=52eff385d4b48215d805b588a2705829d4621171 Certificate serial: 019C432204B5A33DDC8977B4543B57E66C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft Manifest number: 0BB9 Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: qq97c7586Z8RN5S5McMcvPyU1tb+XBkuf+6TevnQfKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:04:b5:a3:3d:dc:89:77:b4:54:3b:57:e6:6c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52eff385d4b48215d805b588a2705829d4621171 Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=e41e448dcf7e5b61f58bd69acc2e0ce2a8c94bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:e7:0d:c1:aa:18:6a:15:b4:e7:5b:a4:2b: da:5c:cc:85:67:a2:ec:52:2d:a0:31:00:ac:0d:33: 04:6c:17:2e:88:92:17:30:69:3b:6f:31:9d:9b:67: 2f:e5:2c:95:b2:73:93:6b:c6:c3:c4:f0:ba:c5:3a: 90:ae:f2:1d:dc:91:36:27:91:fb:08:66:e3:d8:82: 97:3b:e4:8a:4d:5e:3d:9f:c8:a5:ed:84:37:94:12: 0c:39:d5:9e:91:87:ec:11:04:68:73:f1:5c:13:50: 85:ac:0a:67:a4:fb:77:59:44:4c:a1:84:00:64:73: cb:1a:cb:d1:9c:ca:60:0e:b5:85:88:47:48:f9:c6: 26:a2:a9:1b:59:bb:0d:6e:81:90:e3:4a:d8:b2:a3: 6b:72:4a:d8:b9:9d:dc:19:c8:2c:80:83:dc:fa:bf: 52:eb:3d:f4:6b:21:e2:0b:b9:9b:d8:76:92:6d:00: 79:dd:9d:a4:b3:92:52:d4:7a:94:65:67:10:ac:b8: 37:0c:4a:fd:9d:53:33:cf:1f:cf:8b:65:2a:88:60: cc:a7:d3:7e:8a:3f:bc:ab:32:83:e5:49:49:f2:16: 2f:56:4f:a0:b1:46:88:cf:5d:02:31:81:c9:dd:cd: 57:b7:b3:01:ad:19:0c:18:70:9c:63:98:ba:c1:7c: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:44:8D:CF:7E:5B:61:F5:8B:D6:9A:CC:2E:0C:E2:A8:C9:4B:CD X509v3 Authority Key Identifier: keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ff:6f:a8:49:87:36:cb:ae:d4:5f:19:7c:9a:d2:bc:57:8c: 7a:2e:22:10:1e:33:d8:66:f3:8c:e1:49:22:35:45:01:71:39: 08:a6:8a:a7:ad:98:67:06:06:34:eb:44:5a:6b:cd:b0:f1:00: ea:07:d1:1f:d1:76:63:62:74:aa:d6:05:9c:51:65:57:83:ca: 16:44:8d:66:8b:dd:2b:e3:cd:9c:27:1f:fa:5a:be:5b:e6:b8: 4c:8f:52:81:2a:89:44:fb:6b:da:cb:21:c9:69:85:27:3f:e9: e7:6b:10:4f:6b:1c:45:69:a1:c0:c8:7b:d8:d7:e8:dc:eb:ba: f7:47:f5:f7:bc:74:d6:05:57:e8:fd:ac:f6:a7:da:32:f7:00: cb:eb:f5:8c:46:a8:09:2c:5f:b8:a8:98:91:9f:8e:8d:35:32: 16:bc:19:cc:30:34:0a:3d:4c:a8:9b:45:51:4e:1e:1c:dd:9c: dc:3f:79:1a:fd:54:38:6d:87:7e:f0:b4:4e:d2:a1:0c:11:65: ba:9a:c1:63:2e:98:2a:f0:08:49:69:56:00:74:9b:0e:7a:42: b5:f8:d8:ae:7f:f3:78:e1:c3:8a:bd:ab:d9:8a:50:d3:8b:41: 03:ea:97:77:1a:cb:29:18:30:2b:9d:e9:21:17:cc:f4:54:c5: 5d:6f:e2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgS1oz3ciXe0VDtX5mxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWZmMzg1ZDRiNDgyMTVkODA1YjU4OGEyNzA1ODI5ZDQ2 MjExNzEwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EyhlNDFlNDQ4ZGNmN2U1YjYxZjU4YmQ2OWFjYzJlMGNlMmE4Yzk0YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZznDcGqGGoVtOdbpCvaXMyFZ6Ls Ui2gMQCsDTMEbBcuiJIXMGk7bzGdm2cv5SyVsnOTa8bDxPC6xTqQrvId3JE2J5H7 CGbj2IKXO+SKTV49n8il7YQ3lBIMOdWekYfsEQRoc/FcE1CFrApnpPt3WURMoYQA ZHPLGsvRnMpgDrWFiEdI+cYmoqkbWbsNboGQ40rYsqNrckrYuZ3cGcgsgIPc+r9S 6z30ayHiC7mb2HaSbQB53Z2ks5JS1HqUZWcQrLg3DEr9nVMzzx/Pi2UqiGDMp9N+ ij+8qzKD5UlJ8hYvVk+gsUaIz10CMYHJ3c1Xt7MBrRkMGHCcY5i6wXyYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQeRI3Pflth9YvWmswuDOKoyUvNMB8GA1UdIwQY MBaAFFLv84XUtIIV2AW1iKJwWCnUYhFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYt MzBkNDc1YmY0ZjYyLzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYtMzBkNDc1YmY0ZjYy LzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv9vqEmH Nsuu1F8ZfJrSvFeMei4iEB4z2GbzjOFJIjVFAXE5CKaKp62YZwYGNOtEWmvNsPEA 6gfRH9F2Y2J0qtYFnFFlV4PKFkSNZovdK+PNnCcf+lq+W+a4TI9SgSqJRPtr2ssh yWmFJz/p52sQT2scRWmhwMh72Nfo3Ou690f197x01gVX6P2s9qfaMvcAy+v1jEao CSxfuKiYkZ+OjTUyFrwZzDA0Cj1MqJtFUU4eHN2c3D95Gv1UOG2HfvC0TtKhDBFl uprBYy6YKvAISWlWAHSbDnpCtfjYrn/zeOHDir2r2YpQ04tBA+qXdxrLKRgwK53p IRfM9FTFXW/iHg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:26 2026 by rpki-client