This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft File: uxBfoysrF18Y3VkI3ScZFbv0444.mft (raw, json) Hash identifier: 3vlkqDzO9O2I5lN/sIlBKwACg59UyYRQtjHFNt5FiHc= Subject key identifier: CB:F8:C0:A6:72:FA:D9:65:D6:ED:E0:E7:16:23:5F:22:A5:66:DF:AE Authority key identifier: BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E Certificate issuer: /CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e Certificate serial: 019C4322D2D4844518BE9689423F51BBB56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft Manifest number: 021C Signing time: Mon 09 Feb 2026 16:01:21 +0000 Manifest this update: Mon 09 Feb 2026 16:01:21 +0000 Manifest next update: Tue 10 Feb 2026 16:01:21 +0000 Files and hashes: 1: cP1GSkrPpumyz1fbQhtF__y9oKM.roa (hash: MBJZqys4MB938y3xdVGjcJOvSN3lSPQWfJqtj51k6+E=) 2: uxBfoysrF18Y3VkI3ScZFbv0444.crl (hash: VSDG5S3z+ar9TrZU4SyEuFSSj4A/fsKKtAFP5HilMjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d2:d4:84:45:18:be:96:89:42:3f:51:bb:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb105fa32b2b175f18dd5908dd271915bbf4e38e Validity Not Before: Feb 9 16:01:21 2026 GMT Not After : Feb 10 16:01:21 2026 GMT Subject: CN=cbf8c0a672fad965d6ede0e716235f22a566dfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:2f:00:51:64:43:c2:d2:89:c9:79:9a:ce: c7:d9:99:36:71:59:47:87:3b:92:03:03:a9:b7:b9: 51:c4:f3:08:26:4a:76:04:62:94:e5:1c:9b:86:47: 43:7f:ef:20:bf:79:e7:d2:f9:e0:7e:a0:3f:a5:5d: fe:9b:9d:70:74:cb:42:dc:ff:a3:7d:a7:8c:fd:09: 46:e6:b0:01:82:29:6d:b5:f9:8f:74:5a:c6:0a:63: 52:3d:46:06:74:12:c8:20:bd:11:78:92:83:c5:9a: 13:f6:9d:69:90:d0:cf:15:59:11:3b:7c:47:11:05: 71:c7:81:fc:10:b7:71:f4:51:44:c4:12:9e:b4:31: 10:fd:98:b5:2b:5e:94:2a:06:09:40:9c:bd:3e:20: 69:d3:0b:50:62:e0:ee:36:74:5d:b0:72:14:ad:80: 59:9b:a0:d3:40:d2:96:1a:82:c0:e4:0d:18:30:08: 36:8b:e8:6e:b9:c8:1e:e1:b8:49:b6:54:7d:f1:98: 6f:a5:76:01:5f:fb:3b:04:7b:fe:ae:af:17:b5:8c: 40:87:32:60:6e:f2:d4:15:c7:fa:51:50:4f:5c:c0: f8:4c:6e:5e:cc:00:df:1f:e8:15:0b:59:a8:a2:74: 45:20:2f:f6:67:6c:be:63:ab:ee:c3:8e:09:e1:22: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:C0:A6:72:FA:D9:65:D6:ED:E0:E7:16:23:5F:22:A5:66:DF:AE X509v3 Authority Key Identifier: keyid:BB:10:5F:A3:2B:2B:17:5F:18:DD:59:08:DD:27:19:15:BB:F4:E3:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxBfoysrF18Y3VkI3ScZFbv0444.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b2bb3-fdb6-46af-b3d2-be11c14db6e0/1/uxBfoysrF18Y3VkI3ScZFbv0444.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:db:ff:3c:d4:99:d9:d6:12:53:57:ec:93:9d:17:e6:90:03: 8c:58:78:d9:5f:b4:61:0b:dd:9a:d9:a2:77:b6:e2:44:3e:be: 47:cc:1d:73:c8:9d:d2:e3:e3:eb:78:df:bd:4c:cb:c0:3d:69: 46:a3:23:2f:95:e0:f3:77:b4:21:d1:dd:9c:7d:36:14:9d:b6: 3e:39:23:b3:8a:f0:8a:32:ce:0f:c1:f6:35:c1:61:37:ce:b8: 25:d7:c2:82:e7:fc:67:d0:03:73:cc:c1:c1:a8:9c:74:4b:36: 1f:ef:78:95:09:92:1c:e3:65:13:c0:88:84:65:81:7b:01:9d: 5a:cf:96:e5:94:03:fa:54:b0:81:a7:30:15:76:3d:d0:c8:91: b6:d0:f4:9d:c7:60:08:7d:04:24:8d:db:0a:ea:53:63:e3:ab: 07:b0:67:9b:9c:d2:d5:d2:f3:47:ca:87:02:32:8a:17:08:ea: 64:87:56:e0:f2:e4:eb:5e:e9:61:58:5b:5c:24:38:32:23:01: 5d:57:5c:d8:38:25:96:53:65:fc:da:00:32:29:ca:6c:f8:a9: bf:41:a4:62:8b:81:d9:af:17:d0:c7:83:e1:c8:46:8a:e1:92: 77:4d:1d:bd:55:df:18:51:8a:d8:7b:77:8e:fd:17:e5:da:9a: 59:35:dc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItLUhEUYvpaJQj9Ru7VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTA1ZmEzMmIyYjE3NWYxOGRkNTkwOGRkMjcxOTE1YmJm NGUzOGUwHhcNMjYwMjA5MTYwMTIxWhcNMjYwMjEwMTYwMTIxWjAzMTEwLwYDVQQD EyhjYmY4YzBhNjcyZmFkOTY1ZDZlZGUwZTcxNjIzNWYyMmE1NjZkZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IwvAFFkQ8LSicl5ms7H2Zk2cVlH hzuSAwOpt7lRxPMIJkp2BGKU5RybhkdDf+8gv3nn0vngfqA/pV3+m51wdMtC3P+j faeM/QlG5rABgilttfmPdFrGCmNSPUYGdBLIIL0ReJKDxZoT9p1pkNDPFVkRO3xH EQVxx4H8ELdx9FFExBKetDEQ/Zi1K16UKgYJQJy9PiBp0wtQYuDuNnRdsHIUrYBZ m6DTQNKWGoLA5A0YMAg2i+huucge4bhJtlR98ZhvpXYBX/s7BHv+rq8XtYxAhzJg bvLUFcf6UVBPXMD4TG5ezADfH+gVC1moonRFIC/2Z2y+Y6vuw44J4SJOHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv4wKZy+tll1u3g5xYjXyKlZt+uMB8GA1UdIwQY MBaAFLsQX6MrKxdfGN1ZCN0nGRW79OOOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDIt YmUxMWMxNGRiNmUwLzEvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zYjJiYjMtZmRiNi00NmFmLWIzZDItYmUxMWMxNGRiNmUw LzEvdXhCZm95c3JGMThZM1ZrSTNTY1pGYnYwNDQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtv/PNSZ 2dYSU1fsk50X5pADjFh42V+0YQvdmtmid7biRD6+R8wdc8id0uPj63jfvUzLwD1p RqMjL5Xg83e0IdHdnH02FJ22Pjkjs4rwijLOD8H2NcFhN864JdfCguf8Z9ADc8zB waicdEs2H+94lQmSHONlE8CIhGWBewGdWs+W5ZQD+lSwgacwFXY90MiRttD0ncdg CH0EJI3bCupTY+OrB7Bnm5zS1dLzR8qHAjKKFwjqZIdW4PLk617pYVhbXCQ4MiMB XVdc2DglllNl/NoAMinKbPipv0GkYouB2a8X0MeD4chGiuGSd00dvVXfGFGK2Ht3 jv0X5dqaWTXcbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:15 2026 by rpki-client