This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json) Hash identifier: rOU7u1kngfzBy6KRHPmk0CTpcyBFBElexTaJRlx3mnY= Subject key identifier: 1A:85:35:EA:5A:25:D9:C5:9B:A1:31:A6:64:58:BE:DF:94:1D:C9:B7 Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Certificate serial: 019C43226F7BC8A0A261F9402CC9A7015FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft Manifest number: 10C3 Signing time: Mon 09 Feb 2026 16:00:56 +0000 Manifest this update: Mon 09 Feb 2026 16:00:56 +0000 Manifest next update: Tue 10 Feb 2026 16:00:56 +0000 Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: QvWrCOGPDrM9qgC2N73PZr7n6dmos4u8+1omLQpqAwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6f:7b:c8:a0:a2:61:f9:40:2c:c9:a7:01:5f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5 Validity Not Before: Feb 9 16:00:56 2026 GMT Not After : Feb 10 16:00:56 2026 GMT Subject: CN=1a8535ea5a25d9c59ba131a66458bedf941dc9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:68:e7:65:28:76:88:b0:df:03:32:fb:c8: 57:f3:72:97:31:95:2b:92:b3:80:ce:2d:a3:64:0d: c7:69:ac:d5:ac:f6:10:7c:90:cc:1d:4c:e0:11:10: 8c:36:ca:b3:e1:a8:b7:75:e0:b6:a7:71:44:89:f6: ea:4b:1e:a2:ea:e3:c1:74:01:3b:24:20:b1:05:49: 3d:bd:a3:36:de:b7:32:b3:20:9a:44:63:86:fe:10: 93:fd:8f:b4:06:fd:48:72:3e:00:4a:db:ff:2a:34: 31:8f:3d:9f:c9:60:83:b2:27:d9:52:d1:f3:87:01: 3c:1a:ef:40:af:5e:b1:27:25:b4:52:00:82:ab:b7: bc:40:48:86:f8:37:09:f7:42:9c:29:8b:a3:3a:04: 02:6a:62:d8:10:51:ee:63:13:cc:00:bd:f9:d8:0a: 3a:ad:a4:2a:93:df:28:cd:32:a6:59:7e:a4:95:51: c6:ac:b6:27:00:b0:fd:1d:22:d4:99:92:20:69:86: 87:00:21:9f:15:2c:b4:0d:1f:29:d0:ab:db:98:96: b7:fb:69:70:e9:aa:13:0c:eb:01:8b:a6:c1:88:b9: f2:3e:3c:36:be:4c:ac:d4:6c:52:b6:6a:2b:ae:4d: 8b:6f:cb:b5:ca:ad:3d:c3:87:9a:ad:94:7c:5c:38: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:35:EA:5A:25:D9:C5:9B:A1:31:A6:64:58:BE:DF:94:1D:C9:B7 X509v3 Authority Key Identifier: keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:55:55:8c:fe:cf:c0:b4:7c:b1:cb:10:95:54:a0:f7:26:80: 86:78:22:27:13:7d:31:78:0a:65:1d:fa:28:0e:56:67:6a:a8: 67:b1:fe:52:4c:21:37:50:da:53:fe:28:fc:d5:ec:b5:20:46: 0b:f5:c5:ba:6d:1a:e9:c1:5b:b4:90:d3:9d:b2:d2:9a:43:2b: f3:b3:95:1c:e7:ff:f7:33:71:1e:0f:c8:ce:48:a6:7a:8c:61: 0d:2d:d9:17:84:56:3b:0e:9b:a5:c3:8f:52:f0:3e:8d:4e:e2: ec:5c:ac:eb:36:7c:d3:b8:02:5b:c4:16:18:c6:77:e5:77:76: 39:75:49:5b:e0:9d:ec:78:0d:05:3d:c0:eb:dd:ff:d5:66:92: cf:57:b5:21:6e:59:4e:39:83:b0:f0:e9:65:7c:ef:ad:a3:e2: 82:d9:41:2f:c8:50:eb:66:da:2d:63:be:7a:e7:f8:b3:af:01: dc:41:84:04:57:96:ed:e5:a8:53:13:21:f5:6d:80:3e:94:b9: 96:81:dc:2c:fc:aa:f9:cc:38:ca:58:20:84:0d:d8:8f:11:88: 0d:99:7d:c2:7b:86:ef:25:ea:6e:2d:a4:83:8a:03:49:e4:c3: da:e9:90:7d:52:18:ff:9e:12:38:15:c9:87:db:3a:a7:65:07: 86:42:4c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm97yKCiYflALMmnAV/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm ZGQ1YTUwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD EygxYTg1MzVlYTVhMjVkOWM1OWJhMTMxYTY2NDU4YmVkZjk0MWRjOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkJo52Uodoiw3wMy+8hX83KXMZUr krOAzi2jZA3HaazVrPYQfJDMHUzgERCMNsqz4ai3deC2p3FEifbqSx6i6uPBdAE7 JCCxBUk9vaM23rcysyCaRGOG/hCT/Y+0Bv1Icj4AStv/KjQxjz2fyWCDsifZUtHz hwE8Gu9Ar16xJyW0UgCCq7e8QEiG+DcJ90KcKYujOgQCamLYEFHuYxPMAL352Ao6 raQqk98ozTKmWX6klVHGrLYnALD9HSLUmZIgaYaHACGfFSy0DR8p0KvbmJa3+2lw 6aoTDOsBi6bBiLnyPjw2vkys1GxStmorrk2Lb8u1yq09w4earZR8XDgalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqFNepaJdnFm6ExpmRYvt+UHcm3MB8GA1UdIwQY MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3 LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFVVjP7P wLR8scsQlVSg9yaAhngiJxN9MXgKZR36KA5WZ2qoZ7H+UkwhN1DaU/4o/NXstSBG C/XFum0a6cFbtJDTnbLSmkMr87OVHOf/9zNxHg/IzkimeoxhDS3ZF4RWOw6bpcOP UvA+jU7i7Fys6zZ807gCW8QWGMZ35Xd2OXVJW+Cd7HgNBT3A693/1WaSz1e1IW5Z TjmDsPDpZXzvraPigtlBL8hQ62baLWO+euf4s68B3EGEBFeW7eWoUxMh9W2APpS5 loHcLPyq+cw4ylgghA3YjxGIDZl9wnuG7yXqbi2kg4oDSeTD2umQfVIY/54SOBXJ h9s6p2UHhkJMbA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:37 2026 by rpki-client