This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json) Hash identifier: 4iamnQvIlZfwWXxtpTzIlxZJBbPAVIPigugvBdiZdHA= Subject key identifier: DD:FB:A1:EB:56:7C:BE:BC:F3:DA:AC:83:B9:87:C6:B5:8E:CD:A8:D7 Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Certificate serial: 019C4321FD2121A619E9AED7238C37740D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: DqKFNeJorzQTQVcSTmCyMXTwI2nSVGgd87qKSX/3hFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fd:21:21:a6:19:e9:ae:d7:23:8c:37:74:0d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=ddfba1eb567cbebcf3daac83b987c6b58ecda8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:6a:05:16:71:0c:2a:70:e7:48:fb:af:78: 6e:75:71:1f:1c:db:29:0b:28:92:6b:d0:56:15:c5: 15:e7:88:12:a2:12:32:9e:ce:94:01:f8:6d:73:6c: 8e:2a:b1:66:06:b0:3c:41:e4:6e:36:04:4b:58:8c: c4:ee:73:f9:6b:a4:74:4e:68:c6:30:f1:a3:7e:d8: 0c:39:ea:8e:97:23:b7:7d:fb:34:02:71:62:3b:61: be:fe:90:11:89:4d:bb:93:ea:1a:d2:91:57:27:37: ca:0e:ff:c8:55:27:38:b5:f6:28:ff:6b:56:6e:ca: 5d:35:b6:81:91:e2:16:97:9f:61:95:8f:bf:c2:1a: 84:73:73:5d:6e:f0:7e:47:0b:56:43:99:ea:29:5f: 83:07:51:43:91:3d:1e:80:01:e1:60:34:ac:83:0a: 81:12:65:77:db:94:6e:ee:23:80:1d:f4:99:f2:99: 54:94:f8:3b:cd:76:f3:2e:d2:5a:b3:db:a7:de:2e: 36:5f:d7:a0:3b:58:3c:5c:b3:75:81:9b:2f:37:46: 6d:36:42:e1:aa:0a:5b:bd:6d:97:fe:47:54:cc:56: 88:aa:2b:a5:25:77:c4:cb:13:4b:13:2f:53:3e:e1: 0c:ee:89:12:ba:2a:06:f1:70:66:4d:74:30:72:d4: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FB:A1:EB:56:7C:BE:BC:F3:DA:AC:83:B9:87:C6:B5:8E:CD:A8:D7 X509v3 Authority Key Identifier: keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:38:32:b6:45:16:6a:f4:ca:e3:f4:90:c6:4b:d6:e6:84:07: 44:8f:3e:00:3d:d4:f2:66:f1:81:2e:f0:e7:40:41:3b:fe:4b: 27:ce:13:61:2e:c8:5e:93:d1:71:ea:6b:9d:3d:14:8e:4d:e6: e9:8d:9f:9d:30:f6:e7:be:66:40:2b:db:64:e3:33:de:7d:a3: 13:ec:10:4d:63:34:a5:1b:dd:7f:d0:ea:4d:0c:61:fc:59:91: 3c:a8:4d:fd:20:d4:9c:26:4c:78:c9:e9:14:2e:cc:bf:e0:c9: a1:82:79:02:50:4a:b9:af:01:d7:c7:ec:a4:e6:60:65:32:08: ac:75:bf:25:16:8e:43:22:a8:a5:db:22:8e:18:a9:0e:8d:8e: b6:4a:11:7c:ac:0c:d2:f3:64:18:66:24:e4:9b:b1:6d:66:83: 03:fd:b9:7f:e2:34:63:11:30:cc:bf:bf:0f:6c:41:e0:49:ca: a7:45:06:69:98:2b:aa:2c:d6:0a:d0:75:ab:ac:2b:87:b2:16: 59:fb:df:d8:44:a7:09:61:ad:40:24:fe:0a:14:79:f1:33:d8: b4:16:1e:80:f5:2f:b9:e9:d5:fe:76:99:3c:f2:18:df:5c:94: df:bc:99:7a:31:53:e5:83:30:3c:1f:90:5d:2d:dc:f8:0b:85: eb:7b:45:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIf0hIaYZ6a7XI4w3dA2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDU4NWI0Njc5MjM3MzZjNDJjNzk3MmUxMDQyZjFiMmUz MGRjNjYwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD EyhkZGZiYTFlYjU2N2NiZWJjZjNkYWFjODNiOTg3YzZiNThlY2RhOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J5qBRZxDCpw50j7r3hudXEfHNsp CyiSa9BWFcUV54gSohIyns6UAfhtc2yOKrFmBrA8QeRuNgRLWIzE7nP5a6R0TmjG MPGjftgMOeqOlyO3ffs0AnFiO2G+/pARiU27k+oa0pFXJzfKDv/IVSc4tfYo/2tW bspdNbaBkeIWl59hlY+/whqEc3NdbvB+RwtWQ5nqKV+DB1FDkT0egAHhYDSsgwqB EmV325Ru7iOAHfSZ8plUlPg7zXbzLtJas9un3i42X9egO1g8XLN1gZsvN0ZtNkLh qgpbvW2X/kdUzFaIqiulJXfEyxNLEy9TPuEM7okSuioG8XBmTXQwctSZswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN37oetWfL6889qsg7mHxrWOzajXMB8GA1UdIwQY MBaAFLtFhbRnkjc2xCx5cuEELxsuMNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUt NjYzODEwMWUzMTliLzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9kY2I4NDYtM2ZhMi00NTdmLTg5ODUtNjYzODEwMWUzMTli LzEvdTBXRnRHZVNOemJFTEhseTRRUXZHeTR3M0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDgytkUW avTK4/SQxkvW5oQHRI8+AD3U8mbxgS7w50BBO/5LJ84TYS7IXpPRceprnT0Ujk3m 6Y2fnTD2575mQCvbZOMz3n2jE+wQTWM0pRvdf9DqTQxh/FmRPKhN/SDUnCZMeMnp FC7Mv+DJoYJ5AlBKua8B18fspOZgZTIIrHW/JRaOQyKopdsijhipDo2OtkoRfKwM 0vNkGGYk5JuxbWaDA/25f+I0YxEwzL+/D2xB4EnKp0UGaZgrqizWCtB1q6wrh7IW Wfvf2ESnCWGtQCT+ChR58TPYtBYegPUvuenV/naZPPIY31yU37yZejFT5YMwPB+Q XS3c+AuF63tFCw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:37 2026 by rpki-client