This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json) Hash identifier: he+NhJm03kEJ/C+UxizBxaQi94l8QN49pP1qxSIcyzg= Subject key identifier: 8B:8C:30:48:0B:2F:62:02:EE:B2:2B:B5:B7:9A:EA:B0:FB:45:C9:4A Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Certificate serial: 019C41A15FC1DA2A866F58B9FF5B396B945C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft Manifest number: 11B0 Signing time: Mon 09 Feb 2026 09:00:20 +0000 Manifest this update: Mon 09 Feb 2026 09:00:20 +0000 Manifest next update: Tue 10 Feb 2026 09:00:20 +0000 Files and hashes: 1: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (hash: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI=) 2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: /54vHy2JoxAyzCcWcGTFu8JvmDPYC+McD/nk2FOPUiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5f:c1:da:2a:86:6f:58:b9:ff:5b:39:6b:94:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4 Validity Not Before: Feb 9 09:00:20 2026 GMT Not After : Feb 10 09:00:20 2026 GMT Subject: CN=8b8c30480b2f6202eeb22bb5b79aeab0fb45c94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:4d:ee:9d:01:32:92:16:ed:24:a2:99:93: 17:c8:d5:81:89:6f:8c:e1:53:5e:eb:05:c6:e8:0e: f3:14:39:3b:b9:0c:06:0b:5d:dc:a3:e5:91:d7:ac: e0:f6:18:0a:8f:c0:ed:1a:5b:62:6b:27:15:a6:59: e4:e8:12:3e:76:38:07:f5:38:a1:cb:d5:2a:11:af: 9b:c7:46:14:71:2e:35:3d:e8:f9:f2:7d:79:ad:ff: 23:1c:1f:11:6a:ae:3d:2e:0b:4e:b2:3c:fd:57:8b: 5a:f4:6e:ca:f6:21:2a:bf:14:71:2b:80:a0:31:c7: b1:51:ae:61:ed:a4:78:bc:2c:fc:05:79:69:93:61: a5:a3:e0:69:97:0a:c2:04:a3:6e:d8:19:e1:0e:91: 1c:d2:4b:f9:5f:52:a0:3c:0e:37:e1:04:a8:07:39: 13:71:52:7f:03:46:82:b0:cd:5c:74:c6:ae:76:9c: 32:61:23:3a:c2:0f:75:48:69:eb:77:54:34:0c:bf: 35:6f:94:fe:b2:f1:ad:2f:ae:fc:49:9d:ae:8a:c1: 43:d9:b6:2c:7a:7b:c9:12:41:91:42:20:b1:bc:88: bf:b5:12:6e:ad:df:98:0d:49:e8:e8:f2:da:7a:ac: ae:80:5f:2f:ed:95:93:7a:a6:a4:47:9d:53:fc:9b: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:30:48:0B:2F:62:02:EE:B2:2B:B5:B7:9A:EA:B0:FB:45:C9:4A X509v3 Authority Key Identifier: keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:01:48:2d:cf:a3:1a:cb:4c:e0:53:5c:da:23:08:22:f0: 23:3a:3b:43:fd:da:dc:c4:bd:e0:71:a3:31:cf:a2:b9:13:8d: 83:4d:19:73:79:2f:89:74:ae:ca:92:20:a5:e5:5e:f9:16:8d: ec:2b:09:dd:be:44:76:fa:40:ca:9a:41:0e:0a:9d:23:27:1e: 5b:07:89:03:69:be:a6:32:65:6b:3d:ba:20:32:db:5d:39:9b: e6:49:ac:93:47:13:53:79:75:a4:de:e5:b9:d3:e4:3c:31:cc: 18:e6:dd:8c:4d:fa:89:31:a8:fb:a4:65:8b:86:55:84:9a:ac: 0a:29:9a:b5:dc:86:ae:06:c5:4e:bb:f7:34:9c:e5:4b:f7:13: 76:14:30:95:58:eb:e7:c7:24:de:3c:57:de:8d:2d:ee:f7:33: 77:09:e6:8d:29:2f:98:08:67:b7:e2:13:e6:ad:b9:1a:dc:48: d7:ed:66:cd:4b:a8:22:12:4f:fe:9c:4c:bd:d6:7c:f4:80:1e: 61:49:ed:97:21:b6:d3:b5:32:f0:54:9a:d3:bf:ce:1b:1c:e7: 0f:65:2e:ed:4b:57:9a:bb:38:b9:2e:06:9e:74:48:a6:06:83: b1:43:ee:3b:a5:92:73:6d:6e:16:3f:63:5f:78:53:b8:dc:43: d7:d0:d4:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoV/B2iqGb1i5/1s5a5RcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh OWFhYjQwHhcNMjYwMjA5MDkwMDIwWhcNMjYwMjEwMDkwMDIwWjAzMTEwLwYDVQQD Eyg4YjhjMzA0ODBiMmY2MjAyZWViMjJiYjViNzlhZWFiMGZiNDVjOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZN7p0BMpIW7SSimZMXyNWBiW+M 4VNe6wXG6A7zFDk7uQwGC13co+WR16zg9hgKj8DtGltiaycVplnk6BI+djgH9Tih y9UqEa+bx0YUcS41Pej58n15rf8jHB8Raq49LgtOsjz9V4ta9G7K9iEqvxRxK4Cg McexUa5h7aR4vCz8BXlpk2Glo+BplwrCBKNu2BnhDpEc0kv5X1KgPA434QSoBzkT cVJ/A0aCsM1cdMaudpwyYSM6wg91SGnrd1Q0DL81b5T+svGtL678SZ2uisFD2bYs envJEkGRQiCxvIi/tRJurd+YDUno6PLaeqyugF8v7ZWTeqakR51T/JvVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuMMEgLL2IC7rIrtbea6rD7RclKMB8GA1UdIwQY MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO68BSC3P oxrLTOBTXNojCCLwIzo7Q/3a3MS94HGjMc+iuRONg00Zc3kviXSuypIgpeVe+RaN 7CsJ3b5EdvpAyppBDgqdIyceWweJA2m+pjJlaz26IDLbXTmb5kmsk0cTU3l1pN7l udPkPDHMGObdjE36iTGo+6Rli4ZVhJqsCimatdyGrgbFTrv3NJzlS/cTdhQwlVjr 58ck3jxX3o0t7vczdwnmjSkvmAhnt+IT5q25GtxI1+1mzUuoIhJP/pxMvdZ89IAe YUntlyG207Uy8FSa07/OGxznD2Uu7UtXmrs4uS4GnnRIpgaDsUPuO6WSc21uFj9j X3hTuNxD19DUrg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:31 2026 by rpki-client