This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json) Hash identifier: RdXaPypJ6uTDMA8NmalPvrXHZJzVB2/0WbW5AM3oScQ= Subject key identifier: 01:B3:95:F7:9D:72:C3:41:15:75:45:90:45:20:34:DF:35:54:13:EE Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063 Certificate serial: 019C4322A8BD7EFB8869D47C6183C53D509B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 16:01:10 +0000 Manifest this update: Mon 09 Feb 2026 16:01:10 +0000 Manifest next update: Tue 10 Feb 2026 16:01:10 +0000 Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: RNHTZ3Cxny3sr0aZpOzbSkanV+/ty3IL408y1usUaS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a8:bd:7e:fb:88:69:d4:7c:61:83:c5:3d:50:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063 Validity Not Before: Feb 9 16:01:10 2026 GMT Not After : Feb 10 16:01:10 2026 GMT Subject: CN=01b395f79d72c34115754590452034df355413ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:12:55:f7:70:a4:c0:f8:3d:ac:79:29:a7: 96:69:78:2f:13:43:05:b4:17:8e:c3:5a:af:ca:6a: 40:ca:eb:4f:54:ae:24:70:58:39:25:de:dd:19:fe: 97:f0:5f:92:60:95:5e:f2:83:6f:d3:2d:ae:c2:d5: 02:f4:33:28:0b:07:53:df:77:76:e0:b7:b2:92:02: 76:c2:4c:0e:3b:42:2f:e1:0f:69:60:5e:be:0e:dd: 3d:43:ce:84:44:4c:4f:9c:53:19:2f:28:39:53:a2: 41:a1:6a:89:80:87:59:df:76:d0:57:1e:69:ad:35: ea:06:ad:2f:e2:a9:33:23:9d:15:da:8e:91:bc:3f: 54:a7:e0:90:cb:b7:83:19:1a:09:4e:91:05:c0:1c: 0f:75:ea:a1:96:38:d8:1e:28:17:43:37:2c:42:cc: f0:02:6f:0c:d0:0b:e3:ed:6a:f3:fc:b6:af:2e:6b: e5:03:c0:d1:c4:b1:ff:40:9e:ba:f1:7b:e6:cc:e9: 8b:4e:63:12:51:3b:82:3d:a9:b4:02:fd:c0:5c:0d: c9:4b:17:71:f7:0e:b0:3d:92:60:75:fb:f1:a4:73: 51:06:ab:4e:85:15:ed:8b:5d:15:c7:1d:8b:6f:2e: 85:7a:5f:b5:42:8a:c2:53:dd:45:03:88:3c:8c:47: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:95:F7:9D:72:C3:41:15:75:45:90:45:20:34:DF:35:54:13:EE X509v3 Authority Key Identifier: keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:95:ad:0e:83:e6:8f:fe:6c:8f:e7:d2:7e:c6:cd:2b:d0:cf: 12:4a:5b:09:ba:35:a9:57:c7:55:04:b6:c8:59:39:12:a4:83: 2e:58:62:c6:da:87:5f:05:49:8a:a9:7c:5c:9d:d5:58:b5:1e: 81:19:6f:30:21:c2:b1:e6:06:d2:44:a6:cc:fe:3d:25:3c:de: 29:46:fa:31:86:95:7b:b9:cb:aa:2b:ad:31:ed:d7:97:df:9a: ed:74:08:03:d9:13:66:d8:83:08:42:51:4c:0e:a2:a6:7a:98: f1:94:30:43:78:be:5e:be:c2:d2:f7:f4:08:3a:ca:7f:68:11: c7:a3:21:e8:7d:da:be:46:d6:9e:e9:28:08:58:53:e2:50:b8: d9:2f:7b:2d:7b:59:dc:9e:96:2c:2c:d5:47:3c:75:aa:93:44: 91:2b:e2:17:db:15:c2:d8:dd:69:aa:32:e8:1b:a1:8e:5c:6c: 20:f0:c9:3c:1c:09:66:c7:38:16:ed:f0:85:d5:da:26:c9:e4: cb:71:06:95:7e:fd:4d:ce:9a:b0:ae:60:c6:8f:52:d9:e6:36: 58:c8:45:b4:75:3c:86:f9:ec:92:48:e2:87:16:49:e5:65:6d: b0:c0:8e:b1:f4:82:5f:d1:f9:2f:2f:fb:f4:5e:1f:a6:d9:a5: ba:36:83:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqi9fvuIadR8YYPFPVCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDNjNWY0OGM3N2E3OWM5ODVmNWU1MzYyZTA4MmFkNTRl MjMwNjMwHhcNMjYwMjA5MTYwMTEwWhcNMjYwMjEwMTYwMTEwWjAzMTEwLwYDVQQD EygwMWIzOTVmNzlkNzJjMzQxMTU3NTQ1OTA0NTIwMzRkZjM1NTQxM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja0SVfdwpMD4Pax5KaeWaXgvE0MF tBeOw1qvympAyutPVK4kcFg5Jd7dGf6X8F+SYJVe8oNv0y2uwtUC9DMoCwdT33d2 4LeykgJ2wkwOO0Iv4Q9pYF6+Dt09Q86ERExPnFMZLyg5U6JBoWqJgIdZ33bQVx5p rTXqBq0v4qkzI50V2o6RvD9Up+CQy7eDGRoJTpEFwBwPdeqhljjYHigXQzcsQszw Am8M0Avj7Wrz/LavLmvlA8DRxLH/QJ668XvmzOmLTmMSUTuCPam0Av3AXA3JSxdx 9w6wPZJgdfvxpHNRBqtOhRXti10Vxx2Lby6Fel+1QorCU91FA4g8jEcYTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGzlfedcsNBFXVFkEUgNN81VBPuMB8GA1UdIwQY MBaAFJFDxfSMd6ecmF9eU2Lggq1U4jBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUt YmRmMzY0YmE3N2NkLzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lYmM4MDQtZTNjNi00MGU2LWJmYmUtYmRmMzY0YmE3N2Nk LzEva1VQRjlJeDNwNXlZWDE1VFl1Q0NyVlRpTUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZWtDoPm j/5sj+fSfsbNK9DPEkpbCbo1qVfHVQS2yFk5EqSDLlhixtqHXwVJiql8XJ3VWLUe gRlvMCHCseYG0kSmzP49JTzeKUb6MYaVe7nLqiutMe3Xl9+a7XQIA9kTZtiDCEJR TA6ipnqY8ZQwQ3i+Xr7C0vf0CDrKf2gRx6Mh6H3avkbWnukoCFhT4lC42S97LXtZ 3J6WLCzVRzx1qpNEkSviF9sVwtjdaaoy6BuhjlxsIPDJPBwJZsc4Fu3whdXaJsnk y3EGlX79Tc6asK5gxo9S2eY2WMhFtHU8hvnskkjihxZJ5WVtsMCOsfSCX9H5Ly/7 9F4fptmlujaDTw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:54 2026 by rpki-client