This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft File: URaCWKEn48Db_aLlErydk9h0M4s.mft (raw, json) Hash identifier: W+KLXffs+NMkvlAaF8pU+ZXzgkFMA0IKglfXZQq7NtE= Subject key identifier: F6:71:68:1A:71:31:9B:87:63:49:CF:79:32:1C:37:BE:06:AC:74:2E Authority key identifier: 51:16:82:58:A1:27:E3:C0:DB:FD:A2:E5:12:BC:9D:93:D8:74:33:8B Certificate issuer: /CN=51168258a127e3c0dbfda2e512bc9d93d874338b Certificate serial: 019C41D8A49C1D8E45440F230354E088BD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft Manifest number: 3A Signing time: Mon 09 Feb 2026 10:00:42 +0000 Manifest this update: Mon 09 Feb 2026 10:00:42 +0000 Manifest next update: Tue 10 Feb 2026 10:00:42 +0000 Files and hashes: 1: ORALCgoAfAheMcIjQ2H2ABoAJSI.roa (hash: kYWDGCgoK1lDV0Fx4ZUm1E9D1cWkPaioASUNPUL26oc=) 2: URaCWKEn48Db_aLlErydk9h0M4s.crl (hash: u2x4P5gQX+HdNJJWIAUTA69AwwyZsP1SkfgSE/vVpqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.crl rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a4:9c:1d:8e:45:44:0f:23:03:54:e0:88:bd:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51168258a127e3c0dbfda2e512bc9d93d874338b Validity Not Before: Feb 9 10:00:42 2026 GMT Not After : Feb 10 10:00:42 2026 GMT Subject: CN=f671681a71319b876349cf79321c37be06ac742e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:ab:0b:f5:ab:b4:bc:d1:34:31:05:72:d6: dc:39:79:e6:e4:bb:19:fd:e9:b6:e5:ed:49:5d:a4: 42:85:a3:da:0d:b7:3f:d9:9c:ef:be:88:c6:91:fc: d1:8d:87:93:db:53:5c:96:5e:3c:69:2f:f7:33:04: 63:3c:6c:ef:50:ff:c4:f4:ae:9e:08:58:b3:f2:67: 55:a8:85:f4:03:86:15:5b:a0:d7:61:9c:3d:65:ee: 18:4a:42:73:c7:a6:f5:99:55:23:40:9a:af:b9:97: 77:d5:f7:6a:32:8f:7f:49:cd:d2:5e:07:ce:47:55: 9a:ee:88:26:19:7d:56:7b:a4:40:39:1c:1f:88:f9: d6:4f:bf:99:c8:71:31:43:b2:20:25:54:f8:49:b5: 79:7d:cf:81:e5:c5:10:10:90:fa:45:a4:ee:8d:15: fb:2b:f5:dd:c5:b3:91:fd:7e:29:d2:2e:d1:9a:bf: 0a:7a:80:0b:ea:e3:23:5b:57:95:e6:4e:9d:e1:26: 63:f0:9a:0c:da:2e:d1:f7:e9:63:dc:03:36:c5:6b: 1f:57:a5:42:50:a8:45:e2:e8:48:c0:dd:87:88:a6: 68:7a:e8:54:d0:72:4d:2c:be:43:e0:df:0c:6a:cb: 74:b0:e3:94:e5:4b:e3:b1:de:9f:1e:9a:fc:46:4a: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:68:1A:71:31:9B:87:63:49:CF:79:32:1C:37:BE:06:AC:74:2E X509v3 Authority Key Identifier: keyid:51:16:82:58:A1:27:E3:C0:DB:FD:A2:E5:12:BC:9D:93:D8:74:33:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:01:35:d6:6d:dd:d1:90:83:54:73:16:d7:a1:18:a2:43:ae: 23:1c:b3:bd:bc:88:88:71:7a:be:60:49:32:ad:32:fa:b7:15: 61:bd:62:ae:0c:88:82:3d:84:64:26:61:a5:36:a0:f8:11:f5: 41:73:cf:74:14:1f:cf:b3:ce:f0:f4:69:b2:8c:6d:84:1d:5b: 88:b5:4c:44:c9:3d:ad:c1:b3:ac:72:6f:75:bd:fd:a8:49:0e: ed:15:12:e0:8f:34:8b:6c:64:4a:90:25:b7:72:33:8a:da:fc: 04:60:f2:60:f8:61:00:dd:e3:14:fa:20:0b:bb:99:bd:08:b2: d4:8c:ff:51:d5:d3:81:ba:43:99:c2:d6:53:81:0b:35:a2:99: e8:88:0f:f4:ba:81:5c:6e:f7:b3:45:54:98:cb:88:61:fc:96: 0d:63:e4:03:f2:2a:cc:2e:aa:37:b6:c0:63:a7:16:bb:05:7e: c1:6a:f9:2d:ce:c5:22:1c:20:64:99:e9:9b:d3:80:dd:99:18: 83:fc:60:8a:65:a9:20:1c:a4:83:6f:eb:7b:27:d8:d7:6a:44: a4:b1:1d:c0:3e:c3:a9:f0:53:c7:08:75:b0:91:26:c0:d0:ff: 6c:b0:d3:ef:46:f6:72:f0:cf:45:a1:da:3d:c3:9f:9a:a8:e4: 5f:89:7b:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KScHY5FRA8jA1TgiL1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMTY4MjU4YTEyN2UzYzBkYmZkYTJlNTEyYmM5ZDkzZDg3 NDMzOGIwHhcNMjYwMjA5MTAwMDQyWhcNMjYwMjEwMTAwMDQyWjAzMTEwLwYDVQQD EyhmNjcxNjgxYTcxMzE5Yjg3NjM0OWNmNzkzMjFjMzdiZTA2YWM3NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8SrC/WrtLzRNDEFctbcOXnm5LsZ /em25e1JXaRChaPaDbc/2ZzvvojGkfzRjYeT21Ncll48aS/3MwRjPGzvUP/E9K6e CFiz8mdVqIX0A4YVW6DXYZw9Ze4YSkJzx6b1mVUjQJqvuZd31fdqMo9/Sc3SXgfO R1Wa7ogmGX1We6RAORwfiPnWT7+ZyHExQ7IgJVT4SbV5fc+B5cUQEJD6RaTujRX7 K/XdxbOR/X4p0i7Rmr8KeoAL6uMjW1eV5k6d4SZj8JoM2i7R9+lj3AM2xWsfV6VC UKhF4uhIwN2HiKZoeuhU0HJNLL5D4N8Mast0sOOU5Uvjsd6fHpr8RkoXFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZxaBpxMZuHY0nPeTIcN74GrHQuMB8GA1UdIwQY MBaAFFEWglihJ+PA2/2i5RK8nZPYdDOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVJhQ1dLRW40OERiX2FMbEVyeWRrOWgwTTRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81MWM5MTEtYmI5Ni00ODljLTg2ZDQt MzJjOTg5ZmU1ZWVlLzEvVVJhQ1dLRW40OERiX2FMbEVyeWRrOWgwTTRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81MWM5MTEtYmI5Ni00ODljLTg2ZDQtMzJjOTg5ZmU1ZWVl LzEvVVJhQ1dLRW40OERiX2FMbEVyeWRrOWgwTTRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwE11m3d 0ZCDVHMW16EYokOuIxyzvbyIiHF6vmBJMq0y+rcVYb1irgyIgj2EZCZhpTag+BH1 QXPPdBQfz7PO8PRpsoxthB1biLVMRMk9rcGzrHJvdb39qEkO7RUS4I80i2xkSpAl t3Izitr8BGDyYPhhAN3jFPogC7uZvQiy1Iz/UdXTgbpDmcLWU4ELNaKZ6IgP9LqB XG73s0VUmMuIYfyWDWPkA/IqzC6qN7bAY6cWuwV+wWr5Lc7FIhwgZJnpm9OA3ZkY g/xgimWpIBykg2/reyfY12pEpLEdwD7DqfBTxwh1sJEmwND/bLDT70b2cvDPRaHa PcOfmqjkX4l73g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client