This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json) Hash identifier: verBAai2k2aohQjiYoRg47VUrwXzLcbBZnFj5ACp4Qo= Subject key identifier: A2:69:07:79:FC:40:49:6A:9A:87:DF:1D:D2:F4:2D:40:8F:08:B2:E9 Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Certificate serial: 019C42EB85443C3CEF264487D2B9EE15F8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft Manifest number: 14EF Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: P4ryG/qKBysG/APQ189ozMnRl9z5WavLW7KDKFkoTFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:85:44:3c:3c:ef:26:44:87:d2:b9:ee:15:f8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=a2690779fc40496a9a87df1dd2f42d408f08b2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:72:43:b4:fb:b3:41:7a:9c:97:d9:55:e9: 5b:85:a6:15:be:5a:2b:e3:25:ad:62:53:62:8d:f6: 56:a6:d7:3b:7f:5f:12:60:c3:55:c6:bf:fb:df:58: ed:d1:a2:58:c1:f3:4b:a6:6f:1c:f6:27:19:0e:85: d8:fd:21:b1:43:d0:b3:e5:d8:07:1c:68:81:f7:9a: 2a:d9:48:b7:63:7b:6d:75:03:7d:02:5f:2f:92:2e: 10:eb:64:97:52:ee:29:66:a1:94:6c:a2:90:c4:d2: 34:1f:f5:36:25:ba:45:8e:18:38:30:f2:c3:2a:c4: 90:73:7c:dc:66:79:55:3b:5e:c4:f8:89:e1:f0:dc: e0:c4:75:6f:03:1b:a7:d4:3d:39:fa:a7:29:c5:27: 70:2e:09:3e:17:75:3e:a6:ba:8a:a2:55:f4:0b:06: 88:1a:d9:f5:6e:7b:f7:3c:3b:ad:d1:7a:ac:0b:70: 29:e4:61:d0:8b:4b:19:e0:7a:85:78:12:b7:83:da: f7:44:25:14:0d:3c:26:ea:59:17:e3:ce:e8:46:88: aa:96:83:66:20:c4:a9:69:bb:db:67:e7:9c:dc:2f: 53:58:60:e3:43:2e:4e:53:df:86:9c:ac:13:b6:7e: 57:5c:d4:cf:c6:e6:25:3f:e2:81:60:5f:ba:d6:86: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:07:79:FC:40:49:6A:9A:87:DF:1D:D2:F4:2D:40:8F:08:B2:E9 X509v3 Authority Key Identifier: keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1e:38:96:d6:bc:2b:67:be:74:16:fb:7c:c7:51:33:6c:68: ae:67:48:8c:5b:c0:39:7a:d8:19:83:10:c0:a1:75:45:86:51: 36:c0:b7:71:e3:91:3d:f5:28:83:22:29:5a:8d:ce:c3:b6:d2: b6:14:b4:e7:1a:40:8d:cc:ba:f9:bf:4d:c0:65:c6:98:c6:b6: ab:9f:e4:13:21:b1:b9:8c:51:76:a1:b8:21:d4:fd:74:3f:61: e3:82:84:5e:b9:32:65:ee:b9:6d:c6:83:71:1c:05:f5:4e:da: 99:8e:c0:a5:98:6a:77:96:73:14:53:59:e3:ed:c5:f9:b7:7d: 4e:90:71:db:2a:d1:b2:1d:6f:88:d2:80:4b:16:82:cf:85:ce: e0:8e:7d:b3:24:44:e9:46:6f:27:5a:6a:4d:c0:ae:77:d1:34: 00:b8:82:38:f0:ba:23:a5:fb:8e:07:cf:ad:e6:5f:48:7f:4a: b4:64:0c:93:13:04:8d:f2:9b:28:60:ef:e6:6e:d5:b9:56:b2: 6c:e2:3d:bc:ad:a8:0c:ee:a9:82:21:56:7b:3f:54:cd:29:fd: 4b:b6:d9:fd:f4:5b:7a:56:4c:41:a6:ca:1d:39:36:b9:eb:03: 7f:c5:ee:4e:c9:30:cc:ef:6e:ec:bd:e4:92:69:1f:3a:c8:49: 35:96:12:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64VEPDzvJkSH0rnuFfjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy Y2I3ZmIwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD EyhhMjY5MDc3OWZjNDA0OTZhOWE4N2RmMWRkMmY0MmQ0MDhmMDhiMmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VJyQ7T7s0F6nJfZVelbhaYVvlor 4yWtYlNijfZWptc7f18SYMNVxr/731jt0aJYwfNLpm8c9icZDoXY/SGxQ9Cz5dgH HGiB95oq2Ui3Y3ttdQN9Al8vki4Q62SXUu4pZqGUbKKQxNI0H/U2JbpFjhg4MPLD KsSQc3zcZnlVO17E+Inh8NzgxHVvAxun1D05+qcpxSdwLgk+F3U+prqKolX0CwaI Gtn1bnv3PDut0XqsC3Ap5GHQi0sZ4HqFeBK3g9r3RCUUDTwm6lkX487oRoiqloNm IMSpabvbZ+ec3C9TWGDjQy5OU9+GnKwTtn5XXNTPxuYlP+KBYF+61obIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJpB3n8QElqmoffHdL0LUCPCLLpMB8GA1UdIwQY MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjR44lta8 K2e+dBb7fMdRM2xormdIjFvAOXrYGYMQwKF1RYZRNsC3ceORPfUogyIpWo3Ow7bS thS05xpAjcy6+b9NwGXGmMa2q5/kEyGxuYxRdqG4IdT9dD9h44KEXrkyZe65bcaD cRwF9U7amY7ApZhqd5ZzFFNZ4+3F+bd9TpBx2yrRsh1viNKASxaCz4XO4I59syRE 6UZvJ1pqTcCud9E0ALiCOPC6I6X7jgfPreZfSH9KtGQMkxMEjfKbKGDv5m7VuVay bOI9vK2oDO6pgiFWez9UzSn9S7bZ/fRbelZMQabKHTk2uesDf8XuTskwzO9u7L3k kmkfOshJNZYStw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:15 2026 by rpki-client