This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json) Hash identifier: 4/tpdFwxAN47EyLJv82Rn4UkAw4LzdfJnPx3wyjXcM0= Subject key identifier: D0:A5:F9:AC:43:88:A8:D7:26:41:1A:24:A2:97:F2:34:E3:A1:C3:E3 Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61 Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761 Certificate serial: 019C435951A5030CDECB72DF3948B3E0E3D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft Manifest number: 019C Signing time: Mon 09 Feb 2026 17:00:52 +0000 Manifest this update: Mon 09 Feb 2026 17:00:52 +0000 Manifest next update: Tue 10 Feb 2026 17:00:52 +0000 Files and hashes: 1: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: B+bFq84bFbiPwX8AiVbxZcD5/GJvx+D3omTVWOfejig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:51:a5:03:0c:de:cb:72:df:39:48:b3:e0:e3:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761 Validity Not Before: Feb 9 17:00:52 2026 GMT Not After : Feb 10 17:00:52 2026 GMT Subject: CN=d0a5f9ac4388a8d726411a24a297f234e3a1c3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:44:fa:88:7c:2a:8f:be:df:e1:eb:22:fe: b1:c6:45:a1:98:81:85:c7:d3:3d:ff:6a:0d:31:07: b5:7f:2d:9a:e7:89:9a:05:ec:6c:70:18:05:13:ff: a4:85:f2:4a:68:96:a9:1d:a1:8e:a7:92:f1:7a:ea: 8a:d5:64:3c:52:18:56:ad:2d:3f:be:9e:c5:aa:41: a7:10:ab:15:42:f0:65:c6:c2:c3:3f:3f:df:53:89: 61:38:90:e2:d5:7b:ad:77:24:06:e8:ec:b3:f6:a3: af:08:1d:e9:35:af:83:9a:88:71:8e:20:8a:f4:db: b1:e8:a3:5b:4b:7e:ac:df:25:f3:d3:c4:f5:67:a4: ee:09:d3:44:df:3b:82:0e:39:c9:a3:7b:95:0e:04: 38:a5:2f:e0:69:fb:4e:8f:c4:75:10:09:75:42:7a: db:f1:76:dd:09:06:cb:6e:52:6f:7a:ad:03:81:fb: 2c:2d:8d:2f:11:f4:b8:d8:84:61:3d:84:c1:bf:cc: 01:e1:fd:e5:36:89:a5:94:60:e1:b6:dc:ee:f6:c8: 61:01:f2:08:21:bc:31:8d:04:c1:8a:0a:83:35:02: d8:22:18:c2:da:f0:0e:e9:b5:52:f8:62:f4:aa:d6: 96:6a:6f:28:ee:7b:56:9b:b0:c9:2c:60:02:44:e4: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A5:F9:AC:43:88:A8:D7:26:41:1A:24:A2:97:F2:34:E3:A1:C3:E3 X509v3 Authority Key Identifier: keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:af:c6:e4:0c:05:71:3d:8d:fe:f0:22:24:5e:fa:3a:b1:65: 4b:df:89:01:49:0e:d3:19:9b:a6:92:ed:ea:06:9d:2f:81:b6: 33:b4:63:9b:95:de:27:e1:ca:c5:82:f4:a3:96:d6:3c:54:bf: ca:3e:b8:00:4b:4a:36:79:ae:8a:fe:b9:9b:1e:03:07:78:45: 5f:92:7f:46:13:e4:1d:0a:33:af:ca:88:3f:c6:e6:14:18:3d: 37:77:8f:bf:49:07:ed:3c:fd:ba:8f:8e:46:3f:22:ff:b2:e0: 93:1a:db:6b:c8:eb:23:e0:ee:05:7d:88:25:b4:80:a2:5f:c6: b2:51:1a:07:e4:78:21:70:23:d2:db:8b:fb:cd:72:b3:b9:76: 8d:f0:81:28:05:3d:24:5f:01:dc:59:70:3b:a8:a7:e9:73:db: 63:80:67:a4:6b:47:f1:bb:78:84:01:ae:0f:e4:3f:ef:0d:62: 9d:cd:7a:58:2f:46:96:04:dd:37:9d:be:ef:55:f5:82:2e:7c: 4b:61:ed:1f:c4:0a:75:d1:2a:1d:48:1a:46:d1:ce:7e:33:de: 77:29:a4:44:38:2e:bb:5c:ef:aa:af:a4:f8:cb:c7:6d:0c:50: 22:6d:ac:36:56:ac:6a:53:06:8f:06:06:cb:f3:8e:8f:d2:25: ba:d5:06:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVGlAwzey3LfOUiz4OPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzA2ZjVmNDZkYmRiNDEzNjA0MmEyYmUzOGQwNWQyMjJh N2M3NjEwHhcNMjYwMjA5MTcwMDUyWhcNMjYwMjEwMTcwMDUyWjAzMTEwLwYDVQQD EyhkMGE1ZjlhYzQzODhhOGQ3MjY0MTFhMjRhMjk3ZjIzNGUzYTFjM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4NE+oh8Ko++3+HrIv6xxkWhmIGF x9M9/2oNMQe1fy2a54maBexscBgFE/+khfJKaJapHaGOp5LxeuqK1WQ8UhhWrS0/ vp7FqkGnEKsVQvBlxsLDPz/fU4lhOJDi1XutdyQG6Oyz9qOvCB3pNa+DmohxjiCK 9Nux6KNbS36s3yXz08T1Z6TuCdNE3zuCDjnJo3uVDgQ4pS/gaftOj8R1EAl1Qnrb 8XbdCQbLblJveq0DgfssLY0vEfS42IRhPYTBv8wB4f3lNomllGDhttzu9shhAfII IbwxjQTBigqDNQLYIhjC2vAO6bVS+GL0qtaWam8o7ntWm7DJLGACROQdnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCl+axDiKjXJkEaJKKX8jTjocPjMB8GA1UdIwQY MBaAFFEwb19G29tBNgQqK+ONBdIip8dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNzQzZWItYzk2ZS00OTI0LTg1ZmMt NjBiM2E1OWM2MDc3LzEvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNzQzZWItYzk2ZS00OTI0LTg1ZmMtNjBiM2E1OWM2MDc3 LzEvVVRCdlgwYmIyMEUyQkNvcjQ0MEYwaUtueDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja/G5AwF cT2N/vAiJF76OrFlS9+JAUkO0xmbppLt6gadL4G2M7Rjm5XeJ+HKxYL0o5bWPFS/ yj64AEtKNnmuiv65mx4DB3hFX5J/RhPkHQozr8qIP8bmFBg9N3ePv0kH7Tz9uo+O Rj8i/7Lgkxrba8jrI+DuBX2IJbSAol/GslEaB+R4IXAj0tuL+81ys7l2jfCBKAU9 JF8B3FlwO6in6XPbY4BnpGtH8bt4hAGuD+Q/7w1inc16WC9GlgTdN52+71X1gi58 S2HtH8QKddEqHUgaRtHOfjPedymkRDguu1zvqq+k+MvHbQxQIm2sNlasalMGjwYG y/OOj9IlutUG1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:59 2026 by rpki-client