This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json) Hash identifier: qHO2OO0VwayfVhuDf0ci6hL5w8icbCFBlPbHBcyaEgo= Subject key identifier: E5:B6:00:F2:F0:D3:A7:51:F0:2C:5B:21:B6:30:ED:47:FD:6D:32:09 Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Certificate serial: 019C4133888E87A57DE4CC11CCBCB16269C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft Manifest number: 08B9 Signing time: Mon 09 Feb 2026 07:00:22 +0000 Manifest this update: Mon 09 Feb 2026 07:00:22 +0000 Manifest next update: Tue 10 Feb 2026 07:00:22 +0000 Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: zXgUxZ8ZfiorkQ6r0z9fUsVFPl68906Xa+bH/8gcNoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:88:8e:87:a5:7d:e4:cc:11:cc:bc:b1:62:69:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827 Validity Not Before: Feb 9 07:00:22 2026 GMT Not After : Feb 10 07:00:22 2026 GMT Subject: CN=e5b600f2f0d3a751f02c5b21b630ed47fd6d3209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:90:f4:9e:68:c1:e2:3b:48:e0:34:a0:fc: 39:1e:20:b9:f9:5f:da:a3:4b:b7:b3:e8:ca:ad:99: 0e:94:59:87:ca:d6:46:bd:e6:15:66:54:28:c4:4b: 88:94:d4:89:ca:31:32:30:30:cc:22:73:14:41:65: c9:d8:ef:76:f0:46:7b:0d:56:5a:e4:a2:43:96:d6: 2f:1a:66:2c:dc:3c:72:70:2f:c2:71:5a:23:65:d2: 59:d1:25:5b:e7:5c:94:9c:c4:39:18:47:2d:4c:30: 7d:95:47:3c:6c:11:bd:8a:df:33:f3:13:ba:b2:e6: 00:f1:75:dd:3c:dd:67:cb:7f:b1:ca:fe:5f:7d:da: e0:68:86:b9:f7:5d:9e:c6:7b:b3:1b:37:77:4e:fe: 1a:9a:7c:57:53:d4:99:7d:ea:23:0d:e4:73:d9:ae: 0d:65:69:c6:b0:d7:d9:8b:6c:65:9c:41:6b:04:4b: 00:dc:df:02:28:53:43:25:dc:e2:73:de:a7:82:46: b4:52:f3:89:db:6e:2a:28:ed:10:28:87:35:be:c3: 88:bd:95:88:f0:1e:38:ee:72:e5:f2:0c:0c:39:18: f2:20:f2:c4:ac:b1:49:98:95:20:e1:99:44:d8:a0: cb:9f:fb:48:57:e9:3e:16:c1:b3:f4:be:2d:73:83: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B6:00:F2:F0:D3:A7:51:F0:2C:5B:21:B6:30:ED:47:FD:6D:32:09 X509v3 Authority Key Identifier: keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b1:6a:4f:34:27:44:4e:3d:20:9d:ad:26:3e:2a:c1:39:1d: 21:5b:8a:7a:dd:2d:df:cf:7c:f7:dc:02:da:60:56:9c:d9:a5: 64:31:f4:4a:38:9c:72:6b:25:c6:bb:27:3b:6c:df:07:a4:87: 5e:c7:7d:bd:0c:86:4c:47:25:dd:09:02:03:ff:a1:cd:23:ee: 90:a9:10:e1:da:8f:a8:9f:8b:1f:96:95:1e:c9:23:3c:02:cd: c7:5e:34:e0:42:e6:88:8e:99:ef:b5:df:ce:1f:4e:a9:9a:0b: c2:dc:b1:f5:6a:e7:34:c3:82:e9:8c:94:97:77:4e:2f:26:d4: 4e:0d:33:a7:b6:36:3b:54:a9:b3:24:48:95:26:e5:a0:c1:4d: ac:6b:9e:09:1b:66:e5:a0:a2:f9:41:66:67:21:8c:8e:d6:89: 94:53:84:98:3e:b5:38:fd:b2:34:12:ef:b2:3b:6d:7c:ce:67: 49:c4:36:22:87:61:e3:2f:e4:31:f1:89:fb:58:eb:0d:dc:1c: 5a:3e:e6:a8:59:a7:1f:21:d5:84:25:f7:06:e3:dd:70:a4:7c: e5:c1:07:97:b4:0e:cf:f3:53:71:68:f7:a3:28:ca:12:11:0d: 14:af:35:ee:c1:21:a3:a3:87:f6:be:a6:cc:2e:ef:9b:f3:98: a3:c0:ef:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4iOh6V95MwRzLyxYmnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYjkxNDAxN2RiNDVlOWY3NWUzOGRkZTNmMDM1N2NlMmI3 MWQ4MjcwHhcNMjYwMjA5MDcwMDIyWhcNMjYwMjEwMDcwMDIyWjAzMTEwLwYDVQQD EyhlNWI2MDBmMmYwZDNhNzUxZjAyYzViMjFiNjMwZWQ0N2ZkNmQzMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkyQ9J5oweI7SOA0oPw5HiC5+V/a o0u3s+jKrZkOlFmHytZGveYVZlQoxEuIlNSJyjEyMDDMInMUQWXJ2O928EZ7DVZa 5KJDltYvGmYs3DxycC/CcVojZdJZ0SVb51yUnMQ5GEctTDB9lUc8bBG9it8z8xO6 suYA8XXdPN1ny3+xyv5ffdrgaIa5912exnuzGzd3Tv4amnxXU9SZfeojDeRz2a4N ZWnGsNfZi2xlnEFrBEsA3N8CKFNDJdzic96ngka0UvOJ224qKO0QKIc1vsOIvZWI 8B447nLl8gwMORjyIPLErLFJmJUg4ZlE2KDLn/tIV+k+FsGz9L4tc4NqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOW2APLw06dR8CxbIbYw7Uf9bTIJMB8GA1UdIwQY MBaAFLu5FAF9tF6fdeON3j8DV84rcdgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMt NmJlOTdlMzcyNDFmLzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9hM2JiZjItMjYxZS00NGU4LWI5YmMtNmJlOTdlMzcyNDFm LzEvdTdrVUFYMjBYcDkxNDQzZVB3Tlh6aXR4MkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrFqTzQn RE49IJ2tJj4qwTkdIVuKet0t389899wC2mBWnNmlZDH0SjiccmslxrsnO2zfB6SH Xsd9vQyGTEcl3QkCA/+hzSPukKkQ4dqPqJ+LH5aVHskjPALNx1404ELmiI6Z77Xf zh9OqZoLwtyx9WrnNMOC6YyUl3dOLybUTg0zp7Y2O1SpsyRIlSbloMFNrGueCRtm 5aCi+UFmZyGMjtaJlFOEmD61OP2yNBLvsjttfM5nScQ2Iodh4y/kMfGJ+1jrDdwc Wj7mqFmnHyHVhCX3BuPdcKR85cEHl7QOz/NTcWj3oyjKEhENFK817sEho6OH9r6m zC7vm/OYo8DvDg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:41 2026 by rpki-client