This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json) Hash identifier: Lse5oxnVxMiTUcxYWoJH8QdOtUxR9TMGvFqwFCHGkwE= Subject key identifier: 8B:AA:83:39:51:3D:09:FD:85:0F:1A:21:C4:76:41:AA:CB:AB:D2:00 Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751 Certificate serial: 019C42B3EE9A0917F3DE3B4EE47584A94101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft Manifest number: 0ACD Signing time: Mon 09 Feb 2026 14:00:14 +0000 Manifest this update: Mon 09 Feb 2026 14:00:14 +0000 Manifest next update: Tue 10 Feb 2026 14:00:14 +0000 Files and hashes: 1: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: oC3s4WD8ay13w6Iy59fCloOYxyKb3Qw1UJ5elrCk0TY=) 2: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:ee:9a:09:17:f3:de:3b:4e:e4:75:84:a9:41:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751 Validity Not Before: Feb 9 14:00:14 2026 GMT Not After : Feb 10 14:00:14 2026 GMT Subject: CN=8baa8339513d09fd850f1a21c47641aacbabd200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:57:d1:d1:10:9d:d2:5e:1e:93:4c:e2:62: fc:6b:d0:cf:da:6c:bc:ae:97:c5:c4:a6:1e:98:6a: df:97:46:69:8e:a7:70:63:92:a3:85:0f:e6:28:07: 31:75:54:c4:65:12:f2:05:dc:f8:7c:c8:1c:26:63: 03:04:11:49:17:7c:4b:0e:35:b9:8c:8f:c2:d4:f9: cf:6d:21:06:5a:04:02:05:ab:f8:d4:bb:90:c3:30: b8:af:1d:f0:c1:89:e1:a7:87:ee:4b:2d:2c:cf:48: 7c:ff:3e:84:70:0a:e0:72:77:eb:7d:82:66:36:77: ee:d9:d8:86:a6:8b:82:05:06:56:bc:a9:e7:56:35: 5e:c3:8a:61:3b:bf:7a:b1:be:f3:8f:c5:98:c9:e3: 2c:d6:2d:5e:fd:96:a6:60:fb:f4:b6:4f:91:1d:d5: e3:b9:39:d6:bb:aa:9f:dc:ef:76:a9:64:f2:b8:e2: c6:73:ac:fe:79:57:5b:92:e0:ae:52:b7:f6:1a:5a: b5:84:c3:ba:79:38:d2:cb:7b:45:72:ea:93:2f:bc: c8:d0:56:f9:4b:09:94:9e:15:ff:34:03:a3:8d:22: 33:f6:1e:0b:9a:68:9f:57:08:d3:ce:9e:61:f4:ed: a5:2b:0f:7e:b3:e0:f6:40:17:d0:70:2d:ec:06:08: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AA:83:39:51:3D:09:FD:85:0F:1A:21:C4:76:41:AA:CB:AB:D2:00 X509v3 Authority Key Identifier: keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c8:5f:9c:c0:51:8b:d7:d6:01:45:38:8f:75:cc:54:7c:58: 59:b7:50:1b:55:52:b7:35:bb:27:4f:f7:be:c0:4d:26:40:76: fd:43:4e:30:44:4b:47:82:98:3b:c5:7a:5a:fd:7c:b4:e3:72: 57:4a:41:63:8c:1c:ac:3a:56:59:7c:6e:6b:dd:31:00:8a:25: 7c:43:86:31:1e:15:db:2e:d3:42:2b:9f:7e:81:81:94:17:5f: f0:d1:01:02:0b:d8:7e:ea:62:e3:f3:e2:a6:c4:c8:f5:96:6d: f6:70:58:ad:7b:38:ef:c6:d7:f7:0e:f2:29:60:1b:f9:fc:44: b0:71:80:fe:6c:5b:7e:b6:85:5f:84:ca:06:3b:63:47:02:2a: 61:2c:19:83:4e:4e:78:06:a2:e9:13:51:d4:49:9e:00:77:03: 3c:15:4d:19:ee:26:47:9e:b8:db:ee:1b:ca:bd:92:8c:43:82: f8:75:9d:f3:8a:a2:53:97:22:10:f6:bb:fa:88:30:b6:81:61: c8:8b:5c:0f:95:3e:30:81:43:20:41:b4:02:33:30:8c:17:f7: a9:14:1c:f5:91:75:71:4c:66:38:b2:b2:5a:e0:71:fc:55:df: ed:24:db:c1:43:23:2e:b7:b9:da:db:b5:e0:fe:fb:1a:f7:59: 76:2c:d6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs+6aCRfz3jtO5HWEqUEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5 M2Q3NTEwHhcNMjYwMjA5MTQwMDE0WhcNMjYwMjEwMTQwMDE0WjAzMTEwLwYDVQQD Eyg4YmFhODMzOTUxM2QwOWZkODUwZjFhMjFjNDc2NDFhYWNiYWJkMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DBX0dEQndJeHpNM4mL8a9DP2my8 rpfFxKYemGrfl0ZpjqdwY5KjhQ/mKAcxdVTEZRLyBdz4fMgcJmMDBBFJF3xLDjW5 jI/C1PnPbSEGWgQCBav41LuQwzC4rx3wwYnhp4fuSy0sz0h8/z6EcArgcnfrfYJm Nnfu2diGpouCBQZWvKnnVjVew4phO796sb7zj8WYyeMs1i1e/ZamYPv0tk+RHdXj uTnWu6qf3O92qWTyuOLGc6z+eVdbkuCuUrf2Glq1hMO6eTjSy3tFcuqTL7zI0Fb5 SwmUnhX/NAOjjSIz9h4LmmifVwjTzp5h9O2lKw9+s+D2QBfQcC3sBggB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuqgzlRPQn9hQ8aIcR2QarLq9IAMB8GA1UdIwQY MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWshfnMBR i9fWAUU4j3XMVHxYWbdQG1VStzW7J0/3vsBNJkB2/UNOMERLR4KYO8V6Wv18tONy V0pBY4wcrDpWWXxua90xAIolfEOGMR4V2y7TQiuffoGBlBdf8NEBAgvYfupi4/Pi psTI9ZZt9nBYrXs478bX9w7yKWAb+fxEsHGA/mxbfraFX4TKBjtjRwIqYSwZg05O eAai6RNR1EmeAHcDPBVNGe4mR5642+4byr2SjEOC+HWd84qiU5ciEPa7+ogwtoFh yItcD5U+MIFDIEG0AjMwjBf3qRQc9ZF1cUxmOLKyWuBx/FXf7STbwUMjLre52tu1 4P77GvdZdizWFw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:44 2026 by rpki-client