This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft File: uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json) Hash identifier: bNeGIYIwGlXZN01SHV708z4Xtmxqlw7hKsaUYtzJv3U= Subject key identifier: 38:2A:F0:4B:DD:6C:80:5D:7A:81:12:A0:CD:81:04:A4:BC:5C:0C:8F Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA Certificate issuer: /CN=b88177a9a3469db3acf10a98f6c03931e35515fa Certificate serial: 019C4390B9F2729E5E3A4832079B1CDCB670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft Manifest number: 07A9 Signing time: Mon 09 Feb 2026 18:01:24 +0000 Manifest this update: Mon 09 Feb 2026 18:01:24 +0000 Manifest next update: Tue 10 Feb 2026 18:01:24 +0000 Files and hashes: 1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: LMAAaTPnula4UAn8+jMHB8bUjFAFTv4k+eVgUC+l69M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:b9:f2:72:9e:5e:3a:48:32:07:9b:1c:dc:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa Validity Not Before: Feb 9 18:01:24 2026 GMT Not After : Feb 10 18:01:24 2026 GMT Subject: CN=382af04bdd6c805d7a8112a0cd8104a4bc5c0c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:44:a9:62:18:1e:47:29:93:7c:58:a9:38: 6b:05:9a:1c:21:7e:fd:56:41:2c:1e:8b:aa:71:ea: c7:bc:ba:b2:cf:c8:44:74:49:7c:a1:63:77:cf:2d: 38:25:78:be:2e:dc:05:cf:63:04:e6:08:1d:d0:d0: 73:b5:31:fe:8a:8c:b6:f2:d7:d9:08:70:1f:0c:ae: 72:17:60:86:af:5a:43:33:44:b5:24:5d:05:0e:c0: 30:75:3f:3d:53:bb:93:8e:2a:20:de:25:0d:1d:04: af:ca:b7:59:70:ff:51:81:e4:97:46:0d:b2:c5:44: 1e:c0:a1:5b:1a:ca:7e:92:14:7f:b0:79:c7:7a:4b: f9:fb:ae:6b:e7:6a:cf:69:db:dd:12:8d:fb:52:2b: bb:55:41:43:81:67:06:0d:9b:d6:e9:84:31:e7:96: 8d:a9:b0:ff:19:7a:6a:0d:3b:f4:ff:fe:74:5b:f3: 8a:9b:98:50:b9:88:58:c3:a7:d4:1c:0f:4e:bb:63: c1:46:c9:06:65:35:1a:76:22:6f:56:a7:71:c4:bf: ba:9e:16:6a:d5:7e:00:e2:0e:50:dc:b4:32:a3:fc: 97:47:3a:96:04:e4:14:0b:b5:35:08:05:30:5b:98: 03:79:9f:aa:aa:25:b9:86:b5:e6:22:47:8e:13:11: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:F0:4B:DD:6C:80:5D:7A:81:12:A0:CD:81:04:A4:BC:5C:0C:8F X509v3 Authority Key Identifier: keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:35:e7:bc:4a:89:f3:0b:ba:21:01:ae:87:22:29:97:b0:72: 54:dc:b4:b5:13:a0:54:b1:c8:13:dd:ec:51:f7:e6:68:c4:89: a3:26:ee:b2:01:fe:40:b4:8e:ec:d5:d5:b7:72:4b:16:f2:fb: af:7f:d4:a5:87:9b:1c:16:65:64:ec:99:69:9f:d1:8b:ef:39: 0e:78:ab:ac:88:60:c3:12:8a:88:90:59:98:d0:77:53:12:33: c5:bf:cf:5d:18:94:b9:97:1a:0d:e9:0b:4f:8e:6d:1c:ff:99: 4b:d8:30:a5:f5:58:88:24:1e:67:87:98:5e:d4:ac:0c:c2:36: c8:4a:85:69:18:fd:18:79:fa:36:2e:46:0d:29:5e:b3:0f:a3: 25:a3:6e:50:e3:6e:df:80:9d:9f:c4:2e:72:8c:3a:d4:ee:a2: 72:eb:10:41:c3:13:e0:28:20:1c:6a:bb:18:e1:47:cb:f5:f8: 24:00:e4:4e:64:f2:20:4f:8a:b9:4d:74:47:96:57:1b:f2:94: c4:ba:dd:d9:d3:23:6b:a1:24:1e:88:90:b6:48:1a:2d:26:3b: 94:17:65:3e:85:b9:18:70:77:4e:e7:6d:b0:92:42:dd:e8:5c: ef:08:f7:8e:8e:8a:e9:45:d6:a0:73:7e:1e:b8:86:e4:11:cc: f2:e2:90:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkLnycp5eOkgyB5sc3LZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ODE3N2E5YTM0NjlkYjNhY2YxMGE5OGY2YzAzOTMxZTM1 NTE1ZmEwHhcNMjYwMjA5MTgwMTI0WhcNMjYwMjEwMTgwMTI0WjAzMTEwLwYDVQQD EygzODJhZjA0YmRkNmM4MDVkN2E4MTEyYTBjZDgxMDRhNGJjNWMwYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldBEqWIYHkcpk3xYqThrBZocIX79 VkEsHouqcerHvLqyz8hEdEl8oWN3zy04JXi+LtwFz2ME5ggd0NBztTH+ioy28tfZ CHAfDK5yF2CGr1pDM0S1JF0FDsAwdT89U7uTjiog3iUNHQSvyrdZcP9RgeSXRg2y xUQewKFbGsp+khR/sHnHekv5+65r52rPadvdEo37Uiu7VUFDgWcGDZvW6YQx55aN qbD/GXpqDTv0//50W/OKm5hQuYhYw6fUHA9Ou2PBRskGZTUadiJvVqdxxL+6nhZq 1X4A4g5Q3LQyo/yXRzqWBOQUC7U1CAUwW5gDeZ+qqiW5hrXmIkeOExEMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgq8EvdbIBdeoESoM2BBKS8XAyPMB8GA1UdIwQY MBaAFLiBd6mjRp2zrPEKmPbAOTHjVRX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2MwYTktNjhiMS00MGZkLWExZTct ZWIwODg1YjkwMDNlLzEvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8yM2MwYTktNjhiMS00MGZkLWExZTctZWIwODg1YjkwMDNl LzEvdUlGM3FhTkduYk9zOFFxWTlzQTVNZU5WRmZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTXnvEqJ 8wu6IQGuhyIpl7ByVNy0tROgVLHIE93sUffmaMSJoybusgH+QLSO7NXVt3JLFvL7 r3/UpYebHBZlZOyZaZ/Ri+85DnirrIhgwxKKiJBZmNB3UxIzxb/PXRiUuZcaDekL T45tHP+ZS9gwpfVYiCQeZ4eYXtSsDMI2yEqFaRj9GHn6Ni5GDSlesw+jJaNuUONu 34Cdn8Qucow61O6icusQQcMT4CggHGq7GOFHy/X4JADkTmTyIE+KuU10R5ZXG/KU xLrd2dMja6EkHoiQtkgaLSY7lBdlPoW5GHB3TudtsJJC3ehc7wj3jo6K6UXWoHN+ HriG5BHM8uKQJQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:59 2026 by rpki-client