This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json) Hash identifier: C+Wc8SlPh7NJBV2J7iZDcmZhv/dnACnyF176DUb92DE= Subject key identifier: 40:2C:CC:BB:80:95:32:E1:42:6C:46:A8:C7:93:45:79:F5:2B:EF:B7 Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Certificate serial: 019C42EBB9F5B3A22DA0C618846195CF1B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft Manifest number: 1097 Signing time: Mon 09 Feb 2026 15:01:10 +0000 Manifest this update: Mon 09 Feb 2026 15:01:10 +0000 Manifest next update: Tue 10 Feb 2026 15:01:10 +0000 Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: YpQamNKZeYxGBDCferNX/b1/zN1RZHXNM4S8b3IQihU=) 2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b9:f5:b3:a2:2d:a0:c6:18:84:61:95:cf:1b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024 Validity Not Before: Feb 9 15:01:10 2026 GMT Not After : Feb 10 15:01:10 2026 GMT Subject: CN=402cccbb809532e1426c46a8c7934579f52befb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:81:6d:89:8d:51:58:03:31:03:a1:bf:f4: 96:bc:73:da:ef:dd:38:12:ad:9b:00:6e:21:b3:03: aa:52:47:22:7c:00:a0:5b:5d:d1:09:a2:b9:ed:03: dc:cf:b0:90:71:0a:9a:d3:6f:b9:74:8c:3d:c4:65: 10:5b:de:51:b8:6a:05:40:05:80:6f:4d:ab:74:f7: 22:8c:99:fe:08:30:40:fa:5d:8f:78:de:e9:a1:03: 9e:33:2b:45:e7:6c:03:7a:8b:1e:65:df:4a:54:9a: 6a:df:14:e0:0c:05:af:db:53:aa:70:be:46:28:50: 66:0b:2b:ed:8e:9f:96:bb:f4:5e:d0:de:fd:aa:25: d0:ac:cf:87:16:21:22:96:8b:77:8a:04:ca:c1:ec: 83:33:c6:c3:59:7c:bb:e8:75:ef:a1:d1:18:61:78: ac:3f:5b:62:86:09:7c:57:1d:00:70:13:1d:44:8d: f0:2f:c3:f5:4d:be:6a:b8:3e:ac:65:40:6c:fb:19: 2a:1b:ec:4a:9c:a6:90:56:71:6e:30:4d:89:a6:58: b2:1b:94:52:06:21:e9:61:d6:05:6f:a3:46:5a:54: 37:97:c6:6e:f6:bf:9e:d7:1b:ff:4d:fe:b7:49:42: 8f:f2:20:40:30:71:16:aa:ee:ab:11:98:94:18:a5: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2C:CC:BB:80:95:32:E1:42:6C:46:A8:C7:93:45:79:F5:2B:EF:B7 X509v3 Authority Key Identifier: keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:be:f4:a8:00:17:3b:80:a1:a0:7c:80:d5:9f:c7:76:33:01: 9e:e8:f9:c6:aa:9f:59:04:2f:e8:ac:86:61:61:63:59:d9:ae: 76:95:93:fd:ab:a6:fa:e6:8a:28:cd:1a:b8:a3:43:27:ce:f8: 6f:b8:9a:1b:c3:38:c7:d7:39:bc:f2:64:18:94:68:f2:ec:f0: 92:0b:41:fd:5e:9b:6e:22:c5:26:b2:5e:2b:9a:67:16:63:21: c5:1b:8e:fa:7a:54:fb:16:78:e4:ec:58:4f:6e:11:6a:bd:e5: b8:3c:82:f8:c2:6f:bd:7e:35:62:a3:c2:df:bb:a2:08:15:5a: 05:8b:ac:58:e4:0e:3d:25:f0:07:6a:f6:18:5c:9c:85:d7:bf: 3f:9f:d1:e1:e7:56:8a:56:49:9e:e4:59:f9:f8:9b:c5:53:91: e4:7d:11:b1:17:59:ce:ef:90:4f:25:2c:12:04:c4:a0:ad:b3: 32:1d:a3:35:6f:ac:d5:17:78:bc:3d:94:7c:1b:a7:93:65:00: e6:1d:33:0b:6e:22:9e:a0:3c:7b:9f:a8:75:c6:9b:4d:fe:d4: 84:56:04:75:02:31:c3:c3:cb:46:dc:5e:63:c9:6a:d3:5f:63: 52:e6:a9:c9:1a:27:8c:69:01:98:c4:08:73:41:cb:3a:5d:d1: 1b:ae:98:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67n1s6ItoMYYhGGVzxtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4 ZTQwMjQwHhcNMjYwMjA5MTUwMTEwWhcNMjYwMjEwMTUwMTEwWjAzMTEwLwYDVQQD Eyg0MDJjY2NiYjgwOTUzMmUxNDI2YzQ2YThjNzkzNDU3OWY1MmJlZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsaBbYmNUVgDMQOhv/SWvHPa7904 Eq2bAG4hswOqUkcifACgW13RCaK57QPcz7CQcQqa02+5dIw9xGUQW95RuGoFQAWA b02rdPcijJn+CDBA+l2PeN7poQOeMytF52wDeoseZd9KVJpq3xTgDAWv21OqcL5G KFBmCyvtjp+Wu/Re0N79qiXQrM+HFiEilot3igTKweyDM8bDWXy76HXvodEYYXis P1tihgl8Vx0AcBMdRI3wL8P1Tb5quD6sZUBs+xkqG+xKnKaQVnFuME2JpliyG5RS BiHpYdYFb6NGWlQ3l8Zu9r+e1xv/Tf63SUKP8iBAMHEWqu6rEZiUGKUVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAszLuAlTLhQmxGqMeTRXn1K++3MB8GA1UdIwQY MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI770qAAX O4ChoHyA1Z/HdjMBnuj5xqqfWQQv6KyGYWFjWdmudpWT/aum+uaKKM0auKNDJ874 b7iaG8M4x9c5vPJkGJRo8uzwkgtB/V6bbiLFJrJeK5pnFmMhxRuO+npU+xZ45OxY T24Rar3luDyC+MJvvX41YqPC37uiCBVaBYusWOQOPSXwB2r2GFychde/P5/R4edW ilZJnuRZ+fibxVOR5H0RsRdZzu+QTyUsEgTEoK2zMh2jNW+s1Rd4vD2UfBunk2UA 5h0zC24inqA8e5+odcabTf7UhFYEdQIxw8PLRtxeY8lq019jUuapyRonjGkBmMQI c0HLOl3RG66YGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:10 2026 by rpki-client