This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json) Hash identifier: aMHqxqmC0RWgODCfLTg7Cd0+AzayBx9QNmPAr9W1tdE= Subject key identifier: DD:74:16:D2:42:D3:64:69:5D:F9:4A:69:1B:7A:9F:0D:13:15:17:FC Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7 Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7 Certificate serial: 019C427D663597DB935C001457B39343761F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft Manifest number: 07B4 Signing time: Mon 09 Feb 2026 13:00:40 +0000 Manifest this update: Mon 09 Feb 2026 13:00:40 +0000 Manifest next update: Tue 10 Feb 2026 13:00:40 +0000 Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: r+bNQYRRpFsMp0CRCm7C/NIRsCzU9jq2yyq4oYbvnrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:66:35:97:db:93:5c:00:14:57:b3:93:43:76:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7 Validity Not Before: Feb 9 13:00:40 2026 GMT Not After : Feb 10 13:00:40 2026 GMT Subject: CN=dd7416d242d364695df94a691b7a9f0d131517fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:ae:14:38:42:3f:fd:ac:11:74:a5:ea:07: 21:1d:f2:d2:23:8e:6c:3f:b1:e8:d2:cf:b7:df:20: ca:61:21:aa:3e:ad:81:77:f3:a2:07:0e:4d:4f:7c: 7c:c3:69:4b:83:5e:a2:fb:c3:2d:81:b8:b3:3c:7e: 86:c1:99:4c:33:cd:a8:62:0c:83:51:c7:7e:9a:78: 02:12:ac:21:39:5e:46:1b:c2:fb:57:2f:79:3e:68: 02:c0:8d:91:22:7b:b0:de:83:8b:0f:d5:0d:90:91: 9d:26:ce:fa:db:83:7d:c2:fd:94:eb:cd:98:71:ca: ef:e2:af:39:80:ad:48:06:42:2d:46:dc:a2:7e:c2: 55:a9:da:0f:46:e3:22:3d:e7:f5:27:51:0e:aa:79: d4:c8:b2:eb:b0:13:52:0a:ef:d2:9b:f8:0f:3e:81: b1:b1:f0:ed:f0:ba:36:46:bb:eb:d8:6d:5b:d6:33: 8f:85:cd:11:0f:08:34:fe:97:86:3d:2e:4c:ae:d3: 56:ba:d6:89:77:9d:8d:4c:62:ab:ed:0a:51:55:be: e8:94:dc:57:45:d5:66:5c:28:8d:7e:4c:97:a8:b2: be:b1:34:b1:95:71:4f:fe:c1:c9:45:56:41:3c:18: e0:e8:7f:6c:6e:b9:0b:4c:c5:b2:50:0d:a7:d2:fe: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:74:16:D2:42:D3:64:69:5D:F9:4A:69:1B:7A:9F:0D:13:15:17:FC X509v3 Authority Key Identifier: keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ba:c2:c8:3b:5e:55:f9:22:a7:4f:01:fb:55:9d:97:0a:44: 82:0f:f0:ad:65:a1:fe:10:90:d7:a8:77:29:cb:9d:81:10:37: cc:22:76:cc:a9:b3:c4:2c:7d:57:6e:92:28:6a:77:dd:9c:9d: 4b:40:53:ce:05:1f:0e:d7:cd:0d:13:ba:6a:4f:88:4a:7c:e8: 4d:4f:7f:af:71:81:b0:52:24:31:ff:c8:1e:20:3e:ac:f4:59: fa:c3:cb:e7:2b:19:c9:5d:cf:a4:5e:91:7f:aa:31:b8:89:17: 41:8b:6f:59:76:a8:b2:95:8a:8f:14:7c:9d:4b:62:15:3d:3e: 54:6d:04:8b:30:77:57:c7:58:07:84:20:bd:83:e3:b6:1c:69: 17:d0:b4:b1:f9:95:04:bb:91:e6:46:21:26:88:bd:ef:a4:11: 95:1c:db:e6:3e:7f:66:66:ba:ad:3c:70:c3:7c:68:4f:e2:b4: 8f:c3:b6:c3:ef:d5:7d:4e:f5:85:0e:88:fb:62:11:4c:a2:29: d5:b1:9e:c8:c4:25:64:7d:d7:0e:33:68:80:4e:f7:3b:7b:f7: 63:a8:43:38:94:20:4c:6c:3c:3c:d0:49:d2:da:11:30:ae:fc: 2a:61:1e:96:2b:4c:66:a5:74:56:ca:2c:16:f9:6d:01:27:ed: e4:39:c6:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWY1l9uTXAAUV7OTQ3YfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDQ3ODRmYzJmNTZhZGFkZTdkYjc2MjMzZDEzNmVlOWI3 YmViYzcwHhcNMjYwMjA5MTMwMDQwWhcNMjYwMjEwMTMwMDQwWjAzMTEwLwYDVQQD EyhkZDc0MTZkMjQyZDM2NDY5NWRmOTRhNjkxYjdhOWYwZDEzMTUxN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupKuFDhCP/2sEXSl6gchHfLSI45s P7Ho0s+33yDKYSGqPq2Bd/OiBw5NT3x8w2lLg16i+8MtgbizPH6GwZlMM82oYgyD Ucd+mngCEqwhOV5GG8L7Vy95PmgCwI2RInuw3oOLD9UNkJGdJs7624N9wv2U682Y ccrv4q85gK1IBkItRtyifsJVqdoPRuMiPef1J1EOqnnUyLLrsBNSCu/Sm/gPPoGx sfDt8Lo2Rrvr2G1b1jOPhc0RDwg0/peGPS5MrtNWutaJd52NTGKr7QpRVb7olNxX RdVmXCiNfkyXqLK+sTSxlXFP/sHJRVZBPBjg6H9sbrkLTMWyUA2n0v4zlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN10FtJC02RpXflKaRt6nw0TFRf8MB8GA1UdIwQY MBaAFKVEeE/C9Wra3n23YjPRNu6be+vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDIt OGNiZWVmYzkyZjlhLzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80OGY3OTktNDQ0My00OWY4LTkyNDItOGNiZWVmYzkyZjlh LzEvcFVSNFQ4TDFhdHJlZmJkaU05RTI3cHQ3NjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7rCyDte Vfkip08B+1WdlwpEgg/wrWWh/hCQ16h3KcudgRA3zCJ2zKmzxCx9V26SKGp33Zyd S0BTzgUfDtfNDRO6ak+ISnzoTU9/r3GBsFIkMf/IHiA+rPRZ+sPL5ysZyV3PpF6R f6oxuIkXQYtvWXaospWKjxR8nUtiFT0+VG0EizB3V8dYB4QgvYPjthxpF9C0sfmV BLuR5kYhJoi976QRlRzb5j5/Zma6rTxww3xoT+K0j8O2w+/VfU71hQ6I+2IRTKIp 1bGeyMQlZH3XDjNogE73O3v3Y6hDOJQgTGw8PNBJ0toRMK78KmEelitMZqV0Vsos FvltASft5DnGXg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:59 2026 by rpki-client