This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json) Hash identifier: h/EyRG2c1yo1qa1jP3ZI0FjLfuiBKXzYiR7xT86GGkk= Subject key identifier: A4:B8:5B:8B:39:07:09:7D:39:31:71:CC:97:CF:40:1C:DF:F2:76:70 Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Certificate serial: 019C427D363BB889A92482EA2B297F370F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft Manifest number: 1572 Signing time: Mon 09 Feb 2026 13:00:27 +0000 Manifest this update: Mon 09 Feb 2026 13:00:27 +0000 Manifest next update: Tue 10 Feb 2026 13:00:27 +0000 Files and hashes: 1: NGBYVNMlRzkNddaz0SJ5GUPHy4c.roa (hash: HQab6e2lCxRpGeUa7RhxSOTl0QwADQrxIBu98J8LSqI=) 2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: l+lb/C9KaL/wNc5i1kF+JDAxtrACfxJ0f1yOSVvt8Os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:36:3b:b8:89:a9:24:82:ea:2b:29:7f:37:0f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Validity Not Before: Feb 9 13:00:27 2026 GMT Not After : Feb 10 13:00:27 2026 GMT Subject: CN=a4b85b8b3907097d393171cc97cf401cdff27670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:29:47:95:0f:ae:42:1e:9a:7c:d2:aa:e4: 69:2b:3c:cc:61:f7:e8:70:bf:41:1f:0b:96:43:5f: a3:93:6b:9d:63:59:13:16:9c:21:59:cb:b8:cf:80: d8:4e:90:89:7d:55:b6:da:46:85:c4:39:4a:b7:ba: 53:c9:4e:3b:40:37:d2:91:fc:1a:55:0d:e2:60:93: d4:f1:18:02:61:25:eb:5b:b8:f8:90:d9:52:f4:43: f6:33:dc:1b:03:0e:87:9a:fa:09:66:d7:e1:e9:e2: 16:52:b4:52:31:f7:17:0d:3c:4f:31:9f:1c:ac:09: 99:4c:14:87:79:fc:55:31:65:e2:4e:5a:ab:6d:f1: bc:84:e3:09:51:33:7b:97:0d:97:69:ba:18:cd:ab: cc:42:9a:db:1d:6b:4d:a2:83:cb:b0:6a:e8:f8:f5: 70:3e:3b:7e:fb:0e:51:c4:ff:2f:85:aa:e8:00:5b: 3f:20:53:5c:cb:66:c0:91:73:97:d1:b1:c5:be:07: 4b:c1:fd:76:15:ce:a5:e1:f2:26:8a:76:ca:de:a0: 99:fb:8f:8b:23:c0:66:7b:8f:d9:f8:f4:49:5e:62: 3b:8b:ed:52:08:d0:8d:96:e5:81:ca:c2:2c:f8:08: b4:3e:f2:36:81:1d:2d:54:21:15:b6:11:4d:a6:65: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B8:5B:8B:39:07:09:7D:39:31:71:CC:97:CF:40:1C:DF:F2:76:70 X509v3 Authority Key Identifier: keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:34:9f:e1:90:f1:b9:30:1c:56:f2:4e:d2:61:85:77:49:5b: 83:b3:cd:f2:9a:00:6d:f6:1b:f6:83:30:5e:36:02:50:4c:72: 00:2e:83:4a:de:df:df:fc:61:6a:35:e3:bc:80:9e:19:0a:c9: 3f:30:e3:81:dc:b9:23:59:c0:29:e5:98:9b:87:44:dc:84:e8: b0:4e:44:a0:de:d4:f5:53:da:ba:47:56:ad:32:36:ec:d8:c0: b6:af:cb:9e:22:f7:41:9c:d1:e7:5f:ee:ba:9f:7c:4a:8c:3d: 0b:68:88:ea:12:2f:7f:b0:18:4a:5d:00:e2:86:d3:18:c6:55: c8:03:99:a2:cf:03:35:22:fc:58:43:28:83:ba:e5:ab:d4:c2: 27:b6:53:12:43:11:8a:50:3b:52:ac:66:83:d0:b0:18:cc:d7: 28:de:15:07:61:c1:3d:01:88:03:7b:eb:b1:ad:01:0d:c6:6b: 9c:14:47:8c:65:06:94:44:58:37:ed:5b:1f:cb:4b:60:d7:12: cf:d7:c5:f8:bf:90:ff:f0:26:7b:48:c9:54:f3:ff:e2:07:bc: 2d:98:60:f9:68:c9:d5:70:49:83:fc:bb:66:df:88:74:10:e5: 9d:f7:82:32:d5:45:cf:c7:c1:87:db:5e:dd:b0:56:24:f0:42: b5:a4:23:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTY7uImpJILqKyl/Nw9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzJkNDRkOWUwOGM4NzNkYjM1YzAyMTUxY2E0NGFlNTRi NGI4YWYwHhcNMjYwMjA5MTMwMDI3WhcNMjYwMjEwMTMwMDI3WjAzMTEwLwYDVQQD EyhhNGI4NWI4YjM5MDcwOTdkMzkzMTcxY2M5N2NmNDAxY2RmZjI3NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+ApR5UPrkIemnzSquRpKzzMYffo cL9BHwuWQ1+jk2udY1kTFpwhWcu4z4DYTpCJfVW22kaFxDlKt7pTyU47QDfSkfwa VQ3iYJPU8RgCYSXrW7j4kNlS9EP2M9wbAw6HmvoJZtfh6eIWUrRSMfcXDTxPMZ8c rAmZTBSHefxVMWXiTlqrbfG8hOMJUTN7lw2XaboYzavMQprbHWtNooPLsGro+PVw Pjt++w5RxP8vharoAFs/IFNcy2bAkXOX0bHFvgdLwf12Fc6l4fIminbK3qCZ+4+L I8Bme4/Z+PRJXmI7i+1SCNCNluWBysIs+Ai0PvI2gR0tVCEVthFNpmUipQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS4W4s5Bwl9OTFxzJfPQBzf8nZwMB8GA1UdIwQY MBaAFFIy1E2eCMhz2zXAIVHKRK5UtLivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYt YTY1NDFjZWIxZTQzLzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi84YjQwMGQtMWU4ZS00MGRhLWIxZDYtYTY1NDFjZWIxZTQz LzEvVWpMVVRaNEl5SFBiTmNBaFVjcEVybFMwdUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTSf4ZDx uTAcVvJO0mGFd0lbg7PN8poAbfYb9oMwXjYCUExyAC6DSt7f3/xhajXjvICeGQrJ PzDjgdy5I1nAKeWYm4dE3ITosE5EoN7U9VPaukdWrTI27NjAtq/LniL3QZzR51/u up98Sow9C2iI6hIvf7AYSl0A4obTGMZVyAOZos8DNSL8WEMog7rlq9TCJ7ZTEkMR ilA7Uqxmg9CwGMzXKN4VB2HBPQGIA3vrsa0BDcZrnBRHjGUGlERYN+1bH8tLYNcS z9fF+L+Q//Ame0jJVPP/4ge8LZhg+WjJ1XBJg/y7Zt+IdBDlnfeCMtVFz8fBh9te 3bBWJPBCtaQjkA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:43 2026 by rpki-client