This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft File: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json) Hash identifier: 3VBKU/XttqUwCtc3bkA66byd0ZdXDY6EGJih7UJ9s2k= Subject key identifier: 99:C2:B4:FA:3A:76:85:8E:1F:D0:FA:84:9D:DE:C6:68:BE:0D:B7:0F Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7 Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7 Certificate serial: 019C4246B65B57F09D140CD00046C47DB692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft Manifest number: 0227 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: TK8f/0XQahh4V0mqSzLjWdHOKJlvc/VGHWOq7Nchr28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b6:5b:57:f0:9d:14:0c:d0:00:46:c4:7d:b6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=99c2b4fa3a76858e1fd0fa849ddec668be0db70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:98:9f:89:38:56:17:03:c2:51:9d:8d:9e: cb:ab:ec:4b:43:61:c0:38:87:9d:49:98:62:2d:cd: 1f:fb:9b:5b:ec:42:bc:06:aa:1b:5c:78:1a:0c:3a: 01:02:c8:d0:df:1e:15:c7:43:dd:5c:f3:28:2f:c1: e7:ad:68:da:12:bb:a6:c6:a3:42:2e:da:82:05:a1: d1:c8:bf:fe:c0:36:6b:f4:db:1d:b0:3e:61:10:a9: 9b:b4:5f:92:34:c4:b1:8b:7b:7d:6b:ac:e9:f4:40: 03:6b:57:b1:2f:6c:7e:92:9d:a5:18:4f:fd:ec:a5: ec:ee:eb:e5:58:0a:97:d6:83:cc:2a:f8:e1:2c:cb: 35:14:48:92:63:2b:a6:b4:45:ab:d0:1e:5c:35:27: 61:f9:38:6a:a6:eb:7b:dd:bb:de:f3:44:ff:8a:66: 95:8f:80:07:df:2e:ca:49:23:20:e7:b2:2c:a8:f1: 5e:87:a2:cf:84:ec:4c:a2:46:f9:db:95:46:39:0c: 90:d3:b3:ce:88:0b:67:7d:13:8e:da:e3:e8:3e:97: 1a:ff:d0:1a:87:b8:f6:34:68:a2:5f:62:ad:5b:8e: 00:01:cd:b6:7e:28:d2:48:1e:7b:5e:12:98:72:b2: a8:7a:4b:b8:9d:55:01:bb:47:2f:6f:96:9c:d4:42: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:B4:FA:3A:76:85:8E:1F:D0:FA:84:9D:DE:C6:68:BE:0D:B7:0F X509v3 Authority Key Identifier: keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:a5:cf:5a:98:66:a8:97:80:bf:c4:5c:d8:d2:e7:df:b5: fa:d0:f4:72:bf:9c:be:cc:7c:f0:a6:f4:e0:e4:aa:53:9d:02: 3f:fa:76:dd:88:cd:72:18:6d:30:60:21:fa:fe:ae:77:64:94: 68:f3:cc:c4:2b:52:a1:ce:47:de:dc:0d:ad:85:df:b9:9c:3f: 6a:22:20:de:32:a0:00:96:f5:14:3e:09:59:b8:03:85:bd:1a: bd:80:33:ca:ec:e7:74:b4:0d:29:c7:ba:56:4b:60:99:a2:8f: fd:2d:ee:c1:2a:2f:fa:c0:22:1e:41:1c:f0:60:30:3e:54:f3: 97:e8:9f:24:a5:e5:c0:3b:c7:6a:50:8a:cc:ae:ed:bc:14:5b: 4e:b9:de:32:33:a2:f9:c6:a2:fa:42:0f:e5:4c:20:a5:c0:67: 3a:1f:1b:8e:a8:94:a9:2e:e4:19:60:d9:39:61:b2:b8:5e:82: 6c:67:52:04:35:b8:cc:4b:29:fe:31:86:c0:dc:1a:b9:28:64: 28:76:65:a1:a4:b0:df:88:1b:b2:91:ef:87:e1:45:7a:56:96: 47:bf:ff:a9:b9:3c:19:2c:8b:d7:05:1c:f2:3a:a3:0e:d6:c5: d6:b0:a7:b7:9a:56:bc:ab:04:24:0a:f3:c8:a7:ae:19:3a:92: b9:f6:3f:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrZbV/CdFAzQAEbEfbaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ4NGQwZGUwMzlmNjY1ZTFmOTJjYWIzMTFjZmViYzU5 MmI3YTcwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD Eyg5OWMyYjRmYTNhNzY4NThlMWZkMGZhODQ5ZGRlYzY2OGJlMGRiNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtqYn4k4VhcDwlGdjZ7Lq+xLQ2HA OIedSZhiLc0f+5tb7EK8BqobXHgaDDoBAsjQ3x4Vx0PdXPMoL8HnrWjaErumxqNC LtqCBaHRyL/+wDZr9NsdsD5hEKmbtF+SNMSxi3t9a6zp9EADa1exL2x+kp2lGE/9 7KXs7uvlWAqX1oPMKvjhLMs1FEiSYyumtEWr0B5cNSdh+Thqput73bve80T/imaV j4AH3y7KSSMg57IsqPFeh6LPhOxMokb525VGOQyQ07POiAtnfROO2uPoPpca/9Aa h7j2NGiiX2KtW44AAc22fijSSB57XhKYcrKoeku4nVUBu0cvb5ac1EJ33wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnCtPo6doWOH9D6hJ3exmi+DbcPMB8GA1UdIwQY MBaAFFMUhNDeA59mXh+SyrMRz+vFkrenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGIt OTNhZjI1NzMwMjJhLzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGItOTNhZjI1NzMwMjJh LzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOClz1qY ZqiXgL/EXNjS59+1+tD0cr+cvsx88Kb04OSqU50CP/p23YjNchhtMGAh+v6ud2SU aPPMxCtSoc5H3twNrYXfuZw/aiIg3jKgAJb1FD4JWbgDhb0avYAzyuzndLQNKce6 VktgmaKP/S3uwSov+sAiHkEc8GAwPlTzl+ifJKXlwDvHalCKzK7tvBRbTrneMjOi +cai+kIP5UwgpcBnOh8bjqiUqS7kGWDZOWGyuF6CbGdSBDW4zEsp/jGGwNwauShk KHZloaSw34gbspHvh+FFelaWR7//qbk8GSyL1wUc8jqjDtbF1rCnt5pWvKsEJArz yKeuGTqSufY/YA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:52 2026 by rpki-client