This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json) Hash identifier: uGFC9m3JFMjiUfLv5ksShqPftzjcDoCKkVZ2r6++XJw= Subject key identifier: A2:BF:FA:E4:8B:CE:E8:53:54:9B:C6:03:CA:3B:A7:41:1B:BF:D4:D2 Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af Certificate serial: 019C41A21B43105710422624DF7D6715BF57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft Manifest number: 01DB Signing time: Mon 09 Feb 2026 09:01:08 +0000 Manifest this update: Mon 09 Feb 2026 09:01:08 +0000 Manifest next update: Tue 10 Feb 2026 09:01:08 +0000 Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: rEnuBw9+KwDCIB5RB21FOstBTd33MJbyK++y6QSY6Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1b:43:10:57:10:42:26:24:df:7d:67:15:bf:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af Validity Not Before: Feb 9 09:01:08 2026 GMT Not After : Feb 10 09:01:08 2026 GMT Subject: CN=a2bffae48bcee853549bc603ca3ba7411bbfd4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:d9:e1:d3:a4:d5:55:4d:54:da:7b:b5:14: af:c3:cf:39:20:2f:ed:e9:e5:b3:5e:27:2b:d5:6d: c0:a1:db:da:52:68:38:0e:40:e4:08:02:53:5b:61: 5b:22:9a:2b:63:eb:45:23:b3:5c:99:54:f1:ec:10: dc:a3:b8:04:70:bd:95:dd:d1:4b:a8:a6:9a:fe:2e: 56:11:8e:cd:72:37:c4:61:1f:b0:b0:c6:45:3e:ec: 0a:5f:d0:9d:35:f1:de:b9:0d:6b:5c:3a:56:77:ee: 04:50:30:73:39:d9:e6:2e:2e:3e:d3:57:78:93:d0: f6:88:62:dd:19:a3:17:11:73:aa:92:96:4b:f3:b5: d0:29:cc:9d:84:3a:c1:ca:57:8e:5b:65:6b:f8:49: b5:dc:c0:31:20:44:62:a4:18:bc:22:37:88:d6:a2: c2:ac:79:44:ac:ad:47:f3:34:57:0b:f0:a9:62:d0: c4:93:27:c7:f7:22:7b:d0:b1:9f:2a:58:f4:e1:35: 6f:3f:8d:b2:ab:1f:02:f9:2d:40:71:87:c0:83:66: 12:43:ff:53:d0:13:50:21:a4:e3:d0:32:e6:54:52: 04:32:da:b2:49:41:01:16:f5:f3:70:93:cf:7f:4e: c5:5b:08:9e:c2:84:9a:60:b6:4f:3b:ce:c7:86:10: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BF:FA:E4:8B:CE:E8:53:54:9B:C6:03:CA:3B:A7:41:1B:BF:D4:D2 X509v3 Authority Key Identifier: keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e3:b9:e3:48:b9:71:00:0f:55:55:ad:ec:79:59:7e:ea:4a: d0:6a:f9:37:97:46:1f:d6:22:8f:7b:f2:81:7f:a9:42:b7:b8: 83:0a:7b:8b:12:70:77:4d:b2:4e:1e:56:ee:88:cd:a5:9e:97: 3e:37:39:9b:0b:a9:5e:31:5c:ce:d4:28:fd:cc:65:0a:28:bb: 20:54:85:63:a5:f9:32:18:fb:b6:5f:86:a9:07:fc:70:57:41: ba:6c:d9:f3:8b:27:38:c0:13:60:3f:59:b6:e4:db:93:7e:ee: b7:1d:68:d9:78:a7:9b:39:c3:91:35:38:32:28:d5:f1:30:3a: f5:0f:cf:54:97:56:bb:a9:9d:fb:78:ef:55:33:2f:e5:ad:85: 1e:22:1f:8a:0e:5f:51:28:44:54:d7:bc:55:50:49:3e:56:73: 75:b1:d9:52:47:5f:7b:74:3e:97:dc:5c:95:77:b7:5c:aa:63: 21:00:8e:7f:fb:74:01:d4:e7:a8:eb:2a:34:96:14:f9:da:c6: d6:fa:86:86:26:f1:c1:92:42:b2:13:2d:74:cc:99:33:87:55: 8b:c8:17:2f:6f:f6:50:da:6b:84:a2:01:3c:53:88:06:76:b6: 0c:73:91:5f:4a:7f:93:3a:93:b0:40:2c:28:94:98:6d:09:66: 0e:52:d4:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohtDEFcQQiYk331nFb9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NDBhYmQxOTg4MmNhYzgwYjc2NmQ3MmFkOGZlYzI0YWI5 NTUwYWYwHhcNMjYwMjA5MDkwMTA4WhcNMjYwMjEwMDkwMTA4WjAzMTEwLwYDVQQD EyhhMmJmZmFlNDhiY2VlODUzNTQ5YmM2MDNjYTNiYTc0MTFiYmZkNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr//Z4dOk1VVNVNp7tRSvw885IC/t 6eWzXicr1W3AodvaUmg4DkDkCAJTW2FbIporY+tFI7NcmVTx7BDco7gEcL2V3dFL qKaa/i5WEY7NcjfEYR+wsMZFPuwKX9CdNfHeuQ1rXDpWd+4EUDBzOdnmLi4+01d4 k9D2iGLdGaMXEXOqkpZL87XQKcydhDrByleOW2Vr+Em13MAxIERipBi8IjeI1qLC rHlErK1H8zRXC/CpYtDEkyfH9yJ70LGfKlj04TVvP42yqx8C+S1AcYfAg2YSQ/9T 0BNQIaTj0DLmVFIEMtqySUEBFvXzcJPPf07FWwiewoSaYLZPO87HhhAF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK/+uSLzuhTVJvGA8o7p0Ebv9TSMB8GA1UdIwQY MBaAFKVAq9GYgsrIC3Ztcq2P7CSrlVCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzIt ZGViMTM5YzRmMWI2LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy83NmMzZGYtYTY5Yi00NWQxLTkxNzItZGViMTM5YzRmMWI2 LzEvcFVDcjBaaUN5c2dMZG0xeXJZX3NKS3VWVUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquO540i5 cQAPVVWt7HlZfupK0Gr5N5dGH9Yij3vygX+pQre4gwp7ixJwd02yTh5W7ojNpZ6X Pjc5mwupXjFcztQo/cxlCii7IFSFY6X5Mhj7tl+GqQf8cFdBumzZ84snOMATYD9Z tuTbk37utx1o2XinmznDkTU4MijV8TA69Q/PVJdWu6md+3jvVTMv5a2FHiIfig5f UShEVNe8VVBJPlZzdbHZUkdfe3Q+l9xclXe3XKpjIQCOf/t0AdTnqOsqNJYU+drG 1vqGhibxwZJCshMtdMyZM4dVi8gXL2/2UNprhKIBPFOIBna2DHORX0p/kzqTsEAs KJSYbQlmDlLUHA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:59 2026 by rpki-client