This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json) Hash identifier: 29fBTCRf3G770VqXd7n+zdpDroA1Zp+efgpxEvcsNxY= Subject key identifier: EA:50:2D:73:01:C0:E4:47:8D:83:AA:73:AB:FB:6D:7C:D4:E0:32:17 Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c Certificate serial: 019C438FDEB0E099C75825ED0939277B2039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft Manifest number: 01E7 Signing time: Mon 09 Feb 2026 18:00:27 +0000 Manifest this update: Mon 09 Feb 2026 18:00:27 +0000 Manifest next update: Tue 10 Feb 2026 18:00:27 +0000 Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: F7dBlluVCXRuwPk1hoYJsk9hRRcT67nJudVEf9zRNn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:de:b0:e0:99:c7:58:25:ed:09:39:27:7b:20:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c Validity Not Before: Feb 9 18:00:27 2026 GMT Not After : Feb 10 18:00:27 2026 GMT Subject: CN=ea502d7301c0e4478d83aa73abfb6d7cd4e03217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:dd:44:9b:15:9a:c6:da:37:3d:62:ce:8d: a9:9f:17:e1:fe:76:95:9c:0b:1d:f2:85:4c:21:45: 82:89:f0:54:70:d0:2f:28:d8:72:40:df:97:9b:93: 3a:84:ec:28:eb:b2:1f:d6:c8:11:54:73:68:7e:fc: 4b:16:9a:48:16:31:c3:7d:85:9b:0f:0d:fd:7b:1f: 91:34:bb:53:bd:e3:33:4c:4d:d6:8d:4d:0e:5f:98: 35:6c:a7:ff:78:80:d2:df:8e:63:8d:ef:f6:d7:91: f5:94:08:e8:1f:c4:8a:77:6b:cb:e8:33:1c:f3:94: e1:9b:ba:6c:db:bf:7a:df:a1:bb:b2:86:98:94:d4: 32:4f:4e:c6:53:c4:08:05:a6:77:1b:e0:44:04:39: 66:61:78:69:b0:f0:86:56:15:a5:d7:46:de:62:92: d0:03:03:d3:e7:f9:4d:ce:39:1c:d4:ba:41:0b:d7: 65:d4:89:2b:2a:bc:14:44:77:0e:a7:7c:5b:38:b6: a3:d1:74:2b:ae:eb:78:8b:7b:af:62:d9:97:a9:83: e8:7b:2b:e6:7a:e5:cf:cd:18:59:4a:24:f4:34:87: 49:79:ec:df:2e:2d:61:91:bb:6b:dc:fc:d0:9b:75: 8d:c3:57:dd:47:bf:4a:23:29:18:74:7c:2f:16:8c: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:50:2D:73:01:C0:E4:47:8D:83:AA:73:AB:FB:6D:7C:D4:E0:32:17 X509v3 Authority Key Identifier: keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4f:4b:83:8a:fc:eb:ea:b1:e7:fe:63:eb:63:a3:5b:45:63: 9d:0d:8e:0f:2c:af:5d:8c:42:1a:38:73:fb:e4:c4:09:c4:cc: 3f:a1:57:db:8c:21:e0:ae:75:63:19:10:ae:f0:28:79:1a:d7: 55:98:b1:f0:ca:42:70:9b:5d:ec:ce:3f:2b:55:ee:eb:25:6b: c8:c6:1a:b6:2f:6e:b2:04:7b:de:e7:f6:45:0d:9f:ab:33:73: 82:a9:15:61:bc:f5:87:b8:de:d7:04:d1:f7:8c:9a:fa:a9:b1: b8:65:15:f3:a2:92:23:dc:e3:ce:ee:bb:38:e3:d3:92:33:bf: 6f:7a:81:d0:93:1d:97:f4:e8:1e:e5:6f:49:64:30:40:b7:43: 2f:2b:af:99:be:0a:da:c7:4a:51:ce:90:db:22:07:79:82:1b: cc:2c:60:d3:cb:9e:07:1c:60:a7:0d:36:bb:53:cc:44:76:b8: 90:7f:ac:d3:45:8c:dd:ce:b8:13:30:69:a1:61:71:58:33:da: b1:3e:03:c4:61:3b:84:02:4d:c4:81:db:2d:65:00:b4:75:d4: c9:16:42:a8:81:8d:9d:e3:3e:75:35:d6:54:87:d3:40:65:81: d8:98:b3:8a:7e:8e:e6:d7:8a:08:89:e7:ce:9c:63:1b:53:4a: d0:45:f6:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj96w4JnHWCXtCTkneyA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmQ0NmU4NjJkZTAzMTkxZmYzMTMxYWNjNzhlMTk3MDk1 OTZhMWMwHhcNMjYwMjA5MTgwMDI3WhcNMjYwMjEwMTgwMDI3WjAzMTEwLwYDVQQD EyhlYTUwMmQ3MzAxYzBlNDQ3OGQ4M2FhNzNhYmZiNmQ3Y2Q0ZTAzMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4DdRJsVmsbaNz1izo2pnxfh/naV nAsd8oVMIUWCifBUcNAvKNhyQN+Xm5M6hOwo67If1sgRVHNofvxLFppIFjHDfYWb Dw39ex+RNLtTveMzTE3WjU0OX5g1bKf/eIDS345jje/215H1lAjoH8SKd2vL6DMc 85Thm7ps279636G7soaYlNQyT07GU8QIBaZ3G+BEBDlmYXhpsPCGVhWl10beYpLQ AwPT5/lNzjkc1LpBC9dl1IkrKrwURHcOp3xbOLaj0XQrrut4i3uvYtmXqYPoeyvm euXPzRhZSiT0NIdJeezfLi1hkbtr3PzQm3WNw1fdR79KIykYdHwvFoxt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpQLXMBwORHjYOqc6v7bXzU4DIXMB8GA1UdIwQY MBaAFLq9Ruhi3gMZH/MTGsx44ZcJWWocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZjVlNjYtZWNjYy00MzdjLTg5ZjUt MjZmYTZhZWU4ZmU1LzEvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zZjVlNjYtZWNjYy00MzdjLTg5ZjUtMjZmYTZhZWU4ZmU1 LzEvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU9Lg4r8 6+qx5/5j62OjW0VjnQ2ODyyvXYxCGjhz++TECcTMP6FX24wh4K51YxkQrvAoeRrX VZix8MpCcJtd7M4/K1Xu6yVryMYati9usgR73uf2RQ2fqzNzgqkVYbz1h7je1wTR 94ya+qmxuGUV86KSI9zjzu67OOPTkjO/b3qB0JMdl/ToHuVvSWQwQLdDLyuvmb4K 2sdKUc6Q2yIHeYIbzCxg08ueBxxgpw02u1PMRHa4kH+s00WM3c64EzBpoWFxWDPa sT4DxGE7hAJNxIHbLWUAtHXUyRZCqIGNneM+dTXWVIfTQGWB2Jizin6O5teKCInn zpxjG1NK0EX2Gw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:58 2026 by rpki-client