This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json) Hash identifier: NFc9Oc8cvwDbR5ZUj7yP5TzIl6ndbnt3M+GAGaBl6gg= Subject key identifier: 4C:D6:C4:ED:8D:7D:C2:0E:FB:CD:32:D3:90:15:C1:37:4D:E7:19:D9 Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Certificate serial: 019C42B4A2832EF2D237B0D62A43C464C6E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft Manifest number: 0E7B Signing time: Mon 09 Feb 2026 14:01:00 +0000 Manifest this update: Mon 09 Feb 2026 14:01:00 +0000 Manifest next update: Tue 10 Feb 2026 14:01:00 +0000 Files and hashes: 1: QhRLDpCA8okURdA4C54ftPnnfT8.roa (hash: +BEAp9sAudWy6A/smDJICmamsmKPRmKsTiVNouNzZXg=) 2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: 3+4Fzxwfy4pCb6kEWFuHX7eSbJZ82C6IIAAoUXKsv7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:a2:83:2e:f2:d2:37:b0:d6:2a:43:c4:64:c6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Validity Not Before: Feb 9 14:01:00 2026 GMT Not After : Feb 10 14:01:00 2026 GMT Subject: CN=4cd6c4ed8d7dc20efbcd32d39015c1374de719d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:15:fd:b1:77:ad:a8:e6:12:ab:f6:67:84: e2:37:38:6f:79:4a:5c:55:80:d1:3a:57:03:3c:3f: 5b:b4:09:33:ff:4c:f9:84:bb:6f:9b:97:5d:d8:ed: b7:fb:db:aa:38:44:0c:9e:be:8f:d1:e3:52:d5:54: eb:cd:68:75:d9:6d:05:4d:27:7b:13:c1:9a:ca:fb: 2e:2c:3f:5c:da:fa:ae:54:62:c1:f5:9c:46:a7:92: 43:31:37:e0:67:c2:e4:e4:93:a7:b0:c1:72:5c:6b: 3d:32:e0:76:55:4f:e9:cb:50:42:4b:52:15:f6:b3: 41:76:ae:55:a0:f7:6d:4d:b9:fb:f9:f2:dc:c7:19: 93:04:44:61:ed:22:ce:3a:c3:90:d3:1a:69:ba:3d: 16:19:37:82:7b:cd:50:7e:ac:08:d4:a3:2a:ed:02: ce:c3:0b:ff:56:1f:33:ca:96:d3:68:de:29:43:c9: c8:51:2d:2a:a4:b2:46:75:8a:f8:e1:42:4a:e7:98: fb:a6:77:13:8d:02:d6:60:3d:f6:21:0f:35:98:62: 5f:eb:7a:ff:4e:12:ba:0b:a5:cf:24:eb:5d:d0:16: 45:54:ce:36:ac:93:a7:08:f2:22:f8:c0:c9:ef:c2: 87:a2:42:89:e2:ac:34:c8:7a:13:a6:73:25:d3:62: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D6:C4:ED:8D:7D:C2:0E:FB:CD:32:D3:90:15:C1:37:4D:E7:19:D9 X509v3 Authority Key Identifier: keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:37:db:35:94:b9:6c:bc:43:10:61:ff:e1:4d:8d:ad:6d:79: eb:d5:67:73:2d:73:19:17:cc:a7:09:bf:f3:60:78:f6:98:07: 1b:4e:04:0d:59:2e:ed:5f:74:e5:a4:d8:ea:19:4e:b3:35:07: 31:2a:79:96:d3:56:86:68:30:e8:c5:83:7d:31:34:b7:d3:bc: e3:34:6a:77:4d:08:5e:9e:37:01:8a:98:9e:50:a3:5b:5e:41: 59:06:58:f3:61:d2:a8:42:32:34:db:ab:e0:94:a1:63:08:f7: 66:e5:cc:44:5e:30:01:6f:67:ce:b9:a9:82:61:ca:ef:01:78: 34:c7:0e:2c:ec:5a:58:64:53:09:d2:4b:e6:ce:6a:5c:da:41: 7c:ad:c2:c9:95:9b:ce:19:41:37:3a:fd:41:50:b5:da:5a:39: f4:13:5b:24:a2:d0:af:52:42:52:58:ef:1d:4b:f4:10:4a:ba: 71:0d:e4:a0:8e:a0:91:fa:75:a1:1c:21:e7:8b:15:f8:6b:84: e6:d5:a1:bc:73:23:6b:db:52:07:17:6f:de:3f:01:76:58:ba: 26:15:34:32:4a:23:82:4b:3a:b1:a6:e4:8f:dc:22:1b:f4:c7: 35:55:d1:4a:a2:f0:78:44:ac:31:90:a4:c5:b9:c2:ec:fa:8f: 5a:67:71:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtKKDLvLSN7DWKkPEZMbjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNGU1Zjc5NjEyMjVmYmZlMzQxZjZiZmQ2YmU4ZTFhMjFl ZjhjMGYwHhcNMjYwMjA5MTQwMTAwWhcNMjYwMjEwMTQwMTAwWjAzMTEwLwYDVQQD Eyg0Y2Q2YzRlZDhkN2RjMjBlZmJjZDMyZDM5MDE1YzEzNzRkZTcxOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsgV/bF3rajmEqv2Z4TiNzhveUpc VYDROlcDPD9btAkz/0z5hLtvm5dd2O23+9uqOEQMnr6P0eNS1VTrzWh12W0FTSd7 E8GayvsuLD9c2vquVGLB9ZxGp5JDMTfgZ8Lk5JOnsMFyXGs9MuB2VU/py1BCS1IV 9rNBdq5VoPdtTbn7+fLcxxmTBERh7SLOOsOQ0xppuj0WGTeCe81QfqwI1KMq7QLO wwv/Vh8zypbTaN4pQ8nIUS0qpLJGdYr44UJK55j7pncTjQLWYD32IQ81mGJf63r/ ThK6C6XPJOtd0BZFVM42rJOnCPIi+MDJ78KHokKJ4qw0yHoTpnMl02LzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzWxO2NfcIO+80y05AVwTdN5xnZMB8GA1UdIwQY MBaAFFJOX3lhIl+/40H2v9a+jhoh74wPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWIt MmFiOTA0NmViYzExLzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85YzY1NDYtNTgxMS00MTk0LWJmZWItMmFiOTA0NmViYzEx LzEvVWs1ZmVXRWlYN19qUWZhXzFyNk9HaUh2akE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjfbNZS5 bLxDEGH/4U2NrW1569Vncy1zGRfMpwm/82B49pgHG04EDVku7V905aTY6hlOszUH MSp5ltNWhmgw6MWDfTE0t9O84zRqd00IXp43AYqYnlCjW15BWQZY82HSqEIyNNur 4JShYwj3ZuXMRF4wAW9nzrmpgmHK7wF4NMcOLOxaWGRTCdJL5s5qXNpBfK3CyZWb zhlBNzr9QVC12lo59BNbJKLQr1JCUljvHUv0EEq6cQ3koI6gkfp1oRwh54sV+GuE 5tWhvHMja9tSBxdv3j8Bdli6JhU0Mkojgks6sabkj9wiG/THNVXRSqLweESsMZCk xbnC7PqPWmdxBw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:15 2026 by rpki-client