This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json) Hash identifier: IRrikPv/NuSPsbkzOEj/5vE57qwPE8lnKTZ6ONbAl3g= Subject key identifier: CC:FE:D3:D9:A6:DD:14:14:74:41:DC:E2:5C:66:12:8B:86:34:18:F5 Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Certificate serial: 019C42B3EDA9B3095C0EC90662330E01CFB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft Manifest number: 0CA3 Signing time: Mon 09 Feb 2026 14:00:13 +0000 Manifest this update: Mon 09 Feb 2026 14:00:13 +0000 Manifest next update: Tue 10 Feb 2026 14:00:13 +0000 Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: +b0os4p/jj+YcBRS0VZltvYZtog/B4sqNrctxrigp5s=) 2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=) 3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:ed:a9:b3:09:5c:0e:c9:06:62:33:0e:01:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Validity Not Before: Feb 9 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2026 GMT Subject: CN=ccfed3d9a6dd14147441dce25c66128b863418f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:01:05:5b:8f:7d:22:aa:94:9b:28:fb:87: c5:45:a4:9f:73:61:4e:16:24:ae:38:65:ec:cf:43: 02:8a:86:c2:97:3b:36:cd:bb:e7:02:93:ba:5c:2a: a6:fe:51:94:b3:0b:5d:d2:8e:63:bb:f2:ee:7e:90: 2a:49:f1:e2:ea:5b:57:2b:05:bc:53:01:f4:df:a3: 02:ba:a3:df:c8:e0:5e:8d:56:48:ad:cb:e3:82:59: 03:1f:50:53:3b:8a:7c:f8:a8:36:d6:67:43:9e:b8: 25:4c:ad:e9:df:32:c4:dc:87:cd:ee:72:76:b5:21: 44:a6:69:a1:34:7e:64:3b:70:63:df:83:62:c4:0e: 03:f5:15:62:4c:de:57:c8:57:d5:ca:bb:1d:7d:46: af:12:eb:14:69:50:d3:8e:6c:e4:d0:51:b2:75:c8: a1:0e:3d:c8:89:53:3b:e0:ac:51:8c:06:d7:39:6a: 2f:58:33:f4:6e:fb:7b:d0:34:e5:72:0d:77:7e:d9: 0d:cb:78:7d:fa:f9:1e:f0:b6:b4:75:3b:c2:59:05: c4:13:87:0e:0f:fa:34:56:06:a7:00:b6:b2:76:b0: 03:2d:cb:f9:ca:49:ff:06:18:da:46:f4:fe:bf:e3: 5a:3c:66:f6:41:d7:16:20:40:9e:03:f3:98:fd:af: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FE:D3:D9:A6:DD:14:14:74:41:DC:E2:5C:66:12:8B:86:34:18:F5 X509v3 Authority Key Identifier: keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1a:e9:a2:a8:94:c9:d5:4f:c0:8d:95:f3:f1:bc:a8:c4:42: b0:31:9c:19:f4:0f:74:51:10:be:d1:8a:25:8f:22:da:69:6f: d0:3c:e9:b4:8d:96:43:44:9e:e4:a8:45:ac:50:3f:6e:7d:68: dc:f0:72:30:80:a8:db:e1:2b:16:a8:a1:ce:ce:a1:a7:d5:59: 94:63:82:fe:45:54:78:60:01:ee:21:17:37:94:8f:79:a3:80: ad:69:d6:7e:92:fb:90:32:0d:98:7b:d1:44:ce:5f:81:47:e5: 9f:c4:8c:ab:8d:19:8b:64:3e:31:0f:ac:87:e3:ab:d3:75:8e: 75:6f:14:3c:17:cd:7b:d5:f8:9f:e4:7b:e3:62:a6:2b:4c:4e: 2c:f5:fc:7f:6e:94:68:50:68:81:c8:48:f7:da:c6:1e:a8:15: 7e:f9:14:aa:3c:73:06:35:63:0a:f1:3c:0b:30:c7:a1:c0:c9: e9:01:51:1d:41:c6:5b:ce:e2:18:41:3f:32:c3:73:17:65:ae: 51:47:a3:0f:e2:db:c2:30:a7:31:27:8f:9f:fb:08:a8:c2:d8: aa:b5:95:6c:77:e3:1c:42:7b:7e:16:05:24:c3:cb:fd:54:6b: 2b:66:8c:6d:30:f6:8a:52:a3:29:f0:cc:0f:e7:52:ba:92:2a: df:16:4a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs+2pswlcDskGYjMOAc+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm NjI1NTEwHhcNMjYwMjA5MTQwMDEzWhcNMjYwMjEwMTQwMDEzWjAzMTEwLwYDVQQD EyhjY2ZlZDNkOWE2ZGQxNDE0NzQ0MWRjZTI1YzY2MTI4Yjg2MzQxOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/IBBVuPfSKqlJso+4fFRaSfc2FO FiSuOGXsz0MCiobClzs2zbvnApO6XCqm/lGUswtd0o5ju/LufpAqSfHi6ltXKwW8 UwH036MCuqPfyOBejVZIrcvjglkDH1BTO4p8+Kg21mdDnrglTK3p3zLE3IfN7nJ2 tSFEpmmhNH5kO3Bj34NixA4D9RViTN5XyFfVyrsdfUavEusUaVDTjmzk0FGydcih Dj3IiVM74KxRjAbXOWovWDP0bvt70DTlcg13ftkNy3h9+vke8La0dTvCWQXEE4cO D/o0VganALaydrADLcv5ykn/BhjaRvT+v+NaPGb2QdcWIECeA/OY/a9VxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz+09mm3RQUdEHc4lxmEouGNBj1MB8GA1UdIwQY MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt YzRjZTNlODA3M2RiLzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhrpoqiU ydVPwI2V8/G8qMRCsDGcGfQPdFEQvtGKJY8i2mlv0DzptI2WQ0Se5KhFrFA/bn1o 3PByMICo2+ErFqihzs6hp9VZlGOC/kVUeGAB7iEXN5SPeaOArWnWfpL7kDINmHvR RM5fgUfln8SMq40Zi2Q+MQ+sh+Or03WOdW8UPBfNe9X4n+R742KmK0xOLPX8f26U aFBogchI99rGHqgVfvkUqjxzBjVjCvE8CzDHocDJ6QFRHUHGW87iGEE/MsNzF2Wu UUejD+LbwjCnMSePn/sIqMLYqrWVbHfjHEJ7fhYFJMPL/VRrK2aMbTD2ilKjKfDM D+dSupIq3xZKtA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:15 2026 by rpki-client