This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json) Hash identifier: QYGufCU3nMqwzr90LYCvryJAizItP51Ka1ZDnzUEDus= Subject key identifier: FF:F9:EC:84:5D:6A:49:E3:D7:45:82:C7:58:76:8F:99:EC:79:BC:B4 Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b Certificate serial: 019C4434D97026AC725EDC6472BA350CD9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft Manifest number: 1552 Signing time: Mon 09 Feb 2026 21:00:39 +0000 Manifest this update: Mon 09 Feb 2026 21:00:39 +0000 Manifest next update: Tue 10 Feb 2026 21:00:39 +0000 Files and hashes: 1: 1-_iuOiCq6wrrlu0U_bsrNgalB5U.roa (hash: CFs95qJY3OCkwLKNDcwjofH0U54eBPgPiR2T2rDBUA0=) 2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: rlwbbs/pGB7KCn+bUSUPzFdGRDX38FdaMGhNbqa3DY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:d9:70:26:ac:72:5e:dc:64:72:ba:35:0c:d9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b Validity Not Before: Feb 9 21:00:39 2026 GMT Not After : Feb 10 21:00:39 2026 GMT Subject: CN=fff9ec845d6a49e3d74582c758768f99ec79bcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:28:42:75:aa:79:17:04:9d:ba:a7:36:b2: a9:83:04:be:28:22:a7:1c:1a:0f:2b:f8:08:a8:55: 14:3d:67:ed:74:92:7c:8a:6a:08:96:46:9e:35:94: 28:44:15:58:7e:33:45:3d:34:64:66:8f:89:f6:a8: 5f:cb:b8:41:f2:fc:bf:ef:18:a9:c9:b9:b4:5a:43: 62:ac:f5:f5:ad:9b:36:9d:5b:a0:e8:32:53:65:e7: 90:fb:4a:bf:38:0a:c9:fb:a9:cc:68:4b:34:96:20: 73:8f:37:77:76:8a:ba:6a:c9:63:61:e0:37:70:7e: 68:63:d9:ac:50:fe:9a:c6:94:50:42:09:3f:c4:e8: f5:a4:5c:ca:0d:10:2d:a7:0c:80:29:cd:d7:b5:ca: ac:bb:2b:53:af:56:10:9d:ca:36:0b:ac:93:13:b4: f4:1e:ef:bc:d9:8c:21:14:5a:82:9f:54:cf:42:13: e4:41:ec:aa:b1:c8:cf:68:67:6b:60:7d:c1:9b:3f: 1f:63:36:21:9e:b3:ca:1d:44:0b:9a:f3:30:a0:7a: a9:59:53:b7:a4:b8:8f:39:fa:3f:ef:76:5a:7b:fb: 3b:8a:54:9b:6e:93:05:ac:96:2d:33:6f:fd:17:01: b4:a6:3d:31:fe:b2:e0:00:65:fa:1b:64:0e:9b:0d: 9e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:EC:84:5D:6A:49:E3:D7:45:82:C7:58:76:8F:99:EC:79:BC:B4 X509v3 Authority Key Identifier: keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:41:c4:38:e2:9f:69:f7:51:b2:f1:ab:3a:dd:7f:5c:b5:de: eb:63:30:f8:ce:42:79:86:78:3a:8a:75:e5:e4:e8:fc:29:b7: 7e:b8:22:db:cd:71:a2:68:10:21:3e:3c:4c:41:f0:d4:12:68: 8c:f0:ae:78:75:d6:74:67:20:d1:15:57:d1:d9:7f:83:3c:3c: d1:75:c3:97:f0:ca:c1:11:37:b3:ad:6a:e9:1a:95:b9:f9:32: 86:e4:09:e7:a0:63:3c:f1:92:3d:ab:7d:3c:ea:69:d3:ea:e1: 11:30:ad:c4:23:05:7a:fb:43:90:df:ba:74:ba:71:8b:58:8c: 27:10:e9:a3:43:ae:a8:17:55:5e:47:1b:d0:ee:8d:b9:04:a1: fb:0b:4c:ba:de:a2:cf:af:46:72:03:8c:68:30:79:e3:3c:83: 8c:55:36:de:b2:a7:91:e6:c9:1c:7a:68:e1:15:87:c5:47:01: 99:85:40:5b:bf:fc:78:48:2a:c7:85:3a:f3:ea:26:89:3f:3c: dc:0d:b6:4d:51:21:6c:b5:f3:58:42:0b:70:19:07:97:58:12: 76:6e:c0:ca:40:2d:8d:8a:26:4d:5c:f5:48:50:77:0f:84:05: f2:a1:07:78:33:07:a1:41:82:ca:31:73:56:80:f3:91:de:f9: d6:64:d2:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENNlwJqxyXtxkcro1DNnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWRiMTQzZTkwNmFhMjBlNTc4MjkwN2Y4NDVkNGE3Njk2 MmZmN2IwHhcNMjYwMjA5MjEwMDM5WhcNMjYwMjEwMjEwMDM5WjAzMTEwLwYDVQQD EyhmZmY5ZWM4NDVkNmE0OWUzZDc0NTgyYzc1ODc2OGY5OWVjNzliY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3YoQnWqeRcEnbqnNrKpgwS+KCKn HBoPK/gIqFUUPWftdJJ8imoIlkaeNZQoRBVYfjNFPTRkZo+J9qhfy7hB8vy/7xip ybm0WkNirPX1rZs2nVug6DJTZeeQ+0q/OArJ+6nMaEs0liBzjzd3doq6asljYeA3 cH5oY9msUP6axpRQQgk/xOj1pFzKDRAtpwyAKc3XtcqsuytTr1YQnco2C6yTE7T0 Hu+82YwhFFqCn1TPQhPkQeyqscjPaGdrYH3Bmz8fYzYhnrPKHUQLmvMwoHqpWVO3 pLiPOfo/73Zae/s7ilSbbpMFrJYtM2/9FwG0pj0x/rLgAGX6G2QOmw2eOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/57IRdaknj10WCx1h2j5nseby0MB8GA1UdIwQY MBaAFFNdsUPpBqog5XgpB/hF1KdpYv97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMt NDg3MzFiM2MwM2E0LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xYThkOTgtMzRjOS00ZDI2LTk3ZGMtNDg3MzFiM2MwM2E0 LzEvVTEyeFEta0dxaURsZUNrSC1FWFVwMmxpXzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkHEOOKf afdRsvGrOt1/XLXe62Mw+M5CeYZ4Oop15eTo/Cm3frgi281xomgQIT48TEHw1BJo jPCueHXWdGcg0RVX0dl/gzw80XXDl/DKwRE3s61q6RqVufkyhuQJ56BjPPGSPat9 POpp0+rhETCtxCMFevtDkN+6dLpxi1iMJxDpo0OuqBdVXkcb0O6NuQSh+wtMut6i z69GcgOMaDB54zyDjFU23rKnkebJHHpo4RWHxUcBmYVAW7/8eEgqx4U68+omiT88 3A22TVEhbLXzWEILcBkHl1gSdm7AykAtjYomTVz1SFB3D4QF8qEHeDMHoUGCyjFz VoDzkd751mTSFA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:26:48 2026 by rpki-client