This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft File: UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json) Hash identifier: J1a2YVpHswRxrrwgWPk99fqQkC8abEQYRgLyJUSLmWE= Subject key identifier: 9D:CA:8B:3F:6D:E0:F0:BB:9C:45:07:5F:1D:82:CD:9A:B9:CC:0F:07 Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F Certificate issuer: /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f Certificate serial: 019C424629C1B74B3B430E2E70E1B113259B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft Manifest number: 125C Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: 8Fy3fpP8N1gBF5WmeSssnDcIuuxikxf/HAeNuvRhq6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:29:c1:b7:4b:3b:43:0e:2e:70:e1:b1:13:25:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=9dca8b3f6de0f0bb9c45075f1d82cd9ab9cc0f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:e9:ad:f7:bf:7a:3e:3e:5c:34:c7:8e:56: 75:ef:26:47:3b:2a:b9:27:d2:f8:3b:0a:e9:95:b3: 2f:95:41:45:a6:da:58:1b:c9:4e:98:82:96:6f:a0: 0b:44:5c:64:6b:61:1d:8b:f7:e4:42:e1:5e:bc:f6: b1:2c:41:3d:14:76:7b:49:b0:21:ef:ed:3a:98:3b: d3:8e:42:e2:f4:1d:c1:c2:a8:ef:7d:21:cd:81:6f: 01:59:83:64:db:94:70:26:e3:b9:7b:6d:06:89:e0: 73:7e:63:82:c1:96:8e:a3:49:97:05:1a:73:ca:10: dd:e7:5b:e1:76:ad:7e:58:1d:66:4b:14:25:fc:b1: 36:73:62:e0:1f:4b:b1:34:cb:76:ce:b2:21:98:93: 43:bb:08:e6:54:c0:70:cb:7e:0f:58:1c:93:0d:65: c8:07:f8:50:be:20:5e:a9:d3:0c:22:93:cf:66:52: 77:fc:95:1a:db:2a:be:87:1c:c6:ff:ce:f0:e2:bb: 4e:81:3e:1d:7b:d8:0d:af:ca:2e:c8:dd:24:45:a7: 07:fd:79:60:d1:68:dd:14:66:42:90:c4:cc:6b:2d: 3b:78:62:1d:2b:79:11:5b:20:d8:f1:0b:7d:ab:bf: 85:ed:8c:0d:48:00:52:1f:ac:e4:5f:a5:e5:96:80: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CA:8B:3F:6D:E0:F0:BB:9C:45:07:5F:1D:82:CD:9A:B9:CC:0F:07 X509v3 Authority Key Identifier: keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:cb:bc:5d:65:9d:99:d1:12:41:98:ce:60:50:0e:63:bd:06: 5f:60:56:b4:1e:fd:b8:01:3e:00:4b:12:d3:52:b3:0f:87:3b: a2:b1:03:15:41:04:b7:e2:af:d2:ce:c8:a5:c8:ad:84:e0:65: ab:ad:3a:0a:e8:a6:99:d5:71:b4:70:2a:9e:a5:d7:f5:49:ce: 8c:92:cc:81:3b:42:8d:2f:ee:aa:8e:41:5b:5e:26:a7:ec:96: 2f:84:44:4d:46:3b:b4:e2:04:ca:12:55:b5:81:cf:13:2f:72: fd:ff:4c:a8:4a:e1:de:41:47:2b:28:f0:5d:e9:06:c2:84:20: 41:b4:54:35:d6:6b:da:41:8a:0b:09:15:04:c2:3d:13:52:bd: 3a:6c:bc:eb:11:3a:41:1b:35:36:0e:1e:92:15:55:99:83:ec: 11:18:e4:a3:c7:45:16:a1:97:a0:ae:65:12:57:7b:1b:3f:c8: 72:9d:cd:5d:c7:2c:e2:5a:40:46:b0:c3:46:66:fb:c2:be:d8: 64:57:99:80:d0:fc:1d:08:93:33:5e:c2:95:6f:b6:e3:a6:7a: 18:83:41:aa:8b:00:eb:e3:83:98:34:22:e1:97:24:e7:c9:ab: 2d:0a:af:a2:4c:b6:f0:59:a2:58:53:f6:fe:f1:f3:8f:f2:4a: 9a:a8:68:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRinBt0s7Qw4ucOGxEyWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZjZjMTEwMzE1MzI0NDg1MmJjYjNlMjNiNmRlMmExNmJh YTdhN2YwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD Eyg5ZGNhOGIzZjZkZTBmMGJiOWM0NTA3NWYxZDgyY2Q5YWI5Y2MwZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZPprfe/ej4+XDTHjlZ17yZHOyq5 J9L4OwrplbMvlUFFptpYG8lOmIKWb6ALRFxka2Edi/fkQuFevPaxLEE9FHZ7SbAh 7+06mDvTjkLi9B3BwqjvfSHNgW8BWYNk25RwJuO5e20GieBzfmOCwZaOo0mXBRpz yhDd51vhdq1+WB1mSxQl/LE2c2LgH0uxNMt2zrIhmJNDuwjmVMBwy34PWByTDWXI B/hQviBeqdMMIpPPZlJ3/JUa2yq+hxzG/87w4rtOgT4de9gNr8ouyN0kRacH/Xlg 0WjdFGZCkMTMay07eGIdK3kRWyDY8Qt9q7+F7YwNSABSH6zkX6XlloA0ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3Kiz9t4PC7nEUHXx2CzZq5zA8HMB8GA1UdIwQY MBaAFFL2wRAxUyRIUryz4jtt4qFrqnp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEt MGRiY2ZlYWM5OGE1LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lYjc4YTMtNjI3Ni00MTBhLWEzZTEtMGRiY2ZlYWM5OGE1 LzEvVXZiQkVERlRKRWhTdkxQaU8yM2lvV3VxZW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMu8XWWd mdESQZjOYFAOY70GX2BWtB79uAE+AEsS01KzD4c7orEDFUEEt+Kv0s7IpcithOBl q606CuimmdVxtHAqnqXX9UnOjJLMgTtCjS/uqo5BW14mp+yWL4RETUY7tOIEyhJV tYHPEy9y/f9MqErh3kFHKyjwXekGwoQgQbRUNdZr2kGKCwkVBMI9E1K9Omy86xE6 QRs1Ng4ekhVVmYPsERjko8dFFqGXoK5lEld7Gz/Icp3NXccs4lpARrDDRmb7wr7Y ZFeZgND8HQiTM17ClW+246Z6GINBqosA6+ODmDQi4Zck58mrLQqvoky28FmiWFP2 /vHzj/JKmqhoeA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:30 2026 by rpki-client