This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json) Hash identifier: iXKrm5lLO0jibGip/9wJBrWUHEIpqUkwIo15iOnZ2FY= Subject key identifier: C2:B9:ED:FA:08:6B:47:1A:23:E3:81:D2:30:CC:BF:14:74:CC:51:3A Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7 Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7 Certificate serial: 019C42EAF1FF7175A433EBAD997D2A244C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft Manifest number: 0C94 Signing time: Mon 09 Feb 2026 15:00:19 +0000 Manifest this update: Mon 09 Feb 2026 15:00:19 +0000 Manifest next update: Tue 10 Feb 2026 15:00:19 +0000 Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: gd6AVbGSX6YBZhE7KezjEWUoFKB7mBQwkmA0egA5u38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f1:ff:71:75:a4:33:eb:ad:99:7d:2a:24:4c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7 Validity Not Before: Feb 9 15:00:19 2026 GMT Not After : Feb 10 15:00:19 2026 GMT Subject: CN=c2b9edfa086b471a23e381d230ccbf1474cc513a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:43:26:85:b8:be:82:82:87:a9:f2:6d:57: 02:be:6b:4d:9e:6a:a8:8e:42:c9:ce:37:0a:89:fe: 50:75:53:b9:d2:d6:62:73:64:5c:e6:d3:93:23:66: 12:ec:33:32:62:45:22:4d:79:a1:7b:40:16:79:58: 69:53:55:1b:9c:33:6b:30:c1:1a:35:a3:41:63:2f: 11:13:2f:d7:8b:b4:e4:63:c8:c2:f8:6f:08:4a:fe: 40:b0:6f:9d:9f:30:78:c7:5b:fc:1e:94:71:51:74: 4c:73:74:68:48:d3:1c:ef:bd:f7:17:76:99:11:11: 06:3c:36:de:51:7b:65:de:50:fc:23:4d:e0:86:25: eb:b9:95:b4:86:a6:3a:ae:8e:57:dc:94:ec:64:9b: fa:61:91:c5:96:ca:f6:55:ee:b5:2f:a4:0e:c1:15: 0c:47:a9:45:1f:bc:24:66:18:51:71:6c:ce:39:18: 4e:30:cc:36:56:a5:b2:6b:b7:48:32:64:56:53:f1: 03:9f:af:b5:8b:2d:ec:c0:54:af:31:9b:e7:b0:9a: d3:86:7d:51:8f:1f:6b:ae:3d:8a:15:80:e5:50:52: 8c:6e:8c:2f:79:77:33:57:33:0f:8f:34:15:3e:85: 46:59:e8:58:66:6f:72:ad:fa:b8:43:80:f9:80:90: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:ED:FA:08:6B:47:1A:23:E3:81:D2:30:CC:BF:14:74:CC:51:3A X509v3 Authority Key Identifier: keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:86:91:94:da:26:42:38:3d:40:d1:f1:20:b7:49:dc:84:4d: b3:5d:22:1e:72:e6:64:b0:09:15:65:52:69:1d:20:83:45:77: fe:83:ca:66:c7:78:f3:d8:b6:0c:cf:48:6f:64:fa:20:32:0f: ef:6e:ae:fe:1d:b8:0f:4e:19:88:ea:0f:0c:58:9a:6c:ab:25: fa:6c:ec:58:96:67:b1:34:b9:02:d3:80:7e:ab:b1:7a:4a:ba: ff:e1:a9:ed:6d:71:50:03:cb:d1:6c:12:7f:fe:35:79:19:cc: a7:0e:0e:71:c9:fb:f8:bd:59:59:81:72:c8:f7:47:b7:ed:ac: 3d:fa:8d:13:03:8b:0b:dd:42:fb:74:0a:a4:79:ad:0b:76:ed: e2:24:2e:63:aa:37:0e:5e:a6:97:af:42:c5:a0:19:30:53:e2: 5d:f9:ba:de:c3:25:25:08:66:e1:b1:2c:b7:9e:8a:b9:1f:96: 89:5a:ec:18:4f:c0:27:b6:a8:d4:42:16:83:87:67:e3:66:95: d1:aa:cf:29:3d:a2:b2:2a:52:f4:cb:21:87:a8:47:d6:b2:28: 55:74:be:d2:09:5a:b5:bd:d1:40:78:0e:99:b4:eb:df:0b:32: 04:e4:9a:8f:63:32:ea:1a:db:ce:2f:da:8b:0b:08:e2:5c:71: c7:c6:fb:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vH/cXWkM+utmX0qJEwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjhlNjZmYWQ4MTQ2NDU5ODRmZDRlYWFkMzEzYjZmZTAw NTg5YjcwHhcNMjYwMjA5MTUwMDE5WhcNMjYwMjEwMTUwMDE5WjAzMTEwLwYDVQQD EyhjMmI5ZWRmYTA4NmI0NzFhMjNlMzgxZDIzMGNjYmYxNDc0Y2M1MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBRDJoW4voKCh6nybVcCvmtNnmqo jkLJzjcKif5QdVO50tZic2Rc5tOTI2YS7DMyYkUiTXmhe0AWeVhpU1UbnDNrMMEa NaNBYy8REy/Xi7TkY8jC+G8ISv5AsG+dnzB4x1v8HpRxUXRMc3RoSNMc7733F3aZ EREGPDbeUXtl3lD8I03ghiXruZW0hqY6ro5X3JTsZJv6YZHFlsr2Ve61L6QOwRUM R6lFH7wkZhhRcWzOORhOMMw2VqWya7dIMmRWU/EDn6+1iy3swFSvMZvnsJrThn1R jx9rrj2KFYDlUFKMbowveXczVzMPjzQVPoVGWehYZm9yrfq4Q4D5gJB7mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK57foIa0caI+OB0jDMvxR0zFE6MB8GA1UdIwQY MBaAFLm45m+tgUZFmE/U6q0xO2/gBYm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYt MmE2MWM0ZTNlMDU3LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wMjQ1ZWItY2FhMi00MDYzLWJkZWYtMmE2MWM0ZTNlMDU3 LzEvdWJqbWI2MkJSa1dZVDlUcXJURTdiLUFGaWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYaRlNom Qjg9QNHxILdJ3IRNs10iHnLmZLAJFWVSaR0gg0V3/oPKZsd489i2DM9Ib2T6IDIP 726u/h24D04ZiOoPDFiabKsl+mzsWJZnsTS5AtOAfquxekq6/+Gp7W1xUAPL0WwS f/41eRnMpw4Occn7+L1ZWYFyyPdHt+2sPfqNEwOLC91C+3QKpHmtC3bt4iQuY6o3 Dl6ml69CxaAZMFPiXfm63sMlJQhm4bEst56KuR+WiVrsGE/AJ7ao1EIWg4dn42aV 0arPKT2isipS9Mshh6hH1rIoVXS+0glatb3RQHgOmbTr3wsyBOSaj2My6hrbzi/a iwsI4lxxx8b7SA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:58 2026 by rpki-client