This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json) Hash identifier: 1/CJef3DOxNpBUNJ0gWfWdgn/5Ldfz4qOxgY4gR4tk8= Subject key identifier: AC:8C:1C:23:4C:67:25:3E:91:D4:F1:82:3D:96:91:32:20:4A:4F:46 Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019C43C7150971E8EF2378116C1036761532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft Manifest number: 12EB Signing time: Mon 09 Feb 2026 19:00:46 +0000 Manifest this update: Mon 09 Feb 2026 19:00:46 +0000 Manifest next update: Tue 10 Feb 2026 19:00:46 +0000 Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=) 2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: MBvZMl3SqIeEUP9RbCXzmzDNNbIOXAcifvyWtj9nl3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:15:09:71:e8:ef:23:78:11:6c:10:36:76:15:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Feb 9 19:00:46 2026 GMT Not After : Feb 10 19:00:46 2026 GMT Subject: CN=ac8c1c234c67253e91d4f1823d969132204a4f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:d7:32:78:a8:71:72:fc:e8:6d:e9:62:0a: f3:c5:5c:71:6e:45:df:cb:42:5f:0a:e5:c3:f5:c7: f1:fa:03:f4:35:d8:ab:77:c7:6e:d7:16:fa:ac:e2: c0:44:89:3c:18:36:3f:f2:85:50:40:2d:35:2b:97: ae:fc:fd:a8:2b:25:f2:da:d1:d7:be:5b:11:74:0c: 2a:37:e2:b9:0c:2a:99:85:36:f2:62:96:1a:cc:6a: e2:bc:25:0d:db:fd:08:dd:f3:68:9e:f5:b8:23:32: c4:f5:ee:88:91:fe:0e:cc:35:31:89:da:ac:84:b6: f1:65:2a:2b:6c:18:87:65:e7:28:63:12:8e:dc:aa: bb:82:a2:cb:22:03:c9:06:66:0d:ec:83:58:4c:b9: c4:66:41:47:8b:b4:d9:5c:dc:69:d5:d0:ee:c7:a8: 64:3a:c2:e2:07:6a:38:fc:ba:d1:81:05:10:a4:02: 03:62:41:99:dd:16:8c:f7:03:97:44:38:d0:52:47: 55:2b:9b:85:54:7b:31:5e:ce:d1:41:50:04:bb:1a: c5:25:b1:49:b9:10:e4:20:42:09:d7:e8:99:d5:9e: 62:46:4e:a5:c7:e3:91:2c:47:df:ee:1c:a2:e9:df: 12:22:ab:ee:89:e4:0d:ca:f8:0b:e5:11:f1:8d:8f: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8C:1C:23:4C:67:25:3E:91:D4:F1:82:3D:96:91:32:20:4A:4F:46 X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d2:cc:0b:25:db:99:3b:00:94:97:d5:3d:47:d9:3c:0d:89: 9f:ef:af:d4:44:8f:a8:ac:3c:cb:67:e1:7f:5f:f2:72:08:61: be:95:7c:f8:50:bb:66:c0:06:37:35:db:91:14:c6:e6:0d:9f: c8:ea:c5:1f:57:85:ae:82:b2:82:47:a3:89:e0:5e:b1:6f:55: 06:01:4f:1b:cf:ce:ae:b0:c0:b1:65:cc:7e:e2:9c:07:7f:92: 70:94:c5:ab:0a:05:0d:62:74:cb:a1:d0:1a:a0:24:28:27:27: 8c:5d:e1:2c:2c:2b:c0:ac:3e:c6:7c:c0:43:a2:4c:b8:7a:08: 0f:64:ce:ea:23:05:4e:0a:08:eb:a1:32:76:99:85:91:15:ca: f3:09:54:84:20:6a:25:d0:a3:93:c8:48:1f:2b:fc:31:18:c4: 8e:88:f7:44:d5:a9:ba:dd:95:b7:9b:4d:e9:bc:d1:4b:2f:f7: b6:da:9e:fe:98:2d:fd:87:e0:c9:2c:93:c1:98:0b:09:4a:25: 69:63:7f:34:c3:a9:62:b2:e7:ca:6d:ec:02:32:d5:eb:3c:8f: c0:17:e7:03:31:a8:f6:2a:f3:0c:a6:dd:d0:18:76:03:15:94: e7:00:67:b1:54:e8:54:fc:56:47:00:fd:9e:26:fd:9b:0a:6e: df:42:dc:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxUJcejvI3gRbBA2dhUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjYwMjA5MTkwMDQ2WhcNMjYwMjEwMTkwMDQ2WjAzMTEwLwYDVQQD EyhhYzhjMWMyMzRjNjcyNTNlOTFkNGYxODIzZDk2OTEzMjIwNGE0ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+HXMniocXL86G3pYgrzxVxxbkXf y0JfCuXD9cfx+gP0Ndird8du1xb6rOLARIk8GDY/8oVQQC01K5eu/P2oKyXy2tHX vlsRdAwqN+K5DCqZhTbyYpYazGrivCUN2/0I3fNonvW4IzLE9e6Ikf4OzDUxidqs hLbxZSorbBiHZecoYxKO3Kq7gqLLIgPJBmYN7INYTLnEZkFHi7TZXNxp1dDux6hk OsLiB2o4/LrRgQUQpAIDYkGZ3RaM9wOXRDjQUkdVK5uFVHsxXs7RQVAEuxrFJbFJ uRDkIEIJ1+iZ1Z5iRk6lx+ORLEff7hyi6d8SIqvuieQNyvgL5RHxjY+oDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyMHCNMZyU+kdTxgj2WkTIgSk9GMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdLMCyXb mTsAlJfVPUfZPA2Jn++v1ESPqKw8y2fhf1/ycghhvpV8+FC7ZsAGNzXbkRTG5g2f yOrFH1eFroKygkejieBesW9VBgFPG8/OrrDAsWXMfuKcB3+ScJTFqwoFDWJ0y6HQ GqAkKCcnjF3hLCwrwKw+xnzAQ6JMuHoID2TO6iMFTgoI66EydpmFkRXK8wlUhCBq JdCjk8hIHyv8MRjEjoj3RNWput2Vt5tN6bzRSy/3ttqe/pgt/YfgySyTwZgLCUol aWN/NMOpYrLnym3sAjLV6zyPwBfnAzGo9irzDKbd0Bh2AxWU5wBnsVToVPxWRwD9 nib9mwpu30LcWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:14 2026 by rpki-client