This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json) Hash identifier: ehmjGFVQbq+5XQ6JJExc3muNVKMPYKJc7rRD6PCLt38= Subject key identifier: 42:00:37:C6:32:73:84:55:49:48:EA:E3:E4:EC:ED:88:42:1E:30:05 Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a Certificate serial: 019C413379DB0B215EB5E4E1AA6DB3C1D73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft Manifest number: 0A37 Signing time: Mon 09 Feb 2026 07:00:18 +0000 Manifest this update: Mon 09 Feb 2026 07:00:18 +0000 Manifest next update: Tue 10 Feb 2026 07:00:18 +0000 Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: mU9k4mhu4CU+xaSAmw1NAXaAWEYMyqUUe1OJqEfWfVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:79:db:0b:21:5e:b5:e4:e1:aa:6d:b3:c1:d7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a Validity Not Before: Feb 9 07:00:18 2026 GMT Not After : Feb 10 07:00:18 2026 GMT Subject: CN=420037c6327384554948eae3e4eced88421e3005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:b0:32:c5:2f:0a:c0:34:fe:40:50:9f:cd: 40:a5:18:56:2f:13:e7:d0:e7:9c:f3:ce:1f:fb:e0: 66:d3:c6:6a:a0:81:c2:2a:13:50:a8:84:96:71:d9: c3:25:17:25:bd:20:6e:61:38:fc:04:5e:89:4e:0e: 59:75:94:38:7d:b0:13:f2:b2:1a:77:2d:7d:4b:d9: 72:9c:4f:c4:ab:2e:56:f9:28:69:8c:21:0d:c7:6c: 44:1f:98:99:a0:10:28:4b:ab:cb:70:94:be:4d:39: e7:79:7c:cf:2f:e8:5b:e4:17:80:ed:08:4d:fb:6c: 49:ec:36:18:0c:11:67:3d:d5:ce:55:21:70:54:83: d7:44:a0:a5:b7:dd:c7:28:07:25:8f:9e:83:25:58: 1b:ec:f2:71:0b:9d:2d:c7:28:74:56:19:7e:0b:0f: 5e:07:23:b8:f7:95:16:9b:d1:be:f5:66:55:b7:f9: 93:a8:d8:84:23:90:73:4f:15:68:f2:0c:03:f2:01: c7:8a:e1:a5:3a:90:2c:a1:f1:1d:db:27:ff:74:1e: 50:ce:41:93:e0:84:3b:bd:71:04:b7:3c:b9:a2:b9: e5:84:0d:09:1b:56:a9:25:6f:5d:5e:2f:c9:b9:8c: 1a:f0:9b:f0:67:2a:51:14:3e:2d:f4:57:43:ff:cc: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:37:C6:32:73:84:55:49:48:EA:E3:E4:EC:ED:88:42:1E:30:05 X509v3 Authority Key Identifier: keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c5:62:18:30:75:40:45:6a:d1:33:56:89:b0:f7:94:0c:be: db:81:1d:78:9e:3c:04:78:d6:86:7a:49:c0:3b:a5:94:7a:30: ca:69:af:91:d4:8b:56:7d:e4:71:11:4b:0f:d4:72:91:1e:c3: 0a:dc:9b:f6:dd:45:0e:ea:69:a3:1f:e2:55:a9:30:cd:fe:57: f0:4e:8f:38:fa:13:89:22:a6:f6:00:1a:fa:e6:bc:00:44:c0: 44:70:d3:76:86:3a:ee:18:ac:af:d4:93:19:31:1a:9b:f3:5f: 0f:42:92:8f:d5:d1:a9:af:18:a1:03:be:6a:23:a7:84:36:82: 08:5c:42:00:50:13:ff:aa:56:d4:83:99:df:10:20:21:12:87: 0f:07:c8:0b:03:18:40:72:8a:38:8e:e8:d9:97:79:4f:f0:aa: d5:cb:1f:39:66:6a:74:22:ae:ec:8e:b9:50:39:b3:0e:8d:bc: 40:88:3e:b9:ec:f5:b6:27:ab:54:35:fc:34:1b:38:bc:18:ff: 9e:4a:e7:66:ee:ad:32:83:d3:4d:a7:c3:3c:55:ec:3a:e0:15: cb:c2:a2:9a:62:7a:03:cc:cc:74:3e:58:4b:68:14:59:75:79: a5:47:4c:7e:c0:2c:4c:3b:97:66:91:d5:a3:6a:88:e9:d6:68: 2c:99:77:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3nbCyFeteThqm2zwdc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWEyOTc3OGJlYjI4MDAxODI5NGUyMzk1Y2JmYTAwNDJj OGY3OGEwHhcNMjYwMjA5MDcwMDE4WhcNMjYwMjEwMDcwMDE4WjAzMTEwLwYDVQQD Eyg0MjAwMzdjNjMyNzM4NDU1NDk0OGVhZTNlNGVjZWQ4ODQyMWUzMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyiwMsUvCsA0/kBQn81ApRhWLxPn 0Oec884f++Bm08ZqoIHCKhNQqISWcdnDJRclvSBuYTj8BF6JTg5ZdZQ4fbAT8rIa dy19S9lynE/Eqy5W+ShpjCENx2xEH5iZoBAoS6vLcJS+TTnneXzPL+hb5BeA7QhN +2xJ7DYYDBFnPdXOVSFwVIPXRKClt93HKAclj56DJVgb7PJxC50txyh0Vhl+Cw9e ByO495UWm9G+9WZVt/mTqNiEI5BzTxVo8gwD8gHHiuGlOpAsofEd2yf/dB5QzkGT 4IQ7vXEEtzy5ornlhA0JG1apJW9dXi/JuYwa8JvwZypRFD4t9FdD/8zmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIAN8Yyc4RVSUjq4+Ts7YhCHjAFMB8GA1UdIwQY MBaAFFLqKXeL6ygAGClOI5XL+gBCyPeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUt OWY5OTYxZGMzODUxLzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUtOWY5OTYxZGMzODUx LzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8ViGDB1 QEVq0TNWibD3lAy+24EdeJ48BHjWhnpJwDullHowymmvkdSLVn3kcRFLD9RykR7D Ctyb9t1FDuppox/iVakwzf5X8E6POPoTiSKm9gAa+ua8AETARHDTdoY67hisr9ST GTEam/NfD0KSj9XRqa8YoQO+aiOnhDaCCFxCAFAT/6pW1IOZ3xAgIRKHDwfICwMY QHKKOI7o2Zd5T/Cq1csfOWZqdCKu7I65UDmzDo28QIg+uez1tierVDX8NBs4vBj/ nkrnZu6tMoPTTafDPFXsOuAVy8KimmJ6A8zMdD5YS2gUWXV5pUdMfsAsTDuXZpHV o2qI6dZoLJl33Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:34 2026 by rpki-client