This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json) Hash identifier: S6p+enKfyUfcM1qAqjwLYqLjlnZThoBGP7Umdfht8k8= Subject key identifier: 6D:42:7F:BB:75:CA:9B:2D:8D:D9:B3:0A:6B:19:09:F3:3E:48:15:18 Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Certificate serial: 019C421023A3EEEACCD9ACFA68C5133F80CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft Manifest number: 0334 Signing time: Mon 09 Feb 2026 11:01:19 +0000 Manifest this update: Mon 09 Feb 2026 11:01:19 +0000 Manifest next update: Tue 10 Feb 2026 11:01:19 +0000 Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: 5tmqB5kr6DJpPdiL/spYQdA4FmNbrq4sPPdHBWtPs4c=) 2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:23:a3:ee:ea:cc:d9:ac:fa:68:c5:13:3f:80:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Validity Not Before: Feb 9 11:01:19 2026 GMT Not After : Feb 10 11:01:19 2026 GMT Subject: CN=6d427fbb75ca9b2d8dd9b30a6b1909f33e481518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:a1:0d:85:fa:2d:02:bb:ce:f5:61:b7:a4: 16:65:bf:36:f3:2c:ee:0f:55:99:33:01:96:da:99: 95:5f:28:86:27:ff:84:5f:c4:b5:38:af:c6:24:1c: b1:db:26:db:49:46:34:41:91:27:38:f9:99:99:25: 58:5f:54:4c:e5:31:b6:d3:c7:0b:5f:26:bf:16:fa: 44:ac:ea:3d:4a:e7:d7:22:59:ed:39:8e:9c:4e:e2: f1:c2:4f:34:e0:82:80:4b:6d:11:07:2f:86:25:f3: 50:de:9b:43:f6:9a:32:62:ba:e5:b2:b8:d9:4d:ed: 7f:a4:20:29:f8:7b:fe:92:c8:48:6a:88:38:59:48: 9d:6b:42:f5:59:78:e7:1a:ad:c4:6f:29:61:72:6e: 7f:1d:b0:a1:52:ee:c8:b1:1d:34:e6:f8:a2:bd:47: 53:5e:90:6a:e4:5b:27:2e:7a:fa:e5:ee:7c:83:88: 8f:5d:51:03:2d:1a:ce:d3:e7:4b:95:70:54:c7:b3: 3c:e7:c4:e4:32:d1:18:4d:db:4f:64:be:4a:e2:bb: 09:2a:29:bc:ef:ff:1c:c4:4a:f2:90:3b:77:c4:dd: 37:16:f2:a8:3f:24:38:33:0e:fc:cc:21:1f:02:1b: 0d:61:9d:ca:49:d0:3e:37:51:d5:58:eb:5d:34:a2: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:42:7F:BB:75:CA:9B:2D:8D:D9:B3:0A:6B:19:09:F3:3E:48:15:18 X509v3 Authority Key Identifier: keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7c:9d:ed:3b:7c:cd:9d:a4:dc:a2:92:07:74:39:b5:88:8c: 0e:7c:85:63:20:10:8f:39:b9:88:fa:00:13:b3:0e:79:a4:45: 25:d4:70:5a:d2:9e:19:fe:fb:12:83:f6:bb:9e:00:38:b5:7b: 95:c9:a9:a0:d6:e1:e5:b5:a1:ad:35:f6:d7:7e:f2:e3:15:fb: 28:00:e6:2b:bf:20:eb:12:12:b7:98:7a:88:78:5d:ca:51:7f: d7:97:93:09:44:e6:8d:70:67:62:8a:3d:5c:d8:51:a4:57:56: d1:cd:bf:9f:13:83:3d:db:a0:af:8b:11:82:a2:fa:71:a5:7a: 58:e4:29:c4:54:e8:7f:66:21:6b:f0:95:4d:d8:23:8d:f0:24: 5a:1d:9a:54:32:91:d1:4f:27:d4:cc:73:e6:ff:4f:3b:9c:bd: 64:2d:76:12:f3:d6:77:36:24:da:78:56:5f:14:f0:57:1b:5d: 4a:53:52:54:23:2f:6a:01:d6:2f:42:ac:bf:38:5a:b8:63:82: 5e:3e:b3:08:4a:eb:34:79:d4:e7:f5:49:22:86:14:df:dc:67: 0c:81:65:3d:50:48:6a:6c:5d:e9:0a:b7:fc:71:e6:8e:08:24: 47:fa:1c:1c:b0:14:12:fc:af:23:60:9f:82:5a:58:07:70:bf: 93:fd:f1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECOj7urM2az6aMUTP4DPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1 YzRlZGYwHhcNMjYwMjA5MTEwMTE5WhcNMjYwMjEwMTEwMTE5WjAzMTEwLwYDVQQD Eyg2ZDQyN2ZiYjc1Y2E5YjJkOGRkOWIzMGE2YjE5MDlmMzNlNDgxNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVmhDYX6LQK7zvVht6QWZb828yzu D1WZMwGW2pmVXyiGJ/+EX8S1OK/GJByx2ybbSUY0QZEnOPmZmSVYX1RM5TG208cL Xya/FvpErOo9SufXIlntOY6cTuLxwk804IKAS20RBy+GJfNQ3ptD9poyYrrlsrjZ Te1/pCAp+Hv+kshIaog4WUida0L1WXjnGq3Ebylhcm5/HbChUu7IsR005viivUdT XpBq5FsnLnr65e58g4iPXVEDLRrO0+dLlXBUx7M858TkMtEYTdtPZL5K4rsJKim8 7/8cxErykDt3xN03FvKoPyQ4Mw78zCEfAhsNYZ3KSdA+N1HVWOtdNKIWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1Cf7t1ypstjdmzCmsZCfM+SBUYMB8GA1UdIwQY MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXyd7Tt8 zZ2k3KKSB3Q5tYiMDnyFYyAQjzm5iPoAE7MOeaRFJdRwWtKeGf77EoP2u54AOLV7 lcmpoNbh5bWhrTX2137y4xX7KADmK78g6xISt5h6iHhdylF/15eTCUTmjXBnYoo9 XNhRpFdW0c2/nxODPdugr4sRgqL6caV6WOQpxFTof2Yha/CVTdgjjfAkWh2aVDKR 0U8n1Mxz5v9PO5y9ZC12EvPWdzYk2nhWXxTwVxtdSlNSVCMvagHWL0KsvzhauGOC Xj6zCErrNHnU5/VJIoYU39xnDIFlPVBIamxd6Qq3/HHmjggkR/ocHLAUEvyvI2Cf glpYB3C/k/3xpQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:58 2026 by rpki-client