This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json) Hash identifier: uKDdZFbRCxGUBQOmFncTmU9/oK29rO7rIwPmAEcIdzU= Subject key identifier: 9C:18:61:F5:59:AA:18:5C:46:8B:4A:A3:AC:9D:56:69:18:A7:AD:01 Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057 Certificate serial: 019C432243E4B8D301D16DA5EFF78F706D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft Manifest number: 1444 Signing time: Mon 09 Feb 2026 16:00:44 +0000 Manifest this update: Mon 09 Feb 2026 16:00:44 +0000 Manifest next update: Tue 10 Feb 2026 16:00:44 +0000 Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: b32MSLpcWQelKyDgaeeUP28/tnX4LBqUIoLRlXI2yCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:43:e4:b8:d3:01:d1:6d:a5:ef:f7:8f:70:6d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057 Validity Not Before: Feb 9 16:00:44 2026 GMT Not After : Feb 10 16:00:44 2026 GMT Subject: CN=9c1861f559aa185c468b4aa3ac9d566918a7ad01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:78:8f:3a:29:40:b1:db:b7:09:a8:eb:1c:62: 99:f6:f4:53:be:dc:9a:99:de:5b:72:31:10:42:4d: 6e:40:03:c0:02:2c:3a:eb:4a:bd:27:c2:41:9d:fc: 9a:22:40:2a:44:bb:37:f3:71:0d:6c:91:53:58:e1: 8e:7d:5b:61:b6:1d:dd:50:20:9a:ae:aa:ab:15:d3: 37:8e:ee:26:e3:56:ba:0f:3c:52:7f:50:b8:51:ce: 12:7a:04:93:bc:0a:c3:43:94:2f:95:5f:67:00:04: 6c:2c:f0:00:bf:32:e5:8a:25:11:c9:7f:05:cd:55: d7:28:76:bb:10:fe:a7:72:3a:55:4c:f6:61:93:4a: aa:98:57:3f:af:ea:bf:50:b3:93:e7:7a:45:b3:67: 56:df:c0:99:53:13:44:09:fd:bf:e9:7c:9c:ab:1e: f5:20:f3:75:c2:e5:d2:1c:6d:b9:74:56:c9:e3:e3: 59:67:b9:26:d9:2b:23:cc:10:a9:29:10:7d:aa:b5: 7d:a5:e6:29:16:9d:09:36:48:7a:5e:9b:3f:2b:24: 18:f4:f7:aa:30:84:86:e7:a0:f9:7e:aa:28:3d:30: 9b:ae:10:6d:1f:8c:c2:70:39:c0:88:17:08:dc:83: aa:46:91:81:b1:0e:14:ab:28:1f:5b:7c:f1:b9:1e: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:61:F5:59:AA:18:5C:46:8B:4A:A3:AC:9D:56:69:18:A7:AD:01 X509v3 Authority Key Identifier: keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1d:eb:1c:ce:46:b2:9a:d4:92:e8:f6:52:5c:c2:16:a8:14: d7:e6:30:d7:91:6c:65:91:12:55:27:c8:79:d7:04:80:47:98: 03:a5:68:79:b3:e8:0c:f2:5b:8d:db:56:b1:97:e1:77:e4:73: 94:b3:b9:f2:9c:f9:1c:b5:7f:e4:94:9a:36:f8:39:d3:df:ab: 84:07:ee:68:ed:c3:78:54:17:57:71:c6:6c:a7:4e:d2:19:d0: 3e:96:3b:6d:ef:eb:10:dd:61:f2:4b:87:cf:42:b9:88:03:26: e5:b6:10:e3:7f:b1:17:41:81:2b:15:54:55:28:e1:92:fc:c8: 9c:89:61:39:b5:3b:ec:64:f9:ad:8c:49:c6:31:a5:b6:69:2d: 2a:c3:00:71:b8:0c:ea:6b:a3:a6:17:d5:1a:0b:ee:41:cf:e6: 24:f0:3b:cf:a3:fd:9c:4e:05:24:8d:1c:78:58:93:a4:b1:93: 9f:f6:28:39:25:c7:8a:4e:c0:0c:b6:d9:8d:e6:e2:a0:df:bd: 50:2c:5d:62:82:f9:2d:9d:30:b7:f0:3c:3a:f1:85:e7:a3:88: b4:19:33:12:4a:89:82:14:53:d7:f9:36:85:29:67:bd:49:fd: 74:d0:99:23:17:24:16:7c:1f:d5:c4:9f:65:de:ca:c2:09:32: 8d:78:07:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkPkuNMB0W2l7/ePcG1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4 OGQwNTcwHhcNMjYwMjA5MTYwMDQ0WhcNMjYwMjEwMTYwMDQ0WjAzMTEwLwYDVQQD Eyg5YzE4NjFmNTU5YWExODVjNDY4YjRhYTNhYzlkNTY2OTE4YTdhZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/3iPOilAsdu3CajrHGKZ9vRTvtya md5bcjEQQk1uQAPAAiw660q9J8JBnfyaIkAqRLs383ENbJFTWOGOfVthth3dUCCa rqqrFdM3ju4m41a6DzxSf1C4Uc4SegSTvArDQ5QvlV9nAARsLPAAvzLliiURyX8F zVXXKHa7EP6ncjpVTPZhk0qqmFc/r+q/ULOT53pFs2dW38CZUxNECf2/6Xycqx71 IPN1wuXSHG25dFbJ4+NZZ7km2SsjzBCpKRB9qrV9peYpFp0JNkh6Xps/KyQY9Peq MISG56D5fqooPTCbrhBtH4zCcDnAiBcI3IOqRpGBsQ4UqygfW3zxuR4JxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwYYfVZqhhcRotKo6ydVmkYp60BMB8GA1UdIwQY MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2 LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh3rHM5G sprUkuj2UlzCFqgU1+Yw15FsZZESVSfIedcEgEeYA6VoebPoDPJbjdtWsZfhd+Rz lLO58pz5HLV/5JSaNvg509+rhAfuaO3DeFQXV3HGbKdO0hnQPpY7be/rEN1h8kuH z0K5iAMm5bYQ43+xF0GBKxVUVSjhkvzInIlhObU77GT5rYxJxjGltmktKsMAcbgM 6mujphfVGgvuQc/mJPA7z6P9nE4FJI0ceFiTpLGTn/YoOSXHik7ADLbZjebioN+9 UCxdYoL5LZ0wt/A8OvGF56OItBkzEkqJghRT1/k2hSlnvUn9dNCZIxckFnwf1cSf Zd7KwgkyjXgHXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:28 2026 by rpki-client