This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json) Hash identifier: e/b9H6kFZTBP4eGtI0RjS4XWO0ZwOkgUm4emVtnGo6E= Subject key identifier: FD:C4:F0:DE:99:82:DE:A8:0E:82:4D:DB:6E:ED:9E:C9:4D:25:EC:51 Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89 Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389 Certificate serial: 019C420F1ED46FE7E0671CF455F25A3C45C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft Manifest number: 0551 Signing time: Mon 09 Feb 2026 11:00:12 +0000 Manifest this update: Mon 09 Feb 2026 11:00:12 +0000 Manifest next update: Tue 10 Feb 2026 11:00:12 +0000 Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: qBCO599EJ6F4rMN9txAuZfOn7K5ET4cQ9jb2oypeYe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:1e:d4:6f:e7:e0:67:1c:f4:55:f2:5a:3c:45:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389 Validity Not Before: Feb 9 11:00:12 2026 GMT Not After : Feb 10 11:00:12 2026 GMT Subject: CN=fdc4f0de9982dea80e824ddb6eed9ec94d25ec51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:0e:2b:a2:78:7b:e3:27:e6:0f:f2:f3:dc: b0:37:df:9b:9b:53:13:2e:d5:75:dd:78:9d:04:e1: 01:5b:19:6c:97:f7:7e:5f:7f:7e:62:93:8d:52:0c: 05:d6:05:1c:c3:23:02:55:82:88:95:7b:fd:91:bf: a0:4f:66:21:f3:a4:b5:c5:11:a3:58:b5:9a:a5:77: 4b:70:fa:22:a8:70:ed:b9:df:2d:0d:87:00:e0:6c: a0:5a:c1:ff:19:29:76:40:22:ab:99:76:82:4a:8d: 77:3c:e1:03:dc:67:6e:25:80:a7:62:37:d4:f2:e2: a7:f1:f2:c1:d5:f9:f2:49:96:95:b2:9b:fa:8a:5b: 98:62:f9:08:5d:d6:bc:6f:aa:5a:ee:61:bf:6e:ef: 1f:2c:ca:5e:75:85:b0:10:bf:44:ca:c7:e2:99:2a: 6c:6a:71:ff:89:f9:54:3c:70:46:f1:cc:9d:21:8a: 41:32:9d:6e:a0:0a:a4:d1:e8:fa:07:89:a5:a8:7f: 49:9b:e5:b3:b6:5b:b4:09:98:e2:ca:90:bc:0b:3a: 88:37:5b:0b:69:c2:65:82:a5:52:98:f5:87:da:35: 29:48:72:c9:e9:a0:c5:e4:5c:16:1f:d4:36:8e:12: 5b:63:6c:a8:8b:aa:ab:8f:45:2f:e8:49:c1:af:95: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:F0:DE:99:82:DE:A8:0E:82:4D:DB:6E:ED:9E:C9:4D:25:EC:51 X509v3 Authority Key Identifier: keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:76:39:be:85:1e:4c:89:07:bf:fc:03:19:73:7a:58:10:29: e0:9e:e2:c4:17:13:8f:e3:1c:c3:49:a7:7a:14:b0:d7:e4:32: 93:e1:a8:fa:71:09:99:db:87:30:d6:05:a1:21:50:72:b9:0a: de:d9:e4:67:f0:c2:71:a8:e0:7f:16:d5:7f:50:60:d9:82:21: c1:5d:9b:75:df:70:85:4e:3b:51:e0:35:5e:46:43:43:d0:56: f7:47:8c:00:3f:78:54:77:db:7a:da:59:7b:31:68:13:59:7e: 86:bb:71:6c:1f:8b:0e:62:48:17:9d:18:f3:4a:3d:ef:c4:c9: ef:7b:d5:ea:ac:0a:e2:ef:3f:68:b6:78:f8:44:50:93:52:f2: 84:1e:e3:68:7a:e7:af:16:cf:a9:c3:d3:9e:75:6f:5d:3e:6a: c9:1a:f9:18:e9:d9:74:5c:dd:2c:dc:67:45:10:92:09:0c:04: 10:18:1c:9f:e7:f0:90:7f:78:3f:47:d4:2b:2d:b9:cb:05:1e: 44:7b:25:2e:d2:5c:81:53:50:60:56:9f:13:86:b8:4b:5f:3a: 5f:00:73:7d:2c:ba:44:c6:79:4d:e5:4b:52:cf:44:56:c0:df: 1c:9a:c0:d1:22:61:a0:7b:ca:d1:ac:a9:82:e6:21:ee:1c:49: 34:bb:f0:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDx7Ub+fgZxz0VfJaPEXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMWQ0ZmViMzExZTZjMmRiYzczZDUwNGZjODQ5MGNjMjE1 NDYzODkwHhcNMjYwMjA5MTEwMDEyWhcNMjYwMjEwMTEwMDEyWjAzMTEwLwYDVQQD EyhmZGM0ZjBkZTk5ODJkZWE4MGU4MjRkZGI2ZWVkOWVjOTRkMjVlYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnoOK6J4e+Mn5g/y89ywN9+bm1MT LtV13XidBOEBWxlsl/d+X39+YpONUgwF1gUcwyMCVYKIlXv9kb+gT2Yh86S1xRGj WLWapXdLcPoiqHDtud8tDYcA4GygWsH/GSl2QCKrmXaCSo13POED3GduJYCnYjfU 8uKn8fLB1fnySZaVspv6iluYYvkIXda8b6pa7mG/bu8fLMpedYWwEL9EysfimSps anH/iflUPHBG8cydIYpBMp1uoAqk0ej6B4mlqH9Jm+Wztlu0CZjiypC8CzqIN1sL acJlgqVSmPWH2jUpSHLJ6aDF5FwWH9Q2jhJbY2yoi6qrj0Uv6EnBr5X3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3E8N6Zgt6oDoJN227tnslNJexRMB8GA1UdIwQY MBaAFLsdT+sxHmwtvHPVBPyEkMwhVGOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzIt NzcxYWI5ZmFkZjdmLzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZTJmMTMtNTI1MC00OWYyLWE0NzItNzcxYWI5ZmFkZjdm LzEvdXgxUDZ6RWViQzI4YzlVRV9JU1F6Q0ZVWTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3Y5voUe TIkHv/wDGXN6WBAp4J7ixBcTj+Mcw0mnehSw1+Qyk+Go+nEJmduHMNYFoSFQcrkK 3tnkZ/DCcajgfxbVf1Bg2YIhwV2bdd9whU47UeA1XkZDQ9BW90eMAD94VHfbetpZ ezFoE1l+hrtxbB+LDmJIF50Y80o978TJ73vV6qwK4u8/aLZ4+ERQk1LyhB7jaHrn rxbPqcPTnnVvXT5qyRr5GOnZdFzdLNxnRRCSCQwEEBgcn+fwkH94P0fUKy25ywUe RHslLtJcgVNQYFafE4a4S186XwBzfSy6RMZ5TeVLUs9EVsDfHJrA0SJhoHvK0ayp guYh7hxJNLvwdw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:54 2026 by rpki-client