This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json) Hash identifier: CAFey2TK8+vHD2WQYnUzbYqk0c3f6WOeXp1b1yZYjuQ= Subject key identifier: 20:CA:AF:92:BF:3C:70:D8:10:2F:82:90:11:C1:95:BD:03:06:3C:DB Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Certificate serial: 019C42B42DA454A6A2AD38FC6E866A2D8B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft Manifest number: 08AA Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=) 2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: v6EmNnN1v7VXo0VVX47gAuy7ZNPkSUwJyciMr3bNKMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2d:a4:54:a6:a2:ad:38:fc:6e:86:6a:2d:8b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9 Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=20caaf92bf3c70d8102f829011c195bd03063cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:1d:5b:9c:5f:5e:9a:da:15:82:15:ff:56: e4:9a:d2:17:e4:b7:50:98:46:11:cd:c4:66:10:4f: 04:2d:1c:84:31:b6:67:3d:eb:47:7b:dc:47:b0:8c: 8c:df:93:df:4e:49:53:cc:61:2f:5e:62:d4:c2:ff: 06:b3:f1:12:4b:7d:28:a4:53:b2:1b:af:14:89:51: 07:41:fa:86:c4:69:bc:30:8b:45:c5:b5:82:ee:87: 17:49:9d:3f:48:a8:e9:77:89:dd:04:1d:6a:ba:f4: 2f:e2:61:a2:09:ab:e9:2f:70:f3:32:be:5d:26:c2: 20:ee:67:53:48:cc:d6:53:4e:0a:66:6e:55:04:ee: 46:af:a8:e0:e6:70:b2:3b:b6:c4:6c:77:60:db:35: 1a:95:d7:38:da:0c:cd:51:67:54:6f:7c:98:0e:b5: e5:56:f3:27:6e:d1:da:9c:15:96:25:b6:e6:2a:fa: 96:79:d6:1f:84:ae:cc:a5:e8:c9:30:6c:84:20:ba: 1c:97:90:97:b5:7f:b7:f8:49:12:fa:a9:45:83:15: 1f:66:97:3a:02:02:b3:6e:30:c0:40:a3:d6:82:a6: d3:5a:9f:e5:91:b2:ac:ea:c7:37:32:51:a8:19:53: 81:bd:f4:78:3f:fe:d0:fd:30:6d:6e:f9:60:6b:cd: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CA:AF:92:BF:3C:70:D8:10:2F:82:90:11:C1:95:BD:03:06:3C:DB X509v3 Authority Key Identifier: keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:53:cc:80:b0:c4:4d:a0:0b:85:e7:36:35:44:ff:25:c9:e0: 28:61:89:d8:2f:05:13:f2:a3:e9:e6:fd:c9:fe:a3:e9:dc:5e: f4:4c:11:ff:91:cf:bd:b6:0c:c7:31:26:72:b6:bb:65:dd:9e: 76:c6:bc:97:3f:9f:1d:79:e4:f1:7b:82:e2:e7:df:99:72:4d: ff:96:bd:db:90:54:4b:b3:36:9a:26:b2:da:30:88:97:c5:27: b9:ff:1e:cd:90:81:a2:8c:d0:42:db:f4:d3:73:10:b5:8a:04: bc:a4:8e:fe:81:b0:d7:a4:67:51:41:70:51:5e:b0:f5:66:c6: 4a:31:56:fa:88:d1:e5:28:85:ae:b8:49:05:0e:22:32:cc:8c: 4a:c3:e0:b5:b9:e3:dd:1d:a4:f1:54:6a:4d:03:e3:92:7d:09: 3c:14:2c:d8:7c:62:37:4e:e3:65:b9:f0:5c:2c:30:bf:32:f2: 8e:ad:9c:a6:5a:e1:0d:e4:0b:d1:62:f0:20:db:d9:19:28:2d: ca:51:51:2f:fc:19:50:94:4c:cf:43:0c:cf:cb:e4:c9:b7:f2: 23:b7:f9:18:7a:4f:69:99:e4:9d:d0:31:46:b1:de:b9:56:7d: 74:b2:f0:04:97:7a:4e:0a:a9:54:dc:f7:b0:0d:0f:c9:47:f5: 19:b5:9d:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC2kVKairTj8boZqLYt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0 NTY2YzkwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EygyMGNhYWY5MmJmM2M3MGQ4MTAyZjgyOTAxMWMxOTViZDAzMDYzY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxegdW5xfXpraFYIV/1bkmtIX5LdQ mEYRzcRmEE8ELRyEMbZnPetHe9xHsIyM35PfTklTzGEvXmLUwv8Gs/ESS30opFOy G68UiVEHQfqGxGm8MItFxbWC7ocXSZ0/SKjpd4ndBB1quvQv4mGiCavpL3DzMr5d JsIg7mdTSMzWU04KZm5VBO5Gr6jg5nCyO7bEbHdg2zUaldc42gzNUWdUb3yYDrXl VvMnbtHanBWWJbbmKvqWedYfhK7MpejJMGyEILocl5CXtX+3+EkS+qlFgxUfZpc6 AgKzbjDAQKPWgqbTWp/lkbKs6sc3MlGoGVOBvfR4P/7Q/TBtbvlga81ESwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDKr5K/PHDYEC+CkBHBlb0DBjzbMB8GA1UdIwQY MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt NDU3NDA2MmFlY2I1LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1 LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVPMgLDE TaALhec2NUT/JcngKGGJ2C8FE/Kj6eb9yf6j6dxe9EwR/5HPvbYMxzEmcra7Zd2e dsa8lz+fHXnk8XuC4uffmXJN/5a925BUS7M2miay2jCIl8Unuf8ezZCBoozQQtv0 03MQtYoEvKSO/oGw16RnUUFwUV6w9WbGSjFW+ojR5SiFrrhJBQ4iMsyMSsPgtbnj 3R2k8VRqTQPjkn0JPBQs2HxiN07jZbnwXCwwvzLyjq2cplrhDeQL0WLwINvZGSgt ylFRL/wZUJRMz0MMz8vkybfyI7f5GHpPaZnkndAxRrHeuVZ9dLLwBJd6TgqpVNz3 sA0PyUf1GbWdMA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:53 2026 by rpki-client