This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json) Hash identifier: fCLhOXA4TYtrvdaZR+mIBEMFoZcyNIdavwZp9Axr+W8= Subject key identifier: D1:63:4D:FF:7A:7C:BC:1D:EF:74:E6:53:98:05:62:1D:BC:6A:63:C8 Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Certificate serial: 019C43227C6AC1B446DDF65DFB719B3C6F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: WPbwfgFYd8c+QoRwVFjqCd0Epm0GRAsH3YDGJJoEsVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7c:6a:c1:b4:46:dd:f6:5d:fb:71:9b:3c:6f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=d1634dff7a7cbc1def74e6539805621dbc6a63c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:50:cc:1f:95:57:35:27:64:8d:c6:7a:1f: 59:57:c6:5f:1a:fc:3f:d8:db:dd:5d:40:62:1c:28: 8b:d9:8b:b1:55:3c:9a:c2:19:24:c1:56:6c:b1:96: 4c:26:af:02:0d:98:65:fc:14:50:69:f2:9e:cc:2d: 6d:95:3d:5e:11:8e:36:cb:ce:90:89:26:de:08:44: 03:10:95:b3:2d:0e:da:32:c5:f9:55:af:4c:1a:c2: f4:21:52:92:17:8b:dd:8e:f0:46:03:00:f8:ce:de: c1:78:b9:92:6b:f4:46:bd:4b:20:f4:6b:50:90:09: cf:8a:1a:8a:c1:2b:5d:7e:36:07:e2:53:23:cc:3a: c5:01:a1:be:f3:b7:31:43:7a:ef:39:b9:be:1a:59: ce:dd:1f:36:2c:e7:c8:3a:42:05:e6:e7:95:5a:8a: 9d:8d:be:b4:89:8f:ec:5d:9b:53:8e:0c:8a:0a:05: 06:60:eb:9e:81:a9:6d:e6:b9:0d:b1:b8:56:72:93: c0:ed:d7:ff:a5:98:7e:f5:c8:52:b3:3e:e1:a9:33: a1:da:18:3b:33:b2:22:5e:ed:cb:bb:d6:e7:07:5a: 47:ea:d6:22:bc:13:5f:02:46:1c:95:e7:88:99:b2: 7d:01:3d:14:b8:68:b5:42:d6:60:45:87:a1:e7:68: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:63:4D:FF:7A:7C:BC:1D:EF:74:E6:53:98:05:62:1D:BC:6A:63:C8 X509v3 Authority Key Identifier: keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:08:f9:6e:29:08:d7:bd:1f:f8:aa:af:5c:c3:17:1d:c4: 76:f7:9f:32:95:63:c5:e0:a9:8a:81:99:32:94:f9:82:ed:7e: 96:92:bd:1b:7a:f6:77:41:6f:c8:18:65:44:df:6d:d1:e6:fd: a2:86:82:e9:df:58:48:ce:d3:78:6d:5b:4e:12:7d:c3:16:4f: 74:75:5c:dc:7e:72:9c:4e:ac:b8:ea:ef:f2:5e:42:41:67:02: 3e:52:40:29:f4:ac:8e:52:53:96:f7:01:49:88:a3:48:50:b2: 9a:00:1b:3f:a5:17:09:c5:e6:ec:0a:90:70:80:32:5d:01:c9: 02:0e:9a:cf:2f:d6:6e:6e:39:6f:3c:9b:4a:6e:3e:ee:e2:ec: 8c:3b:67:43:90:a1:5c:5f:0b:75:43:db:73:ee:3e:9b:61:01: 4a:57:3b:4e:76:3d:0f:8f:e4:1d:58:33:d7:ef:4a:05:90:9f: 45:49:af:b9:94:57:f1:1e:ae:ed:5c:a5:20:c5:41:1d:65:9e: a2:60:eb:48:6d:99:de:fd:8e:33:d9:96:6e:ca:8b:71:6c:b1: 98:5e:0f:94:e0:c9:c0:f9:0d:c3:4e:c2:33:d6:78:dd:9e:b6: bb:b8:55:55:ab:7d:df:31:1a:1f:59:95:f3:60:a6:65:5c:87: dd:1e:b0:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInxqwbRG3fZd+3GbPG9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZWIyYzk5YjhjYTY4NWEyYTUzODU4ODE0MWRiMWM0YjY0 MWQzNzYwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EyhkMTYzNGRmZjdhN2NiYzFkZWY3NGU2NTM5ODA1NjIxZGJjNmE2M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWRQzB+VVzUnZI3Geh9ZV8ZfGvw/ 2NvdXUBiHCiL2YuxVTyawhkkwVZssZZMJq8CDZhl/BRQafKezC1tlT1eEY42y86Q iSbeCEQDEJWzLQ7aMsX5Va9MGsL0IVKSF4vdjvBGAwD4zt7BeLmSa/RGvUsg9GtQ kAnPihqKwStdfjYH4lMjzDrFAaG+87cxQ3rvObm+GlnO3R82LOfIOkIF5ueVWoqd jb60iY/sXZtTjgyKCgUGYOuegalt5rkNsbhWcpPA7df/pZh+9chSsz7hqTOh2hg7 M7IiXu3Lu9bnB1pH6tYivBNfAkYcleeImbJ9AT0UuGi1QtZgRYeh52gZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFjTf96fLwd73TmU5gFYh28amPIMB8GA1UdIwQY MBaAFLjrLJm4ymhaKlOFiBQdscS2QdN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2Mt YWI2ZDBjMjEzZmRjLzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2MtYWI2ZDBjMjEzZmRj LzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpkI+W4p CNe9H/iqr1zDFx3EdvefMpVjxeCpioGZMpT5gu1+lpK9G3r2d0FvyBhlRN9t0eb9 ooaC6d9YSM7TeG1bThJ9wxZPdHVc3H5ynE6suOrv8l5CQWcCPlJAKfSsjlJTlvcB SYijSFCymgAbP6UXCcXm7AqQcIAyXQHJAg6azy/Wbm45bzybSm4+7uLsjDtnQ5Ch XF8LdUPbc+4+m2EBSlc7TnY9D4/kHVgz1+9KBZCfRUmvuZRX8R6u7VylIMVBHWWe omDrSG2Z3v2OM9mWbsqLcWyxmF4PlODJwPkNw07CM9Z43Z62u7hVVat93zEaH1mV 82CmZVyH3R6w4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:02 2026 by rpki-client