This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json) Hash identifier: nLprlyO+MlRmEKiKtrMYm3nUsfIJmNySCsy6xwZ74z8= Subject key identifier: 65:A4:5D:4C:71:81:0B:46:87:30:39:CB:73:1A:63:6B:FC:80:0C:5F Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc Certificate serial: 019C41D8F40CBA0B0A40FE6A1493FB5CA6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft Manifest number: 03C9 Signing time: Mon 09 Feb 2026 10:01:03 +0000 Manifest this update: Mon 09 Feb 2026 10:01:03 +0000 Manifest next update: Tue 10 Feb 2026 10:01:03 +0000 Files and hashes: 1: 0rNoESpAqZ7s2Ti898AnDHcoBRY.roa (hash: k1laR98RBM1pgcBRG/JSlPGQHjYS4qfoYBq8kh6MnD8=) 2: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: iB374aWmcL6preWVScEduPYornIB6x15s0vRe+JM1C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f4:0c:ba:0b:0a:40:fe:6a:14:93:fb:5c:a6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc Validity Not Before: Feb 9 10:01:03 2026 GMT Not After : Feb 10 10:01:03 2026 GMT Subject: CN=65a45d4c71810b46873039cb731a636bfc800c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:c8:fc:6b:ab:e5:11:66:b6:26:20:67:1b: 78:cf:67:4b:81:2f:c2:cc:cf:05:54:8c:66:84:0c: c6:e7:7a:96:3e:ba:02:b1:a3:d2:86:96:5c:ec:07: 54:fc:1c:4c:1c:be:53:6e:f7:65:85:94:24:32:71: 0d:6f:a3:b5:0d:aa:60:68:be:13:57:8e:65:8d:1a: de:69:c9:2b:de:f9:be:dc:0a:94:13:e9:08:9d:ac: bc:16:bf:47:f1:9a:c8:a7:33:13:a9:9f:b7:55:e7: fc:00:5b:68:ac:3a:ea:d0:d7:1c:db:3b:d4:3e:19: b8:e3:ad:26:ce:ce:3e:07:ab:ad:fb:a5:8f:ea:08: 0b:53:aa:79:e3:c7:73:b0:b4:23:cf:52:a3:e9:e3: 24:e0:ed:9d:ab:35:5a:8c:6e:1e:fe:13:5e:10:fa: 9a:a5:1d:1b:20:6d:bd:78:35:86:43:8c:fe:ba:5a: 79:17:54:aa:70:96:d2:8a:cb:55:6f:ac:9d:5c:20: 25:9e:87:b4:e1:7f:82:63:ae:1e:b8:d0:26:a3:90: 99:e4:70:52:f3:8b:6d:e1:d0:9b:e4:5c:79:7d:6d: 77:96:7d:0d:8e:d4:a9:a8:80:ab:5b:24:9e:52:b3: 30:3b:da:de:a8:01:a6:83:e0:64:83:55:a8:c2:45: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:5D:4C:71:81:0B:46:87:30:39:CB:73:1A:63:6B:FC:80:0C:5F X509v3 Authority Key Identifier: keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:28:77:b4:82:aa:4d:c7:d7:46:ad:b9:0e:77:71:6b:a1:00: 95:79:ef:a6:dc:ff:de:f3:b7:6c:76:39:0d:ee:d8:85:3f:81: 73:77:5c:9e:34:3f:c9:b0:56:2c:16:5f:08:61:bd:8a:14:eb: 63:ae:67:14:11:00:11:64:92:ba:a0:75:3c:06:5a:aa:7b:a1: a4:d9:01:a6:6e:be:6c:73:c5:68:6c:b1:25:90:4d:8d:2b:01: 79:d7:d2:0d:6c:b8:9e:3f:8d:87:97:47:81:f5:f2:a8:02:57: 35:29:fc:25:cc:a9:20:8e:97:0d:cd:ea:96:2e:8a:a5:f6:22: ac:fa:aa:61:e6:a9:3d:aa:a8:87:df:a1:40:ae:43:39:3d:da: 19:72:24:61:b9:b3:5f:d5:2a:7a:c1:3d:d0:f6:34:4d:f1:15: 53:91:79:a5:3e:80:68:47:9a:f8:5a:d5:0f:47:15:ef:5b:fd: 0e:0b:6e:bd:c8:a3:20:e9:df:b3:ac:eb:50:2c:87:93:6d:12: 08:f4:ff:49:d8:c1:0c:7c:b6:d3:0c:53:ef:7e:de:3c:ef:92: 05:04:d2:c7:8f:6d:90:02:0c:81:7b:ae:10:2b:ae:a1:a4:62: 59:b3:ec:c6:9d:42:d6:f7:2a:68:41:10:08:bf:97:94:47:25: 2f:d0:9f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PQMugsKQP5qFJP7XKbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk OWVkZGMwHhcNMjYwMjA5MTAwMTAzWhcNMjYwMjEwMTAwMTAzWjAzMTEwLwYDVQQD Eyg2NWE0NWQ0YzcxODEwYjQ2ODczMDM5Y2I3MzFhNjM2YmZjODAwYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4bI/Gur5RFmtiYgZxt4z2dLgS/C zM8FVIxmhAzG53qWProCsaPShpZc7AdU/BxMHL5TbvdlhZQkMnENb6O1DapgaL4T V45ljRreackr3vm+3AqUE+kInay8Fr9H8ZrIpzMTqZ+3Vef8AFtorDrq0Ncc2zvU Phm4460mzs4+B6ut+6WP6ggLU6p548dzsLQjz1Kj6eMk4O2dqzVajG4e/hNeEPqa pR0bIG29eDWGQ4z+ulp5F1SqcJbSistVb6ydXCAlnoe04X+CY64euNAmo5CZ5HBS 84tt4dCb5Fx5fW13ln0NjtSpqICrWySeUrMwO9reqAGmg+Bkg1WowkW7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWkXUxxgQtGhzA5y3MaY2v8gAxfMB8GA1UdIwQY MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt NmFjMzUzNzBmZDczLzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACih3tIKq TcfXRq25Dndxa6EAlXnvptz/3vO3bHY5De7YhT+Bc3dcnjQ/ybBWLBZfCGG9ihTr Y65nFBEAEWSSuqB1PAZaqnuhpNkBpm6+bHPFaGyxJZBNjSsBedfSDWy4nj+Nh5dH gfXyqAJXNSn8JcypII6XDc3qli6KpfYirPqqYeapPaqoh9+hQK5DOT3aGXIkYbmz X9UqesE90PY0TfEVU5F5pT6AaEea+FrVD0cV71v9DgtuvcijIOnfs6zrUCyHk20S CPT/SdjBDHy20wxT737ePO+SBQTSx49tkAIMgXuuECuuoaRiWbPsxp1C1vcqaEEQ CL+XlEclL9CfjA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:17 2026 by rpki-client