This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json) Hash identifier: rU9OrvvzTlrrOb9h2W7a3aa7PL89FxEM1YD3oybvWfg= Subject key identifier: D6:6B:B1:1E:81:3C:B8:20:0B:47:F8:58:9D:66:7D:AC:0F:ED:D1:CB Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6 Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6 Certificate serial: 019C42B41EBA4F4C042A32066208C9C8A7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft Manifest number: 04E1 Signing time: Mon 09 Feb 2026 14:00:26 +0000 Manifest this update: Mon 09 Feb 2026 14:00:26 +0000 Manifest next update: Tue 10 Feb 2026 14:00:26 +0000 Files and hashes: 1: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: TcKJYaY49o6STJtXa4LoRNqAgZUwp6pSGxH8Gv4Sg+A=) 2: aLUgnnQfJFpMYdLs4kwtonmb-hA.roa (hash: GymUmYXXa2s1YAQ4JdjPRXC1fKxQsyfynIWTDZIu0M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1e:ba:4f:4c:04:2a:32:06:62:08:c9:c8:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6 Validity Not Before: Feb 9 14:00:26 2026 GMT Not After : Feb 10 14:00:26 2026 GMT Subject: CN=d66bb11e813cb8200b47f8589d667dac0fedd1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:e7:45:9c:ce:19:89:2d:e5:55:fe:11:7c: c8:61:b9:67:22:f6:94:9f:8d:64:14:0c:34:86:88: a7:95:5c:e9:17:bb:7c:50:bd:aa:36:63:bd:89:d1: 94:86:2a:78:cb:3b:db:be:59:b5:a0:e6:8c:fe:65: 22:cc:0d:03:93:b4:0f:c8:c8:13:1c:ae:d2:db:1b: 54:cf:33:24:6f:af:81:dc:ef:9e:61:86:09:d5:cc: b3:ee:3e:5e:af:a1:7c:68:87:95:ed:93:b5:d8:ee: 29:a0:b3:53:c2:ca:32:41:01:a6:48:77:c9:33:03: a7:a3:98:b8:77:58:3b:a4:41:70:43:9a:5e:e2:d9: 31:80:8b:ed:59:c3:b0:d4:99:8d:1f:f2:36:2e:45: 5e:24:a8:5c:ac:9d:b7:9f:67:46:9f:16:39:26:52: fa:2a:ab:2c:d3:22:d0:6a:dc:d7:26:b0:72:ce:d5: 22:42:05:43:24:17:39:b5:ea:a4:4e:e8:0f:26:da: 2f:7e:00:c9:ff:3b:85:40:53:88:7a:a1:52:3a:90: 55:50:ae:dd:2d:18:d7:27:42:01:53:be:51:8d:4d: 42:9b:71:81:bd:86:8c:61:b0:2e:81:86:21:e7:42: f0:e0:6c:2a:d9:37:67:2c:f6:5a:e6:54:0f:bb:fc: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6B:B1:1E:81:3C:B8:20:0B:47:F8:58:9D:66:7D:AC:0F:ED:D1:CB X509v3 Authority Key Identifier: keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:36:de:91:ed:de:11:cb:90:5e:19:ce:10:b6:c5:6a:f2:8f: bc:fb:6b:ee:b8:6e:db:d2:02:6a:4e:58:35:94:19:cf:71:f6: 4d:e9:0d:b0:e8:71:09:49:a6:62:a6:2e:d1:6f:c3:fd:be:6d: 1d:22:a2:fa:89:e7:95:3b:5c:ba:a1:bb:c7:f9:fb:dd:5f:89: 1a:8e:fe:35:ea:67:49:3b:58:f4:1e:c0:eb:aa:b2:77:d8:25: da:db:53:b0:67:2d:f7:a2:af:99:b4:ee:58:49:43:9c:1a:54: 25:0c:2f:ac:13:84:f0:8a:99:4e:35:25:8f:b8:c6:c1:6b:4b: 1a:07:9d:4e:66:d5:84:b2:36:a0:6b:a0:f6:1c:1d:bb:83:27: 74:6d:d0:0a:49:4b:66:aa:0f:40:e7:ec:f5:ff:8e:f9:bc:ea: bd:4a:07:1f:ad:9a:a8:0a:84:72:98:57:64:4a:9e:50:ee:35: 0e:a7:56:dd:f0:eb:78:69:8e:49:e4:02:0c:66:83:59:c7:2e: b1:49:89:68:1e:62:0b:8a:f5:83:47:de:dc:86:84:da:0a:40: 9c:c4:cf:7f:fe:6c:86:ab:14:dc:5d:19:87:11:a1:10:68:c5: 2d:c2:6e:ce:fa:2b:14:0a:61:4c:ac:1d:08:e8:4f:98:0b:bd: a9:e9:ff:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtB66T0wEKjIGYgjJyKflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDY3NmQ2NjkzMmM3N2EyNTc2MTEzNmFjOTllYjliNzRk ODAxYTYwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD EyhkNjZiYjExZTgxM2NiODIwMGI0N2Y4NTg5ZDY2N2RhYzBmZWRkMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLDnRZzOGYkt5VX+EXzIYblnIvaU n41kFAw0hoinlVzpF7t8UL2qNmO9idGUhip4yzvbvlm1oOaM/mUizA0Dk7QPyMgT HK7S2xtUzzMkb6+B3O+eYYYJ1cyz7j5er6F8aIeV7ZO12O4poLNTwsoyQQGmSHfJ MwOno5i4d1g7pEFwQ5pe4tkxgIvtWcOw1JmNH/I2LkVeJKhcrJ23n2dGnxY5JlL6 Kqss0yLQatzXJrByztUiQgVDJBc5teqkTugPJtovfgDJ/zuFQFOIeqFSOpBVUK7d LRjXJ0IBU75RjU1Cm3GBvYaMYbAugYYh50Lw4Gwq2TdnLPZa5lQPu/wX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZrsR6BPLggC0f4WJ1mfawP7dHLMB8GA1UdIwQY MBaAFFNGdtZpMsd6JXYRNqyZ65t02AGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQt YTAwOTQ0ZmQ3ZDlkLzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wNGU2NGItOTI0Yy00OGEwLTg5YTQtYTAwOTQ0ZmQ3ZDlk LzEvVTBaMjFta3l4M29sZGhFMnJKbnJtM1RZQWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjbeke3e EcuQXhnOELbFavKPvPtr7rhu29ICak5YNZQZz3H2TekNsOhxCUmmYqYu0W/D/b5t HSKi+onnlTtcuqG7x/n73V+JGo7+NepnSTtY9B7A66qyd9gl2ttTsGct96KvmbTu WElDnBpUJQwvrBOE8IqZTjUlj7jGwWtLGgedTmbVhLI2oGug9hwdu4MndG3QCklL ZqoPQOfs9f+O+bzqvUoHH62aqAqEcphXZEqeUO41DqdW3fDreGmOSeQCDGaDWccu sUmJaB5iC4r1g0fe3IaE2gpAnMTPf/5shqsU3F0ZhxGhEGjFLcJuzvorFAphTKwd COhPmAu9qen/mw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client