This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json) Hash identifier: 8Eqm3NpAO0OZZ0wC91P0hDT3Y+FJnlpH+zdk11H9HN4= Subject key identifier: AA:21:39:6C:10:3A:5A:12:1C:20:08:21:AB:F8:39:47:9C:F3:71:F0 Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Certificate serial: 019C446B6635D9F8284C4509AD6AE6F9D9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft Manifest number: 16F8 Signing time: Mon 09 Feb 2026 22:00:14 +0000 Manifest this update: Mon 09 Feb 2026 22:00:14 +0000 Manifest next update: Tue 10 Feb 2026 22:00:14 +0000 Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: mDklzWNcU90NnCbHAj8vPL2bUkJYWo8dHUVqFojsOwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:66:35:d9:f8:28:4c:45:09:ad:6a:e6:f9:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f Validity Not Before: Feb 9 22:00:14 2026 GMT Not After : Feb 10 22:00:14 2026 GMT Subject: CN=aa21396c103a5a121c200821abf839479cf371f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:3b:d7:38:80:cf:c4:6e:80:f1:f1:d9:f7: 68:26:80:f1:bd:9c:1e:0e:18:f1:db:c1:2e:19:9f: b3:c3:34:20:97:27:a7:ec:4d:4f:e5:75:55:70:d9: f4:2b:8b:cc:79:05:36:aa:9f:5f:59:ee:b0:4e:e8: 4d:c7:df:af:79:64:65:88:18:eb:a2:d7:4c:ec:9e: 5c:07:99:df:e6:6d:73:1f:c1:ae:9c:6c:f6:86:32: 6a:70:56:85:bb:fa:ac:e6:ef:f1:f8:b5:4d:07:ac: 0a:ad:af:f8:f9:05:0a:c5:40:65:99:23:89:c6:48: b2:e7:da:a9:8b:87:6e:12:e5:3c:92:18:00:8d:a0: ee:7f:d7:b1:03:8f:5d:92:a4:5a:c6:70:07:a0:de: 42:9e:55:3e:18:49:38:53:1b:fc:56:8d:d1:15:46: b7:1f:07:67:30:a6:16:83:e8:66:12:e7:05:ec:9b: 23:99:05:95:d5:9a:fe:65:fe:e3:51:94:59:b9:d0: 98:4b:8b:d3:da:7f:0c:23:fc:58:89:78:dc:1c:3b: 04:5a:b1:a6:87:91:21:cb:db:59:be:6f:c9:45:fe: f7:25:91:c0:31:07:17:a9:7f:19:27:e5:3a:fe:fa: 3e:89:e0:16:4b:70:f8:2f:3b:ea:e2:d6:4a:88:8e: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:21:39:6C:10:3A:5A:12:1C:20:08:21:AB:F8:39:47:9C:F3:71:F0 X509v3 Authority Key Identifier: keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b8:38:26:c7:ee:38:f6:86:ad:0e:b5:4e:09:30:4a:79:85: d8:67:49:ce:a6:5b:de:7c:35:eb:19:c9:90:65:6c:3c:25:9e: 07:74:df:b3:a0:15:80:ee:53:f4:04:de:7e:44:f3:1e:06:e0: 37:a0:61:aa:71:90:a7:e4:90:00:6e:c7:40:79:95:4e:b7:39: 21:a8:77:bd:66:e2:de:8c:7f:a7:ea:87:d2:f5:2d:23:5f:85: 59:e0:14:4d:fe:62:3b:01:6b:80:84:8c:56:ec:32:37:92:a2: e4:2e:f7:a2:97:7f:e7:dd:e7:59:bf:94:27:94:08:ab:33:7c: 84:4a:9f:fa:df:62:d3:07:14:15:7b:02:74:e4:07:34:f3:9e: 67:9c:b5:83:91:e8:5f:ff:45:48:eb:4d:6e:64:1c:66:39:11: 7c:5a:92:cb:7f:ba:6b:e0:f9:c5:27:88:28:db:1e:e7:c8:78: 08:db:74:de:cd:9a:26:67:7c:a3:0a:9d:fb:7d:a0:97:ad:44: 02:47:5d:04:f4:ff:4b:0c:ec:43:7b:c9:02:96:d0:f0:14:7f: f4:b7:6d:f5:25:74:96:fa:7e:80:f4:67:79:12:3a:5d:9b:6a: ba:98:a4:59:97:d1:29:fe:f5:da:91:54:10:0a:8d:a2:b1:69: 46:d8:0b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa2Y12fgoTEUJrWrm+dmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGIyMmQyMjgwYTE3ZDBkNTRjNjg2YzliNDMzZjBiNWI1 ODAyNGYwHhcNMjYwMjA5MjIwMDE0WhcNMjYwMjEwMjIwMDE0WjAzMTEwLwYDVQQD EyhhYTIxMzk2YzEwM2E1YTEyMWMyMDA4MjFhYmY4Mzk0NzljZjM3MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpk71ziAz8RugPHx2fdoJoDxvZwe Dhjx28EuGZ+zwzQglyen7E1P5XVVcNn0K4vMeQU2qp9fWe6wTuhNx9+veWRliBjr otdM7J5cB5nf5m1zH8GunGz2hjJqcFaFu/qs5u/x+LVNB6wKra/4+QUKxUBlmSOJ xkiy59qpi4duEuU8khgAjaDuf9exA49dkqRaxnAHoN5CnlU+GEk4Uxv8Vo3RFUa3 HwdnMKYWg+hmEucF7JsjmQWV1Zr+Zf7jUZRZudCYS4vT2n8MI/xYiXjcHDsEWrGm h5Ehy9tZvm/JRf73JZHAMQcXqX8ZJ+U6/vo+ieAWS3D4Lzvq4tZKiI6C+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKohOWwQOloSHCAIIav4OUec83HwMB8GA1UdIwQY MBaAFLpLItIoChfQ1UxobJtDPwtbWAJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2Ut MWU4ZDJmMzBjZjBkLzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YTY3MDAtNTUxNy00NTU4LWE2N2UtMWU4ZDJmMzBjZjBk LzEvdWtzaTBpZ0tGOURWVEdoc20wTV9DMXRZQWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALg4Jsfu OPaGrQ61TgkwSnmF2GdJzqZb3nw16xnJkGVsPCWeB3Tfs6AVgO5T9ATefkTzHgbg N6BhqnGQp+SQAG7HQHmVTrc5Iah3vWbi3ox/p+qH0vUtI1+FWeAUTf5iOwFrgISM VuwyN5Ki5C73opd/593nWb+UJ5QIqzN8hEqf+t9i0wcUFXsCdOQHNPOeZ5y1g5Ho X/9FSOtNbmQcZjkRfFqSy3+6a+D5xSeIKNse58h4CNt03s2aJmd8owqd+32gl61E AkddBPT/SwzsQ3vJApbQ8BR/9Ldt9SV0lvp+gPRneRI6XZtqupikWZfRKf712pFU EAqNorFpRtgLkA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:20 2026 by rpki-client