This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json) Hash identifier: 6vA2xttVUrWEV+cn1F4fZjjy5Dtxsptfw+d3mUjgFfI= Subject key identifier: 96:D3:3C:9F:5F:83:85:B9:2D:5E:CA:24:C1:E0:E0:76:4A:FA:40:B9 Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Certificate serial: 019C1BDE1F12998BFD7BA16129796898E3A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft Manifest number: 33 Signing time: Mon 02 Feb 2026 01:01:07 +0000 Manifest this update: Mon 02 Feb 2026 01:01:07 +0000 Manifest next update: Tue 03 Feb 2026 01:01:07 +0000 Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=) 2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 6CgYf4VW7WQwc/aPBoigQYTfLEbC23FO1U6BldJSoYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:1f:12:99:8b:fd:7b:a1:61:29:79:68:98:e3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Validity Not Before: Feb 2 01:01:07 2026 GMT Not After : Feb 3 01:01:07 2026 GMT Subject: CN=96d33c9f5f8385b92d5eca24c1e0e0764afa40b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:90:b2:a6:8e:05:1e:c4:db:b2:ff:20:81: ac:ec:c1:d6:47:5d:1d:a0:98:0d:d8:a0:f9:b6:dc: ff:a6:0e:59:34:44:60:38:a8:0f:73:f2:72:8d:a8: fb:b7:b5:c8:eb:54:2c:67:27:88:64:40:55:1d:f9: a3:80:e7:db:e4:c4:4c:27:0e:ee:ee:e5:fe:51:7c: fc:84:82:67:55:30:2b:af:15:83:13:c3:15:70:f2: 86:d5:bb:14:62:52:2e:16:f4:f8:b7:a6:e1:66:bc: dd:40:2c:ca:9d:99:54:6d:91:2e:a2:59:ae:10:9e: 97:8c:66:5f:74:9d:68:72:af:d3:4c:0b:2d:60:3f: df:98:19:39:3d:6f:a0:f4:dc:6f:3f:e3:7d:0e:83: 60:8f:f5:54:15:7c:4e:4c:9b:f4:85:07:54:a0:2b: c8:0a:ab:ea:75:a5:74:21:c4:16:6a:ca:12:0c:ea: 27:eb:18:ad:a5:e7:66:8c:60:74:18:a6:b6:45:cf: 02:23:a1:9e:6f:2f:fb:e4:27:65:15:cd:8d:d3:00: 49:b8:c2:72:15:d9:21:5d:c8:8c:9c:d5:69:34:ae: 67:03:2b:ad:1b:3e:bd:bb:9f:04:c5:06:b7:e9:14: 28:5e:47:56:46:97:34:e1:65:3a:a8:ff:a7:28:7e: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:3C:9F:5F:83:85:B9:2D:5E:CA:24:C1:E0:E0:76:4A:FA:40:B9 X509v3 Authority Key Identifier: keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7c:fb:11:a1:aa:b4:8b:ae:16:54:da:93:5e:67:df:a0:fe: a5:db:83:83:de:57:fa:28:7f:13:5b:f7:a6:9e:3f:cf:60:a2: 90:85:fa:0d:16:f3:87:d6:ab:81:d2:ca:c6:58:a3:99:c5:7b: e5:7c:32:63:91:b8:33:31:de:85:33:29:5c:47:43:1b:24:4a: 69:50:2e:bb:25:58:85:33:f8:01:a2:06:b2:ae:6f:43:02:7d: 38:1e:86:b2:ed:d0:34:1d:94:12:34:79:06:01:a1:f0:3f:52: 7f:fc:f2:4a:5b:49:14:77:c5:e2:04:93:57:6c:28:fc:e4:8a: bd:a0:5b:47:91:73:08:fc:d2:99:3a:5f:ee:b2:6d:7c:b6:4c: 29:ac:65:27:51:35:a2:b8:98:e8:07:04:7f:6f:da:74:7d:2e: bc:f4:7b:c1:ce:86:7a:24:db:23:84:44:5c:0a:07:90:74:24: 48:86:7b:3b:1a:3d:da:20:da:9e:c8:84:92:8f:df:df:cb:e1: 6c:29:5b:6e:c6:e8:15:c1:09:c5:10:ce:8f:a3:fa:bd:18:28: ee:85:63:94:77:27:9b:bf:b9:56:9a:f3:3c:e8:95:4a:cd:63: ee:43:eb:7a:6b:43:28:18:2a:e5:96:3d:41:69:ce:5a:6d:08: b3:7b:63:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3h8SmYv9e6FhKXlomOOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx ZTFiOTMwHhcNMjYwMjAyMDEwMTA3WhcNMjYwMjAzMDEwMTA3WjAzMTEwLwYDVQQD Eyg5NmQzM2M5ZjVmODM4NWI5MmQ1ZWNhMjRjMWUwZTA3NjRhZmE0MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpeQsqaOBR7E27L/IIGs7MHWR10d oJgN2KD5ttz/pg5ZNERgOKgPc/Jyjaj7t7XI61QsZyeIZEBVHfmjgOfb5MRMJw7u 7uX+UXz8hIJnVTArrxWDE8MVcPKG1bsUYlIuFvT4t6bhZrzdQCzKnZlUbZEuolmu EJ6XjGZfdJ1ocq/TTAstYD/fmBk5PW+g9NxvP+N9DoNgj/VUFXxOTJv0hQdUoCvI CqvqdaV0IcQWasoSDOon6xitpedmjGB0GKa2Rc8CI6Geby/75CdlFc2N0wBJuMJy FdkhXciMnNVpNK5nAyutGz69u58ExQa36RQoXkdWRpc04WU6qP+nKH73+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbTPJ9fg4W5LV7KJMHg4HZK+kC5MB8GA1UdIwQY MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt ODljNWQ2ZDhkY2MwLzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXz7EaGq tIuuFlTak15n36D+pduDg95X+ih/E1v3pp4/z2CikIX6DRbzh9argdLKxlijmcV7 5XwyY5G4MzHehTMpXEdDGyRKaVAuuyVYhTP4AaIGsq5vQwJ9OB6Gsu3QNB2UEjR5 BgGh8D9Sf/zySltJFHfF4gSTV2wo/OSKvaBbR5FzCPzSmTpf7rJtfLZMKaxlJ1E1 oriY6AcEf2/adH0uvPR7wc6GeiTbI4REXAoHkHQkSIZ7Oxo92iDansiEko/f38vh bClbbsboFcEJxRDOj6P6vRgo7oVjlHcnm7+5VprzPOiVSs1j7kPremtDKBgq5ZY9 QWnOWm0Is3tjJw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:47 2026 by rpki-client