This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json) Hash identifier: sM5zuPROFASgVQg4NQ9w1agVNX6IBwOYabDJKKvevyQ= Subject key identifier: 21:65:6E:70:74:41:16:B2:80:C4:9B:09:75:5E:40:6F:46:E4:9A:85 Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Certificate serial: 019C42102A2A7903B0BAD235E27E9F6671B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:01:21 +0000 Manifest this update: Mon 09 Feb 2026 11:01:21 +0000 Manifest next update: Tue 10 Feb 2026 11:01:21 +0000 Files and hashes: 1: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: kFZXdXk2yqprn/B8TX2xe0F6TxYuJCW5W9RkXeUtXGY=) 2: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:2a:2a:79:03:b0:ba:d2:35:e2:7e:9f:66:71:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Validity Not Before: Feb 9 11:01:21 2026 GMT Not After : Feb 10 11:01:21 2026 GMT Subject: CN=21656e70744116b280c49b09755e406f46e49a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:ec:8c:d3:0c:46:cf:6d:c7:b0:2c:13:e0: 78:18:6e:a7:cc:ca:f4:68:81:ef:c5:93:de:ed:df: f2:67:83:85:b8:8d:c7:54:4f:ed:64:70:04:40:0f: e6:ac:cf:6f:d0:67:d0:51:46:94:70:36:85:45:f9: 5e:77:1e:67:18:6b:63:9e:fb:82:1a:d2:ef:7e:60: 79:10:9a:76:cf:90:a4:f4:77:7a:4a:92:84:5a:e8: bb:66:d3:6e:aa:29:2c:7f:ad:5d:4a:78:6c:cf:2f: 1b:ef:b5:2b:91:71:7b:4a:0c:06:8f:f0:4f:ff:6a: 52:bc:a5:66:8c:d5:d6:b7:06:31:27:6d:f4:03:46: 68:64:0c:36:7d:c9:25:4a:b0:b3:e0:1a:a0:87:bd: 05:14:55:f9:a0:77:50:1a:41:14:12:01:0e:31:d1: 5d:3f:00:82:5e:ef:07:02:b2:bb:34:e1:e9:98:16: 69:6c:30:e8:98:0a:a7:c2:82:97:e8:0f:93:36:e8: 12:3f:01:5c:21:1c:30:57:2a:46:f9:9b:29:8c:ba: 18:3e:c0:40:60:24:fd:97:00:ef:0b:ea:8d:6a:d1: a2:ba:77:8b:53:c6:d6:48:47:c8:ed:1d:f1:04:dc: 63:a1:4f:e1:f6:e3:5f:c1:63:7b:5e:f6:df:44:cb: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:6E:70:74:41:16:B2:80:C4:9B:09:75:5E:40:6F:46:E4:9A:85 X509v3 Authority Key Identifier: keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:96:35:da:7d:0a:a7:ed:6f:dd:7e:7e:1f:f0:fe:4c:18: 89:5f:2b:b0:83:19:e9:c0:54:c8:1f:31:ac:2f:fa:b8:fb:95: 90:53:24:48:31:ee:db:7d:90:01:02:0c:88:59:85:d0:50:ed: ec:9d:bd:36:66:93:d8:27:50:c9:ed:5d:3a:83:b5:f1:67:df: e1:18:65:31:2f:09:77:cb:39:48:fa:c5:82:e6:b7:dc:7f:05: e8:dc:12:bf:91:bd:dd:0d:36:de:40:5d:fd:cc:8a:cc:37:6c: f4:9c:b0:c0:87:36:0d:a0:d3:40:af:9e:68:6e:96:ec:55:43: ce:5d:3f:24:29:85:90:ef:84:23:2e:38:a3:02:ec:f8:16:e3: 29:17:eb:f6:f4:b3:8c:61:74:f3:f6:16:a7:a7:b9:aa:5d:53: 7c:bd:19:95:95:ce:2b:7d:e1:bd:eb:4c:54:79:72:87:23:77: 20:b9:c8:84:23:38:0a:c5:0b:a9:dc:a4:90:9a:57:16:b6:ff: f6:1b:82:2b:39:05:50:02:29:cf:7b:e2:ab:90:01:52:ce:d4: 12:fd:ba:35:af:c6:63:c2:88:95:cf:be:e2:c4:3b:f8:d5:f4: a5:ce:88:66:bd:12:6e:33:9f:d7:90:0f:07:fa:2a:a5:68:d3: 70:1f:38:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECoqeQOwutI14n6fZnG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz NmY4MjcwHhcNMjYwMjA5MTEwMTIxWhcNMjYwMjEwMTEwMTIxWjAzMTEwLwYDVQQD EygyMTY1NmU3MDc0NDExNmIyODBjNDliMDk3NTVlNDA2ZjQ2ZTQ5YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmzsjNMMRs9tx7AsE+B4GG6nzMr0 aIHvxZPe7d/yZ4OFuI3HVE/tZHAEQA/mrM9v0GfQUUaUcDaFRfledx5nGGtjnvuC GtLvfmB5EJp2z5Ck9Hd6SpKEWui7ZtNuqiksf61dSnhszy8b77UrkXF7SgwGj/BP /2pSvKVmjNXWtwYxJ230A0ZoZAw2fcklSrCz4Bqgh70FFFX5oHdQGkEUEgEOMdFd PwCCXu8HArK7NOHpmBZpbDDomAqnwoKX6A+TNugSPwFcIRwwVypG+ZspjLoYPsBA YCT9lwDvC+qNatGiuneLU8bWSEfI7R3xBNxjoU/h9uNfwWN7XvbfRMv5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFlbnB0QRaygMSbCXVeQG9G5JqFMB8GA1UdIwQY MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf76WNdp9 Cqftb91+fh/w/kwYiV8rsIMZ6cBUyB8xrC/6uPuVkFMkSDHu232QAQIMiFmF0FDt 7J29NmaT2CdQye1dOoO18Wff4RhlMS8Jd8s5SPrFgua33H8F6NwSv5G93Q023kBd /cyKzDds9JywwIc2DaDTQK+eaG6W7FVDzl0/JCmFkO+EIy44owLs+BbjKRfr9vSz jGF08/YWp6e5ql1TfL0ZlZXOK33hvetMVHlyhyN3ILnIhCM4CsULqdykkJpXFrb/ 9huCKzkFUAIpz3viq5ABUs7UEv26Na/GY8KIlc++4sQ7+NX0pc6IZr0SbjOf15AP B/oqpWjTcB84uQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:00 2026 by rpki-client