This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json) Hash identifier: 7A/HHNXL2d55yM9iGjzCmMB1Nr3l2Y2nm6Z9KjskvOU= Subject key identifier: 54:C1:1B:80:B0:9D:2B:1F:DB:00:EA:92:CF:01:C8:53:19:52:E6:26 Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Certificate serial: 019C41A167479116D14A8A2FC686C1F0951D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft Manifest number: 1622 Signing time: Mon 09 Feb 2026 09:00:22 +0000 Manifest this update: Mon 09 Feb 2026 09:00:22 +0000 Manifest next update: Tue 10 Feb 2026 09:00:22 +0000 Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: Qz4Q/tKDpq4tj9BIT1wCUG8CEzf+BcbUCAywl/tnLUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:67:47:91:16:d1:4a:8a:2f:c6:86:c1:f0:95:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973 Validity Not Before: Feb 9 09:00:22 2026 GMT Not After : Feb 10 09:00:22 2026 GMT Subject: CN=54c11b80b09d2b1fdb00ea92cf01c8531952e626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:97:22:13:48:44:e4:ef:89:e5:d2:29:66: 9d:78:b7:d5:4b:a8:14:4c:10:a0:c9:72:f4:a8:e0: 4a:fb:f2:97:fb:71:86:64:b4:0a:c3:6d:78:ce:ea: 87:7d:d8:e7:98:e7:a3:4d:bb:5e:50:a1:35:65:3b: f5:c8:91:8a:38:39:26:57:9a:56:9e:90:0a:9a:98: 43:45:02:83:c4:e8:7e:2f:ea:23:22:93:8e:a1:95: 4a:d8:97:dc:46:bf:8c:36:38:56:16:70:c6:1a:af: 69:c3:52:46:72:e3:89:1f:e5:c6:66:97:98:87:30: 2d:e4:3f:85:f0:dd:63:df:f7:d6:84:55:f6:9a:90: c3:dc:99:b0:ba:c4:7e:f8:b2:ed:05:b0:17:ad:b3: 26:f8:b9:41:8c:ea:20:ec:57:21:51:e2:d6:ec:f6: 76:93:d5:9d:9e:71:42:ae:0f:d4:75:bf:63:8b:59: 27:b9:7b:76:e6:f6:75:dc:78:ba:ba:13:59:5e:83: 87:76:18:55:9f:59:e8:9e:5f:c7:1f:24:7f:5e:73: 5f:d8:be:09:c6:6a:58:53:50:b9:36:86:d0:0c:db: 7a:7d:05:ca:2b:dc:82:7f:74:e5:07:a6:02:fd:1e: df:97:72:bf:8f:33:2f:64:11:ca:12:98:31:49:ef: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C1:1B:80:B0:9D:2B:1F:DB:00:EA:92:CF:01:C8:53:19:52:E6:26 X509v3 Authority Key Identifier: keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f3:d8:47:b7:4f:39:0b:71:ca:50:06:78:29:49:6a:57:6f: a6:7d:3b:82:c9:72:d6:de:2f:d0:5a:7d:51:a1:97:33:51:8d: 7e:1f:55:81:90:b6:47:08:0f:79:6a:12:2a:a6:7b:0f:53:0c: da:ba:9c:61:46:b2:0f:e0:13:0d:94:f9:d0:66:02:da:43:50: 46:94:10:1b:2f:2d:86:81:0d:f5:d8:ae:82:f7:aa:4e:ae:c5: ad:10:63:4a:8e:77:02:d0:58:13:58:fb:c0:8f:2f:46:50:eb: ff:e1:db:34:1a:9f:49:3a:0c:8e:c6:14:d7:46:bc:2f:a3:05: e3:cd:ab:ed:c0:4b:8a:a1:fc:be:35:cf:e2:7d:46:91:1b:5a: 9d:19:9d:c8:4a:fd:59:df:9a:60:e4:fe:7d:32:ec:3f:18:9d: 1d:30:d8:24:a0:47:cc:3f:b9:e0:94:b8:9c:0e:41:12:73:ed: 90:fb:58:77:7c:85:e4:0a:ad:55:15:a6:6e:fb:de:05:4c:58: a1:44:db:33:2e:b7:1c:dd:db:db:c3:08:f0:9f:9e:4e:57:7f: ff:25:5e:c3:a6:a0:bc:dd:6c:db:69:6b:d3:b6:c1:a2:c8:37: e1:c2:0a:de:3e:23:05:02:e5:96:ad:8e:b8:c5:3c:93:1c:1a: f0:51:6a:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWdHkRbRSoovxobB8JUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTUwYjJhNTFjOGY1YWRiOTM3YjIyYTkwYzcyMGY2YjA0 ZjI5NzMwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD Eyg1NGMxMWI4MGIwOWQyYjFmZGIwMGVhOTJjZjAxYzg1MzE5NTJlNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVeXIhNIROTvieXSKWadeLfVS6gU TBCgyXL0qOBK+/KX+3GGZLQKw214zuqHfdjnmOejTbteUKE1ZTv1yJGKODkmV5pW npAKmphDRQKDxOh+L+ojIpOOoZVK2JfcRr+MNjhWFnDGGq9pw1JGcuOJH+XGZpeY hzAt5D+F8N1j3/fWhFX2mpDD3JmwusR++LLtBbAXrbMm+LlBjOog7FchUeLW7PZ2 k9WdnnFCrg/Udb9ji1knuXt25vZ13Hi6uhNZXoOHdhhVn1nonl/HHyR/XnNf2L4J xmpYU1C5NobQDNt6fQXKK9yCf3TlB6YC/R7fl3K/jzMvZBHKEpgxSe8ilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTBG4CwnSsf2wDqks8ByFMZUuYmMB8GA1UdIwQY MBaAFIPlCypRyPWtuTeyKpDHIPawTylzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2Et YjgzOWQ5MjAyMTA2LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTMwMjktN2EwZC00NGIyLWEzN2EtYjgzOWQ5MjAyMTA2 LzEvZy1VTEtsSEk5YTI1TjdJcWtNY2c5ckJQS1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfPYR7dP OQtxylAGeClJaldvpn07gsly1t4v0Fp9UaGXM1GNfh9VgZC2RwgPeWoSKqZ7D1MM 2rqcYUayD+ATDZT50GYC2kNQRpQQGy8thoEN9diugveqTq7FrRBjSo53AtBYE1j7 wI8vRlDr/+HbNBqfSToMjsYU10a8L6MF482r7cBLiqH8vjXP4n1GkRtanRmdyEr9 Wd+aYOT+fTLsPxidHTDYJKBHzD+54JS4nA5BEnPtkPtYd3yF5AqtVRWmbvveBUxY oUTbMy63HN3b28MI8J+eTld//yVew6agvN1s22lr07bBosg34cIK3j4jBQLllq2O uMU8kxwa8FFqbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:00 2026 by rpki-client