This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json) Hash identifier: T3R2Sk/ENXHGL7rWCsSeC7y7a65efKOSJIb9YLaFfMc= Subject key identifier: 49:1A:DE:89:5D:F1:CE:20:7B:EC:53:E0:3E:8B:E6:D2:23:D1:D2:70 Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0 Certificate serial: 019C43229228EB17868DDE692AAD04799EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft Manifest number: 10BD Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: RXjDx9Gq69vWv95wG1QKoZfFKI7F18UhPlQt90h6f78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:92:28:eb:17:86:8d:de:69:2a:ad:04:79:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0 Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=491ade895df1ce207bec53e03e8be6d223d1d270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:f0:db:56:c5:49:9f:65:bb:d8:d6:c4:2d: 4f:50:ca:90:e4:74:7d:5f:1f:54:64:66:a0:57:f0: 2b:46:2f:38:06:75:84:a8:bd:2f:50:c0:d4:fb:97: 25:5e:88:c0:ba:35:0b:76:d3:cb:31:52:0d:f5:72: 91:b9:e3:ab:a6:38:4a:10:ba:a1:c2:52:29:68:46: 90:99:bf:3f:a3:61:3f:c7:7f:64:8d:bc:42:9d:f3: 1d:95:03:56:8d:36:0e:ed:22:e1:ee:cc:14:35:74: 69:67:66:06:08:f8:9b:0a:f2:26:ae:d8:19:c1:0f: 03:b9:20:86:b9:b5:f7:ef:58:ed:b6:84:34:af:fe: a5:50:41:ff:8c:8f:c3:ee:69:e5:2a:76:8d:d9:21: 0b:94:b5:db:a4:d8:cc:42:fc:1c:bc:5f:83:ef:5d: d5:5e:51:aa:6a:a5:f8:6c:46:97:07:ac:71:9a:28: f3:34:21:e5:32:32:c6:9f:fb:2b:6c:32:02:52:89: 6a:02:3d:52:7c:ad:b7:0f:9a:ce:e9:a4:9d:02:bb: 1b:a8:d0:40:b2:fd:ef:d8:2f:60:44:ed:e5:47:5e: 32:b7:d5:01:9f:0d:da:71:1a:fc:fe:12:89:d4:27: cb:3a:78:15:6e:37:5c:48:9a:c4:14:3a:0b:e4:29: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:DE:89:5D:F1:CE:20:7B:EC:53:E0:3E:8B:E6:D2:23:D1:D2:70 X509v3 Authority Key Identifier: keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:eb:f0:e9:10:9c:5e:5a:bf:be:c9:19:de:92:5e:69:58:3e: 88:fc:bd:14:b5:68:ee:84:8e:8c:70:f5:e2:15:ce:2d:45:c8: c5:0f:15:bd:5a:0a:35:e7:e9:fc:cc:81:07:05:0d:f0:e8:2d: 29:f1:9a:47:7a:19:05:a3:cd:48:61:01:c0:2d:2c:c4:b5:3b: 18:0e:bf:ea:72:f1:35:b9:1a:4c:54:36:8d:3d:75:74:c1:98: 1d:a4:0c:32:64:2d:53:05:90:ed:6b:9d:11:ac:65:0d:a2:f6: df:84:5e:9e:5f:55:67:98:a6:4c:4a:5b:d8:2e:f8:ab:b6:1a: 02:ce:de:5b:be:1e:a6:78:b2:38:d3:1e:12:f7:ad:9a:4d:a4: d7:da:dd:10:5a:42:ba:07:ab:44:a6:8a:c1:57:05:c0:ac:0b: bb:01:3a:fd:5f:08:fa:74:83:76:70:7a:45:58:96:5f:f5:e2: db:0e:96:62:10:79:81:c7:9e:30:40:ce:aa:da:38:93:74:c5: 9f:56:3a:46:3e:78:96:a1:21:5a:00:ef:2b:08:37:c7:bd:42: c4:c5:39:64:56:51:10:4d:b5:5d:d0:74:2e:d2:6f:eb:e8:0d: 82:22:d1:2f:4e:f1:06:58:de:0b:e9:30:80:49:11:51:65:86: fc:74:af:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpIo6xeGjd5pKq0EeZ7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3 MjRiYzAwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD Eyg0OTFhZGU4OTVkZjFjZTIwN2JlYzUzZTAzZThiZTZkMjIzZDFkMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRDw21bFSZ9lu9jWxC1PUMqQ5HR9 Xx9UZGagV/ArRi84BnWEqL0vUMDU+5clXojAujULdtPLMVIN9XKRueOrpjhKELqh wlIpaEaQmb8/o2E/x39kjbxCnfMdlQNWjTYO7SLh7swUNXRpZ2YGCPibCvImrtgZ wQ8DuSCGubX371jttoQ0r/6lUEH/jI/D7mnlKnaN2SELlLXbpNjMQvwcvF+D713V XlGqaqX4bEaXB6xxmijzNCHlMjLGn/srbDICUolqAj1SfK23D5rO6aSdArsbqNBA sv3v2C9gRO3lR14yt9UBnw3acRr8/hKJ1CfLOngVbjdcSJrEFDoL5CmtRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEka3old8c4ge+xT4D6L5tIj0dJwMB8GA1UdIwQY MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIevw6RCc Xlq/vskZ3pJeaVg+iPy9FLVo7oSOjHD14hXOLUXIxQ8VvVoKNefp/MyBBwUN8Ogt KfGaR3oZBaPNSGEBwC0sxLU7GA6/6nLxNbkaTFQ2jT11dMGYHaQMMmQtUwWQ7Wud EaxlDaL234Renl9VZ5imTEpb2C74q7YaAs7eW74epniyONMeEvetmk2k19rdEFpC ugerRKaKwVcFwKwLuwE6/V8I+nSDdnB6RViWX/Xi2w6WYhB5gceeMEDOqto4k3TF n1Y6Rj54lqEhWgDvKwg3x71CxMU5ZFZREE21XdB0LtJv6+gNgiLRL07xBljeC+kw gEkRUWWG/HSvIw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:36 2026 by rpki-client