This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json) Hash identifier: ORfD6kq72ocTcazGe0oT8f5pCHazRpuDd1SNQdtc8aA= Subject key identifier: A2:DA:C8:93:ED:E5:DB:1F:8A:45:5E:D0:CB:4A:E4:82:17:71:5E:EA Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa Certificate serial: 019C41A151C4EF5C903CDC22899749FD6B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 09:00:16 +0000 Manifest this update: Mon 09 Feb 2026 09:00:16 +0000 Manifest next update: Tue 10 Feb 2026 09:00:16 +0000 Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: ixoxDiR0Necg34FS0g66lYrOlxgPNNRFKAKKEQpARYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:51:c4:ef:5c:90:3c:dc:22:89:97:49:fd:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa Validity Not Before: Feb 9 09:00:16 2026 GMT Not After : Feb 10 09:00:16 2026 GMT Subject: CN=a2dac893ede5db1f8a455ed0cb4ae48217715eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:4b:00:fa:71:b0:db:aa:1d:17:00:1d:b6: 4d:ec:ac:60:e7:2a:9c:a1:be:e7:f2:cf:e8:23:6c: 0b:0a:4b:13:89:eb:6d:36:07:5c:46:35:93:a7:ff: 2b:5d:a2:b9:0e:9e:eb:87:66:30:64:26:33:14:17: 78:49:48:be:cb:76:61:8d:e9:b0:d4:58:88:37:27: a0:de:e8:39:e7:88:ec:4c:7e:71:7d:79:06:1c:2e: c4:e3:89:28:a5:3c:dd:7f:b7:86:92:31:ca:28:01: 12:c6:2c:af:b4:34:c4:04:98:24:8b:4f:3d:8c:41: 4b:ee:87:e9:14:50:5e:1c:84:64:4b:3b:86:b1:59: d8:39:f7:b3:81:47:89:5e:57:b1:0d:42:96:8a:3d: 98:f7:6a:7b:71:11:5b:46:b7:2d:36:e9:6b:fc:1f: 6d:b0:74:be:97:fc:99:e1:36:99:a7:fe:76:21:3d: c4:66:4d:18:eb:f1:60:14:e6:f9:9e:10:43:3c:d6: 04:03:4a:50:c0:26:bb:c2:9d:0e:91:23:5a:35:79: 92:6d:16:90:fe:ac:58:10:56:b3:24:1c:5b:10:df: a8:a4:c8:80:bd:95:4b:2e:cf:97:75:94:cf:76:db: 40:d2:52:44:43:f7:cf:0c:54:d5:b1:c7:e5:51:fc: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:C8:93:ED:E5:DB:1F:8A:45:5E:D0:CB:4A:E4:82:17:71:5E:EA X509v3 Authority Key Identifier: keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3f:a5:09:6a:5b:68:17:e4:35:8b:01:c9:50:81:7d:7c:2f: 87:10:b3:3b:8b:d5:f6:88:58:f8:23:42:53:94:74:11:31:8a: bb:c7:0c:53:74:a9:7e:4b:e5:2f:a1:44:e5:5f:68:77:1f:89: 13:3c:bc:85:e4:c7:5c:2c:df:f0:a1:0e:15:66:d7:04:58:83: f6:83:21:28:98:83:78:73:9c:91:bc:c3:dd:57:55:af:3b:30: 04:14:3a:5a:c1:2b:58:7a:44:64:f8:98:65:e6:cb:76:73:58: 73:e6:3b:f6:9a:34:42:9a:3a:5b:ea:a1:3f:2d:d2:46:0e:95: 9f:1a:56:4d:db:e9:49:d0:52:4f:8c:09:be:8e:bc:bd:69:99: 34:87:83:89:a2:ac:ef:3b:00:e3:50:40:48:fb:1c:7e:40:9e: 9c:c2:de:d0:b8:dc:df:b2:42:26:94:5f:94:45:88:bc:e8:0f: 3b:95:0d:de:64:60:8e:a5:f6:de:23:f4:fd:f0:82:46:b1:bd: 3c:4c:a4:f9:61:ff:7a:8f:25:e4:81:48:65:e7:e4:95:e1:09: c8:53:eb:ba:73:8d:38:12:0a:cd:00:2a:b3:aa:5c:b2:66:69: 5b:24:1d:2d:84:ad:be:6c:b5:47:ac:62:d9:90:b3:27:ce:10: 7b:09:ca:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVHE71yQPNwiiZdJ/WtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0 ZTdkYWEwHhcNMjYwMjA5MDkwMDE2WhcNMjYwMjEwMDkwMDE2WjAzMTEwLwYDVQQD EyhhMmRhYzg5M2VkZTVkYjFmOGE0NTVlZDBjYjRhZTQ4MjE3NzE1ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XlLAPpxsNuqHRcAHbZN7Kxg5yqc ob7n8s/oI2wLCksTiettNgdcRjWTp/8rXaK5Dp7rh2YwZCYzFBd4SUi+y3Zhjemw 1FiINyeg3ug554jsTH5xfXkGHC7E44kopTzdf7eGkjHKKAESxiyvtDTEBJgki089 jEFL7ofpFFBeHIRkSzuGsVnYOfezgUeJXlexDUKWij2Y92p7cRFbRrctNulr/B9t sHS+l/yZ4TaZp/52IT3EZk0Y6/FgFOb5nhBDPNYEA0pQwCa7wp0OkSNaNXmSbRaQ /qxYEFazJBxbEN+opMiAvZVLLs+XdZTPdttA0lJEQ/fPDFTVscflUfygYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLayJPt5dsfikVe0MtK5IIXcV7qMB8GA1UdIwQY MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT+lCWpb aBfkNYsByVCBfXwvhxCzO4vV9ohY+CNCU5R0ETGKu8cMU3SpfkvlL6FE5V9odx+J Ezy8heTHXCzf8KEOFWbXBFiD9oMhKJiDeHOckbzD3VdVrzswBBQ6WsErWHpEZPiY ZebLdnNYc+Y79po0Qpo6W+qhPy3SRg6VnxpWTdvpSdBST4wJvo68vWmZNIeDiaKs 7zsA41BASPscfkCenMLe0Ljc37JCJpRflEWIvOgPO5UN3mRgjqX23iP0/fCCRrG9 PEyk+WH/eo8l5IFIZefkleEJyFPrunONOBIKzQAqs6pcsmZpWyQdLYStvmy1R6xi 2ZCzJ84QewnKXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:31 2026 by rpki-client