This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json) Hash identifier: VA3I8Vxt5aQ/D67t/Nd18nyIeKX0bf/BBS9YqOC0Z9g= Subject key identifier: C9:1A:48:76:D6:6E:BB:76:FD:5F:AE:A8:ED:5D:02:39:CF:58:18:49 Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8 Certificate serial: 019C432294B6E87C9F13226583104549BBE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft Manifest number: 13EB Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: 50P3IU0Mwn6JrxIPRcbq4EEUgyAHILLY5RoyGmfJc7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:94:b6:e8:7c:9f:13:22:65:83:10:45:49:bb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8 Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=c91a4876d66ebb76fd5faea8ed5d0239cf581849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b9:c8:2b:19:b8:83:0e:fe:49:a5:64:35:ac: 87:04:40:e5:de:a8:b1:06:d9:66:d9:80:29:a1:be: b0:2b:1a:d0:7b:2e:56:b0:06:b0:fe:13:92:4e:de: 72:d6:88:f7:61:af:65:fd:5a:8d:0a:b8:a0:66:ed: 73:33:6c:89:63:11:c6:79:a5:44:e4:26:ec:58:8f: 31:d5:3a:6f:c0:72:a1:f6:2b:c9:da:04:95:37:b9: 5a:0c:88:31:e4:2d:d3:da:a2:ba:5e:b6:3c:f5:f5: 17:5b:d4:f4:1f:2f:cc:45:06:72:bb:27:08:46:4e: 72:8a:41:c9:9e:a7:7d:c8:7d:98:d6:90:d0:98:bd: e3:2d:fe:f6:59:44:bf:8b:1a:49:e4:e3:14:60:76: d0:ab:74:d7:7f:8d:0d:3e:d5:4d:14:2a:e1:50:3f: 53:db:ff:80:91:2d:0b:2b:18:06:3d:77:0a:05:87: 10:de:d6:82:07:aa:42:36:0a:65:59:62:ad:44:bf: 6d:15:d5:63:3b:2e:98:ce:c1:f4:03:74:07:5f:5a: 21:f7:48:04:2c:a4:dd:90:15:3e:89:73:db:2a:df: 34:d2:12:4f:79:1f:50:25:31:d2:60:a8:d5:a7:52: c3:96:d1:eb:95:98:18:a8:c5:37:50:4a:39:d4:26: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1A:48:76:D6:6E:BB:76:FD:5F:AE:A8:ED:5D:02:39:CF:58:18:49 X509v3 Authority Key Identifier: keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:31:cb:3a:0d:90:fb:9a:89:98:d1:de:1a:8a:e0:7e:43:24: 63:fd:d9:82:bc:a5:84:44:ba:14:0f:b8:8a:26:98:ac:54:6a: 11:e1:25:9c:82:25:da:1e:eb:e4:37:08:45:12:b4:fb:88:e9: 78:a5:e5:67:bf:12:e9:36:38:2c:00:72:87:50:67:fe:fb:ae: b6:2c:2a:41:f6:d1:07:cb:6b:21:62:f0:58:5b:43:ec:d6:a2: 66:d1:ee:48:b6:b7:5e:53:04:26:eb:11:ea:97:b4:fd:5b:0d: 68:5b:50:2f:2e:b3:e7:17:98:61:18:17:e6:2f:87:a4:16:7c: 4c:24:3d:02:64:bf:d3:43:7c:32:54:82:3b:4d:df:56:bf:b0: 2c:4c:95:18:a1:bd:09:c2:61:f2:e0:77:6a:23:a9:d3:0a:76: 83:a8:ae:ed:2a:14:4a:03:b9:09:b6:62:3c:c9:6f:34:55:b1: 19:e7:77:9b:20:af:52:e9:d8:4e:52:ac:f1:5b:ac:de:82:3a: f2:5c:42:0c:63:59:41:cb:40:c2:95:4d:36:de:92:09:de:48: 1a:7b:51:ea:01:a4:04:9c:c8:f2:94:d7:09:a5:1b:c0:ce:e8: 25:cf:b7:1a:84:71:5a:ad:c2:ab:44:de:ac:63:d0:56:12:77: 3b:8d:0a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpS26HyfEyJlgxBFSbvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTgyNzU1NzI0MzQ4OTNiOWNiZDE0ZTRhZGU3MDg5Mjll NDY3ZjgwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD EyhjOTFhNDg3NmQ2NmViYjc2ZmQ1ZmFlYThlZDVkMDIzOWNmNTgxODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7nIKxm4gw7+SaVkNayHBEDl3qix Btlm2YApob6wKxrQey5WsAaw/hOSTt5y1oj3Ya9l/VqNCrigZu1zM2yJYxHGeaVE 5CbsWI8x1TpvwHKh9ivJ2gSVN7laDIgx5C3T2qK6XrY89fUXW9T0Hy/MRQZyuycI Rk5yikHJnqd9yH2Y1pDQmL3jLf72WUS/ixpJ5OMUYHbQq3TXf40NPtVNFCrhUD9T 2/+AkS0LKxgGPXcKBYcQ3taCB6pCNgplWWKtRL9tFdVjOy6YzsH0A3QHX1oh90gE LKTdkBU+iXPbKt800hJPeR9QJTHSYKjVp1LDltHrlZgYqMU3UEo51CZ0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkaSHbWbrt2/V+uqO1dAjnPWBhJMB8GA1UdIwQY MBaAFLpYJ1VyQ0iTucvRTkrecIkp5Gf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTIt MjYyNTU3Yzc0ZDRjLzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNmFiM2MtN2YxYi00MDYyLTg3OTItMjYyNTU3Yzc0ZDRj LzEvdWxnblZYSkRTSk81eTlGT1N0NXdpU25rWl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDHLOg2Q +5qJmNHeGorgfkMkY/3ZgrylhES6FA+4iiaYrFRqEeElnIIl2h7r5DcIRRK0+4jp eKXlZ78S6TY4LAByh1Bn/vuutiwqQfbRB8trIWLwWFtD7NaiZtHuSLa3XlMEJusR 6pe0/VsNaFtQLy6z5xeYYRgX5i+HpBZ8TCQ9AmS/00N8MlSCO03fVr+wLEyVGKG9 CcJh8uB3aiOp0wp2g6iu7SoUSgO5CbZiPMlvNFWxGed3myCvUunYTlKs8Vus3oI6 8lxCDGNZQctAwpVNNt6SCd5IGntR6gGkBJzI8pTXCaUbwM7oJc+3GoRxWq3Cq0Te rGPQVhJ3O40K+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:44 2026 by rpki-client