This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json) Hash identifier: s/bSg/wRN7rAA0xe+YNDb5ijS0TSJ80YzsAF7/O+//Q= Subject key identifier: 86:54:02:2D:A7:83:6B:09:6C:0A:B6:97:B4:49:81:FB:6F:80:22:6C Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2 Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2 Certificate serial: 019C416AF9CD7E4AE210EB13C38948BF4125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft Manifest number: 1588 Signing time: Mon 09 Feb 2026 08:00:55 +0000 Manifest this update: Mon 09 Feb 2026 08:00:55 +0000 Manifest next update: Tue 10 Feb 2026 08:00:55 +0000 Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: qz+Vk/BamNezelXiAsGjLvhU3M1OKhios2l0EVHz2lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:f9:cd:7e:4a:e2:10:eb:13:c3:89:48:bf:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2 Validity Not Before: Feb 9 08:00:55 2026 GMT Not After : Feb 10 08:00:55 2026 GMT Subject: CN=8654022da7836b096c0ab697b44981fb6f80226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:a9:d5:e0:b8:fe:a2:f8:70:26:e3:b1:07: 1d:fc:fc:c6:fe:59:c6:3c:73:b9:73:50:ea:11:12: ad:9c:37:12:cf:25:d8:79:e4:45:bb:06:29:fe:fd: 3b:c8:90:b0:b0:7e:3a:11:4a:4f:8f:d4:11:16:4e: 09:03:48:57:0d:27:ac:a2:db:4f:50:60:58:61:d8: 29:6a:15:e2:7c:bc:49:de:f9:0b:e2:dc:4c:4f:f5: 62:e1:c4:35:3f:96:a9:8c:b4:cd:d3:e4:fe:af:4f: 39:b2:cf:8c:c5:82:c5:69:5e:7c:64:02:5a:9c:83: 24:66:6f:7c:17:41:36:5c:d6:89:43:ec:ec:b5:13: c1:69:4e:93:af:1f:e2:09:5b:69:da:a4:e1:5e:83: 8a:a5:c2:99:cc:88:f4:42:84:d9:43:4c:66:01:83: 37:2d:3c:28:be:ad:42:b0:6c:58:54:e9:cb:f1:1d: 66:9c:3c:e4:a1:4a:de:c1:ed:ed:98:19:e3:6b:69: 3b:78:b9:b2:1d:25:bd:f3:4a:69:f6:91:ad:10:1c: a1:f6:d1:ca:79:2f:19:b5:a6:02:3b:43:b5:9b:1e: 7f:42:b7:33:df:8c:8f:48:ee:32:1b:60:0e:f6:38: 90:da:f7:17:23:c1:b4:2c:fc:25:5c:de:e7:a4:a3: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:54:02:2D:A7:83:6B:09:6C:0A:B6:97:B4:49:81:FB:6F:80:22:6C X509v3 Authority Key Identifier: keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e4:26:d5:32:db:62:05:c7:3c:71:cf:1d:5e:ce:6d:c1:eb: 1e:fc:43:93:d3:66:03:9f:c6:8b:6f:7e:4e:c0:c0:8c:12:32: 39:4b:4e:12:be:7c:f3:1f:e2:23:2b:ed:76:94:94:8f:17:e9: c7:6c:55:ae:f4:75:96:08:3f:d8:f2:74:e3:cf:c3:73:87:8a: 6f:97:8a:e7:12:5f:fc:86:8a:3e:47:5d:ec:4d:83:ee:c5:42: 6d:86:bb:69:16:fa:22:37:07:54:0e:29:97:16:e1:14:a4:86: b7:0b:e9:69:90:55:18:53:65:6f:50:c7:e8:89:36:82:c5:81: 87:da:2b:35:30:6a:2a:dd:29:3d:3d:71:72:70:8f:0f:b9:39: 10:27:86:6e:e3:55:5c:31:c5:e2:6d:ea:f2:a8:8a:54:7f:78: 5b:4d:95:35:e2:a1:33:d0:c0:c7:e8:81:20:ae:b0:f8:f1:38: a2:bf:c3:a7:23:7f:c7:96:5f:e6:70:53:0f:b3:ae:9b:7b:3f: 26:e6:cf:70:ba:5c:e4:f1:03:9e:6e:f3:ec:1a:90:01:f1:8c: 89:5e:c6:41:04:15:6b:2f:c5:75:2f:dc:a9:fc:75:16:69:66: 01:ea:c6:16:a7:5a:0a:4f:3e:3b:0d:0d:26:24:3a:87:3e:46: 5b:56:67:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavnNfkriEOsTw4lIv0ElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWVmZTk3Njc4N2MyODc4ZTI2OWQ4MDdjYWI5OGFkNzM2 ZDYxZTIwHhcNMjYwMjA5MDgwMDU1WhcNMjYwMjEwMDgwMDU1WjAzMTEwLwYDVQQD Eyg4NjU0MDIyZGE3ODM2YjA5NmMwYWI2OTdiNDQ5ODFmYjZmODAyMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSOp1eC4/qL4cCbjsQcd/PzG/lnG PHO5c1DqERKtnDcSzyXYeeRFuwYp/v07yJCwsH46EUpPj9QRFk4JA0hXDSesottP UGBYYdgpahXifLxJ3vkL4txMT/Vi4cQ1P5apjLTN0+T+r085ss+MxYLFaV58ZAJa nIMkZm98F0E2XNaJQ+zstRPBaU6Trx/iCVtp2qThXoOKpcKZzIj0QoTZQ0xmAYM3 LTwovq1CsGxYVOnL8R1mnDzkoUrewe3tmBnja2k7eLmyHSW980pp9pGtEByh9tHK eS8ZtaYCO0O1mx5/Qrcz34yPSO4yG2AO9jiQ2vcXI8G0LPwlXN7npKOMfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZUAi2ng2sJbAq2l7RJgftvgCJsMB8GA1UdIwQY MBaAFLmu/pdnh8KHjiadgHyrmK1zbWHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWIt MTRiZDcxMzU2ZGFhLzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWItMTRiZDcxMzU2ZGFh LzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOQm1TLb YgXHPHHPHV7ObcHrHvxDk9NmA5/Gi29+TsDAjBIyOUtOEr588x/iIyvtdpSUjxfp x2xVrvR1lgg/2PJ048/Dc4eKb5eK5xJf/IaKPkdd7E2D7sVCbYa7aRb6IjcHVA4p lxbhFKSGtwvpaZBVGFNlb1DH6Ik2gsWBh9orNTBqKt0pPT1xcnCPD7k5ECeGbuNV XDHF4m3q8qiKVH94W02VNeKhM9DAx+iBIK6w+PE4or/DpyN/x5Zf5nBTD7Oum3s/ JubPcLpc5PEDnm7z7BqQAfGMiV7GQQQVay/FdS/cqfx1FmlmAerGFqdaCk8+Ow0N JiQ6hz5GW1Znvw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:37 2026 by rpki-client