This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft File: ufurlhxKPhbNdhvC_tuaKBd8tHM.mft (raw, json) Hash identifier: 0dYontGlDEiBzPwLPO3vvmhFGfWykb1RBO4VPlPhUsM= Subject key identifier: E5:4F:30:7B:FB:79:F7:2D:B0:5E:92:48:54:B9:D9:C3:F1:17:56:6A Authority key identifier: B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73 Certificate issuer: /CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473 Certificate serial: 019C42EB55E41BB1006609BE2347AE20D6C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft Manifest number: 0296 Signing time: Mon 09 Feb 2026 15:00:45 +0000 Manifest this update: Mon 09 Feb 2026 15:00:45 +0000 Manifest next update: Tue 10 Feb 2026 15:00:45 +0000 Files and hashes: 1: HhLUsfKh-_ZQPH0jp_nvnXhcEik.roa (hash: JQHkY+TwXCZHHIexxM/lQ6tlNIHOgno3i+/VT4xHUVI=) 2: ufurlhxKPhbNdhvC_tuaKBd8tHM.crl (hash: zePyC7xLkKemi5+43qdeaoF8intGlLYqLvY1xvVJSkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:55:e4:1b:b1:00:66:09:be:23:47:ae:20:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9fbab961c4a3e16cd761bc2fedb9a28177cb473 Validity Not Before: Feb 9 15:00:45 2026 GMT Not After : Feb 10 15:00:45 2026 GMT Subject: CN=e54f307bfb79f72db05e924854b9d9c3f117566a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:d5:54:db:43:af:a5:00:f2:49:54:6c:14: 1b:24:90:ec:0b:4f:1b:8e:0c:03:8e:43:8e:9d:75: 37:9a:02:72:55:75:77:da:b6:dc:50:ea:94:2b:83: 3a:7e:40:34:57:a4:05:40:f6:a3:bd:17:91:ba:9d: 97:1b:fb:60:aa:61:d8:05:dc:06:9d:ad:94:7c:b6: 95:32:b6:cb:50:d4:af:fa:c5:9f:b9:3f:45:99:e6: da:f5:13:15:18:18:74:61:49:71:76:83:48:e9:04: f8:38:ad:a1:15:61:dd:64:04:de:8d:82:86:83:71: f8:e4:c4:30:d4:03:09:4b:1f:cf:73:62:27:28:5d: 9b:a1:11:0f:51:3c:2c:66:a5:50:8a:2e:29:e5:2e: e8:46:86:ce:1f:76:b1:bb:8c:e7:e1:45:ab:d0:20: cb:d3:2a:03:4b:2f:6c:d9:2c:d3:37:52:31:da:c6: b5:bb:b9:77:42:80:91:60:67:47:45:43:81:4e:77: c6:f8:23:2b:2c:64:32:21:02:75:e6:7d:48:3c:1f: 7b:62:37:c7:72:30:e1:d6:b3:21:2d:b8:40:68:18: 2d:c1:6f:b7:50:16:a0:a3:68:a2:8d:70:48:2e:05: 33:2e:2c:46:79:c6:7a:4c:32:39:f9:7f:44:d5:e6: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4F:30:7B:FB:79:F7:2D:B0:5E:92:48:54:B9:D9:C3:F1:17:56:6A X509v3 Authority Key Identifier: keyid:B9:FB:AB:96:1C:4A:3E:16:CD:76:1B:C2:FE:DB:9A:28:17:7C:B4:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufurlhxKPhbNdhvC_tuaKBd8tHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d921b-9da6-4a79-a264-fc1303de6d49/1/ufurlhxKPhbNdhvC_tuaKBd8tHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:b9:36:ea:fd:60:0e:0a:ca:ac:53:43:2e:80:4c:32:85: 50:f9:10:d4:5a:1d:35:40:8b:1f:8d:66:bb:7f:8c:a5:8d:04: df:d2:8b:7b:12:b6:21:4e:4c:9a:6d:79:4b:05:99:81:22:67: 49:c6:e6:31:2c:56:f1:fa:9d:90:87:82:0b:3f:30:56:83:d2: d5:29:fa:78:19:4c:a4:54:bb:e6:cf:02:c4:01:22:c5:1b:84: 9d:eb:9c:1b:61:f1:a0:d2:5b:eb:92:63:7b:fc:dd:63:16:2d: 3c:7d:97:dd:72:61:44:ba:e8:42:a2:92:68:c4:bd:c1:57:8a: ae:ec:37:c0:02:74:8b:bd:dd:f8:19:6c:f3:c7:bf:1d:88:c5: fc:cc:4f:69:f9:66:dc:42:8d:83:bb:42:32:ac:3f:24:8b:f7: a2:20:98:f3:5f:e8:93:85:df:e8:54:96:bc:c1:2a:44:34:55: a7:dd:aa:87:6e:96:79:dc:ea:e6:f6:2c:06:f1:0d:0a:fb:56: e6:2f:e7:66:c4:45:01:b1:dc:cc:07:1c:83:7e:94:56:69:17: 95:0d:ca:ef:88:63:89:28:5d:e2:bc:12:6a:ff:d7:c7:a3:c5: dc:17:9b:45:a1:2e:6a:3f:83:9c:93:0e:3a:c5:eb:56:75:d0: 5e:49:78:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61XkG7EAZgm+I0euINbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZmJhYjk2MWM0YTNlMTZjZDc2MWJjMmZlZGI5YTI4MTc3 Y2I0NzMwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD EyhlNTRmMzA3YmZiNzlmNzJkYjA1ZTkyNDg1NGI5ZDljM2YxMTc1NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoTVVNtDr6UA8klUbBQbJJDsC08b jgwDjkOOnXU3mgJyVXV32rbcUOqUK4M6fkA0V6QFQPajvReRup2XG/tgqmHYBdwG na2UfLaVMrbLUNSv+sWfuT9Fmeba9RMVGBh0YUlxdoNI6QT4OK2hFWHdZATejYKG g3H45MQw1AMJSx/Pc2InKF2boREPUTwsZqVQii4p5S7oRobOH3axu4zn4UWr0CDL 0yoDSy9s2SzTN1Ix2sa1u7l3QoCRYGdHRUOBTnfG+CMrLGQyIQJ15n1IPB97YjfH cjDh1rMhLbhAaBgtwW+3UBago2iijXBILgUzLixGecZ6TDI5+X9E1eaWWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVPMHv7efctsF6SSFS52cPxF1ZqMB8GA1UdIwQY MBaAFLn7q5YcSj4WzXYbwv7bmigXfLRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zZDkyMWItOWRhNi00YTc5LWEyNjQt ZmMxMzAzZGU2ZDQ5LzEvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zZDkyMWItOWRhNi00YTc5LWEyNjQtZmMxMzAzZGU2ZDQ5 LzEvdWZ1cmxoeEtQaGJOZGh2Q190dWFLQmQ4dEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn65Nur9 YA4KyqxTQy6ATDKFUPkQ1FodNUCLH41mu3+MpY0E39KLexK2IU5Mmm15SwWZgSJn ScbmMSxW8fqdkIeCCz8wVoPS1Sn6eBlMpFS75s8CxAEixRuEneucG2HxoNJb65Jj e/zdYxYtPH2X3XJhRLroQqKSaMS9wVeKruw3wAJ0i73d+Bls88e/HYjF/MxPaflm 3EKNg7tCMqw/JIv3oiCY81/ok4Xf6FSWvMEqRDRVp92qh26Wedzq5vYsBvENCvtW 5i/nZsRFAbHczAccg36UVmkXlQ3K74hjiShd4rwSav/Xx6PF3BebRaEuaj+DnJMO OsXrVnXQXkl4Mg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:11:59 2026 by rpki-client