This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft File: U1zc9HjqgOsXXEwwd-efy3DF0jA.mft (raw, json) Hash identifier: T04pcHlhkllrxDcGd9nyep8Vtb5mU9b6+VUlFYWKrK8= Subject key identifier: 66:1F:F2:66:6A:13:E4:87:F8:E4:F9:22:E8:4E:49:0F:B6:03:47:D1 Authority key identifier: 53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30 Certificate issuer: /CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230 Certificate serial: 019C4321E93CFC89BF531DD294195E7DE1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft Manifest number: 0C67 Signing time: Mon 09 Feb 2026 16:00:21 +0000 Manifest this update: Mon 09 Feb 2026 16:00:21 +0000 Manifest next update: Tue 10 Feb 2026 16:00:21 +0000 Files and hashes: 1: U1zc9HjqgOsXXEwwd-efy3DF0jA.crl (hash: nlweg7JYkBJTrKvM5xuRRQEyXZFGyWw5eQumUV3KJEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e9:3c:fc:89:bf:53:1d:d2:94:19:5e:7d:e1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230 Validity Not Before: Feb 9 16:00:21 2026 GMT Not After : Feb 10 16:00:21 2026 GMT Subject: CN=661ff2666a13e487f8e4f922e84e490fb60347d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:24:1c:9e:5f:fb:04:a0:a3:bf:e3:eb:a1:52: d5:d8:17:c9:e6:3f:f9:1a:9f:28:b0:2c:cf:34:52: 71:e3:d0:28:69:37:bd:24:2f:94:d9:6e:cb:f0:30: fc:e7:7c:01:83:0d:c5:82:ba:91:88:8e:88:c4:d5: 35:94:bc:15:e1:61:79:e3:04:2f:fd:0f:85:eb:ed: e7:93:3f:01:51:1a:76:87:ee:7c:d9:4c:d1:aa:b2: 65:a0:10:52:3e:fe:24:a1:cc:f8:f1:12:92:01:89: 9b:df:cc:19:c2:e5:ea:9f:d4:6b:b4:40:cb:30:16: ee:ad:d2:a9:7c:72:91:a2:71:b9:a1:53:2d:9c:82: 7c:6b:0d:cd:26:3f:17:d6:3a:12:24:d6:0c:e1:e8: 4e:7a:37:4c:f6:0f:51:3e:7f:4a:c1:2f:c1:ec:57: 33:4a:2e:92:79:2c:ca:4c:62:db:84:98:95:d8:84: a9:68:b3:85:e9:c2:ea:8f:1f:5a:e4:9e:e2:a7:29: 80:c9:1b:2a:68:60:98:15:c2:55:17:36:0b:cc:ce: 1b:a4:63:e8:33:08:39:16:15:86:67:4a:00:af:87: 01:95:63:1b:aa:f4:6c:e8:b0:2f:57:29:f4:39:3d: b2:65:6b:ab:43:58:2c:e9:df:dd:3d:89:e2:68:c9: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:F2:66:6A:13:E4:87:F8:E4:F9:22:E8:4E:49:0F:B6:03:47:D1 X509v3 Authority Key Identifier: keyid:53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:9b:8c:cf:71:9e:3e:3c:4f:a8:99:a0:07:75:e8:51:7e: 5f:60:e2:a3:d8:9e:da:dc:be:ac:ac:a3:4d:50:e3:a9:65:a0: d1:1b:c3:3c:c5:a7:ad:80:c8:af:1a:79:1e:33:ea:d7:14:99: 09:ec:16:77:9d:aa:2b:b8:d0:7c:84:48:fe:c2:4e:d8:8b:aa: 44:f8:19:b9:46:a7:55:6b:d3:7e:c8:6e:1c:d2:c6:d3:d9:a2: a1:82:01:a7:bc:12:d1:4a:2d:5c:06:5c:63:b1:b7:e0:ab:5b: a8:69:e7:39:81:dc:c9:94:6b:c5:2a:3f:70:0c:70:db:8d:8b: bb:58:58:5b:a0:55:c0:8b:67:d0:5b:ee:81:ee:c6:cb:30:71: 79:01:4d:84:16:cf:ed:59:1c:38:d1:a6:e7:8f:36:23:c7:e0: 1d:72:48:21:94:9b:a8:ba:28:38:c8:2f:a8:62:9a:6a:01:1e: 06:82:df:a5:f4:7f:d1:1d:29:b7:6b:f0:db:6f:10:0a:f1:ac: 66:d2:39:a5:e1:61:30:16:04:36:51:7d:fb:c8:00:62:81:05: f1:ce:1f:c7:2e:74:e2:00:13:c3:86:23:a6:47:1c:e6:42:50: cb:24:5a:3e:21:f5:77:22:75:0b:85:07:a9:43:e5:51:41:f3: dc:be:d8:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIek8/Im/Ux3SlBlefeGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWNkY2Y0NzhlYTgwZWIxNzVjNGMzMDc3ZTc5ZmNiNzBj NWQyMzAwHhcNMjYwMjA5MTYwMDIxWhcNMjYwMjEwMTYwMDIxWjAzMTEwLwYDVQQD Eyg2NjFmZjI2NjZhMTNlNDg3ZjhlNGY5MjJlODRlNDkwZmI2MDM0N2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyQcnl/7BKCjv+ProVLV2BfJ5j/5 Gp8osCzPNFJx49AoaTe9JC+U2W7L8DD853wBgw3FgrqRiI6IxNU1lLwV4WF54wQv /Q+F6+3nkz8BURp2h+582UzRqrJloBBSPv4kocz48RKSAYmb38wZwuXqn9RrtEDL MBburdKpfHKRonG5oVMtnIJ8aw3NJj8X1joSJNYM4ehOejdM9g9RPn9KwS/B7Fcz Si6SeSzKTGLbhJiV2ISpaLOF6cLqjx9a5J7ipymAyRsqaGCYFcJVFzYLzM4bpGPo Mwg5FhWGZ0oAr4cBlWMbqvRs6LAvVyn0OT2yZWurQ1gs6d/dPYniaMncewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYf8mZqE+SH+OT5IuhOSQ+2A0fRMB8GA1UdIwQY MBaAFFNc3PR46oDrF1xMMHfnn8twxdIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMjNjNzctZjRhZC00MGJhLWI4NTAt OTg5ZjUzYjJjYWUwLzEvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9hMjNjNzctZjRhZC00MGJhLWI4NTAtOTg5ZjUzYjJjYWUw LzEvVTF6YzlIanFnT3NYWEV3d2QtZWZ5M0RGMGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhibjM9x nj48T6iZoAd16FF+X2Dio9ie2ty+rKyjTVDjqWWg0RvDPMWnrYDIrxp5HjPq1xSZ CewWd52qK7jQfIRI/sJO2IuqRPgZuUanVWvTfshuHNLG09mioYIBp7wS0UotXAZc Y7G34KtbqGnnOYHcyZRrxSo/cAxw242Lu1hYW6BVwItn0Fvuge7GyzBxeQFNhBbP 7VkcONGm5482I8fgHXJIIZSbqLooOMgvqGKaagEeBoLfpfR/0R0pt2vw228QCvGs ZtI5peFhMBYENlF9+8gAYoEF8c4fxy504gATw4Yjpkcc5kJQyyRaPiH1dyJ1C4UH qUPlUUHz3L7Y9g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:07 2026 by rpki-client