This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json) Hash identifier: nQjV8mVJ3Y3dIctSa8A0NWmsyDBs1qrIKt3CLOZgTd8= Subject key identifier: 22:E7:74:A9:D9:F2:EE:29:96:BD:39:2B:16:8B:29:58:E5:92:7C:3D Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Certificate serial: 019C43225E7182F8F4A4FD3FB8E90D74D209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft Manifest number: 0D1C Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: 4v1VaUuMffk1TrDBau+D07mcwIUmjMRNggf4ha//Tb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5e:71:82:f8:f4:a4:fd:3f:b8:e9:0d:74:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=22e774a9d9f2ee2996bd392b168b2958e5927c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:bb:bc:7a:aa:df:f2:26:97:b6:25:2d:79: 8c:ae:94:25:88:4c:45:9d:11:53:61:1e:e0:73:f6: 76:52:d3:be:d2:e8:b1:3f:68:87:cd:bf:34:f4:7c: eb:00:44:29:56:ed:02:42:ca:09:8a:5b:fb:7c:ea: f3:fb:08:4d:06:9b:13:e7:0b:6f:ad:72:e0:ca:de: 28:36:bb:14:fb:fc:0a:4a:5f:18:e4:6f:d2:da:6a: 06:bf:6d:67:cb:02:c6:90:17:9a:d4:b4:c0:86:3c: 34:9e:83:ad:ec:99:95:23:bf:e8:6e:20:02:b3:2d: 55:d5:ed:68:8e:3f:5b:0e:8e:12:72:db:7f:e5:f8: 98:01:98:50:1d:30:e0:64:20:0f:8b:c6:63:13:92: a6:84:63:38:6c:46:d6:a2:5e:ee:9a:30:ce:4a:a2: 9e:4c:d8:87:a0:a4:7b:49:65:c0:72:45:b6:ea:b3: ed:73:0e:e0:01:ca:dc:bf:b7:f0:3b:8c:54:1d:37: b6:2d:e7:9b:59:50:70:99:32:16:98:cd:68:28:eb: b5:99:01:f1:18:c4:e2:c3:82:3f:b9:b3:58:a3:4e: dd:9b:65:36:9b:5c:95:de:ca:7c:42:4e:53:d2:e4: 48:95:9d:fc:8f:fa:f3:39:fe:40:8e:20:b3:a3:b4: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:74:A9:D9:F2:EE:29:96:BD:39:2B:16:8B:29:58:E5:92:7C:3D X509v3 Authority Key Identifier: keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:30:5a:bd:51:86:bc:be:9e:63:57:c3:8a:41:8f:b8:24:ab: 88:a9:b2:91:2d:8f:39:de:df:b3:f0:0e:63:09:69:65:72:4a: b1:69:0f:4b:0e:ed:d1:3d:ee:2c:12:48:b7:75:15:85:e2:06: 81:0b:ef:1e:f4:a8:61:c5:d9:be:19:9b:ad:5a:42:15:1a:97: 54:ec:f8:5c:01:71:10:8a:ca:74:f5:20:90:cf:96:73:a3:3c: 2c:9b:73:d5:4e:4e:c5:82:16:0f:ff:0b:9a:68:13:0b:97:94: 0c:34:69:36:f4:cf:bd:f0:7c:7c:8c:65:88:f6:f4:8d:9e:e9: 99:05:9f:e7:77:51:76:30:37:5a:a5:6a:d7:93:f2:42:0c:38: d5:a5:6c:c0:df:fe:3f:4e:e1:82:4e:73:f4:47:d6:73:06:ef: 7a:b0:e3:95:f6:e4:8d:33:fe:9e:7a:f4:a7:08:71:bb:50:68: 45:7e:4d:52:d1:26:81:de:b3:ff:22:c8:d6:95:29:c5:de:f1: bb:d7:7b:e0:8d:82:8b:40:8b:fe:61:1e:80:ef:c9:92:8e:21: 71:0e:20:99:24:37:5d:d2:44:e2:78:da:8e:0d:52:65:d1:1d: 93:6a:b7:08:82:f4:63:04:7a:57:bf:ae:94:a1:50:b8:35:17: 4f:2a:f7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIl5xgvj0pP0/uOkNdNIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk OTZiZjkwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EygyMmU3NzRhOWQ5ZjJlZTI5OTZiZDM5MmIxNjhiMjk1OGU1OTI3YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNO7vHqq3/Iml7YlLXmMrpQliExF nRFTYR7gc/Z2UtO+0uixP2iHzb809HzrAEQpVu0CQsoJilv7fOrz+whNBpsT5wtv rXLgyt4oNrsU+/wKSl8Y5G/S2moGv21nywLGkBea1LTAhjw0noOt7JmVI7/obiAC sy1V1e1ojj9bDo4Sctt/5fiYAZhQHTDgZCAPi8ZjE5KmhGM4bEbWol7umjDOSqKe TNiHoKR7SWXAckW26rPtcw7gAcrcv7fwO4xUHTe2LeebWVBwmTIWmM1oKOu1mQHx GMTiw4I/ubNYo07dm2U2m1yV3sp8Qk5T0uRIlZ38j/rzOf5AjiCzo7Sv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLndKnZ8u4plr05KxaLKVjlknw9MB8GA1UdIwQY MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTBavVGG vL6eY1fDikGPuCSriKmykS2POd7fs/AOYwlpZXJKsWkPSw7t0T3uLBJIt3UVheIG gQvvHvSoYcXZvhmbrVpCFRqXVOz4XAFxEIrKdPUgkM+Wc6M8LJtz1U5OxYIWD/8L mmgTC5eUDDRpNvTPvfB8fIxliPb0jZ7pmQWf53dRdjA3WqVq15PyQgw41aVswN/+ P07hgk5z9EfWcwbverDjlfbkjTP+nnr0pwhxu1BoRX5NUtEmgd6z/yLI1pUpxd7x u9d74I2Ci0CL/mEegO/Jko4hcQ4gmSQ3XdJE4njajg1SZdEdk2q3CIL0YwR6V7+u lKFQuDUXTyr3Zg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:04 2026 by rpki-client