This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft File: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json) Hash identifier: 6B9UVoyEwtAPOGAwJF/jm+91ErZxxUGc6uoe6MREDv8= Subject key identifier: 19:00:6F:8B:F5:7F:BC:38:A5:47:B6:6A:B4:71:E0:50:A5:87:7D:2B Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC Certificate issuer: /CN=d5468f54c0d49581f69b54383d5573ff775620ec Certificate serial: 019C43FD93DCA2F0D2E1502A69F2A8E95851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft Manifest number: 0BF9 Signing time: Mon 09 Feb 2026 20:00:17 +0000 Manifest this update: Mon 09 Feb 2026 20:00:17 +0000 Manifest next update: Tue 10 Feb 2026 20:00:17 +0000 Files and hashes: 1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: PsKAB7vqOVGfcOojjfdwOXf+HbEfo9dxwEiNuSHuVVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:93:dc:a2:f0:d2:e1:50:2a:69:f2:a8:e9:58:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec Validity Not Before: Feb 9 20:00:17 2026 GMT Not After : Feb 10 20:00:17 2026 GMT Subject: CN=19006f8bf57fbc38a547b66ab471e050a5877d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:b9:94:5e:44:08:59:3d:d8:18:35:b2:7e: d0:18:94:18:d3:72:19:23:99:90:4a:ad:c0:e7:b2: 55:12:65:7c:24:a8:6b:80:06:31:a5:8d:44:08:c4: 26:d6:78:34:0c:3f:7b:5f:f7:61:05:ce:9f:48:8e: e5:f0:03:29:51:c8:59:f7:17:f1:47:b2:68:a8:60: 7b:88:67:de:fa:e0:c4:1f:d2:c8:9a:85:89:b1:02: 24:6f:8a:de:8a:10:5e:fc:8f:fc:f5:18:bd:77:76: ef:89:1d:fd:f9:fa:58:52:bb:49:9d:dc:a8:aa:1f: f3:97:5f:60:40:50:96:82:23:df:3b:e7:cf:31:b0: a0:fe:8b:52:b4:5f:97:10:9c:92:45:ba:f6:72:ea: 68:f9:e2:2b:45:0f:38:10:2a:e7:03:4c:25:07:d0: 0a:16:7f:4e:dd:92:d7:d5:65:f4:c7:0a:5b:aa:78: 81:da:c3:06:36:ce:74:9b:3a:c7:2a:3c:21:aa:cc: 78:a4:bf:ff:f4:07:40:07:be:29:6c:36:b8:d1:b1: 27:61:88:d1:cd:e8:93:0b:e7:11:56:cf:16:31:5b: 8e:83:05:93:53:e4:94:b4:e2:58:03:9c:e5:b6:e3: b6:42:41:31:f6:3c:55:5a:c6:98:ff:f0:0c:02:d8: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:6F:8B:F5:7F:BC:38:A5:47:B6:6A:B4:71:E0:50:A5:87:7D:2B X509v3 Authority Key Identifier: keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b2:64:66:a7:0b:48:95:ec:ca:af:6f:54:d4:5b:2f:14:bc: a2:d0:3a:4d:19:30:9d:ee:6c:ae:c8:e9:5b:2b:72:d2:dc:46: 21:80:45:88:09:ca:38:94:4c:21:10:38:45:12:32:54:6c:1e: 88:a6:fd:f5:73:c3:57:6c:e5:af:24:c3:1f:f8:6a:a3:b3:de: 70:6f:2b:b8:35:72:65:67:10:8a:c2:d3:9d:a0:13:db:24:37: 19:de:bf:1d:7d:e9:dd:39:fe:37:19:50:c3:37:74:39:f9:8f: 12:82:2d:e9:3e:6a:7a:5c:e3:dd:fc:2d:61:17:9c:3e:69:dc: f2:1b:ed:00:6a:91:3e:a9:26:0c:83:4b:52:da:fa:f3:6e:e3: 33:93:dd:27:31:a3:d0:60:fc:af:36:01:f9:be:f2:05:6b:2b: 3d:76:1d:b3:c2:b1:06:6d:12:ab:17:1f:13:21:53:5c:34:8d: 07:17:0e:dd:83:2a:90:82:f9:07:b5:1b:d9:64:c4:15:c5:db: 0e:47:66:c0:14:a5:6c:38:47:64:c5:be:96:98:92:3f:36:5c: bb:08:de:46:db:d0:c7:b3:9f:04:52:bb:27:2e:6c:3a:50:45: 4b:fa:f9:a6:90:08:84:2f:7f:95:84:02:25:c7:72:af:01:bc: f5:6c:e6:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ZPcovDS4VAqafKo6VhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NDY4ZjU0YzBkNDk1ODFmNjliNTQzODNkNTU3M2ZmNzc1 NjIwZWMwHhcNMjYwMjA5MjAwMDE3WhcNMjYwMjEwMjAwMDE3WjAzMTEwLwYDVQQD EygxOTAwNmY4YmY1N2ZiYzM4YTU0N2I2NmFiNDcxZTA1MGE1ODc3ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocq5lF5ECFk92Bg1sn7QGJQY03IZ I5mQSq3A57JVEmV8JKhrgAYxpY1ECMQm1ng0DD97X/dhBc6fSI7l8AMpUchZ9xfx R7JoqGB7iGfe+uDEH9LImoWJsQIkb4reihBe/I/89Ri9d3bviR39+fpYUrtJndyo qh/zl19gQFCWgiPfO+fPMbCg/otStF+XEJySRbr2cupo+eIrRQ84ECrnA0wlB9AK Fn9O3ZLX1WX0xwpbqniB2sMGNs50mzrHKjwhqsx4pL//9AdAB74pbDa40bEnYYjR zeiTC+cRVs8WMVuOgwWTU+SUtOJYA5zltuO2QkEx9jxVWsaY//AMAtjO7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkAb4v1f7w4pUe2arRx4FClh30rMB8GA1UdIwQY MBaAFNVGj1TA1JWB9ptUOD1Vc/93ViDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQt MmM1YTdhYjQ5MzE5LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81ZTg0MjEtMWI0MS00NTY3LTg5YTQtMmM1YTdhYjQ5MzE5 LzEvMVVhUFZNRFVsWUgybTFRNFBWVnpfM2RXSU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirJkZqcL SJXsyq9vVNRbLxS8otA6TRkwne5srsjpWyty0txGIYBFiAnKOJRMIRA4RRIyVGwe iKb99XPDV2zlryTDH/hqo7PecG8ruDVyZWcQisLTnaAT2yQ3Gd6/HX3p3Tn+NxlQ wzd0OfmPEoIt6T5qelzj3fwtYRecPmnc8hvtAGqRPqkmDINLUtr6827jM5PdJzGj 0GD8rzYB+b7yBWsrPXYds8KxBm0SqxcfEyFTXDSNBxcO3YMqkIL5B7Ub2WTEFcXb DkdmwBSlbDhHZMW+lpiSPzZcuwjeRtvQx7OfBFK7Jy5sOlBFS/r5ppAIhC9/lYQC JcdyrwG89WzmBg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:35 2026 by rpki-client