This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json) Hash identifier: OTXdrEdI/8Kyhca2OxYqU1jWGAwFy2S2VAG+pzc//lo= Subject key identifier: 51:E2:02:B1:13:88:0C:BA:42:45:2A:CE:F5:58:EF:74:68:F6:F2:2E Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Certificate serial: 019C420FB1201DD6E19333184F0DA49D214A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft Manifest number: 16C1 Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: QFg5GQCxdtIYkN4aJ8rCB1pNt/t28HLiAq7VybG1jAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b1:20:1d:d6:e1:93:33:18:4f:0d:a4:9d:21:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=51e202b113880cba42452acef558ef7468f6f22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:5a:e5:d0:71:14:bf:35:3d:55:a6:d2:82: 48:1d:d6:df:1a:82:12:44:64:12:1b:4a:43:fb:2c: 27:7b:02:0c:45:f4:ca:b5:aa:84:13:c9:b0:08:31: 87:e3:fb:27:b2:d8:11:fe:61:1b:d5:c1:b4:35:dd: ed:3d:13:66:95:55:4e:11:59:38:00:af:1b:4e:7b: 41:e3:20:d5:e9:f2:ce:9a:9a:20:71:82:52:ca:82: 84:06:5c:28:2c:9c:2e:3c:7f:a4:94:8b:11:ba:44: 30:80:04:33:39:c8:40:72:f3:7b:4e:47:c0:c0:1d: b3:e9:19:f1:7b:d1:c6:32:0a:46:6b:1c:bc:fb:6e: 33:3b:43:e8:cb:24:9b:7a:d2:9d:20:70:95:48:25: ef:8d:5d:95:62:b0:d0:13:32:2c:33:5b:83:77:55: 6d:95:d8:78:9c:5e:ad:95:ab:9c:58:40:23:25:3f: 86:e3:72:94:4d:ef:b4:7d:99:89:d3:8d:08:f5:00: d1:0f:9c:b5:07:4c:5c:d8:4a:3b:4b:ef:de:df:f8: 03:35:9d:62:e0:49:a3:83:d6:77:04:76:a0:3f:92: 63:6b:05:e0:4a:f4:80:28:01:8f:5a:f2:fe:73:34: a1:dd:37:73:5e:0e:66:a6:c6:54:87:1d:59:42:f4: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:02:B1:13:88:0C:BA:42:45:2A:CE:F5:58:EF:74:68:F6:F2:2E X509v3 Authority Key Identifier: keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:e0:ed:3e:25:65:bb:b4:30:20:23:fe:7a:c4:d8:32:5f: fc:ed:0c:9d:52:bc:cb:0b:3e:8d:8a:d8:ac:67:23:76:8c:b4: 64:0d:61:34:7f:01:0b:ca:a0:e6:9f:64:89:73:ec:62:1b:aa: 0e:b2:e4:ee:04:f8:bb:45:4a:f3:a1:6b:2d:d8:e3:33:67:34: 39:b4:c2:2c:84:8b:91:cb:ec:7d:15:5b:4d:8c:df:e2:09:39: 9b:c6:7e:af:af:e5:26:79:dc:6e:ec:12:2d:9d:d9:70:41:0e: 2a:d6:db:81:2b:ae:2a:4e:4a:ff:b9:15:bd:53:94:08:9a:bf: a0:e4:fc:b3:2c:69:a8:ef:c0:12:22:0b:df:5d:b7:d2:58:35: a5:79:7a:5f:0e:9a:47:1d:b7:ea:96:83:49:b4:ea:46:ce:00: 3f:70:ad:7d:7f:59:82:dc:2f:69:cb:ce:a2:bf:81:5a:93:57: 48:fc:38:5a:78:f6:bf:c8:86:21:4e:bd:1c:b2:0b:52:e9:df: e0:2b:96:01:a5:42:a0:6f:d2:c1:4a:e5:d7:39:85:bb:de:60: 47:f6:f6:22:70:7f:1c:aa:05:fb:8b:bb:f4:66:d4:f3:32:de: 16:e3:05:54:50:70:2a:8e:c0:44:2a:7b:3e:6b:66:58:8a:b8: c2:99:ad:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7EgHdbhkzMYTw2knSFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjUwYjRmYzA5NTg5MGI4MzFjMDNkOTk2MjVjMGVlNTQx OWQzNWEwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD Eyg1MWUyMDJiMTEzODgwY2JhNDI0NTJhY2VmNTU4ZWY3NDY4ZjZmMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwJa5dBxFL81PVWm0oJIHdbfGoIS RGQSG0pD+ywnewIMRfTKtaqEE8mwCDGH4/snstgR/mEb1cG0Nd3tPRNmlVVOEVk4 AK8bTntB4yDV6fLOmpogcYJSyoKEBlwoLJwuPH+klIsRukQwgAQzOchAcvN7TkfA wB2z6Rnxe9HGMgpGaxy8+24zO0PoyySbetKdIHCVSCXvjV2VYrDQEzIsM1uDd1Vt ldh4nF6tlaucWEAjJT+G43KUTe+0fZmJ040I9QDRD5y1B0xc2Eo7S+/e3/gDNZ1i 4Emjg9Z3BHagP5JjawXgSvSAKAGPWvL+czSh3TdzXg5mpsZUhx1ZQvTSZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHiArETiAy6QkUqzvVY73Ro9vIuMB8GA1UdIwQY MBaAFNP1C0/AlYkLgxwD2ZYlwO5UGdNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQt NzdlMzIxN2NkMzlmLzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjMwMzctNjJiZC00YjRkLWFmNGQtNzdlMzIxN2NkMzlm LzEvMF9VTFQ4Q1ZpUXVESEFQWmxpWEE3bFFaMDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxLg7T4l Zbu0MCAj/nrE2DJf/O0MnVK8yws+jYrYrGcjdoy0ZA1hNH8BC8qg5p9kiXPsYhuq DrLk7gT4u0VK86FrLdjjM2c0ObTCLISLkcvsfRVbTYzf4gk5m8Z+r6/lJnncbuwS LZ3ZcEEOKtbbgSuuKk5K/7kVvVOUCJq/oOT8syxpqO/AEiIL31230lg1pXl6Xw6a Rx236paDSbTqRs4AP3CtfX9ZgtwvacvOor+BWpNXSPw4Wnj2v8iGIU69HLILUunf 4CuWAaVCoG/SwUrl1zmFu95gR/b2InB/HKoF+4u79GbU8zLeFuMFVFBwKo7ARCp7 PmtmWIq4wpmtXw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:54 2026 by rpki-client