This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json) Hash identifier: wZV3TAeZeVqDPsW+NkOhDOJc10Wz6Hjuh01aEyaIkNo= Subject key identifier: 26:9D:80:E8:9F:00:B4:61:83:07:6A:64:21:CC:7F:56:4D:89:D7:F7 Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b Certificate serial: 019C4358C3F63957C72310311D80D099285D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft Manifest number: 0597 Signing time: Mon 09 Feb 2026 17:00:16 +0000 Manifest this update: Mon 09 Feb 2026 17:00:16 +0000 Manifest next update: Tue 10 Feb 2026 17:00:16 +0000 Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: GsOrMta9xvcN8RVIY6dYW7otrn3SnSm7RWbu0geaF8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c3:f6:39:57:c7:23:10:31:1d:80:d0:99:28:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b Validity Not Before: Feb 9 17:00:16 2026 GMT Not After : Feb 10 17:00:16 2026 GMT Subject: CN=269d80e89f00b46183076a6421cc7f564d89d7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:89:e9:92:dc:4a:35:a5:0c:24:de:2a:b4: 3a:77:e8:55:fe:2c:89:6e:79:bd:4d:96:f8:85:2a: 6a:84:51:11:4a:a4:e2:a0:7c:75:18:1e:4c:ab:1b: 04:be:ea:df:6b:fb:a0:26:6a:3d:56:b8:30:c3:48: 3c:a5:8c:f1:e4:ad:2b:42:88:af:99:4f:22:34:80: cf:4b:0d:48:de:1d:66:fe:b9:38:e6:d1:c0:1a:ef: 53:a9:87:da:53:ff:2c:5b:35:f9:ce:54:63:5b:fe: 85:1b:85:a5:d4:f9:90:93:61:d2:88:d9:f3:b0:9f: 93:25:ea:a6:74:d2:c2:72:21:5b:f3:6b:61:be:0e: 95:9a:0b:aa:e5:40:a5:98:ce:c5:38:63:80:0b:c3: 9c:1c:f2:21:ea:54:ef:44:e0:23:06:fb:38:d9:af: 3e:4d:40:05:ff:8f:78:62:02:7b:66:aa:5f:0d:50: 26:1a:78:e0:ee:c7:74:bd:d0:92:56:86:37:ec:68: a0:3b:d0:70:d4:9e:69:1f:44:74:bb:0d:13:34:7a: 42:0b:9d:3d:d7:61:55:c7:d4:eb:f0:83:e2:7e:7e: df:11:e9:52:f5:b9:e6:23:2e:b3:4a:63:1b:f5:51: 51:0d:e6:2f:03:e1:c7:7f:37:ce:6f:4f:1f:2d:4c: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9D:80:E8:9F:00:B4:61:83:07:6A:64:21:CC:7F:56:4D:89:D7:F7 X509v3 Authority Key Identifier: keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:04:9a:84:48:d5:65:05:c5:28:d2:0c:83:6d:83:3d:df:42: d5:db:42:87:2e:24:4c:be:55:e1:3d:d1:83:86:73:13:4b:9e: 55:9f:77:67:eb:f3:d5:e4:26:d4:75:80:e9:3b:cc:d6:c7:e3: 5f:ee:97:fd:af:ac:a1:a9:0d:72:82:db:4f:8a:9e:b9:4b:b5: 5d:9d:51:0e:5a:ab:17:ed:52:d2:8c:5c:37:b8:57:04:47:dc: c6:7a:6e:44:60:62:51:7a:1f:26:b4:9b:fa:4c:a0:2e:81:14: 95:02:54:0c:6e:4e:e1:ae:db:26:aa:8c:42:19:64:35:c3:25: 07:a8:45:e4:5b:de:7f:8b:87:1e:86:8e:89:d8:c4:80:4e:55: 26:35:e8:42:51:3e:89:f8:cd:13:b0:fc:fe:95:71:40:65:8e: 8e:db:b5:f1:16:fc:bf:a9:e3:23:89:81:17:1e:fd:31:49:d6: e5:0e:0a:00:88:99:4b:3b:29:5e:eb:7d:4c:5e:b4:ab:9c:d1: fb:6e:ee:5c:30:a6:6b:42:3d:1a:d0:a9:0c:4a:33:9c:14:b1: 11:e0:88:55:08:71:bb:53:49:28:a1:7f:02:3d:b9:fb:e1:07: 69:06:ab:ac:0a:e9:a7:26:02:95:d5:d0:91:7d:43:ab:e3:9d: 72:7d:ed:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMP2OVfHIxAxHYDQmShdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGIxOTM4NjY4YjI3YjA1MmM2ODNkMWUyNjBjMGNkM2Q1 Njg3NWIwHhcNMjYwMjA5MTcwMDE2WhcNMjYwMjEwMTcwMDE2WjAzMTEwLwYDVQQD EygyNjlkODBlODlmMDBiNDYxODMwNzZhNjQyMWNjN2Y1NjRkODlkN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8KJ6ZLcSjWlDCTeKrQ6d+hV/iyJ bnm9TZb4hSpqhFERSqTioHx1GB5MqxsEvurfa/ugJmo9Vrgww0g8pYzx5K0rQoiv mU8iNIDPSw1I3h1m/rk45tHAGu9TqYfaU/8sWzX5zlRjW/6FG4Wl1PmQk2HSiNnz sJ+TJeqmdNLCciFb82thvg6Vmguq5UClmM7FOGOAC8OcHPIh6lTvROAjBvs42a8+ TUAF/494YgJ7ZqpfDVAmGnjg7sd0vdCSVoY37GigO9Bw1J5pH0R0uw0TNHpCC509 12FVx9Tr8IPifn7fEelS9bnmIy6zSmMb9VFRDeYvA+HHfzfOb08fLUyvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCadgOifALRhgwdqZCHMf1ZNidf3MB8GA1UdIwQY MBaAFLtLGThmiyewUsaD0eJgwM09VodbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUt YjNjNzQyNTQzZGRmLzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MDA4ZTQtZDk4NC00M2IzLWE1MWUtYjNjNzQyNTQzZGRm LzEvdTBzWk9HYUxKN0JTeG9QUjRtREF6VDFXaDFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwSahEjV ZQXFKNIMg22DPd9C1dtChy4kTL5V4T3Rg4ZzE0ueVZ93Z+vz1eQm1HWA6TvM1sfj X+6X/a+soakNcoLbT4qeuUu1XZ1RDlqrF+1S0oxcN7hXBEfcxnpuRGBiUXofJrSb +kygLoEUlQJUDG5O4a7bJqqMQhlkNcMlB6hF5Fvef4uHHoaOidjEgE5VJjXoQlE+ ifjNE7D8/pVxQGWOjtu18Rb8v6njI4mBFx79MUnW5Q4KAIiZSzspXut9TF60q5zR +27uXDCma0I9GtCpDEoznBSxEeCIVQhxu1NJKKF/Aj25++EHaQarrArppyYCldXQ kX1Dq+Odcn3taw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:08 2026 by rpki-client