This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft File: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft (raw, json) Hash identifier: fwA5jEADnD4lVgtdkYYxspidkAZntj97sGM4nMSeVMc= Subject key identifier: B7:96:E6:F1:A9:9D:09:D3:6D:E3:52:EE:75:8B:D8:97:AC:6E:AF:7F Authority key identifier: 51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE Certificate issuer: /CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae Certificate serial: 019C42EB2750F1AAE6218AD9F7271F6CA959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft Manifest number: 01CD Signing time: Mon 09 Feb 2026 15:00:33 +0000 Manifest this update: Mon 09 Feb 2026 15:00:33 +0000 Manifest next update: Tue 10 Feb 2026 15:00:33 +0000 Files and hashes: 1: UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl (hash: LfkU3LrJZ32ss6UifDUdQ8g/mG4tz4czwda/HxQeo4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:27:50:f1:aa:e6:21:8a:d9:f7:27:1f:6c:a9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161d6280bd20d7bcdfd6525109a43e2ea3c62ae Validity Not Before: Feb 9 15:00:33 2026 GMT Not After : Feb 10 15:00:33 2026 GMT Subject: CN=b796e6f1a99d09d36de352ee758bd897ac6eaf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:c3:e6:58:a8:41:4a:ca:6a:3b:86:fb:6b: 53:28:2a:c9:6e:90:92:48:b6:c0:48:99:76:14:a6: 39:5d:6c:54:d6:35:66:38:85:76:09:c6:84:65:24: 79:57:dc:c3:25:75:00:66:0d:0e:29:21:83:06:22: e3:92:25:91:33:fe:ea:f2:70:46:94:8e:15:32:43: 7a:38:db:b2:83:65:dc:f9:4c:e4:1a:b1:50:c7:c2: bf:1a:f0:62:e6:c9:00:bc:c3:33:a0:d0:7f:8d:05: 54:d6:1c:7f:7f:32:90:31:8b:ed:a5:5e:d5:68:0f: 0e:9d:54:c2:94:73:4a:8e:12:15:66:d4:d5:16:d9: 3a:4a:07:cc:51:55:d6:80:9b:a9:e7:33:1f:93:a4: 6d:95:1c:d6:a3:f2:dd:44:52:e9:4a:c1:41:78:04: a5:8e:90:ce:1e:fe:16:01:19:5d:6e:70:eb:59:c7: 9f:bd:a8:ff:29:e9:4b:3f:6d:10:02:9c:9d:96:fc: 4c:4e:9c:6b:2b:eb:9d:d3:3c:64:64:ed:88:08:05: cc:05:82:93:ab:ad:ce:07:43:05:e0:48:66:7d:16: 9b:8a:f3:2d:61:59:e2:97:b3:90:36:05:df:0b:57: df:d1:de:f2:8b:90:e6:56:f0:91:31:6e:59:d9:bb: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:96:E6:F1:A9:9D:09:D3:6D:E3:52:EE:75:8B:D8:97:AC:6E:AF:7F X509v3 Authority Key Identifier: keyid:51:61:D6:28:0B:D2:0D:7B:CD:FD:65:25:10:9A:43:E2:EA:3C:62:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8ec120-aca7-4445-9a69-a0a10ecb42a9/1/UWHWKAvSDXvN_WUlEJpD4uo8Yq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:a6:f3:32:52:27:6f:6a:d9:bd:8c:fd:1b:e3:17:77:a5:da: d2:ec:e0:7b:9c:45:00:28:76:5d:06:47:ff:5d:93:18:79:f0: e6:c2:23:4d:1f:c6:c9:2a:35:18:72:63:67:a5:68:4b:72:b8: 46:24:a0:f3:ed:e6:b8:c8:2a:d1:28:85:dd:58:57:e0:1e:13: ae:66:0f:f8:f1:da:bf:9f:42:99:b7:d4:69:66:69:5b:5f:8f: 95:4b:da:44:a0:fc:14:63:64:c0:0f:bc:17:3b:4a:c0:4f:14: e0:64:16:b7:08:ca:e7:42:7e:9c:de:95:da:5c:8f:a6:9e:7b: 89:8f:f2:9a:64:36:b3:ca:01:b8:1f:5f:d6:35:21:4b:25:11: 21:4c:ec:2f:c0:e8:8a:aa:47:c8:e9:f4:1a:02:05:36:5a:59: c4:dd:35:1c:36:dd:e3:3e:11:4d:e4:37:bb:47:f7:25:96:84: 28:ab:83:af:f0:2a:46:a2:41:21:79:04:55:3e:49:56:af:7a: 5a:25:12:04:05:90:f1:56:e8:54:e1:5b:4a:02:0d:d1:96:62: fc:75:cb:71:56:b6:c9:b9:c5:f3:2d:df:41:32:29:33:cf:e5: cc:f5:89:24:eb:d1:ca:38:30:5e:f5:d2:65:52:34:b6:7c:f6: a7:9f:3c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6ydQ8armIYrZ9ycfbKlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNjFkNjI4MGJkMjBkN2JjZGZkNjUyNTEwOWE0M2UyZWEz YzYyYWUwHhcNMjYwMjA5MTUwMDMzWhcNMjYwMjEwMTUwMDMzWjAzMTEwLwYDVQQD EyhiNzk2ZTZmMWE5OWQwOWQzNmRlMzUyZWU3NThiZDg5N2FjNmVhZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVnD5lioQUrKajuG+2tTKCrJbpCS SLbASJl2FKY5XWxU1jVmOIV2CcaEZSR5V9zDJXUAZg0OKSGDBiLjkiWRM/7q8nBG lI4VMkN6ONuyg2Xc+UzkGrFQx8K/GvBi5skAvMMzoNB/jQVU1hx/fzKQMYvtpV7V aA8OnVTClHNKjhIVZtTVFtk6SgfMUVXWgJup5zMfk6RtlRzWo/LdRFLpSsFBeASl jpDOHv4WARldbnDrWcefvaj/KelLP20QApydlvxMTpxrK+ud0zxkZO2ICAXMBYKT q63OB0MF4EhmfRabivMtYVnil7OQNgXfC1ff0d7yi5DmVvCRMW5Z2bvjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeW5vGpnQnTbeNS7nWL2Jesbq9/MB8GA1UdIwQY MBaAFFFh1igL0g17zf1lJRCaQ+LqPGKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjkt YTBhMTBlY2I0MmE5LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZWMxMjAtYWNhNy00NDQ1LTlhNjktYTBhMTBlY2I0MmE5 LzEvVVdIV0tBdlNEWHZOX1dVbEVKcEQ0dW84WXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6bzMlIn b2rZvYz9G+MXd6Xa0uzge5xFACh2XQZH/12TGHnw5sIjTR/GySo1GHJjZ6VoS3K4 RiSg8+3muMgq0SiF3VhX4B4TrmYP+PHav59CmbfUaWZpW1+PlUvaRKD8FGNkwA+8 FztKwE8U4GQWtwjK50J+nN6V2lyPpp57iY/ymmQ2s8oBuB9f1jUhSyURIUzsL8Do iqpHyOn0GgIFNlpZxN01HDbd4z4RTeQ3u0f3JZaEKKuDr/AqRqJBIXkEVT5JVq96 WiUSBAWQ8VboVOFbSgIN0ZZi/HXLcVa2ybnF8y3fQTIpM8/lzPWJJOvRyjgwXvXS ZVI0tnz2p588yQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:34 2026 by rpki-client