This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json) Hash identifier: Fj8m0lsP2oC4jOVh8T5z85q8AAer+uUIivVq3v2mJSM= Subject key identifier: D8:A5:DE:A6:C0:E2:C6:6B:EE:28:83:D0:C9:30:E5:13:BF:74:36:B9 Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Certificate serial: 019C438FB71766AA3FF3DDADBD966DDB89F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:00:17 +0000 Manifest this update: Mon 09 Feb 2026 18:00:17 +0000 Manifest next update: Tue 10 Feb 2026 18:00:17 +0000 Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: 8uFGJ7kJMGuy8BRWVd42xeRQuPsOTpnP+A5r/sJnF5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b7:17:66:aa:3f:f3:dd:ad:bd:96:6d:db:89:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97 Validity Not Before: Feb 9 18:00:17 2026 GMT Not After : Feb 10 18:00:17 2026 GMT Subject: CN=d8a5dea6c0e2c66bee2883d0c930e513bf7436b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:b5:f7:94:8a:62:44:7f:84:a2:bb:92:64: 53:98:f9:8e:12:e7:65:2f:5d:ee:eb:29:34:d6:3c: 01:e6:eb:bd:b0:81:0a:a5:ce:77:a5:f1:3a:18:37: 31:cb:69:8a:88:3f:21:b9:fb:9f:99:1a:3b:2a:83: 8c:5f:e9:7a:67:df:7a:a3:30:7f:8d:7b:ec:6e:fc: 4d:5b:71:ca:db:d1:76:dd:21:64:98:ed:b1:b7:93: 44:46:99:74:78:9b:09:b7:88:aa:70:52:42:74:7e: 74:30:9c:53:f4:b4:f4:0f:59:ca:21:bf:fd:19:bb: da:93:13:20:70:4d:2d:72:da:c2:2f:91:9e:ad:e8: 1b:13:33:32:5f:f2:ba:5b:02:02:d9:74:83:37:a0: c5:4b:9a:d8:de:95:e9:39:86:93:72:15:d0:fc:68: 3f:fb:f1:0c:d3:3f:b1:d9:1a:4b:b4:47:33:6d:74: f4:7d:30:51:98:72:f0:f3:08:73:63:67:48:d4:e8: 3c:c0:b7:c6:d5:fc:6d:da:a7:a6:2e:4f:60:a1:e8: 0a:3f:b1:53:e0:40:a7:dd:e9:bb:44:e3:a4:08:86: 74:13:c9:15:f2:98:e5:a3:7f:fa:b5:56:b0:d8:3e: ac:fa:da:7a:15:8b:a6:5c:5d:4f:12:6c:8b:93:db: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:DE:A6:C0:E2:C6:6B:EE:28:83:D0:C9:30:E5:13:BF:74:36:B9 X509v3 Authority Key Identifier: keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:e5:38:d1:4e:97:6d:a0:6f:9d:b6:32:75:6d:1b:cb:4d:8c: 91:8b:ba:1c:0d:19:3e:18:ba:65:7d:cc:02:64:85:56:c5:9b: 2c:82:b2:00:ec:81:90:aa:87:15:41:6e:81:5f:30:4d:cb:70: 11:a2:44:24:56:94:83:99:5b:81:6a:ab:45:5e:81:ef:7b:0e: c2:fc:e2:f3:97:49:00:b7:7f:9f:33:e2:52:8f:28:5c:50:7d: bd:d2:4a:b2:91:af:75:cd:ce:2e:d2:37:ab:6f:e9:35:09:ca: ce:58:5a:b1:2f:fb:8f:2e:d2:56:39:91:6d:07:8c:13:c5:59: 0c:38:70:f2:5d:ad:f3:dd:3d:f2:75:61:c4:7e:4f:4d:0c:56: 21:1c:b1:66:83:d2:be:52:8a:c0:b1:b4:d6:90:cc:c8:9b:ad: 61:61:b1:a2:a9:4b:5d:6e:a2:d3:7c:fe:22:5e:a4:d4:d2:3a: f8:a0:d4:07:0e:56:05:75:7b:d2:2e:c4:57:04:e2:f4:b2:21: 2e:82:86:bc:23:a2:e3:f6:63:6c:42:e0:f0:79:fa:7b:b4:4c: 3b:f3:0f:e1:86:9a:63:25:6a:8a:b3:b8:50:ac:8b:74:6f:7c: 45:53:4d:4b:ad:bb:9d:2c:30:b7:d5:d2:d8:1e:f8:70:2c:8e: da:e1:fa:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7cXZqo/892tvZZt24nzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMzhiOWE3NjNmNjVjMDI3YWEzZGRhZDg3YzE4OGRhNzhh NGJkOTcwHhcNMjYwMjA5MTgwMDE3WhcNMjYwMjEwMTgwMDE3WjAzMTEwLwYDVQQD EyhkOGE1ZGVhNmMwZTJjNjZiZWUyODgzZDBjOTMwZTUxM2JmNzQzNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2+195SKYkR/hKK7kmRTmPmOEudl L13u6yk01jwB5uu9sIEKpc53pfE6GDcxy2mKiD8hufufmRo7KoOMX+l6Z996ozB/ jXvsbvxNW3HK29F23SFkmO2xt5NERpl0eJsJt4iqcFJCdH50MJxT9LT0D1nKIb/9 GbvakxMgcE0tctrCL5GeregbEzMyX/K6WwIC2XSDN6DFS5rY3pXpOYaTchXQ/Gg/ +/EM0z+x2RpLtEczbXT0fTBRmHLw8whzY2dI1Og8wLfG1fxt2qemLk9goegKP7FT 4ECn3em7ROOkCIZ0E8kV8pjlo3/6tVaw2D6s+tp6FYumXF1PEmyLk9sETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNil3qbA4sZr7iiD0Mkw5RO/dDa5MB8GA1UdIwQY MBaAFLo4uadj9lwCeqPdrYfBiNp4pL2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEt NjBmN2Y4N2M3N2U2LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zZDY3MmQtNDY3NS00NjcxLTgxYzEtNjBmN2Y4N2M3N2U2 LzEvdWppNXAyUDJYQUo2bzkydGg4R0kybmlrdlpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+U40U6X baBvnbYydW0by02MkYu6HA0ZPhi6ZX3MAmSFVsWbLIKyAOyBkKqHFUFugV8wTctw EaJEJFaUg5lbgWqrRV6B73sOwvzi85dJALd/nzPiUo8oXFB9vdJKspGvdc3OLtI3 q2/pNQnKzlhasS/7jy7SVjmRbQeME8VZDDhw8l2t89098nVhxH5PTQxWIRyxZoPS vlKKwLG01pDMyJutYWGxoqlLXW6i03z+Il6k1NI6+KDUBw5WBXV70i7EVwTi9LIh LoKGvCOi4/ZjbELg8Hn6e7RMO/MP4YaaYyVqirO4UKyLdG98RVNNS627nSwwt9XS 2B74cCyO2uH6fg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:19 2026 by rpki-client