This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json) Hash identifier: XhjvlBiE4V68PqlQsauy72X8bgcZmbiiBwuhX1+qne0= Subject key identifier: D4:7E:B4:82:F5:43:56:F2:27:76:24:AC:78:A3:55:DF:F9:25:AC:56 Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47 Certificate serial: 019C41A15E3BF7FF8397E172CBA37ECD9B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft Manifest number: 1511 Signing time: Mon 09 Feb 2026 09:00:20 +0000 Manifest this update: Mon 09 Feb 2026 09:00:20 +0000 Manifest next update: Tue 10 Feb 2026 09:00:20 +0000 Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: tIb6buAoDTqf6o7cTscpQTfDOSnyECJfdDKuyeS+Hd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5e:3b:f7:ff:83:97:e1:72:cb:a3:7e:cd:9b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47 Validity Not Before: Feb 9 09:00:20 2026 GMT Not After : Feb 10 09:00:20 2026 GMT Subject: CN=d47eb482f54356f2277624ac78a355dff925ac56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:b1:a4:7b:10:aa:5d:b4:a1:30:1d:d1:2c: 1c:50:9b:de:cf:fc:ec:78:4d:64:19:f9:c9:24:77: ec:c4:86:c1:45:c9:cc:d7:9f:ae:d4:e5:72:fd:30: b9:67:fb:73:47:a7:db:71:38:e3:17:99:47:5b:7a: 32:af:6d:1a:17:f1:b8:f3:f8:e8:b7:73:65:b6:de: 2e:85:d7:30:f3:9c:25:b9:1d:fa:b7:09:a1:eb:b1: 64:37:88:c8:cd:22:3e:5d:a3:4a:b5:e7:bf:25:14: ac:2b:fd:1c:f3:e5:e3:33:c6:e8:17:36:5c:42:0f: cf:56:4e:e0:8f:2c:2e:70:7c:b6:5b:e8:a7:ab:e5: 02:b5:b1:dc:30:92:dc:5c:b3:48:98:14:be:64:ed: 1f:59:26:a6:2c:37:65:0d:c5:78:49:62:02:39:83: 8d:eb:08:aa:82:c0:fe:ae:27:d0:aa:05:55:29:92: 00:e3:97:f7:dc:53:ab:58:b7:30:fa:c5:38:45:3e: 07:35:3c:4c:b4:d3:67:f4:89:2d:86:84:5c:78:85: 7a:12:f5:b7:63:04:a6:08:17:99:98:f7:b5:f4:05: d2:9e:48:f7:6a:8e:8c:7b:49:e5:12:69:b0:b4:3f: 21:8a:b8:df:d4:57:78:91:b9:3a:a8:95:7f:3e:34: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:B4:82:F5:43:56:F2:27:76:24:AC:78:A3:55:DF:F9:25:AC:56 X509v3 Authority Key Identifier: keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:77:9e:2f:dc:a3:cc:35:5e:18:50:ba:f9:04:82:0f:aa:6a: 38:0f:0b:06:c9:a8:aa:34:d9:31:e3:b3:b0:fd:25:53:80:bd: 54:4f:fe:06:a3:ae:17:f8:b7:4c:03:e0:fe:e8:bc:f6:bd:c2: 28:90:3f:10:71:52:3e:89:51:58:db:d5:28:10:04:c3:2b:63: 6a:ec:01:0a:ca:3b:6a:02:c4:59:db:17:54:b0:27:a8:fe:26: b2:93:28:36:f0:65:2e:f5:89:d3:62:db:f3:6e:cf:8c:8d:c6: f0:0d:49:d2:ad:32:9b:5d:bc:9d:c2:52:33:5a:fe:ec:71:ea: c4:d1:99:71:f2:1e:a4:08:ed:c2:47:4a:b6:a5:52:a4:e5:42: 33:d7:a7:51:73:2b:c0:44:b0:24:c8:dd:70:f8:15:1e:45:7d: d2:d5:06:8c:fe:20:89:e0:df:38:04:32:d5:04:2c:16:54:4c: 48:55:2c:80:c3:16:86:cb:e3:88:18:0b:ab:1a:c5:3a:58:ae: c0:34:06:a5:9c:99:24:1f:ed:01:70:6d:13:ab:19:14:26:e5: 36:1a:7d:fa:77:df:80:96:56:01:30:0e:01:6b:7d:d9:10:e4: e8:9f:d3:53:76:38:d1:cb:91:db:27:dd:f0:98:1d:c1:02:8f: 76:24:a9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoV479/+Dl+Fyy6N+zZtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MDkwN2NlZTRmYWM1MGYzNzUzNjIyYWQyMWE5ODlhZTc3 NDFjNDcwHhcNMjYwMjA5MDkwMDIwWhcNMjYwMjEwMDkwMDIwWjAzMTEwLwYDVQQD EyhkNDdlYjQ4MmY1NDM1NmYyMjc3NjI0YWM3OGEzNTVkZmY5MjVhYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iixpHsQql20oTAd0SwcUJvez/zs eE1kGfnJJHfsxIbBRcnM15+u1OVy/TC5Z/tzR6fbcTjjF5lHW3oyr20aF/G48/jo t3Nltt4uhdcw85wluR36twmh67FkN4jIzSI+XaNKtee/JRSsK/0c8+XjM8boFzZc Qg/PVk7gjywucHy2W+inq+UCtbHcMJLcXLNImBS+ZO0fWSamLDdlDcV4SWICOYON 6wiqgsD+rifQqgVVKZIA45f33FOrWLcw+sU4RT4HNTxMtNNn9IkthoRceIV6EvW3 YwSmCBeZmPe19AXSnkj3ao6Me0nlEmmwtD8hirjf1Fd4kbk6qJV/PjRLRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR+tIL1Q1byJ3YkrHijVd/5JaxWMB8GA1UdIwQY MBaAFLkJB87k+sUPN1NiKtIamJrndBxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQt NTk5NmNhZTlkMTE1LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQtNTk5NmNhZTlkMTE1 LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALneeL9yj zDVeGFC6+QSCD6pqOA8LBsmoqjTZMeOzsP0lU4C9VE/+BqOuF/i3TAPg/ui89r3C KJA/EHFSPolRWNvVKBAEwytjauwBCso7agLEWdsXVLAnqP4mspMoNvBlLvWJ02Lb 827PjI3G8A1J0q0ym128ncJSM1r+7HHqxNGZcfIepAjtwkdKtqVSpOVCM9enUXMr wESwJMjdcPgVHkV90tUGjP4gieDfOAQy1QQsFlRMSFUsgMMWhsvjiBgLqxrFOliu wDQGpZyZJB/tAXBtE6sZFCblNhp9+nffgJZWATAOAWt92RDk6J/TU3Y40cuR2yfd 8JgdwQKPdiSp1w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:56 2026 by rpki-client