This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json) Hash identifier: lIV4T4i40w2azlSQnktrmHFEqyyxRQTAIYf0WAqEnmo= Subject key identifier: CA:B7:45:6D:40:85:86:08:DE:C5:BF:A8:3B:BA:D7:DE:93:75:7B:AF Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Certificate serial: 019C41D895F719B05FAE2E68D16F414BAC7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft Manifest number: 10A8 Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: GOvCTFz1l6LxbmgtCpNyf/N03eDeJQFcGNyK3u837aM=) 2: v-ipIT8yr4AG7JC_OJEOS1gcpDo.roa (hash: GHUlrgQfUHa7TIwzSErf9EB2ikM0OJVY/nwHMqCmoVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:95:f7:19:b0:5f:ae:2e:68:d1:6f:41:4b:ac:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=cab7456d40858608dec5bfa83bbad7de93757baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1e:0f:40:ed:f9:b4:32:a0:b9:9a:2e:c4:ae: 0f:1e:02:e6:c8:cc:f1:71:83:ee:eb:1e:ac:63:df: 32:eb:ac:52:84:58:90:ee:da:64:55:56:e7:f3:15: 26:bd:6f:2d:e2:d3:8e:be:b0:1e:a3:99:4f:e3:d4: 5c:52:74:fa:53:fa:b7:da:09:01:f3:5f:c4:82:d2: 74:66:c7:a5:1f:e8:ed:0e:9b:7b:bd:75:d1:e6:19: 0f:36:1a:c7:82:12:5c:0f:32:eb:0c:ef:fb:c7:ea: 89:dc:e3:40:53:86:45:21:83:4a:cc:c4:fd:f1:f9: 8c:f4:92:27:2a:69:d1:c9:0b:d6:68:14:64:e2:83: fa:6b:01:e8:cb:05:a7:27:f3:10:a8:5b:ab:0a:97: 36:e6:96:bd:b1:12:12:f1:14:33:97:78:eb:42:d7: 69:04:7c:f0:a4:6d:9c:4b:05:0f:39:1c:66:15:45: af:5d:10:d9:80:50:63:02:f7:20:63:45:94:45:68: 6a:39:48:57:1b:bd:05:1c:f5:c1:e8:76:67:fc:b7: e5:85:d7:58:02:df:2d:e4:0e:f7:b9:19:70:bd:a0: 2e:5e:3d:af:74:5b:5b:99:5a:35:af:79:25:2a:69: f8:53:fa:b4:0b:4e:f9:22:02:95:17:9a:af:e6:fc: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:45:6D:40:85:86:08:DE:C5:BF:A8:3B:BA:D7:DE:93:75:7B:AF X509v3 Authority Key Identifier: keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:25:df:90:01:2a:fd:39:83:c6:7d:f0:b3:98:03:ad:0a:43: 79:c7:10:88:da:9f:bf:fe:3b:2d:f9:49:25:38:c2:40:39:28: 79:f6:e1:37:7e:ef:ba:1c:5e:ac:22:2a:0a:30:5e:17:f3:56: fe:fa:f7:fa:e6:43:50:f5:10:d1:36:23:85:8f:03:57:bd:52: fe:4f:14:24:55:a5:32:e8:c3:0c:fe:f1:a6:25:d2:8a:9d:a6: 4c:26:fb:c4:10:a7:c3:8a:54:19:1f:42:9d:42:17:63:8e:2b: 77:95:7f:68:7a:7e:c1:20:b7:70:a5:15:b9:69:6c:dc:1b:8f: 0f:ab:ba:6f:52:5f:01:89:b8:b7:2d:0e:83:23:23:60:ce:81: 25:f6:72:e5:21:bf:da:74:9d:34:03:99:09:97:fb:a3:0b:33: 78:15:57:00:50:e7:42:ab:47:d7:6b:10:a5:6b:b1:de:30:94: 90:f2:6f:f5:b7:2f:34:7d:bb:ed:e9:c6:58:5f:21:f7:22:77: 8b:a4:fe:fe:57:9a:db:83:8a:01:35:13:c2:91:f8:7b:19:56: 2c:e9:37:8e:47:d8:a3:b0:4a:a9:1c:f5:2a:16:54:57:4d:2e: bc:c9:2f:31:97:9a:c1:04:21:22:0b:5c:23:0d:fd:93:1b:15: a3:72:6b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JX3GbBfri5o0W9BS6x9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw ODMwZTUwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD EyhjYWI3NDU2ZDQwODU4NjA4ZGVjNWJmYTgzYmJhZDdkZTkzNzU3YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h4PQO35tDKguZouxK4PHgLmyMzx cYPu6x6sY98y66xShFiQ7tpkVVbn8xUmvW8t4tOOvrAeo5lP49RcUnT6U/q32gkB 81/EgtJ0ZselH+jtDpt7vXXR5hkPNhrHghJcDzLrDO/7x+qJ3ONAU4ZFIYNKzMT9 8fmM9JInKmnRyQvWaBRk4oP6awHoywWnJ/MQqFurCpc25pa9sRIS8RQzl3jrQtdp BHzwpG2cSwUPORxmFUWvXRDZgFBjAvcgY0WURWhqOUhXG70FHPXB6HZn/LflhddY At8t5A73uRlwvaAuXj2vdFtbmVo1r3klKmn4U/q0C075IgKVF5qv5vwF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq3RW1AhYYI3sW/qDu6196TdXuvMB8GA1UdIwQY MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2 LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiXfkAEq /TmDxn3ws5gDrQpDeccQiNqfv/47LflJJTjCQDkoefbhN37vuhxerCIqCjBeF/NW /vr3+uZDUPUQ0TYjhY8DV71S/k8UJFWlMujDDP7xpiXSip2mTCb7xBCnw4pUGR9C nUIXY44rd5V/aHp+wSC3cKUVuWls3BuPD6u6b1JfAYm4ty0OgyMjYM6BJfZy5SG/ 2nSdNAOZCZf7owszeBVXAFDnQqtH12sQpWux3jCUkPJv9bcvNH277enGWF8h9yJ3 i6T+/lea24OKATUTwpH4exlWLOk3jkfYo7BKqRz1KhZUV00uvMkvMZeawQQhIgtc Iw39kxsVo3JrEw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:09 2026 by rpki-client