This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft File: uu2YpEwWfcvekny7jgRPz6Oh2GI.mft (raw, json) Hash identifier: bnRCbPN7bSMZuwj/PZTD6LIb/pYjdjCFy5JqrhwCQlA= Subject key identifier: DE:C9:01:29:59:F4:37:6E:BE:4B:E5:AB:B7:50:56:2F:E0:D0:4E:79 Authority key identifier: BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 Certificate issuer: /CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Certificate serial: 019C420FCB4B6C08DC3DF41C7302625CF65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft Manifest number: F8 Signing time: Mon 09 Feb 2026 11:00:56 +0000 Manifest this update: Mon 09 Feb 2026 11:00:56 +0000 Manifest next update: Tue 10 Feb 2026 11:00:56 +0000 Files and hashes: 1: RXBYuM_vbvXcudnuqxXF-aAZIBI.roa (hash: ygatlUjuSPju9x/rM5pSSXGzshHRduyfzx3H900RDBY=) 2: uu2YpEwWfcvekny7jgRPz6Oh2GI.crl (hash: KwJQYJ6UjecpTEzbv6kU5er8ygIPn5sT5h0B2Z/+L2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:cb:4b:6c:08:dc:3d:f4:1c:73:02:62:5c:f6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862 Validity Not Before: Feb 9 11:00:56 2026 GMT Not After : Feb 10 11:00:56 2026 GMT Subject: CN=dec9012959f4376ebe4be5abb750562fe0d04e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7a:f8:34:b1:2e:b2:b1:b7:d0:e6:f3:45:fc: d9:c9:6a:ba:56:cd:f2:08:d6:f1:f1:15:6f:95:bf: 55:71:8d:11:38:65:98:1d:1d:fc:f8:14:1f:28:e4: 2f:da:0f:3d:cf:7a:28:14:43:65:2d:0e:43:1d:d8: bf:37:63:6a:fd:b8:68:af:c5:2b:e6:21:ce:ba:77: 2f:14:2c:ea:5f:86:ea:6c:24:74:31:46:60:11:2e: 6a:fa:25:98:59:ce:0d:95:1d:f2:31:07:27:6d:30: d8:a5:e5:f2:ba:ba:03:61:38:44:db:e4:c6:3f:e5: 35:c6:ab:b5:3f:64:cb:48:70:b4:9d:91:85:db:d8: bd:95:de:35:25:0e:d1:e9:64:ce:d5:63:ef:21:b8: ec:ab:42:ed:01:56:d7:11:24:5d:52:66:ff:f3:8c: ba:e3:bd:05:3f:fc:f2:09:4e:df:24:c9:16:38:0c: 53:9d:ff:a0:7a:fa:5a:ee:27:5e:2b:9d:21:e5:1b: 79:cf:96:85:69:28:f6:c7:23:42:72:81:38:9c:1b: e3:b9:e4:31:35:d1:21:8f:f6:65:07:3d:01:d0:7f: 27:51:27:df:58:a1:3a:fe:0f:c4:c6:b1:1c:ff:c0: 41:a6:b6:49:37:5d:ea:1a:05:24:3c:f2:ea:dc:bc: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C9:01:29:59:F4:37:6E:BE:4B:E5:AB:B7:50:56:2F:E0:D0:4E:79 X509v3 Authority Key Identifier: keyid:BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:cd:ff:aa:09:24:a8:50:b2:60:cb:11:9c:37:26:cb:44: e4:22:26:fd:b4:49:aa:41:42:08:87:fc:c8:ec:24:90:59:65: f0:76:d5:b3:bb:92:65:ea:f0:b3:d8:f3:3a:6f:40:55:79:95: 4a:97:a7:e1:82:64:32:af:e7:30:1f:20:8f:14:11:b6:2c:ad: a5:5f:62:6f:c9:1d:d9:8b:ab:1b:56:1f:ae:b7:c3:42:f1:56: 10:53:79:76:47:5e:eb:b2:f3:0d:3e:22:9f:77:f6:9e:15:d8: 27:9e:e3:6b:c5:99:8d:30:a3:8b:33:43:3a:25:db:a4:dc:06: fd:f9:1b:29:d9:57:c0:45:9b:6a:cc:b4:08:12:83:a9:49:1b: 67:8f:26:b7:19:a0:5d:f9:c4:68:51:63:e5:57:a6:01:55:db: 37:ac:c3:08:a2:3b:33:5f:c8:47:5f:42:a9:0d:5c:23:b5:26: 89:fa:77:cb:f6:bc:5b:f8:1f:a6:ed:d0:c1:b9:ca:d4:47:54: 57:10:c5:b5:a6:39:11:89:2f:92:c9:34:d9:9c:b4:9e:c7:9c: a3:06:fd:4b:f2:da:57:07:fc:3f:9e:fc:32:8b:83:23:6e:35: 58:c9:d1:9d:bb:f3:14:40:83:d8:ba:4f:18:bb:cb:5f:84:b0: 12:a8:a4:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8tLbAjcPfQccwJiXPZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZWQ5OGE0NGMxNjdkY2JkZTkyN2NiYjhlMDQ0ZmNmYTNh MWQ4NjIwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD EyhkZWM5MDEyOTU5ZjQzNzZlYmU0YmU1YWJiNzUwNTYyZmUwZDA0ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xr4NLEusrG30ObzRfzZyWq6Vs3y CNbx8RVvlb9VcY0ROGWYHR38+BQfKOQv2g89z3ooFENlLQ5DHdi/N2Nq/bhor8Ur 5iHOuncvFCzqX4bqbCR0MUZgES5q+iWYWc4NlR3yMQcnbTDYpeXyuroDYThE2+TG P+U1xqu1P2TLSHC0nZGF29i9ld41JQ7R6WTO1WPvIbjsq0LtAVbXESRdUmb/84y6 470FP/zyCU7fJMkWOAxTnf+gevpa7ideK50h5Rt5z5aFaSj2xyNCcoE4nBvjueQx NdEhj/ZlBz0B0H8nUSffWKE6/g/ExrEc/8BBprZJN13qGgUkPPLq3LxkIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7JASlZ9Dduvkvlq7dQVi/g0E55MB8GA1UdIwQY MBaAFLrtmKRMFn3L3pJ8u44ET8+jodhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGIt NmMzNTk1ZmI3MjEyLzEvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9mNDMxZWEtNWQzMC00MzEyLTlmOGItNmMzNTk1ZmI3MjEy LzEvdXUyWXBFd1dmY3Zla255N2pnUlB6Nk9oMkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKXN/6oJ JKhQsmDLEZw3JstE5CIm/bRJqkFCCIf8yOwkkFll8HbVs7uSZerws9jzOm9AVXmV Spen4YJkMq/nMB8gjxQRtiytpV9ib8kd2YurG1YfrrfDQvFWEFN5dkde67LzDT4i n3f2nhXYJ57ja8WZjTCjizNDOiXbpNwG/fkbKdlXwEWbasy0CBKDqUkbZ48mtxmg XfnEaFFj5VemAVXbN6zDCKI7M1/IR19CqQ1cI7Umifp3y/a8W/gfpu3QwbnK1EdU VxDFtaY5EYkvksk02Zy0nsecowb9S/LaVwf8P578MouDI241WMnRnbvzFECD2LpP GLvLX4SwEqikYA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:50 2026 by rpki-client