This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json) Hash identifier: /i5mU3FA3z//l5q3ALHx6v+bxA33Qe5b0U7gcb1IQ9s= Subject key identifier: 41:D5:AA:A2:6E:52:08:47:8C:EA:0B:5D:5F:10:67:3D:06:31:26:E9 Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6 Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6 Certificate serial: 019C446B89B36C0799153784231B05EC0FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft Manifest number: 0D47 Signing time: Mon 09 Feb 2026 22:00:24 +0000 Manifest this update: Mon 09 Feb 2026 22:00:24 +0000 Manifest next update: Tue 10 Feb 2026 22:00:24 +0000 Files and hashes: 1: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: rLCy+kDgH72yG0WbYmol2ksXQOvtwhb5aNcwEj93xQk=) 2: xthXgiM7QFg5g-QceY1y5f74Rds.roa (hash: ov8Kweo+Ul8Z/hCjsozR/vUEJ009cmFNJtAjb/mVhe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:89:b3:6c:07:99:15:37:84:23:1b:05:ec:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6 Validity Not Before: Feb 9 22:00:24 2026 GMT Not After : Feb 10 22:00:24 2026 GMT Subject: CN=41d5aaa26e5208478cea0b5d5f10673d063126e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:3f:9f:a7:d5:a3:64:10:fc:06:eb:2d:5d: 8d:64:b6:af:52:ad:53:2e:98:08:8d:de:1b:f4:b1: ed:9c:91:23:14:64:33:a5:e0:89:e9:0e:55:cb:01: 49:9d:7f:dc:06:bc:5d:52:4b:a0:b6:00:0a:25:f0: eb:27:77:cc:b0:65:e7:3d:4c:01:34:03:62:36:0f: 81:77:3b:48:16:1b:37:b1:76:4c:03:81:99:c7:3f: 50:84:2e:df:79:2a:4f:e1:37:54:56:e6:04:99:a4: 92:f9:86:d7:45:ab:e6:67:22:92:d2:85:b3:29:f3: 4b:0b:1f:39:78:96:7f:74:ea:d5:16:2a:16:08:88: 89:02:eb:2b:41:37:17:88:14:09:7f:6e:8f:9d:06: 13:b9:99:2d:72:19:8c:a8:1b:3b:d7:22:a6:5a:80: aa:4a:64:58:d9:5c:eb:6b:5d:6a:29:5d:8a:89:dc: c1:41:44:e8:fd:c6:2d:ee:06:61:ce:f8:6e:53:f6: a8:c5:b7:bd:c4:70:85:37:7d:ce:57:ff:2a:d9:29: f3:88:e2:2a:ad:96:0a:b5:4a:42:7f:2e:e1:38:ce: 73:44:a8:dd:1c:88:59:0d:9d:e3:27:5c:8d:0a:66: 5f:c6:6e:88:69:62:bc:d3:cf:21:60:3d:8f:3b:76: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:AA:A2:6E:52:08:47:8C:EA:0B:5D:5F:10:67:3D:06:31:26:E9 X509v3 Authority Key Identifier: keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:16:bf:6d:d0:96:d8:1a:72:98:14:7e:20:38:6c:c8:4c:98: 74:8a:59:5f:86:51:df:b9:3b:78:fe:2c:b3:39:69:68:81:86: f4:4b:f0:a2:59:24:94:1f:8d:97:bf:b2:f6:86:a4:5a:1a:27: b8:42:40:86:2d:cd:25:93:26:22:78:be:c3:1e:61:06:6e:c6: ab:e0:b9:e5:f2:0f:b9:7f:e6:ab:82:0b:b3:d8:91:6f:e9:e7: 93:d7:8c:b8:96:2b:56:70:52:84:fd:39:12:a2:c1:4d:55:0b: 0c:b7:88:52:7a:e6:d7:39:d6:46:cb:56:d6:d6:19:44:90:69: 3a:e7:a0:9f:16:99:1f:11:90:90:b7:8f:e6:be:a6:06:44:a5: 9f:0f:65:c0:6c:0f:db:af:c3:5e:a8:0a:0c:cb:ee:bb:e3:e2: 3e:3a:4a:5c:f4:aa:ee:16:c1:3c:7c:66:d8:6b:1d:75:c3:d4: f5:0f:62:aa:72:28:a8:47:6c:77:e8:a8:4a:0f:e9:9e:70:9d: 2a:e3:c6:5f:7a:c0:7b:92:8e:a6:68:5a:fb:14:83:50:42:84: fc:f4:57:66:a9:10:08:ec:d5:85:4a:a9:f5:70:a8:f4:69:18: 35:76:83:66:52:89:04:12:d2:1a:20:52:3a:c6:8d:16:e5:43: 96:a2:74:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa4mzbAeZFTeEIxsF7A+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Zjc0YTQ3YTZkMWEwYmY0YzIxNmU1ZmFiNGQ5MWZiMTI5 ZGYzZDYwHhcNMjYwMjA5MjIwMDI0WhcNMjYwMjEwMjIwMDI0WjAzMTEwLwYDVQQD Eyg0MWQ1YWFhMjZlNTIwODQ3OGNlYTBiNWQ1ZjEwNjczZDA2MzEyNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTM/n6fVo2QQ/AbrLV2NZLavUq1T LpgIjd4b9LHtnJEjFGQzpeCJ6Q5VywFJnX/cBrxdUkugtgAKJfDrJ3fMsGXnPUwB NANiNg+BdztIFhs3sXZMA4GZxz9QhC7feSpP4TdUVuYEmaSS+YbXRavmZyKS0oWz KfNLCx85eJZ/dOrVFioWCIiJAusrQTcXiBQJf26PnQYTuZktchmMqBs71yKmWoCq SmRY2Vzra11qKV2KidzBQUTo/cYt7gZhzvhuU/aoxbe9xHCFN33OV/8q2SnziOIq rZYKtUpCfy7hOM5zRKjdHIhZDZ3jJ1yNCmZfxm6IaWK8088hYD2PO3aTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHVqqJuUghHjOoLXV8QZz0GMSbpMB8GA1UdIwQY MBaAFLn3Skem0aC/TCFuX6tNkfsSnfPWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2Qt MzBmNjA4YWRlNDhkLzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2QtMzBmNjA4YWRlNDhk LzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBa/bdCW 2BpymBR+IDhsyEyYdIpZX4ZR37k7eP4sszlpaIGG9EvwolkklB+Nl7+y9oakWhon uEJAhi3NJZMmIni+wx5hBm7Gq+C55fIPuX/mq4ILs9iRb+nnk9eMuJYrVnBShP05 EqLBTVULDLeIUnrm1znWRstW1tYZRJBpOuegnxaZHxGQkLeP5r6mBkSlnw9lwGwP 26/DXqgKDMvuu+PiPjpKXPSq7hbBPHxm2GsddcPU9Q9iqnIoqEdsd+ioSg/pnnCd KuPGX3rAe5KOpmha+xSDUEKE/PRXZqkQCOzVhUqp9XCo9GkYNXaDZlKJBBLSGiBS OsaNFuVDlqJ0Zg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:00 2026 by rpki-client