This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json) Hash identifier: qjBUA72MnTnuRFrCXgK1rkN+9nCf0+I+9WsYD9r2AY4= Subject key identifier: A5:C9:FD:F6:54:43:A0:F6:BF:C6:9C:BF:F9:5A:5F:28:8E:F4:91:7F Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8 Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8 Certificate serial: 019C4210101FC0848F4A65A4B82F36E27BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft Manifest number: 16DA Signing time: Mon 09 Feb 2026 11:01:14 +0000 Manifest this update: Mon 09 Feb 2026 11:01:14 +0000 Manifest next update: Tue 10 Feb 2026 11:01:14 +0000 Files and hashes: 1: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: O5aVlMi9zlACuRsGR3eGG7nkg9pWmkvT+IKGeAKrUgQ=) 2: uOsbUN7cy0tE4z7UdBm3d5V39gI.roa (hash: 4lZyd6hRUzTbzA108sOMla+DbCbzWNvltg5Nlq/cyFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:10:1f:c0:84:8f:4a:65:a4:b8:2f:36:e2:7b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8 Validity Not Before: Feb 9 11:01:14 2026 GMT Not After : Feb 10 11:01:14 2026 GMT Subject: CN=a5c9fdf65443a0f6bfc69cbff95a5f288ef4917f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:22:53:3d:56:68:b1:31:2f:a3:f2:8f:11: 2d:73:76:86:ef:78:05:11:6d:0f:7a:05:01:b4:8c: 4a:c2:62:f3:7f:e1:32:a5:ad:fe:97:c3:d2:f0:1e: b5:12:80:bf:95:37:dd:e9:3a:be:22:bc:95:da:0f: 0d:bd:8f:f1:b5:30:48:66:ba:18:92:00:c3:b5:28: e9:7f:46:81:b2:12:b0:19:f2:e5:aa:e7:93:14:21: 27:b3:36:cc:d0:fd:f6:ad:fa:f2:7b:4b:9d:3b:eb: 36:1b:84:19:e3:db:4b:9e:c1:1a:68:6d:50:53:d2: 54:37:0f:cf:45:00:47:92:3e:c7:85:bc:20:3b:7a: 73:37:a2:a3:0d:a1:ea:e2:00:87:32:6d:12:26:6f: 6d:19:00:03:3b:88:77:f6:6f:b1:4d:eb:7c:fe:a5: aa:a8:a2:9c:27:ef:2f:ed:c7:96:32:d6:42:c1:3d: c0:ec:97:9b:90:b2:88:52:cd:75:17:01:37:bd:b7: 5e:fc:a6:8f:73:38:5d:e3:27:74:d9:2d:fb:77:e4: 25:99:3b:4e:8f:f3:12:91:1f:6f:19:ab:ed:7b:14: e5:79:33:0c:45:ea:30:43:63:43:1a:3f:6d:8b:ab: 1d:32:78:09:c6:7c:1b:d6:71:2a:a9:7c:0d:1e:ee: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:FD:F6:54:43:A0:F6:BF:C6:9C:BF:F9:5A:5F:28:8E:F4:91:7F X509v3 Authority Key Identifier: keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a7:b5:d5:bd:54:a3:58:c9:36:43:36:93:e4:30:cc:1b:33: ed:59:1f:f3:ff:18:49:57:f8:68:10:4c:a6:f6:04:48:9e:94: 70:96:ea:29:2d:5e:64:8c:89:c8:46:90:89:ff:6d:e8:95:21: 6c:b3:80:a1:4f:6f:fa:be:e5:17:16:7d:e5:38:57:57:e8:07: 0d:71:fc:be:17:cd:0f:d3:a1:d1:f2:91:ed:91:42:e2:46:66: f6:ed:e1:92:5a:0f:dd:a1:bf:fe:a1:8c:7b:af:ce:41:5c:13: 89:f1:a7:86:15:7c:56:f0:5a:96:1d:ea:fc:bd:ec:5a:1a:89: c7:43:89:67:e2:03:fc:1f:d6:7a:5c:4f:9d:f8:d4:ee:1c:96: b5:b5:f9:38:2b:ca:a0:0a:89:d7:46:52:cf:1f:48:72:a5:ad: ff:63:cd:e6:47:35:02:ed:5b:6e:fb:86:d6:10:ef:0b:4e:6c: 1d:ae:5f:d8:2e:e7:b5:4b:2f:5b:ee:8e:1d:68:39:8d:41:d8: 36:76:14:74:3e:78:7c:4a:37:39:40:56:cf:12:6a:a0:16:ec: cb:95:15:be:1e:67:6b:8d:d9:d9:27:7a:af:f8:de:10:9b:be: f7:6f:f2:06:93:2f:b1:d6:bd:29:11:c6:37:4f:b6:75:d0:05: e7:11:84:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBAfwISPSmWkuC824nvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNmM2MThkMTViYjcxMmUzZWJhZTA2YThiMTgxNjk3YTVl NDA3YjgwHhcNMjYwMjA5MTEwMTE0WhcNMjYwMjEwMTEwMTE0WjAzMTEwLwYDVQQD EyhhNWM5ZmRmNjU0NDNhMGY2YmZjNjljYmZmOTVhNWYyODhlZjQ5MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgiUz1WaLExL6PyjxEtc3aG73gF EW0PegUBtIxKwmLzf+Eypa3+l8PS8B61EoC/lTfd6Tq+IryV2g8NvY/xtTBIZroY kgDDtSjpf0aBshKwGfLlqueTFCEnszbM0P32rfrye0udO+s2G4QZ49tLnsEaaG1Q U9JUNw/PRQBHkj7HhbwgO3pzN6KjDaHq4gCHMm0SJm9tGQADO4h39m+xTet8/qWq qKKcJ+8v7ceWMtZCwT3A7JebkLKIUs11FwE3vbde/KaPczhd4yd02S37d+QlmTtO j/MSkR9vGavtexTleTMMReowQ2NDGj9ti6sdMngJxnwb1nEqqXwNHu683wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXJ/fZUQ6D2v8acv/laXyiO9JF/MB8GA1UdIwQY MBaAFFJsYY0Vu3EuPrrgaosYFpel5Ae4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjIt OTI3M2ZjMDE2ZjdkLzEvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjItOTI3M2ZjMDE2Zjdk LzEvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6e11b1U o1jJNkM2k+QwzBsz7Vkf8/8YSVf4aBBMpvYESJ6UcJbqKS1eZIyJyEaQif9t6JUh bLOAoU9v+r7lFxZ95ThXV+gHDXH8vhfND9Oh0fKR7ZFC4kZm9u3hkloP3aG//qGM e6/OQVwTifGnhhV8VvBalh3q/L3sWhqJx0OJZ+ID/B/WelxPnfjU7hyWtbX5OCvK oAqJ10ZSzx9IcqWt/2PN5kc1Au1bbvuG1hDvC05sHa5f2C7ntUsvW+6OHWg5jUHY NnYUdD54fEo3OUBWzxJqoBbsy5UVvh5na43Z2Sd6r/jeEJu+92/yBpMvsda9KRHG N0+2ddAF5xGEuw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:43 2026 by rpki-client