This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json) Hash identifier: V2wo354aR/mulSCLuyJbsNzFmsI7VrfFXTntjHw1N4A= Subject key identifier: FE:85:FB:55:9A:C5:8C:73:7E:F3:DA:C5:A7:E8:D6:F0:61:16:75:54 Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Certificate serial: 019C41A18C494686DA28DADC5468F71D50D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft Manifest number: 09A1 Signing time: Mon 09 Feb 2026 09:00:32 +0000 Manifest this update: Mon 09 Feb 2026 09:00:32 +0000 Manifest next update: Tue 10 Feb 2026 09:00:32 +0000 Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: ARseLBplx2LzEEX2bmf4j3pS+GhE5g5Yfqx2cU+AUCk=) 2: XhQkb1zdm1y7HlbvFhOvdL8mB-Y.roa (hash: 6Lf0K5Aehp8CxOSNwmP8Hd5JPrDFUIPDjPGfacsaeDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8c:49:46:86:da:28:da:dc:54:68:f7:1d:50:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3 Validity Not Before: Feb 9 09:00:32 2026 GMT Not After : Feb 10 09:00:32 2026 GMT Subject: CN=fe85fb559ac58c737ef3dac5a7e8d6f061167554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:9f:c4:8b:be:a8:8d:eb:46:de:bd:f3:bd: b9:7f:bc:2e:a7:ed:63:f4:d9:f2:35:c0:9b:c1:3c: f7:a7:68:38:e0:af:41:1e:a6:e0:5f:b9:66:17:37: 62:83:10:58:cf:ff:01:d0:96:d8:4e:14:3b:2b:95: f0:9e:5d:e7:2f:29:48:63:07:67:f7:3f:93:c8:d8: 2f:57:3f:9c:5f:6d:0d:79:9e:79:be:ba:05:56:63: 32:52:e6:49:b1:6e:f7:7d:02:da:f3:b3:f9:e7:24: ba:bf:9c:ce:4f:2e:27:80:88:fd:e4:53:c2:bf:34: fb:d5:c6:dc:eb:bb:38:f7:f6:d6:85:7c:79:64:d6: c9:3b:e9:59:37:f1:a2:0a:87:2d:aa:a6:0f:d1:c7: e8:8b:ed:ad:ac:5f:55:6a:a9:d1:dd:ce:3e:00:bd: e6:0b:c1:14:03:e4:3c:3a:0d:ce:f0:2a:38:ed:9c: e0:55:7e:11:dc:74:24:03:e6:fa:cd:ff:b6:2f:08: e2:1b:b5:4e:86:8c:95:29:bb:4b:f9:9f:40:a8:7c: 49:e9:1a:93:c9:f6:58:0e:19:1e:36:03:83:e3:fc: 74:56:40:0d:51:f0:b2:d9:63:aa:53:b5:12:ae:16: 16:d3:88:49:d8:e2:80:8e:55:7a:71:41:15:97:7b: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:85:FB:55:9A:C5:8C:73:7E:F3:DA:C5:A7:E8:D6:F0:61:16:75:54 X509v3 Authority Key Identifier: keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a9:08:63:3c:88:75:49:44:f4:41:b2:db:19:37:93:56:a5: d4:d0:ab:04:1c:c3:95:f1:c6:a3:6b:39:bb:32:12:46:52:3b: 0d:5b:9e:b8:22:24:fc:ea:3e:26:9f:07:19:bf:0e:04:6a:ae: 74:8a:16:5f:83:f8:d9:df:11:a7:0e:94:12:f6:ca:31:9e:68: 68:7e:4e:01:ae:dd:49:8a:b9:28:52:00:f9:fa:24:04:33:6d: 4f:97:3b:a4:c7:96:58:0d:d2:cf:9b:f7:6d:78:de:60:17:7e: 62:32:6d:8a:76:da:d3:a6:fe:ff:26:8f:84:7c:01:6f:2d:66: 7c:ae:d6:65:27:89:bc:d2:45:3b:25:d0:c0:66:9a:06:8b:9c: 7b:48:9a:9e:b4:a9:15:ce:bd:7a:69:39:36:0a:dc:d5:c1:6a: 2f:69:e3:32:10:a1:b6:f9:f0:6a:62:35:3f:ea:0f:7d:d5:da: 55:62:ad:95:a0:52:f9:b5:1a:34:6f:cb:1d:e5:0c:3a:02:5f: 2d:3b:a1:2c:f5:e3:8a:3a:88:06:7d:99:8f:6a:8e:02:c9:4f: 53:f2:41:b6:72:35:66:2d:e8:ca:c6:92:2e:01:9a:7d:f7:59: 80:fc:e1:31:21:a2:36:35:85:0b:c2:22:34:d7:69:4b:f8:3f: 4c:43:5c:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYxJRobaKNrcVGj3HVDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm ODI0YjMwHhcNMjYwMjA5MDkwMDMyWhcNMjYwMjEwMDkwMDMyWjAzMTEwLwYDVQQD EyhmZTg1ZmI1NTlhYzU4YzczN2VmM2RhYzVhN2U4ZDZmMDYxMTY3NTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJGfxIu+qI3rRt698725f7wup+1j 9NnyNcCbwTz3p2g44K9BHqbgX7lmFzdigxBYz/8B0JbYThQ7K5Xwnl3nLylIYwdn 9z+TyNgvVz+cX20NeZ55vroFVmMyUuZJsW73fQLa87P55yS6v5zOTy4ngIj95FPC vzT71cbc67s49/bWhXx5ZNbJO+lZN/GiCoctqqYP0cfoi+2trF9VaqnR3c4+AL3m C8EUA+Q8Og3O8Co47ZzgVX4R3HQkA+b6zf+2LwjiG7VOhoyVKbtL+Z9AqHxJ6RqT yfZYDhkeNgOD4/x0VkANUfCy2WOqU7USrhYW04hJ2OKAjlV6cUEVl3sJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6F+1WaxYxzfvPaxafo1vBhFnVUMB8GA1UdIwQY MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6kIYzyI dUlE9EGy2xk3k1al1NCrBBzDlfHGo2s5uzISRlI7DVueuCIk/Oo+Jp8HGb8OBGqu dIoWX4P42d8Rpw6UEvbKMZ5oaH5OAa7dSYq5KFIA+fokBDNtT5c7pMeWWA3Sz5v3 bXjeYBd+YjJtinba06b+/yaPhHwBby1mfK7WZSeJvNJFOyXQwGaaBouce0ianrSp Fc69emk5Ngrc1cFqL2njMhChtvnwamI1P+oPfdXaVWKtlaBS+bUaNG/LHeUMOgJf LTuhLPXjijqIBn2Zj2qOAslPU/JBtnI1Zi3oysaSLgGaffdZgPzhMSGiNjWFC8Ii NNdpS/g/TENcJA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:30 2026 by rpki-client