This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft File: 1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json) Hash identifier: rkC8+o/8zDbIbpeyVIuGuHBAbmxqGO9o2ZD5uxwyClg= Subject key identifier: 63:5D:FB:DE:54:6F:2B:66:F0:60:1D:F9:00:A2:C2:04:B8:5D:9B:61 Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C Certificate issuer: /CN=f943daceb1242ff7378c8f77b940dc50cd37422c Certificate serial: 019C42463134ED3FA5AE67D759CFD60616DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft Manifest number: 48 Signing time: Mon 09 Feb 2026 12:00:22 +0000 Manifest this update: Mon 09 Feb 2026 12:00:22 +0000 Manifest next update: Tue 10 Feb 2026 12:00:22 +0000 Files and hashes: 1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: Gt7BYd96Nw79Eaa6nf5IM5nSEycWkTDqcCo8MfaqoiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:31:34:ed:3f:a5:ae:67:d7:59:cf:d6:06:16:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c Validity Not Before: Feb 9 12:00:22 2026 GMT Not After : Feb 10 12:00:22 2026 GMT Subject: CN=635dfbde546f2b66f0601df900a2c204b85d9b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:80:6f:4b:b6:d5:60:c2:73:db:7a:49:94: bf:9b:0a:68:91:37:65:0b:e4:28:1c:91:32:c2:ad: 0a:25:41:e6:74:eb:b4:1e:ca:1a:84:ad:c6:30:c9: 4c:a5:7c:02:fe:fa:b2:cc:fe:c8:8f:68:7d:6b:93: 0b:85:75:47:4d:87:1b:74:b6:7f:9e:63:02:a0:10: 59:26:df:bb:73:2f:8c:3f:99:25:60:2e:73:df:57: ca:22:f0:2e:71:e4:f1:6f:52:43:6a:51:e6:cd:a8: f3:2f:ec:57:ac:fe:70:5f:f5:60:7c:79:91:2a:b1: 9b:c9:98:9c:ba:85:68:2e:9e:e3:10:0c:31:bf:b1: 4e:23:26:ec:5b:2c:6f:c4:b4:0a:cb:8e:ef:1d:75: f0:4f:b4:5e:10:c0:7f:ec:9b:dd:e6:4f:e9:f0:72: 90:3d:44:d4:dc:8a:91:4f:5b:ab:92:5a:b5:62:4d: 80:68:22:96:b8:b4:0a:ea:4f:81:4d:04:39:9a:aa: 11:d7:42:36:ae:d8:00:5c:b6:29:ad:a6:2d:26:cf: 6b:66:84:e3:da:2c:57:be:ee:fa:af:60:0d:15:08: 63:1d:9f:c6:42:6a:9d:64:f1:9b:00:6c:7a:72:44: ed:5e:03:2e:2f:68:ed:32:8b:83:93:da:53:ff:52: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:FB:DE:54:6F:2B:66:F0:60:1D:F9:00:A2:C2:04:B8:5D:9B:61 X509v3 Authority Key Identifier: keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8a:d2:76:fe:40:24:66:60:fe:ac:15:fb:f6:2b:e8:b0:53: 39:ce:69:ab:bd:e8:c3:86:a6:92:b8:c3:dd:33:5a:06:55:d1: 70:93:74:aa:76:19:52:0f:d6:c7:0d:38:ad:03:af:f5:39:99: 82:da:ef:ce:26:92:2d:68:e7:69:a5:1e:06:aa:93:e0:67:48: 98:e8:6c:5f:c2:79:25:8a:cc:01:69:7e:08:3a:c6:25:ec:e7: 53:5c:cb:83:c3:8b:ab:22:82:c1:1b:62:78:1a:74:93:d7:b4: ba:88:ef:5e:16:61:f7:e9:df:fb:41:83:84:79:5f:44:45:f2: 9a:9e:60:9b:c3:69:82:09:dc:fa:a5:1d:43:f3:c3:20:1d:fe: ea:6f:76:a8:4a:4f:f6:f4:7f:0b:74:76:7d:be:03:50:26:b5: 6b:da:8d:d9:1b:d2:e4:bd:93:9a:a8:f3:80:b2:cf:aa:38:83: d5:a6:81:b6:99:89:96:5b:7a:f7:3d:d5:5c:c8:2e:f7:9a:06: b3:33:46:7d:31:b9:d1:25:2a:a7:a6:7b:e8:22:c5:2c:70:23: f9:42:0d:04:55:f4:61:42:97:93:80:d1:78:c8:6a:78:98:c7: d9:87:43:98:a2:c3:de:99:b5:1f:c4:28:5f:16:90:49:e3:96: a8:fb:a3:74 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCRjE07T+lrmfXWc/WBhbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NDNkYWNlYjEyNDJmZjczNzhjOGY3N2I5NDBkYzUwY2Qz NzQyMmMwHhcNMjYwMjA5MTIwMDIyWhcNMjYwMjEwMTIwMDIyWjAzMTEwLwYDVQQD Eyg2MzVkZmJkZTU0NmYyYjY2ZjA2MDFkZjkwMGEyYzIwNGI4NWQ5YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj6Ab0u21WDCc9t6SZS/mwpokTdl C+QoHJEywq0KJUHmdOu0HsoahK3GMMlMpXwC/vqyzP7Ij2h9a5MLhXVHTYcbdLZ/ nmMCoBBZJt+7cy+MP5klYC5z31fKIvAuceTxb1JDalHmzajzL+xXrP5wX/VgfHmR KrGbyZicuoVoLp7jEAwxv7FOIybsWyxvxLQKy47vHXXwT7ReEMB/7Jvd5k/p8HKQ PUTU3IqRT1urklq1Yk2AaCKWuLQK6k+BTQQ5mqoR10I2rtgAXLYpraYtJs9rZoTj 2ixXvu76r2ANFQhjHZ/GQmqdZPGbAGx6ckTtXgMuL2jtMouDk9pT/1LduQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGNd+95Ubytm8GAd+QCiwgS4XZthMB8GA1UdIwQY MBaAFPlD2s6xJC/3N4yPd7lA3FDNN0IsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1VUGF6ckVrTF9jM2pJOTN1VURjVU0wM1Fpdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMDBmMjEzLTIxZWMtNGMzYi1iOTAw LWRhYzVmOGEwOTQ0ZS8xLzEtVVBhenJFa0xfYzNqSTkzdVVEY1VNMDNRaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U1LzAwZjIxMy0yMWVjLTRjM2ItYjkwMC1kYWM1ZjhhMDk0 NGUvMS8xLVVQYXpyRWtMX2Mzakk5M3VVRGNVTTAzUWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIrS dv5AJGZg/qwV+/Yr6LBTOc5pq73ow4amkrjD3TNaBlXRcJN0qnYZUg/Wxw04rQOv 9TmZgtrvziaSLWjnaaUeBqqT4GdImOhsX8J5JYrMAWl+CDrGJeznU1zLg8OLqyKC wRtieBp0k9e0uojvXhZh9+nf+0GDhHlfREXymp5gm8Npggnc+qUdQ/PDIB3+6m92 qEpP9vR/C3R2fb4DUCa1a9qN2RvS5L2TmqjzgLLPqjiD1aaBtpmJllt69z3VXMgu 95oGszNGfTG50SUqp6Z76CLFLHAj+UINBFX0YUKXk4DReMhqeJjH2YdDmKLD3pm1 H8QoXxaQSeOWqPujdA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:01 2026 by rpki-client