This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json) Hash identifier: /7Q/GRqCoDsHQsb1OCTMSosUk35HZFGKywllFT9xBwA= Subject key identifier: 7A:20:06:A4:93:37:95:8A:73:3F:D0:22:35:98:AE:8C:9B:40:A6:00 Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Certificate serial: 019C427DD4AD19D842C2298CC553572E3107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft Manifest number: 13F4 Signing time: Mon 09 Feb 2026 13:01:08 +0000 Manifest this update: Mon 09 Feb 2026 13:01:08 +0000 Manifest next update: Tue 10 Feb 2026 13:01:08 +0000 Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: Oa6b4i4+GLTEheAb/B9NRmz7CSTVWBL/WZ5mUUzUV0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d4:ad:19:d8:42:c2:29:8c:c5:53:57:2e:31:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21 Validity Not Before: Feb 9 13:01:08 2026 GMT Not After : Feb 10 13:01:08 2026 GMT Subject: CN=7a2006a49337958a733fd0223598ae8c9b40a600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:04:d5:e6:01:0a:75:28:43:35:42:8e:3b: 6c:cb:b9:5f:0a:53:f7:d6:77:dd:6b:5d:49:85:b5: 90:52:ff:eb:38:65:b2:c5:c4:4c:dc:ed:76:8f:23: 84:d1:68:25:7b:40:5b:fd:8e:c3:60:71:9e:d7:3b: d4:31:04:5e:b0:04:f4:60:d1:b4:3a:ba:fb:d7:16: a0:ec:69:f7:5b:b0:64:21:0e:41:c0:84:fb:bd:89: a0:54:3c:8b:2a:51:38:e6:be:c6:91:c2:20:1e:e9: fe:4e:23:35:71:33:84:cc:2f:92:cc:d2:06:6c:33: 4f:f5:ab:28:f2:86:07:cd:76:48:aa:5b:23:20:39: 46:9f:ce:12:f8:f5:0f:c1:42:f4:15:f1:3e:e6:b8: 78:3b:0c:1d:b3:34:0c:cc:96:42:79:8f:15:1d:2a: 7c:d5:d3:82:1a:e4:26:12:53:1b:c2:14:1b:67:a1: e0:00:a8:17:c2:4a:a9:9c:3d:14:d0:fb:3f:55:30: 9b:ad:d4:97:05:27:91:b5:ab:74:d8:64:02:2a:6b: d1:dd:f0:b8:d2:f7:79:b7:35:ae:f7:52:e3:76:47: aa:59:92:9f:88:d8:ac:cb:96:21:eb:be:e3:1a:3b: 97:fa:31:12:b9:72:67:9f:f4:37:a2:b2:4c:68:f3: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:06:A4:93:37:95:8A:73:3F:D0:22:35:98:AE:8C:9B:40:A6:00 X509v3 Authority Key Identifier: keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ae:c0:8b:e1:b5:10:3d:3e:4b:80:99:99:2e:86:15:de:1e: 63:84:88:30:0a:0d:e2:f3:76:08:45:e6:de:9a:1a:58:0c:89: 45:14:ef:a1:fd:32:49:f2:af:19:b3:74:b4:d2:3b:af:29:e9: d0:dc:f0:29:af:ec:de:cd:98:0e:22:6b:1d:83:87:63:37:ac: 30:1e:27:35:9e:8e:6b:1b:c7:73:49:b2:8e:a7:5a:d3:ab:f7: c5:69:e0:a3:ed:f1:b6:22:2f:77:19:98:0f:c8:1b:56:9c:e6: 5f:24:b9:4e:cf:47:46:3e:ae:51:18:d0:6c:df:b1:5a:85:99: ce:95:a5:63:b7:03:e6:71:5f:6e:91:44:a4:f4:0d:79:df:d8: 97:19:0d:5d:73:11:52:12:73:c7:3d:88:4b:f6:ee:9d:f3:2f: 1e:34:14:cf:18:7f:d3:93:05:d3:60:17:92:59:38:f8:98:92: d8:d4:0b:91:92:6e:e9:89:98:c4:52:cc:49:0b:e3:e6:ae:01: 95:9c:72:6f:53:ea:8e:d0:b1:82:18:c9:13:9f:91:a7:6d:48: 48:bd:c2:07:4b:90:e4:b5:a9:72:af:20:9c:cc:63:cd:e2:3b: 6d:b7:e7:82:d7:f6:29:5a:d3:d2:83:25:89:1a:55:03:6e:0c: 4e:97:3e:f9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCfdStGdhCwimMxVNXLjEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh MDVkMjEwHhcNMjYwMjA5MTMwMTA4WhcNMjYwMjEwMTMwMTA4WjAzMTEwLwYDVQQD Eyg3YTIwMDZhNDkzMzc5NThhNzMzZmQwMjIzNTk4YWU4YzliNDBhNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jsE1eYBCnUoQzVCjjtsy7lfClP3 1nfda11JhbWQUv/rOGWyxcRM3O12jyOE0Wgle0Bb/Y7DYHGe1zvUMQResAT0YNG0 Orr71xag7Gn3W7BkIQ5BwIT7vYmgVDyLKlE45r7GkcIgHun+TiM1cTOEzC+SzNIG bDNP9aso8oYHzXZIqlsjIDlGn84S+PUPwUL0FfE+5rh4OwwdszQMzJZCeY8VHSp8 1dOCGuQmElMbwhQbZ6HgAKgXwkqpnD0U0Ps/VTCbrdSXBSeRtat02GQCKmvR3fC4 0vd5tzWu91LjdkeqWZKfiNisy5Yh677jGjuX+jESuXJnn/Q3orJMaPNs8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHogBqSTN5WKcz/QIjWYroybQKYAMB8GA1UdIwQY MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2 LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2 ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq7A i+G1ED0+S4CZmS6GFd4eY4SIMAoN4vN2CEXm3poaWAyJRRTvof0ySfKvGbN0tNI7 rynp0NzwKa/s3s2YDiJrHYOHYzesMB4nNZ6OaxvHc0myjqda06v3xWngo+3xtiIv dxmYD8gbVpzmXyS5Ts9HRj6uURjQbN+xWoWZzpWlY7cD5nFfbpFEpPQNed/YlxkN XXMRUhJzxz2IS/bunfMvHjQUzxh/05MF02AXklk4+JiS2NQLkZJu6YmYxFLMSQvj 5q4BlZxyb1PqjtCxghjJE5+Rp21ISL3CB0uQ5LWpcq8gnMxjzeI7bbfngtf2KVrT 0oMliRpVA24MTpc++Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:02 2026 by rpki-client