This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json) Hash identifier: UzHXOg9q5/ZGazW2PWdiQns2WAeNloe09gBNnFseGPo= Subject key identifier: 65:89:6E:EC:B0:A2:DD:D9:2F:65:5F:D3:1B:6D:E3:A3:3D:E1:FD:2A Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Certificate serial: 019C41A1B111CA53C6BC0601883A52A5E0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft Manifest number: 0AF0 Signing time: Mon 09 Feb 2026 09:00:41 +0000 Manifest this update: Mon 09 Feb 2026 09:00:41 +0000 Manifest next update: Tue 10 Feb 2026 09:00:41 +0000 Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: MPHNUQHONba3mMRPS1sygMy/gp4BT0YIGuv1dZZfLuE=) 2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b1:11:ca:53:c6:bc:06:01:88:3a:52:a5:e0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Validity Not Before: Feb 9 09:00:41 2026 GMT Not After : Feb 10 09:00:41 2026 GMT Subject: CN=65896eecb0a2ddd92f655fd31b6de3a33de1fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:b5:6b:87:5b:ed:7d:05:61:13:07:9b:dc: d7:6b:7e:fe:65:ae:44:cb:4d:0a:ea:77:51:42:f1: f2:f5:07:04:a1:32:3c:55:09:0f:83:77:e2:62:37: 1f:10:0a:cb:29:80:37:3b:62:c8:86:09:66:99:02: 4d:34:69:f1:a6:17:1f:c1:7f:7b:d8:1d:02:33:e7: 5b:a0:b1:7a:e3:d6:a1:1c:8d:ad:a8:a3:af:12:d6: ef:9a:18:e6:1f:62:e7:46:38:7e:8a:03:34:7b:ad: 2d:77:d8:35:73:6d:1d:62:a9:67:42:01:1e:e3:1e: 0a:6a:e9:19:5e:d5:95:9d:1d:f1:78:e9:a2:b4:c6: 19:d2:f0:e8:18:98:3d:fd:b5:76:9e:ae:e9:86:e6: 35:c1:62:39:89:4f:e1:b8:1b:a1:1c:8d:0a:83:9e: 3b:27:29:67:e3:14:7c:3f:bb:31:a4:62:92:18:fd: b8:df:67:ee:b4:d3:d6:36:a9:ce:f7:7c:77:b9:88: 26:46:63:a0:11:ed:b9:45:87:93:a8:97:e1:b4:d6: e3:fa:91:16:61:27:dd:7f:f7:b0:92:d1:24:09:a7: 1d:21:66:3f:88:67:3d:7a:d4:f1:12:e6:fa:f1:2d: af:61:51:bb:b5:9e:f6:48:8b:be:57:34:93:e4:a3: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:6E:EC:B0:A2:DD:D9:2F:65:5F:D3:1B:6D:E3:A3:3D:E1:FD:2A X509v3 Authority Key Identifier: keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c3:3d:c2:b6:8e:42:f7:6c:ac:e2:fc:1f:4d:e1:ce:b0:ce: c0:12:9f:a8:a8:eb:ae:2f:cd:af:d7:cf:9b:db:8e:8f:09:0e: 14:4b:6f:43:d0:9a:95:95:dc:a3:f4:13:02:a5:8a:c9:05:87: 92:75:56:53:b7:91:05:cc:37:2c:25:b9:24:5a:b5:f1:05:93: 55:7f:ea:a3:aa:dc:d2:00:d8:f2:d1:00:f0:5c:0e:a0:c8:4b: af:1e:1d:93:46:26:8b:ee:d9:c2:84:4c:6e:7f:f6:76:14:bb: dd:ed:bb:2f:36:bb:53:40:32:18:d8:5d:e0:46:84:68:1d:6a: 83:a5:ce:0c:6e:fc:dd:ee:9c:19:5d:f0:47:ef:db:f5:ef:c1: 76:52:73:a7:dc:b2:0f:a1:13:50:74:ae:0c:01:cd:c2:18:27: c0:80:d2:3d:7e:bb:d8:e2:eb:e7:50:39:b2:11:25:85:71:e1: 56:c6:a1:81:c7:28:45:23:c9:9a:d9:c3:92:23:e3:dc:8e:18: 9e:b0:a6:cb:f9:4b:d1:92:3b:6c:41:b1:75:23:9b:88:d2:65: b3:73:06:69:a1:73:7f:d9:bc:8d:47:63:25:9c:98:4e:86:36: e2:a2:a7:ee:bf:49:9b:3a:bd:b3:bc:65:7a:0d:02:f2:fe:c2: f0:f4:f5:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobERylPGvAYBiDpSpeDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx MWE2ODEwHhcNMjYwMjA5MDkwMDQxWhcNMjYwMjEwMDkwMDQxWjAzMTEwLwYDVQQD Eyg2NTg5NmVlY2IwYTJkZGQ5MmY2NTVmZDMxYjZkZTNhMzNkZTFmZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zy1a4db7X0FYRMHm9zXa37+Za5E y00K6ndRQvHy9QcEoTI8VQkPg3fiYjcfEArLKYA3O2LIhglmmQJNNGnxphcfwX97 2B0CM+dboLF649ahHI2tqKOvEtbvmhjmH2LnRjh+igM0e60td9g1c20dYqlnQgEe 4x4KaukZXtWVnR3xeOmitMYZ0vDoGJg9/bV2nq7phuY1wWI5iU/huBuhHI0Kg547 Jyln4xR8P7sxpGKSGP2432futNPWNqnO93x3uYgmRmOgEe25RYeTqJfhtNbj+pEW YSfdf/ewktEkCacdIWY/iGc9etTxEub68S2vYVG7tZ72SIu+VzST5KPLCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWJbuywot3ZL2Vf0xtt46M94f0qMB8GA1UdIwQY MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1 LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8M9wraO QvdsrOL8H03hzrDOwBKfqKjrri/Nr9fPm9uOjwkOFEtvQ9CalZXco/QTAqWKyQWH knVWU7eRBcw3LCW5JFq18QWTVX/qo6rc0gDY8tEA8FwOoMhLrx4dk0Ymi+7ZwoRM bn/2dhS73e27Lza7U0AyGNhd4EaEaB1qg6XODG783e6cGV3wR+/b9e/BdlJzp9yy D6ETUHSuDAHNwhgnwIDSPX672OLr51A5shElhXHhVsahgccoRSPJmtnDkiPj3I4Y nrCmy/lL0ZI7bEGxdSObiNJls3MGaaFzf9m8jUdjJZyYToY24qKn7r9Jmzq9s7xl eg0C8v7C8PT1DA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:30 2026 by rpki-client