This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json) Hash identifier: cyGStE6QEXIDhNm2CYkvRtqdMigIIwMS6dZIoVTL+f0= Subject key identifier: 57:DA:81:5A:F9:8E:AC:47:5B:7F:60:5E:0E:41:FB:3A:EE:D5:0A:80 Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1 Certificate serial: 019C43594A35F45AB6966370C22114734616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft Manifest number: 09CD Signing time: Mon 09 Feb 2026 17:00:50 +0000 Manifest this update: Mon 09 Feb 2026 17:00:50 +0000 Manifest next update: Tue 10 Feb 2026 17:00:50 +0000 Files and hashes: 1: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (hash: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc=) 2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: HmubnPxkurY1LIXCTOUk2xES3fx1or5fs4WXlYzqXuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4a:35:f4:5a:b6:96:63:70:c2:21:14:73:46:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1 Validity Not Before: Feb 9 17:00:50 2026 GMT Not After : Feb 10 17:00:50 2026 GMT Subject: CN=57da815af98eac475b7f605e0e41fb3aeed50a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:10:a7:42:ad:15:3f:c2:1a:e4:ed:64:3e: f2:36:83:e5:0b:4f:b5:d4:f8:5c:4f:17:52:a8:9e: 05:e3:69:96:73:97:f0:6a:6d:0f:c0:c2:ae:c6:a3: b4:63:ef:78:67:6f:9f:13:bd:12:a3:24:4d:0e:10: 23:71:76:ce:7a:77:30:4a:83:2d:bf:90:07:12:d4: e0:67:03:58:66:6c:f4:50:88:83:26:82:c9:17:f0: 84:b5:95:ad:c6:71:fa:98:e0:1e:3a:0f:3e:24:8d: 36:dc:5a:04:2c:c8:1f:6c:f7:5c:ad:e1:b6:0a:56: 21:2f:d7:69:2a:54:b7:66:1b:0f:a8:02:80:c1:ca: 0e:e4:8a:a0:d1:99:c2:16:41:37:6b:a5:56:7d:ff: d8:af:4b:44:48:91:8d:af:4b:e1:17:d6:2d:22:ac: 3d:a7:9c:f4:9f:84:14:61:a0:fd:f0:54:96:a7:2b: e8:2d:31:07:0e:e5:99:ed:df:09:87:7f:aa:64:f2: 2f:f3:a3:7a:1b:6f:c6:0e:fe:df:1c:c0:56:ac:6f: f3:e8:30:c0:50:a8:10:2e:b9:ba:fb:0b:e3:ed:15: ad:67:2d:6d:fd:3c:2f:be:a6:1f:a7:08:47:e4:72: 48:4b:a6:0d:1a:cc:19:63:8f:16:b4:70:fd:37:ed: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DA:81:5A:F9:8E:AC:47:5B:7F:60:5E:0E:41:FB:3A:EE:D5:0A:80 X509v3 Authority Key Identifier: keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:68:23:35:18:a5:55:5d:3c:7f:50:cc:7d:77:60:34:5f:f6: 07:fb:50:57:fd:62:39:17:a2:ab:97:d8:8a:f1:6d:fa:10:fc: ff:f5:ff:58:27:2f:fc:a7:a0:d3:6b:16:24:a7:22:23:05:3b: c5:67:43:04:ec:3e:65:f7:91:04:f4:d6:47:a4:84:f4:a5:c2: dd:d0:a2:81:3b:21:24:03:48:8c:9e:f5:9a:45:3d:6a:fe:4d: e2:74:65:0b:7b:3c:30:80:34:2c:50:62:83:ba:78:b5:cb:ad: 7c:3c:c9:44:03:a9:4f:bd:b4:33:0d:bb:49:f7:27:63:bc:61: 21:10:4b:cf:f1:c1:7f:30:7b:8e:c1:e1:34:d3:9a:c8:c5:f3: 0d:ab:d3:40:5d:1f:89:de:00:76:7a:95:e2:c5:58:f7:d3:77: ec:a1:18:74:dc:d7:06:8b:ba:ae:21:36:64:5d:ec:39:1c:86: 13:ea:cf:b6:af:2c:4a:10:7a:21:f3:06:16:4f:c0:e6:ed:4d: 10:7d:ff:5b:32:ac:a1:3a:9d:ad:1a:dc:10:b6:70:fc:21:30: f6:03:bf:ee:ae:66:82:f9:c6:6a:0a:fa:fd:34:bd:30:f2:5e: 38:55:b8:4b:f3:0c:36:bc:9b:48:cd:da:c4:fd:09:ce:cb:ab: e2:51:f3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUo19Fq2lmNwwiEUc0YWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWQ1NWE4NjlmMTA1YWY2YWJjZGZhMGNhNDA2YWYxZjQ5 YjI0ZjEwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD Eyg1N2RhODE1YWY5OGVhYzQ3NWI3ZjYwNWUwZTQxZmIzYWVlZDUwYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67QQp0KtFT/CGuTtZD7yNoPlC0+1 1PhcTxdSqJ4F42mWc5fwam0PwMKuxqO0Y+94Z2+fE70SoyRNDhAjcXbOencwSoMt v5AHEtTgZwNYZmz0UIiDJoLJF/CEtZWtxnH6mOAeOg8+JI023FoELMgfbPdcreG2 ClYhL9dpKlS3ZhsPqAKAwcoO5Iqg0ZnCFkE3a6VWff/Yr0tESJGNr0vhF9YtIqw9 p5z0n4QUYaD98FSWpyvoLTEHDuWZ7d8Jh3+qZPIv86N6G2/GDv7fHMBWrG/z6DDA UKgQLrm6+wvj7RWtZy1t/TwvvqYfpwhH5HJIS6YNGswZY48WtHD9N+3iyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfagVr5jqxHW39gXg5B+zru1QqAMB8GA1UdIwQY MBaAFFMdVahp8QWvarzfoMpAavH0myTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjIt NGRjMWVmODkwNDRiLzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjItNGRjMWVmODkwNDRi LzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWgjNRil VV08f1DMfXdgNF/2B/tQV/1iOReiq5fYivFt+hD8//X/WCcv/Keg02sWJKciIwU7 xWdDBOw+ZfeRBPTWR6SE9KXC3dCigTshJANIjJ71mkU9av5N4nRlC3s8MIA0LFBi g7p4tcutfDzJRAOpT720Mw27SfcnY7xhIRBLz/HBfzB7jsHhNNOayMXzDavTQF0f id4AdnqV4sVY99N37KEYdNzXBou6riE2ZF3sORyGE+rPtq8sShB6IfMGFk/A5u1N EH3/WzKsoTqdrRrcELZw/CEw9gO/7q5mgvnGagr6/TS9MPJeOFW4S/MMNrybSM3a xP0Jzsur4lHzWA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:02 2026 by rpki-client