This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json) Hash identifier: T2lfxQ+4Ef7BIpctvpNgeiQueHY4WKkU4+4x8qSKg9M= Subject key identifier: F9:44:AD:2A:C5:ED:10:FF:6A:AA:B7:63:43:85:C3:A5:39:22:D4:59 Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Certificate serial: 019C44A2C5C0E22726E75E10B29F55D0275C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft Manifest number: 06D2 Signing time: Mon 09 Feb 2026 23:00:43 +0000 Manifest this update: Mon 09 Feb 2026 23:00:43 +0000 Manifest next update: Tue 10 Feb 2026 23:00:43 +0000 Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: 5UZfrXtvYDvQQaKm5V1W9ZZgPUPGgsxYXWFJcMnXNpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:c5:c0:e2:27:26:e7:5e:10:b2:9f:55:d0:27:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Validity Not Before: Feb 9 23:00:43 2026 GMT Not After : Feb 10 23:00:43 2026 GMT Subject: CN=f944ad2ac5ed10ff6aaab7634385c3a53922d459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:08:e6:72:76:64:3d:54:c0:a0:e9:a5:44: 7a:f3:4c:de:22:2e:3e:88:5c:fd:2e:77:2d:db:22: 79:f6:bd:a5:47:09:2b:95:59:b5:dc:49:ec:a9:1c: 67:b0:18:ed:3c:09:06:6f:31:b7:6b:f1:d3:5d:44: 61:36:bc:eb:f8:f9:d9:4e:69:51:11:30:ca:ea:ec: a6:44:84:ec:5d:81:33:b5:4a:ff:12:cb:ff:39:8d: ba:46:b2:be:3e:dd:f4:38:9f:0d:02:c7:dc:bd:16: 36:48:e6:41:49:26:02:64:99:59:7d:48:66:52:d8: 14:1e:cd:94:c1:14:1c:1d:cb:b6:cb:9a:12:0b:70: 2a:30:3c:82:e2:b5:a6:e2:d1:34:1f:f7:90:a7:6a: 1f:8e:b4:91:2f:ad:ae:de:4d:b9:de:59:43:1a:ec: 5e:b0:d3:e4:91:b5:71:dc:0c:3e:9c:f7:95:e2:d0: 94:c3:6b:7a:66:9f:94:f5:09:35:05:70:53:e6:97: e7:3f:76:58:28:5e:2b:8b:72:e5:af:a9:e2:00:04: 0d:b6:81:d6:6a:9d:38:10:50:2a:77:88:00:60:72: 4c:b9:57:52:51:dd:2f:6a:bf:9b:10:00:86:16:44: 45:e6:28:d9:a4:71:7a:54:f0:15:03:b1:34:ee:7d: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:44:AD:2A:C5:ED:10:FF:6A:AA:B7:63:43:85:C3:A5:39:22:D4:59 X509v3 Authority Key Identifier: keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:1b:97:6f:0c:e4:1b:49:44:d1:0a:12:04:f6:c3:ac:a8: 48:49:38:f3:b9:2c:72:c7:7f:05:df:1b:2a:88:87:ea:27:2b: cb:12:ac:5c:4f:d4:63:2a:33:ad:cf:5e:05:4e:88:f1:6a:31: c4:d7:d3:7a:07:f9:13:3d:bf:83:b0:0a:6e:ac:8e:82:84:3a: 5d:15:0c:89:f9:0d:c1:c8:c7:cd:3e:98:9d:16:86:90:41:fd: 6d:45:5d:dd:9e:43:52:f5:09:48:24:01:ae:02:16:54:9a:90: a5:ee:bd:36:dc:e5:4b:95:6d:7e:4f:1e:35:a0:c0:a4:d6:78: 88:91:e5:6c:ac:cf:7d:6a:c4:0d:f6:87:bf:0b:db:32:5e:e7: fd:56:94:d8:b2:ce:76:dc:ac:28:16:aa:0a:f5:1f:c6:c5:4e: e0:d4:b3:4f:49:9c:da:34:03:3c:fd:2a:3c:76:7e:5d:8a:01: 90:04:85:0a:31:80:2d:bf:28:61:07:fc:3a:bc:cf:75:66:96: aa:76:02:0c:ed:de:51:b5:c6:20:cb:2d:2a:11:1e:2b:61:21: 7c:ca:2b:51:c1:a7:b8:25:df:44:05:01:d3:04:02:7b:d1:46: e9:f5:bd:16:00:5b:4f:54:3c:5f:48:10:00:06:fb:39:a2:f2: 78:e6:45:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEosXA4icm514Qsp9V0CdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOTUwNjA5Y2E4ZGQ3ZjZjNmZhM2NlY2FjNzc5NDIxZWM2 YzAxMDAwHhcNMjYwMjA5MjMwMDQzWhcNMjYwMjEwMjMwMDQzWjAzMTEwLwYDVQQD EyhmOTQ0YWQyYWM1ZWQxMGZmNmFhYWI3NjM0Mzg1YzNhNTM5MjJkNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldEI5nJ2ZD1UwKDppUR680zeIi4+ iFz9Lnct2yJ59r2lRwkrlVm13EnsqRxnsBjtPAkGbzG3a/HTXURhNrzr+PnZTmlR ETDK6uymRITsXYEztUr/Esv/OY26RrK+Pt30OJ8NAsfcvRY2SOZBSSYCZJlZfUhm UtgUHs2UwRQcHcu2y5oSC3AqMDyC4rWm4tE0H/eQp2ofjrSRL62u3k253llDGuxe sNPkkbVx3Aw+nPeV4tCUw2t6Zp+U9Qk1BXBT5pfnP3ZYKF4ri3Llr6niAAQNtoHW ap04EFAqd4gAYHJMuVdSUd0var+bEACGFkRF5ijZpHF6VPAVA7E07n1c4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlErSrF7RD/aqq3Y0OFw6U5ItRZMB8GA1UdIwQY MBaAFFOVBgnKjdf2xvo87Kx3lCHsbAEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAt ODAxY2Y0ZmVjNzRlLzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84NzZhNjUtYmY1NC00NjUyLTg5NzAtODAxY2Y0ZmVjNzRl LzEvVTVVR0NjcU4xX2JHLWp6c3JIZVVJZXhzQVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU8bl28M 5BtJRNEKEgT2w6yoSEk487kscsd/Bd8bKoiH6icryxKsXE/UYyozrc9eBU6I8Wox xNfTegf5Ez2/g7AKbqyOgoQ6XRUMifkNwcjHzT6YnRaGkEH9bUVd3Z5DUvUJSCQB rgIWVJqQpe69NtzlS5Vtfk8eNaDApNZ4iJHlbKzPfWrEDfaHvwvbMl7n/VaU2LLO dtysKBaqCvUfxsVO4NSzT0mc2jQDPP0qPHZ+XYoBkASFCjGALb8oYQf8OrzPdWaW qnYCDO3eUbXGIMstKhEeK2EhfMorUcGnuCXfRAUB0wQCe9FG6fW9FgBbT1Q8X0gQ AAb7OaLyeOZFkA== -----END CERTIFICATE-----Generated at Tue Feb 10 06:04:04 2026 by rpki-client