This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.mft File: 2ufxj_dFhG1hr2Li0PuktmGlKKQ.mft (raw, json) Hash identifier: pXRNMze9ZUOH2BEzZ0tH3z4YNuF0AOyasncBydO/Ntk= Subject key identifier: 4A:30:F4:52:14:4F:C6:FE:D2:5A:34:D8:7E:49:AF:4D:57:2F:52:DF Authority key identifier: DA:E7:F1:8F:F7:45:84:6D:61:AF:62:E2:D0:FB:A4:B6:61:A5:28:A4 Certificate issuer: /CN=dae7f18ff745846d61af62e2d0fba4b661a528a4 Certificate serial: 019C421021D7D97A00365223A876251179AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ufxj_dFhG1hr2Li0PuktmGlKKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.mft Manifest number: 1C Signing time: Mon 09 Feb 2026 11:01:19 +0000 Manifest this update: Mon 09 Feb 2026 11:01:19 +0000 Manifest next update: Tue 10 Feb 2026 11:01:19 +0000 Files and hashes: 1: 2ufxj_dFhG1hr2Li0PuktmGlKKQ.crl (hash: Wd6fiIS4YeV6c9ozR/XxO08N1RRVicqJzuN2/IRlf8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2ufxj_dFhG1hr2Li0PuktmGlKKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:21:d7:d9:7a:00:36:52:23:a8:76:25:11:79:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae7f18ff745846d61af62e2d0fba4b661a528a4 Validity Not Before: Feb 9 11:01:19 2026 GMT Not After : Feb 10 11:01:19 2026 GMT Subject: CN=4a30f452144fc6fed25a34d87e49af4d572f52df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:33:fd:e4:b9:ac:d3:f2:37:38:0c:96:e6: cb:01:52:77:c8:9e:82:a8:45:ae:85:35:40:54:0a: 59:77:b3:5e:35:70:40:64:eb:81:20:c0:56:4d:1a: 4c:2d:b4:59:b8:10:01:8b:ed:e4:f3:5d:41:6a:b0: 45:b9:fa:fe:05:b3:81:59:11:99:1b:3a:fa:ac:ce: fe:f2:fd:11:52:99:2b:ba:0f:9c:16:a6:3c:a1:b8: 85:cd:6c:43:36:6c:d9:4e:cc:71:62:63:4a:e6:74: b8:5a:bc:c8:fd:4f:9d:28:f4:ee:b1:94:c2:eb:c9: e3:e5:fb:74:e2:49:70:0b:41:f3:49:f3:84:81:c4: 8d:3c:f4:d7:b9:e8:bd:a7:d3:07:ba:f7:79:b3:d7: ed:f9:09:81:80:b0:da:b0:ec:39:26:bc:b1:51:1f: f0:89:55:0e:67:b7:26:8d:31:4e:3d:f1:ca:96:50: 3b:5a:df:ca:3f:27:3c:85:c6:45:42:72:1a:b7:39: e1:f6:2b:f9:26:9d:ca:31:ac:f5:9b:dc:fe:a3:00: 80:b5:f9:c5:44:4d:4b:3c:2f:8c:34:13:f4:06:ce: 8a:8b:c2:b3:e9:88:13:01:92:4e:32:6d:cf:53:7e: 98:6e:a7:46:95:d0:95:15:16:21:06:ce:16:72:98: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:F4:52:14:4F:C6:FE:D2:5A:34:D8:7E:49:AF:4D:57:2F:52:DF X509v3 Authority Key Identifier: keyid:DA:E7:F1:8F:F7:45:84:6D:61:AF:62:E2:D0:FB:A4:B6:61:A5:28:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ufxj_dFhG1hr2Li0PuktmGlKKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/144f82-2bcb-4bc2-845a-02eba420cb3f/1/2ufxj_dFhG1hr2Li0PuktmGlKKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:00:b5:29:60:64:3b:6f:73:14:93:94:27:49:0f:35:a1: 8e:f3:79:26:b5:4f:21:89:90:62:92:67:dc:77:f5:04:44:54: 23:3e:b8:b6:1a:da:6a:ca:f7:0e:dc:9a:d7:9b:e3:e5:59:ab: db:a8:98:15:f9:73:28:f1:ad:e2:db:88:a0:3f:de:d7:81:35: a2:3f:53:72:a0:83:41:a6:0c:01:63:4b:68:f2:59:ba:d4:08: 20:3b:0d:78:16:27:75:93:87:38:ad:85:10:6a:2e:4e:0c:21: a7:71:d1:54:cc:76:10:fc:e5:4e:5d:dc:e7:d6:cb:29:c6:a3: 18:6a:06:1f:04:32:a2:81:3a:cc:7a:8b:17:a6:f9:10:fb:95: 12:48:8f:2f:ea:21:37:5c:8e:be:34:eb:24:cf:51:54:d1:f0: 26:05:d4:5c:c8:0e:81:4c:70:b4:cf:2d:89:86:e7:f6:9e:90: 89:60:b8:e4:da:96:bd:77:b6:d4:5f:29:be:39:d0:7b:82:af: 1c:d4:70:6b:92:c5:a0:e2:47:52:5d:62:c1:6f:d9:d9:05:35: 31:f3:7c:2d:07:58:6f:09:47:29:3e:18:17:68:9e:69:41:c3: d6:5f:5d:5b:51:74:64:df:34:a8:ae:d7:d2:f6:18:98:18:11: 9f:63:6b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCECHX2XoANlIjqHYlEXmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTdmMThmZjc0NTg0NmQ2MWFmNjJlMmQwZmJhNGI2NjFh NTI4YTQwHhcNMjYwMjA5MTEwMTE5WhcNMjYwMjEwMTEwMTE5WjAzMTEwLwYDVQQD Eyg0YTMwZjQ1MjE0NGZjNmZlZDI1YTM0ZDg3ZTQ5YWY0ZDU3MmY1MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Ez/eS5rNPyNzgMlubLAVJ3yJ6C qEWuhTVAVApZd7NeNXBAZOuBIMBWTRpMLbRZuBABi+3k811BarBFufr+BbOBWRGZ Gzr6rM7+8v0RUpkrug+cFqY8obiFzWxDNmzZTsxxYmNK5nS4WrzI/U+dKPTusZTC 68nj5ft04klwC0HzSfOEgcSNPPTXuei9p9MHuvd5s9ft+QmBgLDasOw5JryxUR/w iVUOZ7cmjTFOPfHKllA7Wt/KPyc8hcZFQnIatznh9iv5Jp3KMaz1m9z+owCAtfnF RE1LPC+MNBP0Bs6Ki8Kz6YgTAZJOMm3PU36YbqdGldCVFRYhBs4WcpihGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEow9FIUT8b+0lo02H5Jr01XL1LfMB8GA1UdIwQY MBaAFNrn8Y/3RYRtYa9i4tD7pLZhpSikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVmeGpfZEZoRzFocjJMaTBQdWt0bUdsS0tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDRmODItMmJjYi00YmMyLTg0NWEt MDJlYmE0MjBjYjNmLzEvMnVmeGpfZEZoRzFocjJMaTBQdWt0bUdsS0tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xNDRmODItMmJjYi00YmMyLTg0NWEtMDJlYmE0MjBjYjNm LzEvMnVmeGpfZEZoRzFocjJMaTBQdWt0bUdsS0tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDoAtSlg ZDtvcxSTlCdJDzWhjvN5JrVPIYmQYpJn3Hf1BERUIz64thraasr3Dtya15vj5Vmr 26iYFflzKPGt4tuIoD/e14E1oj9TcqCDQaYMAWNLaPJZutQIIDsNeBYndZOHOK2F EGouTgwhp3HRVMx2EPzlTl3c59bLKcajGGoGHwQyooE6zHqLF6b5EPuVEkiPL+oh N1yOvjTrJM9RVNHwJgXUXMgOgUxwtM8tiYbn9p6QiWC45NqWvXe21F8pvjnQe4Kv HNRwa5LFoOJHUl1iwW/Z2QU1MfN8LQdYbwlHKT4YF2ieaUHD1l9dW1F0ZN80qK7X 0vYYmBgRn2Nryg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:33 2026 by rpki-client