This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json) Hash identifier: WUGnhjcmlg8VjUAa0+reNaeZ/0BuvOea/vkqMbSgSp8= Subject key identifier: 28:5B:6A:44:B9:94:3F:5C:97:EE:DC:9A:10:BA:FE:EE:66:B4:C2:74 Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Certificate serial: 019C4434B6E238447E87E7153696759335A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 21:00:31 +0000 Manifest this update: Mon 09 Feb 2026 21:00:31 +0000 Manifest next update: Tue 10 Feb 2026 21:00:31 +0000 Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: Nhm+l4DdHtGYgCz0FJ2lIQEgE0vJ0A+bWbTfxwc2FBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:b6:e2:38:44:7e:87:e7:15:36:96:75:93:35:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Validity Not Before: Feb 9 21:00:31 2026 GMT Not After : Feb 10 21:00:31 2026 GMT Subject: CN=285b6a44b9943f5c97eedc9a10bafeee66b4c274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:90:09:84:f5:83:c4:e8:6c:6d:fe:d7:3c: 0c:5b:84:a5:08:37:73:a2:da:cd:6f:88:ba:42:a3: b2:01:3c:d9:d2:89:8f:7c:12:4a:45:5b:b1:1f:ba: 9f:4d:e5:55:56:61:e8:40:ff:6c:32:cc:9e:f1:cf: 47:d6:48:d6:1e:fd:f5:9c:08:51:7a:0f:ca:f3:6f: 5a:81:0a:e8:33:b6:e8:f2:3d:61:a5:42:03:e2:9e: c5:0d:e6:96:ad:ad:97:c8:6d:d8:b4:93:51:82:65: 93:d5:46:03:e7:88:6e:55:66:91:0d:e3:35:f5:88: 0c:0a:34:32:9a:a8:84:01:ba:d7:ec:04:43:11:a2: f8:9c:f0:19:f1:59:55:54:12:a1:17:24:92:7a:c8: 1e:96:b7:92:61:71:04:64:18:eb:9e:4c:70:4d:36: 28:24:1f:0a:e2:1e:0d:2d:78:13:b6:f2:74:04:ad: 2f:bc:cb:ec:cd:f0:57:77:54:18:c2:15:3c:1b:e7: 42:d2:3e:e3:2f:0c:74:b7:f4:03:1e:9f:a1:65:89: ba:6c:9b:7e:6d:f9:f0:28:3b:4c:3e:df:9b:d0:e3: 22:7c:b8:04:15:03:b3:b2:9d:8f:f7:11:0f:c6:7e: ea:c3:72:b1:7e:eb:c2:33:8f:65:43:0e:86:8e:33: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5B:6A:44:B9:94:3F:5C:97:EE:DC:9A:10:BA:FE:EE:66:B4:C2:74 X509v3 Authority Key Identifier: keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:5a:eb:6f:2c:c6:c4:94:3f:60:96:74:c0:0a:61:5c:b3: 0e:60:ec:c4:44:ed:52:6d:f0:aa:9f:22:96:83:7b:d0:88:1c: 1d:ce:45:17:b0:59:b1:ee:7f:aa:67:c5:21:7f:50:52:75:8d: 6a:1e:ad:97:2d:82:0b:ff:9b:0e:5b:16:0c:e9:2a:6c:d8:b8: 30:bb:11:6c:80:23:f9:72:f8:a1:cf:24:97:8b:5d:f8:ba:7f: da:27:44:67:45:9d:16:48:3f:a1:f9:ca:a1:05:7e:6c:4d:6d: a1:f3:b5:35:88:38:35:98:1b:9a:bf:ce:a4:35:ea:26:b2:42: ed:39:a0:1a:02:85:21:ff:ea:88:6c:72:27:a5:38:4a:e5:df: 86:42:75:b0:a9:ec:40:0f:79:24:f9:a0:7b:2f:63:3f:98:2a: 7b:93:bb:8a:10:e2:f6:14:e7:1a:d2:5a:08:c5:74:6b:18:19: 6d:cc:43:91:d4:fe:36:82:d6:be:b8:88:2e:51:a1:82:cd:db: 7b:c8:55:a4:fa:79:06:cd:88:ac:0a:3b:20:7b:72:1b:ad:1a: 5e:b1:af:90:7e:87:c1:ce:fa:6b:f5:44:25:5f:72:64:07:28: c8:1f:3f:da:04:de:ad:3d:90:cc:16:25:94:8a:7f:ce:f6:df: 14:a7:ad:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLbiOER+h+cVNpZ1kzWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw YzNkY2MwHhcNMjYwMjA5MjEwMDMxWhcNMjYwMjEwMjEwMDMxWjAzMTEwLwYDVQQD EygyODViNmE0NGI5OTQzZjVjOTdlZWRjOWExMGJhZmVlZTY2YjRjMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOWQCYT1g8TobG3+1zwMW4SlCDdz otrNb4i6QqOyATzZ0omPfBJKRVuxH7qfTeVVVmHoQP9sMsye8c9H1kjWHv31nAhR eg/K829agQroM7bo8j1hpUID4p7FDeaWra2XyG3YtJNRgmWT1UYD54huVWaRDeM1 9YgMCjQymqiEAbrX7ARDEaL4nPAZ8VlVVBKhFySSesgelreSYXEEZBjrnkxwTTYo JB8K4h4NLXgTtvJ0BK0vvMvszfBXd1QYwhU8G+dC0j7jLwx0t/QDHp+hZYm6bJt+ bfnwKDtMPt+b0OMifLgEFQOzsp2P9xEPxn7qw3KxfuvCM49lQw6GjjMrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChbakS5lD9cl+7cmhC6/u5mtMJ0MB8GA1UdIwQY MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVFa628s xsSUP2CWdMAKYVyzDmDsxETtUm3wqp8iloN70IgcHc5FF7BZse5/qmfFIX9QUnWN ah6tly2CC/+bDlsWDOkqbNi4MLsRbIAj+XL4oc8kl4td+Lp/2idEZ0WdFkg/ofnK oQV+bE1tofO1NYg4NZgbmr/OpDXqJrJC7TmgGgKFIf/qiGxyJ6U4SuXfhkJ1sKns QA95JPmgey9jP5gqe5O7ihDi9hTnGtJaCMV0axgZbcxDkdT+NoLWvriILlGhgs3b e8hVpPp5Bs2IrAo7IHtyG60aXrGvkH6Hwc76a/VEJV9yZAcoyB8/2gTerT2QzBYl lIp/zvbfFKetMQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:20:01 2026 by rpki-client