This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json) Hash identifier: yw3ND9Gq2oD2C33RfH+jpo9bBtP911EtOvds+M2XnrQ= Subject key identifier: 35:A4:DE:32:DA:F0:A1:FD:A3:76:03:87:09:A3:10:CD:01:FE:35:50 Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Certificate serial: 019C420F8D10BE6D616A6D3D19EB165FCCDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft Manifest number: 13D1 Signing time: Mon 09 Feb 2026 11:00:41 +0000 Manifest this update: Mon 09 Feb 2026 11:00:41 +0000 Manifest next update: Tue 10 Feb 2026 11:00:41 +0000 Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: +XaCA8NA6l291JG0O70GkvJ9aAMKgigeq/lLVggEaIE=) 2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:8d:10:be:6d:61:6a:6d:3d:19:eb:16:5f:cc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb Validity Not Before: Feb 9 11:00:41 2026 GMT Not After : Feb 10 11:00:41 2026 GMT Subject: CN=35a4de32daf0a1fda376038709a310cd01fe3550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:4b:ef:29:cb:8c:6b:dc:d9:9b:b2:46:af: 77:d1:ab:a1:3a:ee:28:45:ef:36:c5:1d:06:76:d4: 01:00:a4:0d:0f:df:90:7a:99:57:cc:fa:65:08:a9: fd:4f:07:24:dc:73:9e:96:f0:b0:93:72:2f:40:2f: 33:00:1e:94:c6:33:ac:38:0f:01:7d:0b:f5:23:1d: 71:14:f7:43:40:01:04:8c:09:e1:8d:a2:9e:6a:a0: 5e:de:d5:9d:5e:da:ae:a9:ba:e5:4f:4e:31:f4:8e: 76:d9:82:58:84:17:3a:93:d6:e2:13:02:73:50:af: 52:a6:01:43:ec:e8:72:a6:e4:cf:eb:9f:a1:7c:65: 00:63:c2:37:e5:de:f6:23:01:99:f3:bd:d4:9d:ae: 6c:93:1c:84:16:bc:52:21:5b:f1:72:26:56:30:be: 79:77:2e:1c:47:b7:17:80:12:dd:26:7f:b0:83:ce: 21:22:01:0f:54:8a:32:99:01:28:0a:44:4f:6b:22: 56:72:67:9a:15:f0:5e:3c:cc:e4:f7:63:7b:3a:b7: b4:92:34:89:47:7c:0f:cf:6b:35:d4:89:de:b4:c6: 91:3d:45:90:b0:40:24:47:56:d8:21:80:8d:25:90: fe:ff:4f:f4:08:60:a2:cb:8f:13:9a:ae:f4:7e:02: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:DE:32:DA:F0:A1:FD:A3:76:03:87:09:A3:10:CD:01:FE:35:50 X509v3 Authority Key Identifier: keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:85:58:6e:96:c0:bc:b1:e4:91:66:02:04:e9:e7:92:57:38: 29:0d:d0:f9:68:f0:a3:c1:bd:70:b3:26:c0:ad:a5:13:a5:1a: ca:f0:d4:1c:7f:6e:e6:d4:ee:4d:ea:fc:6f:6f:50:cc:4e:9f: 73:4d:c7:c6:c6:a5:f2:d3:56:20:c3:5c:46:82:b0:a6:e5:87: 9d:e3:13:0f:d5:e7:75:21:61:01:3e:86:3c:8d:dc:d3:1e:a4: ba:0f:0f:72:f4:ac:95:02:26:8c:1c:ae:6b:b5:c9:c5:36:d8: 7a:c6:28:ca:14:00:d4:ec:31:4f:2e:9b:76:d4:57:57:90:0e: a9:02:9b:44:e3:22:58:4d:e1:bc:04:46:a6:c8:91:0c:3f:f3: fa:14:06:c8:21:39:d9:dc:8a:d1:12:1d:a9:bc:76:50:22:47: c9:69:f7:7f:f4:f5:f2:23:4b:7f:ec:f6:0f:b6:86:28:4e:ba: 87:d7:7c:d2:d8:38:45:5f:19:ea:c1:37:77:0c:cc:4a:d6:ab: 25:33:e1:c5:5b:9f:ec:e2:e2:5c:b5:dc:dd:27:e4:4c:ff:20: f8:b5:6e:fe:38:b2:66:ac:5e:84:e7:20:cb:af:71:22:64:3f: dc:91:cd:87:34:5c:2e:92:b1:09:ed:0d:51:f9:8c:e8:ae:c5: a6:f1:c3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD40Qvm1ham09GesWX8zdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5 NzFiZmIwHhcNMjYwMjA5MTEwMDQxWhcNMjYwMjEwMTEwMDQxWjAzMTEwLwYDVQQD EygzNWE0ZGUzMmRhZjBhMWZkYTM3NjAzODcwOWEzMTBjZDAxZmUzNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQBL7ynLjGvc2ZuyRq930auhOu4o Re82xR0GdtQBAKQND9+QeplXzPplCKn9Twck3HOelvCwk3IvQC8zAB6UxjOsOA8B fQv1Ix1xFPdDQAEEjAnhjaKeaqBe3tWdXtquqbrlT04x9I522YJYhBc6k9biEwJz UK9SpgFD7OhypuTP65+hfGUAY8I35d72IwGZ873Una5skxyEFrxSIVvxciZWML55 dy4cR7cXgBLdJn+wg84hIgEPVIoymQEoCkRPayJWcmeaFfBePMzk92N7Ore0kjSJ R3wPz2s11InetMaRPUWQsEAkR1bYIYCNJZD+/0/0CGCiy48Tmq70fgJPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWk3jLa8KH9o3YDhwmjEM0B/jVQMB8GA1UdIwQY MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoVYbpbA vLHkkWYCBOnnklc4KQ3Q+Wjwo8G9cLMmwK2lE6UayvDUHH9u5tTuTer8b29QzE6f c03Hxsal8tNWIMNcRoKwpuWHneMTD9XndSFhAT6GPI3c0x6kug8PcvSslQImjByu a7XJxTbYesYoyhQA1OwxTy6bdtRXV5AOqQKbROMiWE3hvARGpsiRDD/z+hQGyCE5 2dyK0RIdqbx2UCJHyWn3f/T18iNLf+z2D7aGKE66h9d80tg4RV8Z6sE3dwzMStar JTPhxVuf7OLiXLXc3SfkTP8g+LVu/jiyZqxehOcgy69xImQ/3JHNhzRcLpKxCe0N UfmM6K7FpvHDUQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:04 2026 by rpki-client