This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json) Hash identifier: I9/TKCgIxT+opTtGOhkELnBti0jTKMRaYvUJ/WOmQPE= Subject key identifier: 3A:78:9F:45:08:BC:C7:7C:8F:70:23:D7:11:E7:1F:9B:12:19:DE:B7 Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Certificate serial: 019C4390525095BCCFB8D64659B0CC3B6E61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft Manifest number: 08BE Signing time: Mon 09 Feb 2026 18:00:57 +0000 Manifest this update: Mon 09 Feb 2026 18:00:57 +0000 Manifest next update: Tue 10 Feb 2026 18:00:57 +0000 Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: HKmnUXDVSGVdt/NdRXwKQHqZngzgYEnsOJdumdnUMfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:52:50:95:bc:cf:b8:d6:46:59:b0:cc:3b:6e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42 Validity Not Before: Feb 9 18:00:57 2026 GMT Not After : Feb 10 18:00:57 2026 GMT Subject: CN=3a789f4508bcc77c8f7023d711e71f9b1219deb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:3d:3d:51:50:eb:44:21:23:22:d8:36:de: 5f:a4:d9:3a:cb:e5:9d:15:49:0d:9c:76:3d:57:a3: 86:27:6e:52:ce:de:39:03:66:4f:30:b7:b0:3a:8d: d1:47:13:80:0d:64:8c:94:bb:81:53:d0:74:98:59: d9:ca:a5:28:12:5d:63:d0:e5:0a:41:09:69:7e:0e: 15:c8:aa:52:8f:a7:1b:36:bc:9a:90:f0:9c:20:06: 0c:2b:4f:87:08:df:76:7d:3c:0f:01:4f:f3:64:b4: 30:a0:27:09:1e:cc:af:e6:0c:89:84:71:64:b4:7b: 7a:e5:64:ce:db:dd:5f:17:46:87:1b:d2:51:63:52: 7e:eb:b5:72:49:36:b3:a8:82:82:fb:b1:19:2b:84: 3c:80:b3:ea:c6:05:c9:91:c8:ef:4c:88:65:09:e5: 46:14:da:86:d3:37:2b:6d:18:c8:9b:d5:bd:f7:ea: 98:ce:bb:7b:cb:e4:0b:18:73:ad:0f:06:f1:cd:65: 7b:52:6a:1f:b4:7c:28:82:6f:42:90:4b:43:75:32: 67:db:09:77:ab:64:59:42:62:5d:f3:de:c8:55:04: 7e:8c:59:4a:62:e1:7f:ae:f7:87:0a:66:82:ce:d3: 9d:d4:f8:bc:30:06:cb:cd:78:29:72:60:e0:90:fc: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:9F:45:08:BC:C7:7C:8F:70:23:D7:11:E7:1F:9B:12:19:DE:B7 X509v3 Authority Key Identifier: keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:59:b2:eb:c0:b2:c8:54:44:6d:1a:0e:a5:54:3d:52:75:4d: 04:74:6d:b3:9d:07:f9:ac:5f:40:e7:e3:08:56:22:07:c9:27: 18:7d:38:cc:20:94:7c:51:fc:da:64:b7:9b:84:61:55:10:aa: 7d:b8:35:38:3e:fa:ee:82:94:f3:9c:4a:45:88:00:45:bf:d3: 93:94:d2:f8:c3:5e:5c:3c:25:9b:04:d0:a6:47:c6:3a:dd:59: 9c:12:90:aa:d3:50:49:69:fe:0c:83:59:bd:8f:60:87:1b:21: 4a:f4:f6:c5:40:3c:56:93:80:5d:1b:15:2f:d4:ba:48:e7:f6: 43:e8:a4:29:66:19:95:3d:de:c5:b9:8f:33:74:55:f5:c6:ce: b2:bc:e4:0b:ac:4c:fc:f7:c9:7d:9c:74:2e:ef:ba:1b:f4:85: a0:5e:b6:c8:9f:15:2c:24:1a:39:2f:f5:0b:e9:4d:5f:ae:82: 93:59:fc:7e:a9:2c:81:3c:4b:43:a2:ec:93:54:13:23:ff:53: d0:a4:66:f5:ff:25:35:eb:7c:a9:38:c0:13:65:ac:96:43:32: 7f:61:75:8f:1f:e1:3a:da:88:03:89:4c:ea:46:f9:bb:cd:d1: b6:ed:45:ee:70:77:14:64:c7:94:73:ac:64:45:a0:ac:b4:14: fc:65:0b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFJQlbzPuNZGWbDMO25hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNzkyYzc3MTRlZDU3NDU2ZDczNTVlNGEwNGI5YmE4YmVk NTdlNDIwHhcNMjYwMjA5MTgwMDU3WhcNMjYwMjEwMTgwMDU3WjAzMTEwLwYDVQQD EygzYTc4OWY0NTA4YmNjNzdjOGY3MDIzZDcxMWU3MWY5YjEyMTlkZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0949PVFQ60QhIyLYNt5fpNk6y+Wd FUkNnHY9V6OGJ25Szt45A2ZPMLewOo3RRxOADWSMlLuBU9B0mFnZyqUoEl1j0OUK QQlpfg4VyKpSj6cbNryakPCcIAYMK0+HCN92fTwPAU/zZLQwoCcJHsyv5gyJhHFk tHt65WTO291fF0aHG9JRY1J+67VySTazqIKC+7EZK4Q8gLPqxgXJkcjvTIhlCeVG FNqG0zcrbRjIm9W99+qYzrt7y+QLGHOtDwbxzWV7UmoftHwogm9CkEtDdTJn2wl3 q2RZQmJd897IVQR+jFlKYuF/rveHCmaCztOd1Pi8MAbLzXgpcmDgkPw61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp4n0UIvMd8j3Aj1xHnH5sSGd63MB8GA1UdIwQY MBaAFFJ5LHcU7VdFbXNV5KBLm6i+1X5CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0Yzct N2JkZTJmZDc2MzgyLzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZGE4YjMtODFlYi00Y2Y0LWI0YzctN2JkZTJmZDc2Mzgy LzEvVW5rc2R4VHRWMFZ0YzFYa29FdWJxTDdWZmtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVmy68Cy yFREbRoOpVQ9UnVNBHRts50H+axfQOfjCFYiB8knGH04zCCUfFH82mS3m4RhVRCq fbg1OD767oKU85xKRYgARb/Tk5TS+MNeXDwlmwTQpkfGOt1ZnBKQqtNQSWn+DINZ vY9ghxshSvT2xUA8VpOAXRsVL9S6SOf2Q+ikKWYZlT3exbmPM3RV9cbOsrzkC6xM /PfJfZx0Lu+6G/SFoF62yJ8VLCQaOS/1C+lNX66Ck1n8fqksgTxLQ6Lsk1QTI/9T 0KRm9f8lNet8qTjAE2WslkMyf2F1jx/hOtqIA4lM6kb5u83Rtu1F7nB3FGTHlHOs ZEWgrLQU/GULKg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:30 2026 by rpki-client