This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json) Hash identifier: W+MD6ygO2HZh5XkJwqjC+fk0e0SFEKzJQv+KDFDaBfc= Subject key identifier: C6:E4:AA:ED:C2:F2:87:61:82:BA:56:F3:EF:73:8B:68:39:3C:52:9F Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Certificate serial: 019BF6F56976FD74315A99AF6E0DCE3A3342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft Manifest number: 17BB Signing time: Sun 25 Jan 2026 21:00:36 +0000 Manifest this update: Sun 25 Jan 2026 21:00:36 +0000 Manifest next update: Mon 26 Jan 2026 21:00:36 +0000 Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: Qskfs7W8073iae2ertnG/R2wy/cseGzeEVnTfCZO0MM=) 2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:69:76:fd:74:31:5a:99:af:6e:0d:ce:3a:33:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Validity Not Before: Jan 25 21:00:36 2026 GMT Not After : Jan 26 21:00:36 2026 GMT Subject: CN=c6e4aaedc2f2876182ba56f3ef738b68393c529f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:db:89:f8:ef:dc:f8:aa:96:6f:0c:3b:c2: da:c2:8f:b5:0a:2f:8b:df:f2:fb:33:d3:18:ea:08: b8:e6:73:a3:68:5f:3e:24:f8:cf:d1:09:1b:d0:f3: 04:a5:39:8a:e6:84:61:80:8c:e7:ec:22:3b:f4:66: 4d:c7:76:21:fe:e1:ba:43:84:57:2e:19:20:d9:90: d2:4b:6c:4a:f4:f7:b7:3a:d5:4f:c6:d5:21:8b:26: 37:e8:1b:2b:e3:f8:ee:c7:7a:0c:fa:60:22:27:4c: b1:d4:4d:09:31:af:35:a7:40:97:c8:98:2d:cb:2c: 5c:66:df:e2:b6:8c:cf:75:66:b1:2b:f1:a2:22:6c: cf:6b:95:4a:d1:d9:f7:c0:c0:3b:5d:8b:c9:5a:42: 0a:71:65:fc:40:5d:27:87:28:5d:92:67:87:86:05: ec:5e:8f:8b:c6:73:58:17:b7:8c:32:e7:70:2f:27: 62:02:d7:a3:55:db:d6:49:ef:7f:b0:77:82:e0:36: 3d:10:eb:9c:9a:f5:45:dd:ee:98:7c:cb:7d:3c:31: fd:52:47:a5:56:cc:42:db:62:8b:93:d8:af:12:31: 52:57:da:a0:bb:a9:c9:57:ba:51:e5:64:4c:39:9d: 8a:b8:3e:c1:aa:11:7b:b7:f0:0e:ba:cb:ed:a8:78: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E4:AA:ED:C2:F2:87:61:82:BA:56:F3:EF:73:8B:68:39:3C:52:9F X509v3 Authority Key Identifier: keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:55:93:7a:a4:f3:da:90:c4:2d:a1:84:c5:10:2e:78:b5: a6:2f:ab:75:c8:b2:80:9e:02:d9:55:33:d8:d8:84:fc:6f:2f: 35:2a:52:d2:89:7f:f9:7d:d0:a7:d2:79:8a:62:0e:5a:a2:33: 0c:af:ac:b9:10:94:1e:02:67:13:bb:0f:e7:f6:1d:bd:29:6c: 1f:96:99:71:29:e2:7e:b8:1b:8b:1e:81:2b:86:e3:af:33:1b: 94:5d:e3:57:1e:6f:7d:aa:3d:aa:5a:c1:ae:10:9a:f4:ab:fe: e4:18:2a:ee:4c:ed:ee:54:a4:51:e3:63:d3:ad:00:96:00:42: 0d:c0:cf:78:39:2c:0a:33:6a:59:a6:9c:ba:71:84:6c:12:5c: 2b:ef:a8:60:4d:b9:90:24:de:84:cb:5f:e5:22:c7:e9:8a:04: 81:89:fd:5b:8e:f7:e6:d4:10:35:fa:26:c6:b6:6e:45:fe:c3: fd:21:07:12:ea:08:2b:cc:f2:8a:dd:37:b2:2e:e2:86:1f:bb: 52:ac:7b:2c:9a:53:a9:9e:07:8d:95:81:93:78:59:45:55:c8: a2:92:4f:dd:d1:1a:a0:7a:2a:b5:07:54:a7:d6:5a:6d:3b:a0: 7d:b6:9b:96:75:ef:98:2a:cf:9d:c5:67:80:cc:8d:d1:30:10: 37:74:ef:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Wl2/XQxWpmvbg3OOjNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzkwYjEzYzllZjRhZmNmZDA4MTI0MTExZTZmNjNkYzMw MTY1YWEwHhcNMjYwMTI1MjEwMDM2WhcNMjYwMTI2MjEwMDM2WjAzMTEwLwYDVQQD EyhjNmU0YWFlZGMyZjI4NzYxODJiYTU2ZjNlZjczOGI2ODM5M2M1MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RPbifjv3Piqlm8MO8Lawo+1Ci+L 3/L7M9MY6gi45nOjaF8+JPjP0Qkb0PMEpTmK5oRhgIzn7CI79GZNx3Yh/uG6Q4RX Lhkg2ZDSS2xK9Pe3OtVPxtUhiyY36Bsr4/jux3oM+mAiJ0yx1E0JMa81p0CXyJgt yyxcZt/itozPdWaxK/GiImzPa5VK0dn3wMA7XYvJWkIKcWX8QF0nhyhdkmeHhgXs Xo+LxnNYF7eMMudwLydiAtejVdvWSe9/sHeC4DY9EOucmvVF3e6YfMt9PDH9Ukel VsxC22KLk9ivEjFSV9qgu6nJV7pR5WRMOZ2KuD7BqhF7t/AOusvtqHh3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbkqu3C8odhgrpW8+9zi2g5PFKfMB8GA1UdIwQY MBaAFFM5CxPJ70r8/QgSQRHm9j3DAWWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAt MzNkN2FjMzcwOTc5LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84OWM0YWItOTg0Yi00ZjZjLWJkZDAtMzNkN2FjMzcwOTc5 LzEvVXprTEU4bnZTdno5Q0JKQkVlYjJQY01CWmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjtVk3qk 89qQxC2hhMUQLni1pi+rdciygJ4C2VUz2NiE/G8vNSpS0ol/+X3Qp9J5imIOWqIz DK+suRCUHgJnE7sP5/YdvSlsH5aZcSnifrgbix6BK4bjrzMblF3jVx5vfao9qlrB rhCa9Kv+5Bgq7kzt7lSkUeNj060AlgBCDcDPeDksCjNqWaacunGEbBJcK++oYE25 kCTehMtf5SLH6YoEgYn9W4735tQQNfomxrZuRf7D/SEHEuoIK8zyit03si7ihh+7 Uqx7LJpTqZ4HjZWBk3hZRVXIopJP3dEaoHoqtQdUp9ZabTugfbablnXvmCrPncVn gMyN0TAQN3TvrA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:54 2026 by rpki-client