This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json) Hash identifier: ZYNYiK12ZbQ+2TWZL7phyiFFyngfx1UazfKhzBS4KVE= Subject key identifier: C1:4E:4F:F0:F5:0A:C8:D1:9F:B6:74:99:79:73:6A:04:71:3A:19:48 Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87 Certificate serial: 019BF650A74660C4A7D705B89DEC2CDA474F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft Manifest number: 01A3 Signing time: Sun 25 Jan 2026 18:00:39 +0000 Manifest this update: Sun 25 Jan 2026 18:00:39 +0000 Manifest next update: Mon 26 Jan 2026 18:00:39 +0000 Files and hashes: 1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=) 2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: MXEOXal51laFh4Fxt+1502BPFwKtK6CDqREYamu2XmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:a7:46:60:c4:a7:d7:05:b8:9d:ec:2c:da:47:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87 Validity Not Before: Jan 25 18:00:39 2026 GMT Not After : Jan 26 18:00:39 2026 GMT Subject: CN=c14e4ff0f50ac8d19fb6749979736a04713a1948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:72:dd:04:76:94:d0:34:1b:00:79:79:c9: b0:30:17:f5:9f:a4:4a:42:c9:8e:78:70:a5:44:e6: 10:11:66:7d:db:ce:8c:f4:1f:90:42:45:48:39:67: f0:29:7a:62:84:7c:0f:22:2a:57:82:26:4d:fa:3c: 43:13:30:47:29:20:c7:f5:22:6f:60:19:e8:22:0a: 84:cd:32:3c:5c:d9:67:22:9f:1c:a2:c6:0e:4f:83: 11:47:6d:5f:ae:d7:84:f2:dc:ee:ac:ca:81:4d:71: c8:5e:7b:0a:b2:90:52:7e:02:c3:02:7b:50:a5:f4: 07:e2:94:34:93:6d:fb:07:8b:b4:a6:ac:96:74:d6: 94:f0:9f:0d:e0:86:b9:c1:12:cd:8a:d1:9f:9a:55: b7:5f:48:a9:a1:bc:ff:c0:bb:be:ae:af:1e:5c:34: 1f:fa:5e:4d:bd:f7:ee:aa:92:0f:e5:48:3e:a7:03: 22:0f:cf:dd:db:fd:c3:3b:55:e2:f9:66:f4:7a:31: 49:8a:40:81:b6:3c:48:cf:97:56:25:60:2e:04:d6: 25:ad:60:ce:16:fe:13:9f:dd:80:21:b9:e4:d5:8f: 72:25:b6:20:55:90:36:9e:7a:c5:d2:f0:ce:21:95: 38:43:c3:f7:43:f7:98:71:bc:00:33:9d:a7:04:38: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:4F:F0:F5:0A:C8:D1:9F:B6:74:99:79:73:6A:04:71:3A:19:48 X509v3 Authority Key Identifier: keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:82:c1:19:f5:d3:84:38:84:49:ba:b0:1f:71:12:94:47: 85:66:f1:e8:0d:ec:0f:52:24:30:84:3f:8c:d7:8b:18:58:55: bd:34:72:7a:ea:35:80:f2:7e:d0:61:17:14:f7:3d:77:27:43: a6:9d:3d:a6:3b:8c:3a:3e:1f:35:6d:17:c4:2d:b6:4b:27:d6: b0:02:44:55:c9:3b:4c:19:37:b5:8a:27:e8:71:da:48:71:b1: df:25:d6:21:82:f9:79:04:66:d8:03:b5:66:3d:22:5e:92:86: 68:c1:e9:05:0c:06:1d:ba:58:27:53:86:94:3e:12:c9:94:86: 91:08:ed:02:2f:e5:0b:04:96:11:c3:87:97:e9:f4:24:59:d4: af:25:43:a1:2e:c6:d0:1f:d5:99:15:ff:29:c0:70:e8:b3:31: 74:d7:7c:3c:b8:e8:8c:62:7f:74:68:46:70:4f:d9:b2:da:c7: 8b:00:02:a4:51:1d:68:1c:3a:91:f9:20:5d:0e:f0:2a:37:49: c9:59:f4:47:69:72:1d:37:78:75:21:00:62:4b:9c:ca:21:57: 8f:be:e5:cb:53:87:ae:be:97:ed:d2:ed:13:59:cf:93:41:b6: 86:31:d2:ed:59:40:8c:2e:eb:86:5b:65:57:40:c5:6a:88:96: 2f:28:95:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKdGYMSn1wW4news2kdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NjU4NWQwOGI5N2U2NzlmMDgyOGJmMTAyYmVhYjUxZGNk YWZhODcwHhcNMjYwMTI1MTgwMDM5WhcNMjYwMTI2MTgwMDM5WjAzMTEwLwYDVQQD EyhjMTRlNGZmMGY1MGFjOGQxOWZiNjc0OTk3OTczNmEwNDcxM2ExOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIty3QR2lNA0GwB5ecmwMBf1n6RK QsmOeHClROYQEWZ9286M9B+QQkVIOWfwKXpihHwPIipXgiZN+jxDEzBHKSDH9SJv YBnoIgqEzTI8XNlnIp8cosYOT4MRR21frteE8tzurMqBTXHIXnsKspBSfgLDAntQ pfQH4pQ0k237B4u0pqyWdNaU8J8N4Ia5wRLNitGfmlW3X0ipobz/wLu+rq8eXDQf +l5NvffuqpIP5Ug+pwMiD8/d2/3DO1Xi+Wb0ejFJikCBtjxIz5dWJWAuBNYlrWDO Fv4Tn92AIbnk1Y9yJbYgVZA2nnrF0vDOIZU4Q8P3Q/eYcbwAM52nBDjy7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFOT/D1CsjRn7Z0mXlzagRxOhlIMB8GA1UdIwQY MBaAFLhlhdCLl+Z58IKL8QK+q1Hc2vqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgt NGZhZGNiMTgyYzVhLzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84OTM2ZGEtZjIwYi00NWU3LTk5NDgtNGZhZGNiMTgyYzVh LzEvdUdXRjBJdVg1bm53Z292eEFyNnJVZHphLW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCWCwRn1 04Q4hEm6sB9xEpRHhWbx6A3sD1IkMIQ/jNeLGFhVvTRyeuo1gPJ+0GEXFPc9dydD pp09pjuMOj4fNW0XxC22SyfWsAJEVck7TBk3tYon6HHaSHGx3yXWIYL5eQRm2AO1 Zj0iXpKGaMHpBQwGHbpYJ1OGlD4SyZSGkQjtAi/lCwSWEcOHl+n0JFnUryVDoS7G 0B/VmRX/KcBw6LMxdNd8PLjojGJ/dGhGcE/ZstrHiwACpFEdaBw6kfkgXQ7wKjdJ yVn0R2lyHTd4dSEAYkucyiFXj77ly1OHrr6X7dLtE1nPk0G2hjHS7VlAjC7rhltl V0DFaoiWLyiVIg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:27 2026 by rpki-client