This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json) Hash identifier: vU8b4plhyJh3w9DGjo0+s+Gi1fA7gBrM2FL56DAqUxc= Subject key identifier: 0D:8E:DB:3B:01:56:98:13:EA:E3:04:F7:14:15:DF:6A:66:14:9D:67 Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Certificate serial: 019BF8AD2E92D70C52EE4C696EE4D0FC9C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft Manifest number: 07BB Signing time: Mon 26 Jan 2026 05:00:57 +0000 Manifest this update: Mon 26 Jan 2026 05:00:57 +0000 Manifest next update: Tue 27 Jan 2026 05:00:57 +0000 Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=) 2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=) 3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: Abf+xN3ONE1MLeudSVFY98EBDHgVz/txiKxiiODU29E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:2e:92:d7:0c:52:ee:4c:69:6e:e4:d0:fc:9c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171 Validity Not Before: Jan 26 05:00:57 2026 GMT Not After : Jan 27 05:00:57 2026 GMT Subject: CN=0d8edb3b01569813eae304f71415df6a66149d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:96:bb:63:3b:91:ba:46:0a:4b:fd:4d:c5: ab:79:89:ee:68:3d:19:c9:1d:20:8f:a6:c0:22:28: 38:68:0a:c6:0b:1c:77:5e:a2:6d:35:76:c3:25:24: da:49:d3:47:71:c0:e8:05:d0:08:c2:73:60:76:22: 48:34:17:64:5f:36:05:4c:c7:e4:7a:b5:45:2b:61: 82:0c:ee:1e:f4:ae:b0:fa:cc:08:d3:8c:c0:ee:49: df:d2:16:8d:8e:eb:b6:7f:00:d9:e1:8a:50:a0:13: 21:24:f4:8e:44:50:fe:63:12:00:96:c2:eb:d7:8a: cf:05:b8:85:f1:e4:00:0c:8a:9c:f6:5f:2d:f0:d8: 85:90:1d:1b:ab:e3:d4:b0:bd:54:32:20:c4:88:8a: d0:87:db:78:97:21:b9:7d:b1:55:7e:a9:3b:39:d8: 1d:8d:6c:cc:eb:e9:40:13:af:f7:cd:f3:b2:4e:3d: fd:00:2a:f6:9f:f2:96:12:75:6e:a6:2e:e2:4d:64: a6:21:01:20:79:e6:5f:6d:13:6a:47:6b:ff:41:1a: 2e:59:72:a4:35:cc:f5:fe:20:e4:6d:6c:d4:b4:7e: 7d:fd:a7:7a:3a:bb:ea:98:5c:40:1e:df:84:30:80: 36:9f:32:96:e8:56:0e:c4:cc:49:c3:4b:79:51:aa: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:DB:3B:01:56:98:13:EA:E3:04:F7:14:15:DF:6A:66:14:9D:67 X509v3 Authority Key Identifier: keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9e:b8:2f:ec:ed:c4:fc:24:77:c3:6b:3b:90:88:96:e8:82: 16:56:54:c1:87:3d:3f:ff:be:9a:c2:88:8b:07:6f:8d:23:52: 37:c8:f7:ec:cc:5c:2d:95:93:aa:29:76:40:4f:ba:3a:55:00: 01:43:fc:66:e2:a5:d1:8f:96:a0:01:b6:ef:c0:53:65:a6:c5: 50:2d:25:fc:6b:2c:43:05:00:c4:1e:d9:14:b1:1b:b6:0f:f1: 51:78:3d:93:c0:eb:9f:a7:a8:f1:15:38:ef:12:9b:b5:6c:28: 54:d5:d3:f3:12:bd:ff:40:37:08:f7:ef:e8:fc:86:b1:27:99: f9:bd:d5:60:60:9c:57:4f:73:e2:6a:64:7a:42:ba:99:6b:61: fd:24:3c:ba:4a:e2:4c:f6:ad:04:9a:29:4e:48:3b:82:1d:01: f5:15:b0:88:03:b2:ec:9b:6e:a9:81:fd:60:28:7e:43:c0:0c: d6:2a:d5:79:5a:6c:42:e9:cd:db:c6:20:ea:1f:09:eb:b0:d5: 3d:f2:3f:6e:24:7c:7c:6e:50:b5:6f:18:8c:10:56:57:17:de: 5c:cd:fa:09:f4:60:bd:fc:5c:fe:8d:d3:94:1b:54:a3:0e:27: 4e:b3:f6:86:09:0f:78:61:8f:a0:ca:ee:f5:71:7d:de:24:24: 6a:d3:38:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rS6S1wxS7kxpbuTQ/Jx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0 YjIxNzEwHhcNMjYwMTI2MDUwMDU3WhcNMjYwMTI3MDUwMDU3WjAzMTEwLwYDVQQD EygwZDhlZGIzYjAxNTY5ODEzZWFlMzA0ZjcxNDE1ZGY2YTY2MTQ5ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W6Wu2M7kbpGCkv9TcWreYnuaD0Z yR0gj6bAIig4aArGCxx3XqJtNXbDJSTaSdNHccDoBdAIwnNgdiJINBdkXzYFTMfk erVFK2GCDO4e9K6w+swI04zA7knf0haNjuu2fwDZ4YpQoBMhJPSORFD+YxIAlsLr 14rPBbiF8eQADIqc9l8t8NiFkB0bq+PUsL1UMiDEiIrQh9t4lyG5fbFVfqk7Odgd jWzM6+lAE6/3zfOyTj39ACr2n/KWEnVupi7iTWSmIQEgeeZfbRNqR2v/QRouWXKk Ncz1/iDkbWzUtH59/ad6OrvqmFxAHt+EMIA2nzKW6FYOxMxJw0t5Uap+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2O2zsBVpgT6uME9xQV32pmFJ1nMB8GA1UdIwQY MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJ64L+zt xPwkd8NrO5CIluiCFlZUwYc9P/++msKIiwdvjSNSN8j37MxcLZWTqil2QE+6OlUA AUP8ZuKl0Y+WoAG278BTZabFUC0l/GssQwUAxB7ZFLEbtg/xUXg9k8Drn6eo8RU4 7xKbtWwoVNXT8xK9/0A3CPfv6PyGsSeZ+b3VYGCcV09z4mpkekK6mWth/SQ8ukri TPatBJopTkg7gh0B9RWwiAOy7JtuqYH9YCh+Q8AM1irVeVpsQunN28Yg6h8J67DV PfI/biR8fG5QtW8YjBBWVxfeXM36CfRgvfxc/o3TlBtUow4nTrP2hgkPeGGPoMru 9XF93iQkatM4HA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:03 2026 by rpki-client