This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json) Hash identifier: j6kHYCpSSH3NtvFaRfJibI576iqNm6yY08SREHjLPBI= Subject key identifier: E3:C8:93:CA:4F:4B:EF:BF:35:14:8B:6D:21:96:5D:A3:AB:C1:B1:BB Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Certificate serial: 019BF507733DC5CF2F4C2F534E07B49D583B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 12:01:04 +0000 Manifest this update: Sun 25 Jan 2026 12:01:04 +0000 Manifest next update: Mon 26 Jan 2026 12:01:04 +0000 Files and hashes: 1: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (hash: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g=) 2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: hCJ/dsBm/j5PltMSB4XsTroBh4sw3LDwe02CPM/HSgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:73:3d:c5:cf:2f:4c:2f:53:4e:07:b4:9d:58:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3 Validity Not Before: Jan 25 12:01:04 2026 GMT Not After : Jan 26 12:01:04 2026 GMT Subject: CN=e3c893ca4f4befbf35148b6d21965da3abc1b1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:37:5d:bd:b4:c0:8a:cb:15:9c:81:e9:76: 59:7d:45:dd:a7:de:64:df:79:00:a1:dc:dc:bb:e7: 9e:c8:da:0e:0e:d5:54:bf:fe:63:84:1c:0a:d9:ed: 4b:b3:d6:71:be:f1:9a:53:42:ad:0e:45:7b:77:e6: 32:44:eb:c1:65:da:25:da:cf:2c:27:d1:15:cc:3e: 12:ce:83:a4:3e:98:71:e0:f1:ab:42:7e:5f:41:41: 02:b7:67:fc:34:ba:dc:ee:2d:1b:08:81:69:54:03: 5b:13:54:17:b8:b9:b9:f2:e4:83:24:57:fc:f6:3e: 67:b4:68:c2:72:0a:0c:4d:c7:1f:dd:a6:4d:59:c7: 95:05:aa:39:df:7c:f4:7d:7d:4d:59:e0:bb:46:16: 93:e5:42:b7:8d:e9:42:d3:69:58:f7:54:c5:e9:f9: 86:4c:fe:0b:03:fa:6b:fc:5d:77:7d:fc:64:25:92: ec:86:06:cc:5a:23:7d:5a:2e:f9:22:ce:37:b5:79: 15:bb:d0:22:86:0b:57:44:58:1c:be:48:4b:10:b5: b9:9a:20:61:a0:ec:f0:64:f2:73:08:e2:99:df:ee: 07:79:d1:2f:82:51:7f:92:39:59:4d:e4:f9:ca:4a: 0f:b1:b5:a1:5c:a0:aa:d2:fa:94:b7:01:18:c4:84: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:93:CA:4F:4B:EF:BF:35:14:8B:6D:21:96:5D:A3:AB:C1:B1:BB X509v3 Authority Key Identifier: keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:26:37:7c:cf:cb:22:7f:a5:ee:56:44:b2:1c:c9:fc:ca:19: b1:64:df:b4:1f:a5:38:6e:c7:4f:06:3d:02:25:07:7e:4c:16: d2:03:64:0e:90:49:d4:dc:17:09:aa:33:e3:95:67:d8:16:d8: dd:cb:e9:58:ca:3c:f3:f6:7c:91:ec:15:8e:24:59:4b:07:5f: 30:63:d7:1d:81:e2:ab:91:a7:6d:0a:47:f3:a0:27:d6:b0:46: f0:3e:12:a0:b4:d5:b9:ec:bc:cf:eb:c9:9e:18:6a:ce:69:52: 4f:fc:a7:3a:b0:44:65:85:f7:20:31:d2:c6:ee:58:5c:ac:0f: c6:e3:b6:ae:18:23:2c:27:79:b4:56:36:f6:ea:25:b9:a1:29: b4:54:48:08:09:33:a9:0f:c7:53:79:06:56:fd:73:99:90:ba: be:7a:21:80:58:9b:ca:8c:9b:b9:e7:18:e2:af:38:bc:9a:35: fb:ba:d0:d4:06:9b:18:be:c4:c0:a4:b5:97:d5:4d:bd:dc:78: ba:47:66:90:a0:4c:e7:c2:af:09:81:f9:41:d5:62:1b:8c:ab: 21:5b:4d:e7:43:25:d7:65:34:80:94:b4:0a:d6:7e:a5:5b:ff: 74:66:1b:ff:8b:0f:13:9f:5f:b6:a3:64:52:92:9e:39:d0:54: 1a:d1:3a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3M9xc8vTC9TTge0nVg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl ZDViZjMwHhcNMjYwMTI1MTIwMTA0WhcNMjYwMTI2MTIwMTA0WjAzMTEwLwYDVQQD EyhlM2M4OTNjYTRmNGJlZmJmMzUxNDhiNmQyMTk2NWRhM2FiYzFiMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6k3Xb20wIrLFZyB6XZZfUXdp95k 33kAodzcu+eeyNoODtVUv/5jhBwK2e1Ls9ZxvvGaU0KtDkV7d+YyROvBZdol2s8s J9EVzD4SzoOkPphx4PGrQn5fQUECt2f8NLrc7i0bCIFpVANbE1QXuLm58uSDJFf8 9j5ntGjCcgoMTccf3aZNWceVBao533z0fX1NWeC7RhaT5UK3jelC02lY91TF6fmG TP4LA/pr/F13ffxkJZLshgbMWiN9Wi75Is43tXkVu9AihgtXRFgcvkhLELW5miBh oOzwZPJzCOKZ3+4HedEvglF/kjlZTeT5ykoPsbWhXKCq0vqUtwEYxITDUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPIk8pPS++/NRSLbSGWXaOrwbG7MB8GA1UdIwQY MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt ZjBjYWQ5ZmY2NWJlLzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiY3fM/L In+l7lZEshzJ/MoZsWTftB+lOG7HTwY9AiUHfkwW0gNkDpBJ1NwXCaoz45Vn2BbY 3cvpWMo88/Z8kewVjiRZSwdfMGPXHYHiq5GnbQpH86An1rBG8D4SoLTVuey8z+vJ nhhqzmlST/ynOrBEZYX3IDHSxu5YXKwPxuO2rhgjLCd5tFY29uoluaEptFRICAkz qQ/HU3kGVv1zmZC6vnohgFibyoybuecY4q84vJo1+7rQ1AabGL7EwKS1l9VNvdx4 ukdmkKBM58KvCYH5QdViG4yrIVtN50Ml12U0gJS0CtZ+pVv/dGYb/4sPE59ftqNk UpKeOdBUGtE6kw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:59 2026 by rpki-client