This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json) Hash identifier: jSJAF6cQD1lrGd8dVnz0l2FTP3kfW5WPeEZZibEsH9M= Subject key identifier: C7:E8:E1:EF:6A:B0:92:B2:88:79:08:93:AB:17:3E:ED:FB:DB:34:92 Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Certificate serial: 019BF5074ED52590FEF707C2B07CAA14BC7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft Manifest number: 02C8 Signing time: Sun 25 Jan 2026 12:00:55 +0000 Manifest this update: Sun 25 Jan 2026 12:00:55 +0000 Manifest next update: Mon 26 Jan 2026 12:00:55 +0000 Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=) 2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: yjbaDzUDFwI1twYplGvuN9x4UVBCGABR/YwaNLzWMTo=) 3: zIrBaICnnWBGzaOVT0G3zy6v1wk.roa (hash: 8frnrhVogql36O+DGf+cKkN0Nkp/HhcJaFlxtzlW+WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:4e:d5:25:90:fe:f7:07:c2:b0:7c:aa:14:bc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c Validity Not Before: Jan 25 12:00:55 2026 GMT Not After : Jan 26 12:00:55 2026 GMT Subject: CN=c7e8e1ef6ab092b288790893ab173eedfbdb3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:11:4d:b3:4d:7e:d5:d4:b3:6a:79:bd:fb: f7:19:38:bc:2c:ba:84:ed:e1:a0:23:ae:c8:6a:88: be:be:b7:ca:7f:f2:fe:98:25:41:92:86:31:25:8a: 2f:1a:20:7e:47:6f:e2:20:72:fd:6e:f8:e3:90:e1: 0c:62:b0:c3:12:94:55:2e:97:9d:c4:df:aa:4a:91: 7b:fa:9f:b4:2c:81:b8:e7:7c:78:55:12:13:a0:30: 46:cb:b2:38:80:82:60:61:cc:8a:0a:4b:98:eb:f8: 93:3b:7f:aa:2f:16:e2:c0:1a:2f:dc:4a:d8:0c:60: 8e:1b:54:23:9f:58:cb:26:91:4c:c6:27:bd:12:1c: 08:83:23:35:21:44:5f:50:f4:be:2a:60:7f:f9:fa: f5:a0:37:39:f0:48:b5:65:92:69:d8:43:26:1d:0f: c4:3b:03:f0:81:94:ba:cb:9a:51:0e:fc:91:10:ce: 65:4f:aa:5a:39:5a:50:7f:57:84:f6:6d:cd:2a:0d: 96:80:98:ff:6f:6e:00:7a:d0:b2:f9:ac:d7:7a:77: fa:03:3c:7e:e4:62:5a:ce:ce:30:36:16:7d:9e:79: d5:ae:01:11:18:24:66:9e:61:3d:c4:a2:26:1d:30: 27:5c:10:a6:c7:13:c3:0a:9c:df:d9:94:ed:fe:5f: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E8:E1:EF:6A:B0:92:B2:88:79:08:93:AB:17:3E:ED:FB:DB:34:92 X509v3 Authority Key Identifier: keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:29:aa:f9:8c:e4:ba:39:d5:ab:2a:7f:51:1b:28:db:97:e8: fa:e2:c3:91:95:94:49:f6:1d:16:28:95:cd:a8:b6:e6:61:de: d0:99:d2:e0:46:da:3f:6b:ec:d4:f6:21:dc:7c:a3:b4:40:17: d4:30:6e:bd:2b:58:a1:a5:dd:b5:db:87:f9:aa:a4:c9:e8:93: d3:f0:cb:d5:98:1d:5c:2f:d8:ed:16:a9:b2:e6:e7:45:a5:de: d4:f4:c2:21:f7:ce:37:c5:86:95:e3:30:55:09:8a:76:f4:a2: 10:ef:62:53:38:33:b9:20:93:a0:bf:ba:99:e2:f5:05:0f:30: 71:de:1c:8f:7c:34:15:80:66:fa:03:8a:db:0f:c0:55:6e:a5: 2d:87:49:96:6e:da:c8:11:b4:43:db:2d:ad:f6:fc:a9:33:db: 51:86:60:48:7a:ce:bf:4c:84:c2:3a:70:fd:81:c5:01:90:11: ac:58:ff:6a:e1:d3:ec:66:7a:d8:29:3a:4e:85:f9:b8:ba:2e: d0:c4:68:ea:b9:ca:eb:9c:18:99:1f:2d:63:dd:9b:af:0e:ba: e5:a3:0d:d8:7d:78:f1:34:b0:ab:b6:39:81:99:9a:3e:f4:17: a6:e7:c4:35:47:ed:14:4e:0b:b0:71:ae:60:5b:44:36:05:cb: 62:56:52:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B07VJZD+9wfCsHyqFLx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzOGRkMThiMTY5MmQ4YTNlNzcxMmQzZTZiOTI4YjA5YWEw YWU2NmMwHhcNMjYwMTI1MTIwMDU1WhcNMjYwMTI2MTIwMDU1WjAzMTEwLwYDVQQD EyhjN2U4ZTFlZjZhYjA5MmIyODg3OTA4OTNhYjE3M2VlZGZiZGIzNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmwRTbNNftXUs2p5vfv3GTi8LLqE 7eGgI67Iaoi+vrfKf/L+mCVBkoYxJYovGiB+R2/iIHL9bvjjkOEMYrDDEpRVLped xN+qSpF7+p+0LIG453x4VRIToDBGy7I4gIJgYcyKCkuY6/iTO3+qLxbiwBov3ErY DGCOG1Qjn1jLJpFMxie9EhwIgyM1IURfUPS+KmB/+fr1oDc58Ei1ZZJp2EMmHQ/E OwPwgZS6y5pRDvyREM5lT6paOVpQf1eE9m3NKg2WgJj/b24AetCy+azXenf6Azx+ 5GJazs4wNhZ9nnnVrgERGCRmnmE9xKImHTAnXBCmxxPDCpzf2ZTt/l/G7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfo4e9qsJKyiHkIk6sXPu372zSSMB8GA1UdIwQY MBaAFFON0YsWktij53EtPmuSiwmqCuZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUt MmViNzBhMzYwMmU5LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Y2IwZTktNTM3ZC00ZjZlLWI5OGUtMmViNzBhMzYwMmU5 LzEvVTQzUml4YVMyS1BuY1MwLWE1S0xDYW9LNW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Smq+Yzk ujnVqyp/URso25fo+uLDkZWUSfYdFiiVzai25mHe0JnS4EbaP2vs1PYh3HyjtEAX 1DBuvStYoaXdtduH+aqkyeiT0/DL1ZgdXC/Y7RapsubnRaXe1PTCIffON8WGleMw VQmKdvSiEO9iUzgzuSCToL+6meL1BQ8wcd4cj3w0FYBm+gOK2w/AVW6lLYdJlm7a yBG0Q9strfb8qTPbUYZgSHrOv0yEwjpw/YHFAZARrFj/auHT7GZ62Ck6ToX5uLou 0MRo6rnK65wYmR8tY92brw665aMN2H148TSwq7Y5gZmaPvQXpufENUftFE4LsHGu YFtENgXLYlZS8w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:11 2026 by rpki-client