This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json) Hash identifier: HxD2td/CUNUdqInHpCyrQTYwnTDAlcdNmck0ePbCOuQ= Subject key identifier: 25:48:2C:22:10:71:F9:93:B3:11:4C:C5:D4:2A:C6:CF:FE:A4:3C:D4 Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153 Certificate serial: 019BF6508A7005A8CCED2F2FDDED179181D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft Manifest number: 16C5 Signing time: Sun 25 Jan 2026 18:00:31 +0000 Manifest this update: Sun 25 Jan 2026 18:00:31 +0000 Manifest next update: Mon 26 Jan 2026 18:00:31 +0000 Files and hashes: 1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=) 2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=) 3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: OmK4/Xabg8G5Xt2gZmf/6Ih6MSh1lXJcBx0xUtlkQKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:8a:70:05:a8:cc:ed:2f:2f:dd:ed:17:91:81:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153 Validity Not Before: Jan 25 18:00:31 2026 GMT Not After : Jan 26 18:00:31 2026 GMT Subject: CN=25482c221071f993b3114cc5d42ac6cffea43cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:7c:f1:bc:5d:14:37:aa:51:7f:9b:d3:ae: ed:14:e9:28:7a:cc:3e:62:75:98:ff:8a:17:82:5c: a8:de:4d:72:59:82:6f:eb:a3:8d:9e:a5:6e:f6:1d: d9:11:7e:02:63:58:b8:5f:34:5a:dd:d6:b8:ca:ef: bb:d7:77:db:69:ba:39:17:33:c4:df:06:e8:df:57: 53:09:c1:2f:24:bd:77:0f:61:74:20:74:ff:f6:78: 47:2b:74:d2:42:78:02:b6:26:6b:f0:89:a0:17:db: 42:b7:ca:f6:a6:23:84:41:5c:0d:97:86:11:be:21: d1:dc:0c:90:8c:ec:bb:a5:22:9d:26:85:50:a1:57: 25:20:9d:1e:84:83:c0:54:b2:7c:51:7e:60:e0:89: 48:c3:b4:b8:cd:26:e4:d8:9c:ae:92:8f:ee:a4:02: 48:c3:88:fa:59:43:35:5f:3c:54:2e:f6:b9:9a:27: 5a:90:eb:34:69:25:3f:fc:ed:c1:12:93:45:02:51: d6:b2:5e:cd:fe:75:88:ec:33:64:fa:e0:68:8e:ff: 83:6c:b7:12:ae:ca:99:4a:1b:0a:e8:35:c0:05:f1: 59:4f:ee:a7:5d:25:68:82:d1:9e:ae:d3:54:dd:7b: 85:7a:cc:26:54:25:e8:6a:1a:c5:9f:e6:fa:1b:e0: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:2C:22:10:71:F9:93:B3:11:4C:C5:D4:2A:C6:CF:FE:A4:3C:D4 X509v3 Authority Key Identifier: keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:97:01:eb:44:0f:f4:dd:f0:9d:d5:08:8c:1d:62:0f:d4:9c: 78:f3:09:66:f3:f8:39:72:6b:d6:1b:92:d7:02:32:3c:f9:fa: 8d:75:06:7f:7a:8e:41:bc:e1:25:dd:12:d1:69:3a:7c:51:9d: ec:37:40:f2:99:48:93:00:b2:ac:e8:d2:03:2e:54:f7:e3:6c: 52:16:f8:f7:6f:2d:24:ad:ce:3a:64:52:25:d3:c0:7b:62:b6: a3:7f:a4:f7:da:10:53:c4:65:31:fd:e6:67:12:04:08:88:af: 6d:09:5a:0e:3d:c4:f7:f5:3b:70:bb:71:72:17:1a:9a:5f:33: 72:1d:78:59:53:d5:76:d1:96:37:ae:24:b1:3b:0a:e7:47:97: 56:ae:65:f6:2a:13:60:92:cd:d8:ca:78:7c:98:1b:e5:1a:42: 85:97:1d:ca:e5:cb:83:5e:57:05:4f:88:c3:2f:5b:3a:d2:ae: 28:45:8f:c5:c2:ec:69:dc:59:cc:8b:10:e9:09:8c:77:0e:05: 95:cc:c6:3f:f2:f3:60:a9:24:d8:df:be:54:c7:ce:d3:d2:4e: 52:34:45:54:84:9a:f9:2d:f2:b6:e7:ab:b9:69:3a:e4:33:fe: 81:14:63:b6:dc:de:aa:31:86:28:54:cf:1a:f8:64:78:56:44: b5:7d:5c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UIpwBajM7S8v3e0XkYHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2 YjQxNTMwHhcNMjYwMTI1MTgwMDMxWhcNMjYwMTI2MTgwMDMxWjAzMTEwLwYDVQQD EygyNTQ4MmMyMjEwNzFmOTkzYjMxMTRjYzVkNDJhYzZjZmZlYTQzY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiR88bxdFDeqUX+b067tFOkoesw+ YnWY/4oXglyo3k1yWYJv66ONnqVu9h3ZEX4CY1i4XzRa3da4yu+713fbabo5FzPE 3wbo31dTCcEvJL13D2F0IHT/9nhHK3TSQngCtiZr8ImgF9tCt8r2piOEQVwNl4YR viHR3AyQjOy7pSKdJoVQoVclIJ0ehIPAVLJ8UX5g4IlIw7S4zSbk2Jyuko/upAJI w4j6WUM1XzxULva5midakOs0aSU//O3BEpNFAlHWsl7N/nWI7DNk+uBojv+DbLcS rsqZShsK6DXABfFZT+6nXSVogtGertNU3XuFeswmVCXoahrFn+b6G+B0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVILCIQcfmTsxFMxdQqxs/+pDzUMB8GA1UdIwQY MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpcB60QP 9N3wndUIjB1iD9ScePMJZvP4OXJr1huS1wIyPPn6jXUGf3qOQbzhJd0S0Wk6fFGd 7DdA8plIkwCyrOjSAy5U9+NsUhb4928tJK3OOmRSJdPAe2K2o3+k99oQU8RlMf3m ZxIECIivbQlaDj3E9/U7cLtxchcaml8zch14WVPVdtGWN64ksTsK50eXVq5l9ioT YJLN2Mp4fJgb5RpChZcdyuXLg15XBU+Iwy9bOtKuKEWPxcLsadxZzIsQ6QmMdw4F lczGP/LzYKkk2N++VMfO09JOUjRFVISa+S3ytueruWk65DP+gRRjttzeqjGGKFTP GvhkeFZEtX1cng== -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:55 2026 by rpki-client