This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft File: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft (raw, json) Hash identifier: 9w9wplUUEQsEWpGGwt/aFOivK5S1hTdLeK/6zncvMqc= Subject key identifier: E4:9A:C2:82:E1:DA:90:0F:B7:5D:6E:72:B8:43:04:63:45:4A:EB:DE Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019BF318F5DA11768A18C360FCE0FAE39D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 03:00:57 +0000 Manifest this update: Sun 25 Jan 2026 03:00:57 +0000 Manifest next update: Mon 26 Jan 2026 03:00:57 +0000 Files and hashes: 1: 1-r5h5M4z_etRHKub_p7uYkuua2k.roa (hash: 7956C8JjzEQ12pRs9Y4qeyvvm8jRcbkAr628jmTx/bQ=) 2: Grqr3zYOgPbnYQO8DA4VgsDDUrM.roa (hash: aJOAZYE1fZOQaAtwLCBBewOwLiqrU497TanU9W5w1Jg=) 3: UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl (hash: wUQ4kvpCzh7dBTwWakg0c7Gu4Cusm/vsYAMWL2DmI2Y=) 4: iw5F2GqviAuCI8Yj5bZostsjf4s.roa (hash: nUPb8N6EAyjoLbqfkef2pSzNUsPnNcWng7BDtVUC41s=) 5: nF-YJnDe36GSTrMdE4OaqcL2ytE.roa (hash: Vy2/IceEB6KcpqIu9v4108H+Hr6sCPfLoeeW13cg1mQ=) 6: vH1QevNKFQddFeDMZ-jQc4mM4VQ.roa (hash: 4l/78DSO4hiILYf4bnV4O0t6abXmefY1wPnf8x4yQ70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:f5:da:11:76:8a:18:c3:60:fc:e0:fa:e3:9d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 25 03:00:57 2026 GMT Not After : Jan 26 03:00:57 2026 GMT Subject: CN=e49ac282e1da900fb75d6e72b8430463454aebde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:f8:ea:b0:72:e0:a9:ae:af:df:78:00:81: ad:24:85:2d:0c:f7:8d:fd:38:37:bc:4b:11:16:41: 5e:3b:3f:eb:7e:da:1c:11:de:f1:26:4d:9a:2c:e8: 77:b9:2a:15:4c:9e:91:78:a5:a9:7b:20:73:a4:f8: d5:e6:9a:88:6f:47:cd:7e:b1:d3:c7:5d:5f:9e:8c: 68:88:1f:b8:ea:2e:7e:8d:ab:af:d2:f0:05:0a:df: e3:85:e3:77:54:74:84:55:d3:1b:cf:9b:d9:aa:cc: 87:17:94:b2:85:7d:18:98:b9:b4:a6:76:10:2c:ab: b5:8f:03:1a:26:fd:ab:96:fa:92:b3:41:3f:78:b7: 2f:9f:af:ac:34:46:49:d4:f6:2c:73:b9:70:21:a5: 96:2e:77:91:e1:02:bb:12:a2:de:a8:97:e8:12:d5: de:39:85:af:4b:d7:c1:a1:b8:e9:f0:4b:69:f2:3a: 8f:08:6f:66:17:2a:fb:de:80:d3:c6:ce:2c:71:e0: 14:ca:50:b7:28:ce:7e:eb:65:5b:1a:d8:95:5d:4c: ed:25:b2:23:57:fe:77:5b:af:f2:2f:d7:fd:96:a3: 20:0d:ca:a1:1c:54:b0:cd:46:87:b2:9c:76:40:56: 84:fb:ec:60:b6:90:eb:5a:f3:11:1d:2d:66:52:09: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9A:C2:82:E1:DA:90:0F:B7:5D:6E:72:B8:43:04:63:45:4A:EB:DE X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e0:ab:23:bd:f6:49:ac:7a:81:06:81:e2:61:7a:47:7f:1a: dc:69:7c:b8:d7:8e:6f:d4:b1:d5:83:20:a5:38:d7:f3:f1:f6: 32:aa:1b:9a:0f:a5:62:cc:b1:54:16:45:8d:70:f8:f0:c9:e8: 0a:ab:c7:ce:29:44:1b:73:c7:e5:da:1d:3d:54:b4:8c:83:03: 25:e7:df:55:c9:ce:ed:a8:93:61:76:53:8f:96:0e:3d:f7:92: 09:9d:cd:67:e1:12:90:b6:83:7d:ed:57:80:81:cc:52:e1:8d: 35:85:26:06:8f:3a:0f:a2:54:22:77:c9:83:2b:68:15:4a:0a: 32:02:14:1d:f1:fd:5a:03:b5:53:ac:67:d2:98:64:6b:6f:f7: 55:0c:5c:c3:98:eb:81:95:f6:31:44:fd:c5:fe:34:71:40:86: c9:48:e4:8e:6f:05:a1:27:f8:c4:e5:48:08:b2:75:3c:81:f2: 79:53:b8:b8:77:1e:05:54:8c:94:3b:7e:bc:98:58:bf:ae:25: 0e:47:50:4b:c9:b7:cc:1d:1e:dd:a2:11:81:0b:ed:06:eb:66: 84:bb:b2:b4:07:23:de:f3:72:9b:45:b0:dc:1f:b1:19:be:59: 41:50:9c:31:a6:4e:aa:b5:be:26:a5:f0:0d:0e:45:79:47:66: 50:46:22:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGPXaEXaKGMNg/OD6451DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTI1MDMwMDU3WhcNMjYwMTI2MDMwMDU3WjAzMTEwLwYDVQQD EyhlNDlhYzI4MmUxZGE5MDBmYjc1ZDZlNzJiODQzMDQ2MzQ1NGFlYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35L46rBy4Kmur994AIGtJIUtDPeN /Tg3vEsRFkFeOz/rftocEd7xJk2aLOh3uSoVTJ6ReKWpeyBzpPjV5pqIb0fNfrHT x11fnoxoiB+46i5+jauv0vAFCt/jheN3VHSEVdMbz5vZqsyHF5SyhX0YmLm0pnYQ LKu1jwMaJv2rlvqSs0E/eLcvn6+sNEZJ1PYsc7lwIaWWLneR4QK7EqLeqJfoEtXe OYWvS9fBobjp8Etp8jqPCG9mFyr73oDTxs4sceAUylC3KM5+62VbGtiVXUztJbIj V/53W6/yL9f9lqMgDcqhHFSwzUaHspx2QFaE++xgtpDrWvMRHS1mUgkCBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSawoLh2pAPt11ucrhDBGNFSuveMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOCrI732 Sax6gQaB4mF6R38a3Gl8uNeOb9Sx1YMgpTjX8/H2Mqobmg+lYsyxVBZFjXD48Mno CqvHzilEG3PH5dodPVS0jIMDJeffVcnO7aiTYXZTj5YOPfeSCZ3NZ+ESkLaDfe1X gIHMUuGNNYUmBo86D6JUInfJgytoFUoKMgIUHfH9WgO1U6xn0phka2/3VQxcw5jr gZX2MUT9xf40cUCGyUjkjm8FoSf4xOVICLJ1PIHyeVO4uHceBVSMlDt+vJhYv64l DkdQS8m3zB0e3aIRgQvtButmhLuytAcj3vNym0Ww3B+xGb5ZQVCcMaZOqrW+JqXw DQ5FeUdmUEYiqw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:40 2026 by rpki-client