This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json) Hash identifier: z0uWYVkDMpVA717QrdAgbGgSSeEb3TvyKh68QL46z7w= Subject key identifier: BD:2E:B1:5F:34:A8:AB:C1:9F:67:67:71:22:A4:C4:D4:BE:DF:98:68 Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019BF57524E9FD4B3B3AAC5E394B560D89DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 14:00:53 +0000 Manifest this update: Sun 25 Jan 2026 14:00:53 +0000 Manifest next update: Mon 26 Jan 2026 14:00:53 +0000 Files and hashes: 1: 0CMMHlXSsBn1V8duZO8dQ6KWNlw.roa (hash: vYH058LPTeBTxYtXXv1wPcT5G9aSUIWfSPrADEYL1Lo=) 2: 4anqovF-fJBBhmBYRrbDclJ-kUA.roa (hash: kPViEs2Fr3y3duugScJzKv03Gg2xLEyx3ip0Wb1jWnc=) 3: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=) 4: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=) 5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: Ekl394jgR97YuH04vmVIkdZ5ImBmL1N3sCr41AlzhBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:24:e9:fd:4b:3b:3a:ac:5e:39:4b:56:0d:89:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Jan 25 14:00:53 2026 GMT Not After : Jan 26 14:00:53 2026 GMT Subject: CN=bd2eb15f34a8abc19f67677122a4c4d4bedf9868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:a7:58:37:56:98:e5:c1:45:f9:6d:5d:46: 14:71:e2:dd:d2:29:76:b9:b1:47:7e:19:b1:5f:9f: 7a:71:e2:2c:36:83:04:69:28:57:29:9b:13:7f:9c: 7b:92:f4:9c:47:b9:74:31:1f:ae:b3:ab:75:1f:01: da:64:fb:ce:2f:34:d4:b0:b5:1a:da:40:38:de:ce: 1a:df:84:c5:52:60:ca:10:46:5c:bf:44:8a:bd:8f: 77:53:28:18:8f:71:e7:23:1b:89:85:2f:ff:83:e3: 70:75:95:cc:61:48:32:0f:c9:89:7d:be:b3:8d:43: 73:9b:2a:d5:cb:10:b3:1e:44:10:70:90:a3:3c:79: 0d:10:c4:99:0c:db:2c:cb:1f:44:c1:40:45:dc:6f: d1:3d:c0:0d:bb:38:8e:71:04:b4:71:ae:e9:41:84: 39:3a:5b:ec:87:14:a9:90:1f:08:88:47:cf:75:9b: 36:75:70:44:7d:57:e9:93:7e:8b:76:7a:7b:b3:52: b0:73:48:d7:09:0e:de:08:1b:24:12:77:f1:75:08: 06:f8:8e:5f:f9:84:34:c4:cf:1e:ae:58:83:26:0d: 8a:5e:0e:f3:34:5c:8b:cb:d9:da:c8:3b:27:51:92: 13:31:3a:39:ba:2c:01:51:eb:92:5f:0d:6a:ce:63: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:B1:5F:34:A8:AB:C1:9F:67:67:71:22:A4:C4:D4:BE:DF:98:68 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1f:53:97:95:3f:5b:e6:93:72:b9:cf:98:eb:c3:6a:f7:49: ee:19:35:2b:80:11:83:2f:e0:7e:f5:a1:27:61:7d:a1:b2:f7: 56:b7:cc:42:80:b6:56:95:aa:8f:45:79:be:56:82:be:00:35: 83:50:b5:8e:e2:77:a4:42:50:cb:4b:62:f6:71:95:3f:7a:99: 59:c7:c6:5e:f9:64:27:53:aa:58:70:d4:23:4c:8a:2d:a9:dd: 07:7a:1b:b4:99:1a:e4:3d:ba:b0:bc:3f:5a:e9:54:81:2a:88: 9a:c6:a6:27:58:62:90:86:d0:9f:06:ef:b5:77:cd:3f:8a:53: 29:95:42:b1:80:94:56:69:e5:55:18:59:9a:b7:64:9f:a4:12: f8:2e:e8:db:d3:7f:74:99:b7:fa:c5:97:1e:a6:c5:3b:cc:a4: a9:ad:c0:34:13:eb:6c:f9:f1:dc:c2:11:76:14:61:65:3e:51: 18:6e:55:1e:2a:cc:33:13:db:6a:a2:42:bf:c3:8b:75:27:f9: 27:2e:87:ba:fd:a5:8f:4d:46:e7:18:cf:1f:7a:1a:2d:45:72: 4a:78:5f:19:29:d6:59:4d:b2:5c:f6:34:58:d6:7e:28:af:ee: fd:67:d0:05:ea:cf:de:fb:b5:de:49:a3:fe:ff:bf:ff:a4:ed: 17:0d:99:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSTp/Us7OqxeOUtWDYneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjYwMTI1MTQwMDUzWhcNMjYwMTI2MTQwMDUzWjAzMTEwLwYDVQQD EyhiZDJlYjE1ZjM0YThhYmMxOWY2NzY3NzEyMmE0YzRkNGJlZGY5ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieunWDdWmOXBRfltXUYUceLd0il2 ubFHfhmxX596ceIsNoMEaShXKZsTf5x7kvScR7l0MR+us6t1HwHaZPvOLzTUsLUa 2kA43s4a34TFUmDKEEZcv0SKvY93UygYj3HnIxuJhS//g+NwdZXMYUgyD8mJfb6z jUNzmyrVyxCzHkQQcJCjPHkNEMSZDNssyx9EwUBF3G/RPcANuziOcQS0ca7pQYQ5 OlvshxSpkB8IiEfPdZs2dXBEfVfpk36Ldnp7s1Kwc0jXCQ7eCBskEnfxdQgG+I5f +YQ0xM8erliDJg2KXg7zNFyLy9nayDsnUZITMTo5uiwBUeuSXw1qzmMhqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0usV80qKvBn2dncSKkxNS+35hoMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR9Tl5U/ W+aTcrnPmOvDavdJ7hk1K4ARgy/gfvWhJ2F9obL3VrfMQoC2VpWqj0V5vlaCvgA1 g1C1juJ3pEJQy0ti9nGVP3qZWcfGXvlkJ1OqWHDUI0yKLandB3obtJka5D26sLw/ WulUgSqImsamJ1hikIbQnwbvtXfNP4pTKZVCsYCUVmnlVRhZmrdkn6QS+C7o29N/ dJm3+sWXHqbFO8ykqa3ANBPrbPnx3MIRdhRhZT5RGG5VHirMMxPbaqJCv8OLdSf5 Jy6Huv2lj01G5xjPH3oaLUVySnhfGSnWWU2yXPY0WNZ+KK/u/WfQBerP3vu13kmj /v+//6TtFw2ZuQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:45 2026 by rpki-client