This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json) Hash identifier: oLdpYrAVzX71wHglo+mhOJu8zNXsuSVKosOSYCw5Vzk= Subject key identifier: 76:57:38:50:34:E0:C2:33:53:62:CB:15:37:C9:D5:25:5D:8C:79:38 Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Certificate serial: 019BF87628BDCE442EB84B8475069F20B76C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft Manifest number: 1539 Signing time: Mon 26 Jan 2026 04:00:51 +0000 Manifest this update: Mon 26 Jan 2026 04:00:51 +0000 Manifest next update: Tue 27 Jan 2026 04:00:51 +0000 Files and hashes: 1: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (hash: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o=) 2: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: tfUbM7laBz/yrSQMcKH/kyHuKvCj6YwZy/ueHm7IOy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:28:bd:ce:44:2e:b8:4b:84:75:06:9f:20:b7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Validity Not Before: Jan 26 04:00:51 2026 GMT Not After : Jan 27 04:00:51 2026 GMT Subject: CN=7657385034e0c2335362cb1537c9d5255d8c7938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:0f:3b:d0:73:a7:4d:0e:e5:96:48:ee:e2: 4a:21:f6:b5:6d:53:24:50:8c:7c:d7:6b:3f:b4:dc: cd:8e:64:81:ee:32:5c:fc:ec:73:89:2a:97:91:15: c9:2b:89:e4:86:ac:5f:1a:99:4a:6f:07:0d:20:f4: be:74:27:72:b8:32:50:49:ca:1e:7b:4c:04:c4:ec: 39:92:9c:bb:4a:8d:c3:2c:a8:64:7e:79:09:be:bb: 69:cc:59:e4:5c:79:f3:61:d5:33:04:39:ae:5e:c3: de:2f:79:ae:fe:72:b6:69:93:db:ea:11:51:32:89: ae:97:35:29:09:b3:ea:dc:0b:5a:f8:87:b9:02:33: 8f:3e:47:ac:9f:72:07:2c:00:12:ca:fc:a5:22:ff: c3:44:e5:57:6c:b7:53:3e:89:35:cd:95:6c:9f:ef: e4:13:cc:8a:e6:8c:cf:83:1b:2e:d0:9f:f6:4b:7f: 13:18:b3:98:23:c6:db:7a:29:46:fc:fd:3e:2e:ec: 37:3f:c7:ba:99:7d:f2:da:95:bf:2e:c9:6c:60:95: 2f:2a:94:90:1b:07:ec:0f:a3:45:26:52:17:2b:53: a9:a2:83:0c:69:87:68:ab:83:a6:11:c7:24:b1:83: 79:26:bb:dd:4a:8a:e9:e3:9d:fc:52:9d:5c:54:22: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:38:50:34:E0:C2:33:53:62:CB:15:37:C9:D5:25:5D:8C:79:38 X509v3 Authority Key Identifier: keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f1:57:de:79:5b:7e:de:f6:21:c4:15:cd:84:9d:ed:0b:f5: 85:a6:00:56:99:f5:33:79:eb:74:2a:10:3b:15:10:6c:38:a7: a7:f4:94:e2:5d:ce:b7:73:42:12:9b:af:4b:09:ca:65:b4:ab: 0b:5b:05:76:1e:74:1f:71:ee:02:67:9b:84:23:93:69:5b:0e: da:97:b6:6e:83:30:b6:2a:08:6c:ac:5a:8c:4f:02:65:a0:12: 05:cc:ee:94:a2:49:75:59:58:d7:94:5d:a0:6c:a7:bc:62:cd: 8c:23:3b:86:ce:eb:49:03:ec:9d:9a:01:64:f8:ef:4a:e1:37: d2:25:ff:20:c2:a9:60:99:3b:4d:8e:1a:7b:9a:6b:92:52:b1: f5:0e:92:65:ad:be:e9:66:29:c0:b0:01:f1:a2:d8:7d:66:8b: ee:f8:a6:2d:0e:92:d8:89:4d:fe:4f:2a:03:bf:3c:bd:1f:fb: 26:c2:ca:3c:b7:09:17:d4:ee:91:5b:e4:6e:cc:b4:2d:72:5b: 78:0f:2e:f8:c9:5d:8d:91:02:0a:30:bb:2b:5c:ce:a9:5c:e4: 1e:42:b7:6b:90:c1:10:83:d2:ec:f8:f5:31:9f:ed:9e:02:d6: 99:60:9e:75:70:13:db:2d:2c:a5:e1:88:33:cc:39:fa:3f:0c: db:df:ca:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dii9zkQuuEuEdQafILdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz MjY1OGIwHhcNMjYwMTI2MDQwMDUxWhcNMjYwMTI3MDQwMDUxWjAzMTEwLwYDVQQD Eyg3NjU3Mzg1MDM0ZTBjMjMzNTM2MmNiMTUzN2M5ZDUyNTVkOGM3OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD8PO9Bzp00O5ZZI7uJKIfa1bVMk UIx812s/tNzNjmSB7jJc/OxziSqXkRXJK4nkhqxfGplKbwcNIPS+dCdyuDJQScoe e0wExOw5kpy7So3DLKhkfnkJvrtpzFnkXHnzYdUzBDmuXsPeL3mu/nK2aZPb6hFR MomulzUpCbPq3Ata+Ie5AjOPPkesn3IHLAASyvylIv/DROVXbLdTPok1zZVsn+/k E8yK5ozPgxsu0J/2S38TGLOYI8bbeilG/P0+Luw3P8e6mX3y2pW/LslsYJUvKpSQ GwfsD6NFJlIXK1OpooMMaYdoq4OmEccksYN5JrvdSorp4538Up1cVCJDvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZXOFA04MIzU2LLFTfJ1SVdjHk4MB8GA1UdIwQY MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt NTliY2UzMTljMWNiLzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/FX3nlb ft72IcQVzYSd7Qv1haYAVpn1M3nrdCoQOxUQbDinp/SU4l3Ot3NCEpuvSwnKZbSr C1sFdh50H3HuAmebhCOTaVsO2pe2boMwtioIbKxajE8CZaASBczulKJJdVlY15Rd oGynvGLNjCM7hs7rSQPsnZoBZPjvSuE30iX/IMKpYJk7TY4ae5prklKx9Q6SZa2+ 6WYpwLAB8aLYfWaL7vimLQ6S2IlN/k8qA788vR/7JsLKPLcJF9TukVvkbsy0LXJb eA8u+MldjZECCjC7K1zOqVzkHkK3a5DBEIPS7Pj1MZ/tngLWmWCedXAT2y0speGI M8w5+j8M29/KSA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client