This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json) Hash identifier: z09FiPfbQRFlzCGO0qB2v7n5pYydh4QikzuBe5+mRYo= Subject key identifier: A7:A0:63:5D:7B:E3:32:20:62:67:59:1C:F7:1D:4D:EB:47:09:1F:88 Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580 Certificate serial: 019BF42BDB23E857265843A76533D33130BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft Manifest number: 0C60 Signing time: Sun 25 Jan 2026 08:01:13 +0000 Manifest this update: Sun 25 Jan 2026 08:01:13 +0000 Manifest next update: Mon 26 Jan 2026 08:01:13 +0000 Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=) 2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: ZFPXLY/QkZX0YG1O+9JN4ZyVggLWsirV5TwaHqPXc2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:db:23:e8:57:26:58:43:a7:65:33:d3:31:30:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580 Validity Not Before: Jan 25 08:01:13 2026 GMT Not After : Jan 26 08:01:13 2026 GMT Subject: CN=a7a0635d7be332206267591cf71d4deb47091f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:e2:7b:d3:63:77:a3:9c:8e:64:db:56:3c: a0:07:f7:d7:6b:15:64:28:2d:0e:28:50:0d:3d:ea: f7:67:d4:75:b9:be:df:7c:59:70:72:d6:09:62:2f: 61:ec:ba:55:ec:de:4e:ce:e7:41:5a:81:e0:4c:ce: f3:ec:2a:e7:cd:96:98:a4:cf:e8:03:14:e4:2e:df: bc:63:2a:29:de:20:fb:5c:31:81:56:46:db:aa:4b: 45:d1:59:f9:56:a3:1c:07:d1:6c:b7:3c:b5:77:bc: e3:ba:24:13:1c:82:4b:30:32:b9:61:c6:0f:12:7f: d3:ba:88:b2:cb:01:22:5a:a5:9d:77:89:a1:30:51: 24:ca:60:f1:d2:42:7d:0b:d2:46:3b:5f:95:98:90: e1:ee:b7:6f:e5:00:71:a5:43:0d:5f:a6:09:4a:f2: c5:10:bb:0d:c0:e5:c6:59:a0:62:a7:3c:e6:9c:b5: eb:18:d7:5b:d6:dd:cb:63:b3:66:6e:95:96:9d:86: d1:b6:79:6c:ac:ba:99:0b:9b:ac:12:1e:47:07:de: 60:10:96:be:6a:dc:24:97:0f:7d:c9:25:10:41:c2: df:dc:47:4d:5d:ca:38:4e:94:b1:fa:10:0b:50:77: a6:76:cb:f4:84:06:8c:c6:65:c9:51:a2:64:f1:7c: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:63:5D:7B:E3:32:20:62:67:59:1C:F7:1D:4D:EB:47:09:1F:88 X509v3 Authority Key Identifier: keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:52:8e:ea:99:5f:1b:ca:40:ab:46:2d:14:c3:3a:b0:ee:32: 87:f1:e7:6d:f7:1c:75:77:07:bc:48:7a:f4:d1:38:93:31:a3: 0f:2d:61:18:56:dc:06:ed:3e:55:9d:e3:c4:2b:a2:7a:db:3b: e5:96:50:b9:54:00:9f:3d:7e:a9:6a:3b:be:6b:f5:45:17:6a: bd:6e:35:ae:2e:23:42:6a:39:8e:bd:3a:f3:2e:45:62:f9:d1: 58:09:dc:8e:e8:2f:fa:a2:a2:5f:9f:9c:b6:94:ac:a4:80:6b: 94:f8:36:96:87:e9:a1:ab:9a:07:9c:97:6e:c2:d6:89:a0:e4: 96:01:55:eb:0b:b8:2e:16:de:4a:a2:f5:7b:8e:e4:fa:b3:64: d8:e2:c2:5b:ac:16:7c:4a:76:d6:38:8b:4a:fb:fb:b3:be:ec: ea:d1:23:84:b3:4c:69:d9:ef:68:a9:ba:cb:07:76:e0:0c:81: b6:46:78:97:46:8e:42:05:5c:42:a4:7b:d3:67:0d:ed:bd:3d: b9:f3:6c:3b:ec:7b:e6:0d:e3:47:e9:c4:33:aa:c3:87:55:ab: d9:6c:1f:95:c2:5a:1e:87:5d:fa:4c:ec:7a:89:2f:22:6a:62: 50:8e:8f:5b:6c:45:c7:8b:c0:cd:8d:46:ce:50:fa:97:b0:81: e7:5c:e6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9sj6FcmWEOnZTPTMTC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz NmE1ODAwHhcNMjYwMTI1MDgwMTEzWhcNMjYwMTI2MDgwMTEzWjAzMTEwLwYDVQQD EyhhN2EwNjM1ZDdiZTMzMjIwNjI2NzU5MWNmNzFkNGRlYjQ3MDkxZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQrie9Njd6OcjmTbVjygB/fXaxVk KC0OKFANPer3Z9R1ub7ffFlwctYJYi9h7LpV7N5OzudBWoHgTM7z7CrnzZaYpM/o AxTkLt+8Yyop3iD7XDGBVkbbqktF0Vn5VqMcB9Fstzy1d7zjuiQTHIJLMDK5YcYP En/TuoiyywEiWqWdd4mhMFEkymDx0kJ9C9JGO1+VmJDh7rdv5QBxpUMNX6YJSvLF ELsNwOXGWaBipzzmnLXrGNdb1t3LY7NmbpWWnYbRtnlsrLqZC5usEh5HB95gEJa+ atwklw99ySUQQcLf3EdNXco4TpSx+hALUHemdsv0hAaMxmXJUaJk8Xy7TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKegY1174zIgYmdZHPcdTetHCR+IMB8GA1UdIwQY MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt ODUyN2M5YjNlNzVmLzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVKO6plf G8pAq0YtFMM6sO4yh/HnbfccdXcHvEh69NE4kzGjDy1hGFbcBu0+VZ3jxCuiets7 5ZZQuVQAnz1+qWo7vmv1RRdqvW41ri4jQmo5jr068y5FYvnRWAncjugv+qKiX5+c tpSspIBrlPg2lofpoauaB5yXbsLWiaDklgFV6wu4LhbeSqL1e47k+rNk2OLCW6wW fEp21jiLSvv7s77s6tEjhLNMadnvaKm6ywd24AyBtkZ4l0aOQgVcQqR702cN7b09 ufNsO+x75g3jR+nEM6rDh1Wr2WwflcJaHodd+kzseokvImpiUI6PW2xFx4vAzY1G zlD6l7CB51zmGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:04 2026 by rpki-client