This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json) Hash identifier: fc/8uBTKXyiahaV9J/iaLQfI6N1KmYpGVls3RjKhSsQ= Subject key identifier: 17:AB:C8:CA:9D:32:F6:E3:A4:C7:5D:2A:48:E9:14:3B:C0:DE:2E:1C Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Certificate serial: 019BF3BE098A3D10B4895F2B5F9482EE1A5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft Manifest number: 0F76 Signing time: Sun 25 Jan 2026 06:01:16 +0000 Manifest this update: Sun 25 Jan 2026 06:01:16 +0000 Manifest next update: Mon 26 Jan 2026 06:01:16 +0000 Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=) 2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=) 3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: K+z1Zp6w7+ru4aWbRA5vTfWXWgYrmUFfmIYSHkgj6Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:09:8a:3d:10:b4:89:5f:2b:5f:94:82:ee:1a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Validity Not Before: Jan 25 06:01:16 2026 GMT Not After : Jan 26 06:01:16 2026 GMT Subject: CN=17abc8ca9d32f6e3a4c75d2a48e9143bc0de2e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:52:9a:57:30:43:0d:a2:c2:7e:10:2f:3f: c4:2e:f9:8c:94:d6:e9:7f:97:5c:38:ef:fc:f8:94: 34:5a:c0:82:a2:61:bc:39:6a:99:1a:93:87:f9:85: ad:0f:45:f3:45:fb:e0:58:14:ef:23:aa:19:c4:e0: bb:ab:ca:99:34:0c:f4:17:01:bb:02:ac:f7:f2:d3: ad:ca:7a:11:fb:a2:40:49:91:c0:7b:b1:0b:aa:13: ac:34:ac:9e:13:0f:eb:03:2c:a4:a1:9e:ec:23:8e: b2:fb:c5:78:b1:58:e7:7d:2e:7b:f4:94:9f:b2:c5: e7:74:ec:18:41:1a:cb:e8:a8:36:71:f0:26:e5:7c: 45:04:c5:9d:93:bf:2b:2c:63:72:9d:6e:89:93:d7: ee:75:4a:f5:2a:13:d8:4e:90:e8:da:55:4c:c5:1f: 37:66:9e:13:02:02:28:f3:a9:00:75:e6:9e:fc:2f: 55:3b:37:97:b4:0e:a1:40:12:9f:54:81:53:a9:f1: 69:d2:dd:8a:08:d1:95:f5:1b:a3:0b:f9:f7:d4:e5: b5:e5:fd:8d:10:74:9a:a6:f9:d5:15:2a:96:4b:a8: c2:d9:24:dd:56:55:21:ca:07:02:f0:d0:ce:35:9d: b9:85:fe:12:6f:16:4d:30:05:58:bb:50:33:9d:29: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AB:C8:CA:9D:32:F6:E3:A4:C7:5D:2A:48:E9:14:3B:C0:DE:2E:1C X509v3 Authority Key Identifier: keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:45:45:2b:d7:b2:b3:16:c5:c3:be:3d:6b:b0:06:bc:4f:2f: bd:a1:76:a0:40:b7:15:c2:90:07:6b:bc:59:13:fc:3d:a3:41: 52:2c:d6:92:cd:77:ed:b6:ad:2c:ed:63:db:8a:6b:ae:2a:10: 23:fd:67:ba:f0:84:b6:64:ae:7c:65:5f:52:86:ec:80:a3:f5: fe:8d:bb:d6:47:82:2d:60:05:37:62:bb:7a:fd:9b:64:ee:12: 79:9e:e7:fa:3d:01:8d:3b:4d:d2:9c:a5:72:db:7c:0f:89:4c: 64:22:a4:0e:45:44:06:15:b0:df:19:b3:49:2c:cf:d2:a4:91: 44:2d:df:43:1f:8f:c5:b8:24:dd:97:04:04:75:02:fc:a4:f1: 52:b3:d2:cd:39:5b:ea:cc:bf:84:f8:bd:e5:c1:f1:2b:76:aa: e9:39:e5:eb:72:1b:7f:57:19:95:e0:d8:57:1b:f0:96:e5:7b: 8a:75:64:48:2c:99:e6:4c:bc:55:8b:e5:21:30:99:ff:59:3c: 40:a8:5b:50:ed:e6:11:75:92:f6:a4:28:21:b7:2c:c2:01:d9: 0e:e3:46:2f:85:11:57:4d:8a:f3:3d:88:77:39:99:de:f7:a0: c9:5a:bd:94:ad:bb:3e:65:84:be:21:db:f2:bd:c5:43:82:f6: 1c:ba:ed:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvgmKPRC0iV8rX5SC7hpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5 NjVhZjMwHhcNMjYwMTI1MDYwMTE2WhcNMjYwMTI2MDYwMTE2WjAzMTEwLwYDVQQD EygxN2FiYzhjYTlkMzJmNmUzYTRjNzVkMmE0OGU5MTQzYmMwZGUyZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFtSmlcwQw2iwn4QLz/ELvmMlNbp f5dcOO/8+JQ0WsCComG8OWqZGpOH+YWtD0XzRfvgWBTvI6oZxOC7q8qZNAz0FwG7 Aqz38tOtynoR+6JASZHAe7ELqhOsNKyeEw/rAyykoZ7sI46y+8V4sVjnfS579JSf ssXndOwYQRrL6Kg2cfAm5XxFBMWdk78rLGNynW6Jk9fudUr1KhPYTpDo2lVMxR83 Zp4TAgIo86kAdeae/C9VOzeXtA6hQBKfVIFTqfFp0t2KCNGV9RujC/n31OW15f2N EHSapvnVFSqWS6jC2STdVlUhygcC8NDONZ25hf4SbxZNMAVYu1AznSlsZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeryMqdMvbjpMddKkjpFDvA3i4cMB8GA1UdIwQY MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkVFK9ey sxbFw749a7AGvE8vvaF2oEC3FcKQB2u8WRP8PaNBUizWks137batLO1j24prrioQ I/1nuvCEtmSufGVfUobsgKP1/o271keCLWAFN2K7ev2bZO4SeZ7n+j0BjTtN0pyl ctt8D4lMZCKkDkVEBhWw3xmzSSzP0qSRRC3fQx+Pxbgk3ZcEBHUC/KTxUrPSzTlb 6sy/hPi95cHxK3aq6Tnl63Ibf1cZleDYVxvwluV7inVkSCyZ5ky8VYvlITCZ/1k8 QKhbUO3mEXWS9qQoIbcswgHZDuNGL4URV02K8z2IdzmZ3vegyVq9lK27PmWEviHb 8r3FQ4L2HLrtNw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:49 2026 by rpki-client