This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json) Hash identifier: M/zp1xtadpQCDhRCDiGpEXS4tyiNFpGHIsRWOgkaEPQ= Subject key identifier: 59:9E:43:D9:76:97:6A:BC:25:BF:2E:DA:C2:22:9F:B9:4D:BE:7E:AE Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83 Certificate serial: 019BF98965A40632A66C215CA65B52DABDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 09:01:29 +0000 Manifest this update: Mon 26 Jan 2026 09:01:29 +0000 Manifest next update: Tue 27 Jan 2026 09:01:29 +0000 Files and hashes: 1: Be8LblN_WsFoFsGu_QkIYbsLZMI.roa (hash: 4P/iotN6FmCSgpC5Liy5/5RLiOPYgv+FOHKRLXysJwc=) 2: OulomjatgU8B25dvFpqGURlBgcU.roa (hash: cQm9KuIWCCDGGQfAHCVTwYW3k+71Z7DZyQnTjaIdRSA=) 3: oRx6EJhqzaqgG0amciWL3M5KR-E.roa (hash: OiolxTV+7ThPd+hCMKxyTyX6crUMp94Obmmo4AolkqE=) 4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: RvPShTCzn0Ad+8SMvscz2QaQ7JsplEkn8iHGjlZfPG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:65:a4:06:32:a6:6c:21:5c:a6:5b:52:da:bd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83 Validity Not Before: Jan 26 09:01:29 2026 GMT Not After : Jan 27 09:01:29 2026 GMT Subject: CN=599e43d976976abc25bf2edac2229fb94dbe7eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:8c:39:ec:00:71:11:80:e5:ce:46:9f:3d: a1:90:c6:d1:f7:93:28:c7:8b:72:b5:3b:60:b2:fa: 77:43:c4:3d:bd:d2:f0:4b:0c:a1:f6:23:95:50:29: a5:24:29:52:fd:33:9e:52:4e:28:c1:44:61:45:38: ea:84:18:26:8f:7f:6d:52:62:6b:99:6a:04:24:7b: 0f:b4:51:06:c2:c6:ce:2c:cd:a5:07:f1:95:ed:7f: 3d:b6:54:c0:39:01:c2:62:4b:e8:06:14:bf:f4:01: 21:44:a0:b3:2e:fe:75:6c:e7:60:78:8e:47:49:eb: d7:7f:ee:1a:59:8c:af:b8:1e:27:01:2e:5b:25:a1: 87:10:21:51:dc:d5:3c:f3:fa:c9:ee:01:84:e8:35: 7d:76:16:83:f7:ac:26:e2:11:86:ae:93:fd:5e:e0: 54:fb:bd:9b:4c:9c:8f:81:57:5f:c8:6f:01:ec:aa: de:1e:01:a5:1c:a6:bf:44:76:72:be:10:9d:69:5b: da:89:a2:03:a4:c4:95:70:ab:27:32:59:bb:28:27: 36:2c:72:42:f1:1e:c1:02:50:7b:f0:aa:e8:f4:a2: dc:d3:b2:00:28:a1:47:1f:e4:a0:00:05:8d:14:88: af:40:14:0d:3f:fd:d2:74:86:56:ed:ba:7c:dc:1b: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:43:D9:76:97:6A:BC:25:BF:2E:DA:C2:22:9F:B9:4D:BE:7E:AE X509v3 Authority Key Identifier: keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:18:da:fc:52:48:c2:de:9a:34:2b:76:14:9c:92:42:4f:50: a9:53:48:b1:a2:8e:35:59:e2:d5:cd:33:3c:a8:1b:57:32:7b: cb:dc:fc:78:8d:b8:99:40:bb:40:91:8c:26:65:92:96:85:c8: 44:72:f6:77:14:d8:3d:79:49:d6:03:25:28:aa:fc:7f:72:7a: 36:76:6b:36:01:18:59:39:95:10:8c:ee:cf:cd:c2:72:61:ec: ec:4a:98:d5:8e:c0:7b:41:5b:b5:14:06:6c:5e:cc:09:2c:2d: 42:86:14:6b:6a:96:ac:7c:50:7f:d1:eb:84:3b:f7:a4:6e:04: 63:37:98:71:39:11:91:22:05:d9:e7:b4:0c:4f:67:9d:12:93: ba:22:bd:fc:aa:74:bc:2f:4f:34:57:a5:9d:bf:11:6c:27:ae: 2e:39:50:30:ab:b9:b3:e0:64:10:74:c7:28:c3:2c:f7:58:2b: 62:5d:29:44:08:c2:5c:79:aa:db:47:b8:46:8a:ff:e2:b0:0b: ef:a0:23:d5:15:85:ac:e8:60:f1:8f:c6:97:01:89:6d:45:2a: 0a:36:fa:f5:7d:da:71:20:89:47:24:19:67:a7:ab:e7:97:b6: 6e:0c:db:81:ab:36:ba:9b:b1:63:7e:ca:7c:3c:fb:dc:47:65: 4d:89:c5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iWWkBjKmbCFcpltS2r3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MzBkYTIxNTE4MTg0MTQ1ZjZkNzYyMWI1YTEzYmQ1NDAz NWFjODMwHhcNMjYwMTI2MDkwMTI5WhcNMjYwMTI3MDkwMTI5WjAzMTEwLwYDVQQD Eyg1OTllNDNkOTc2OTc2YWJjMjViZjJlZGFjMjIyOWZiOTRkYmU3ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgyMOewAcRGA5c5Gnz2hkMbR95Mo x4tytTtgsvp3Q8Q9vdLwSwyh9iOVUCmlJClS/TOeUk4owURhRTjqhBgmj39tUmJr mWoEJHsPtFEGwsbOLM2lB/GV7X89tlTAOQHCYkvoBhS/9AEhRKCzLv51bOdgeI5H SevXf+4aWYyvuB4nAS5bJaGHECFR3NU88/rJ7gGE6DV9dhaD96wm4hGGrpP9XuBU +72bTJyPgVdfyG8B7KreHgGlHKa/RHZyvhCdaVvaiaIDpMSVcKsnMlm7KCc2LHJC 8R7BAlB78Kro9KLc07IAKKFHH+SgAAWNFIivQBQNP/3SdIZW7bp83BtNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmeQ9l2l2q8Jb8u2sIin7lNvn6uMB8GA1UdIwQY MBaAFLkw2iFRgYQUX212IbWhO9VANayDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWIt OTk0YWY1YzM0NDAyLzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80NzBjZGEtZDBlYy00MzIzLWFlOWItOTk0YWY1YzM0NDAy LzEvdVREYUlWR0JoQlJmYlhZaHRhRTcxVUExcklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRja/FJI wt6aNCt2FJySQk9QqVNIsaKONVni1c0zPKgbVzJ7y9z8eI24mUC7QJGMJmWSloXI RHL2dxTYPXlJ1gMlKKr8f3J6NnZrNgEYWTmVEIzuz83CcmHs7EqY1Y7Ae0FbtRQG bF7MCSwtQoYUa2qWrHxQf9HrhDv3pG4EYzeYcTkRkSIF2ee0DE9nnRKTuiK9/Kp0 vC9PNFelnb8RbCeuLjlQMKu5s+BkEHTHKMMs91grYl0pRAjCXHmq20e4Ror/4rAL 76Aj1RWFrOhg8Y/GlwGJbUUqCjb69X3acSCJRyQZZ6er55e2bgzbgas2upuxY37K fDz73EdlTYnF6g== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:42 2026 by rpki-client