This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json) Hash identifier: kMiupKC183t0uivaaaxOxVBy/bMc9wr7PESgJMk+R18= Subject key identifier: 65:12:C3:15:3C:68:0F:84:9F:E4:56:8E:BD:7B:B4:62:ED:6F:68:18 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019BF3F4E0AC7A08BB54BFBBB20D7E876E59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 07:01:10 +0000 Manifest this update: Sun 25 Jan 2026 07:01:10 +0000 Manifest next update: Mon 26 Jan 2026 07:01:10 +0000 Files and hashes: 1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=) 2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=) 3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: PSGh53H0Be6BMTMndC2S2ikv8fkLlT4E6H/Ww6zCpuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:e0:ac:7a:08:bb:54:bf:bb:b2:0d:7e:87:6e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Jan 25 07:01:10 2026 GMT Not After : Jan 26 07:01:10 2026 GMT Subject: CN=6512c3153c680f849fe4568ebd7bb462ed6f6818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:ba:0f:66:6f:1f:9c:bc:02:c8:9d:a3:d6: e7:13:97:de:8e:8a:07:86:2d:28:fe:a7:b2:1f:4d: 7e:9a:d7:81:07:5b:92:5a:ff:dd:8c:70:5e:d5:92: 28:4a:ca:0c:7b:bd:09:fd:4e:1f:be:b4:f2:53:90: 85:f8:e3:22:8b:1c:64:db:b6:ac:6e:86:33:0b:1e: 8c:7b:12:f0:83:2d:de:1b:1a:36:82:5a:78:8e:65: 6a:e6:3e:76:38:c0:03:81:12:5c:f2:04:a3:ba:75: ef:5f:a6:a2:17:fc:8b:62:12:9b:37:90:08:40:f3: 41:c8:af:5b:50:f9:de:20:ce:c4:76:41:e8:30:7b: 91:fa:fc:cf:27:aa:cf:88:03:78:5c:c8:68:b4:5d: f1:c4:b0:14:65:6d:13:a3:ac:df:0c:72:33:77:77: 52:a5:24:ff:58:38:1e:0e:9c:ca:7e:6e:32:79:36: 30:7e:cd:40:bd:43:8a:c5:52:83:07:d0:31:e9:1d: ff:1f:df:bb:4c:45:8c:0b:a4:f2:fb:e8:2c:31:43: 84:79:2f:06:01:c6:4c:61:14:55:74:7c:2b:2e:d5: 7b:80:7d:23:d0:14:1f:94:5f:1e:b6:32:6d:59:01: 64:ec:36:ee:17:10:9d:ed:73:be:9f:7d:d0:1c:ad: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:C3:15:3C:68:0F:84:9F:E4:56:8E:BD:7B:B4:62:ED:6F:68:18 X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a9:92:13:52:f7:da:eb:f4:17:ed:bd:f0:4c:29:f3:30:b5: 95:aa:08:e6:fa:25:dd:20:27:ad:1e:fc:13:c0:e0:c0:7c:87: f2:0c:e7:32:41:a3:ef:b7:68:f4:32:6c:68:ac:50:ea:a0:7d: 56:11:5b:05:74:00:8c:f3:61:ce:9a:3f:ac:15:ba:de:19:a9: bc:64:f7:7a:61:53:4c:e4:b0:cf:c6:94:ea:2d:6c:07:a9:82: ed:ab:b8:62:53:e1:da:1d:e8:1c:b9:be:2b:8a:77:88:ca:ab: 87:b6:02:15:98:22:3b:d7:6d:a8:c4:6a:6f:a3:cd:31:e9:48: 78:a1:a6:c8:e9:8c:4a:6c:f5:7c:23:50:b9:fa:b6:f3:5a:c5: 73:c8:dd:54:5a:bd:d9:13:b5:1b:e8:aa:9b:91:bc:74:8f:bc: e9:38:91:6f:29:4f:d7:de:d4:a8:46:ba:f0:50:38:38:ef:a1: ea:94:ac:23:0c:d6:0d:7f:05:c9:74:1e:7e:12:d2:50:fd:f0: 37:0a:bd:28:18:33:d7:93:52:df:fc:64:47:f3:7a:7f:3b:ce: 70:2f:fe:eb:40:a5:fe:3e:7a:1c:82:91:ab:3f:c5:ec:df:33: 70:20:ef:ed:2d:64:92:e6:c2:b6:b3:6b:f6:cd:fe:54:9b:c2: 22:6d:ea:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9OCsegi7VL+7sg1+h25ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwMTI1MDcwMTEwWhcNMjYwMTI2MDcwMTEwWjAzMTEwLwYDVQQD Eyg2NTEyYzMxNTNjNjgwZjg0OWZlNDU2OGViZDdiYjQ2MmVkNmY2ODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmy6D2ZvH5y8Asido9bnE5fejooH hi0o/qeyH01+mteBB1uSWv/djHBe1ZIoSsoMe70J/U4fvrTyU5CF+OMiixxk27as boYzCx6MexLwgy3eGxo2glp4jmVq5j52OMADgRJc8gSjunXvX6aiF/yLYhKbN5AI QPNByK9bUPneIM7EdkHoMHuR+vzPJ6rPiAN4XMhotF3xxLAUZW0To6zfDHIzd3dS pST/WDgeDpzKfm4yeTYwfs1AvUOKxVKDB9Ax6R3/H9+7TEWMC6Ty++gsMUOEeS8G AcZMYRRVdHwrLtV7gH0j0BQflF8etjJtWQFk7DbuFxCd7XO+n33QHK1ZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUSwxU8aA+En+RWjr17tGLtb2gYMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqmSE1L3 2uv0F+298Ewp8zC1laoI5vol3SAnrR78E8DgwHyH8gznMkGj77do9DJsaKxQ6qB9 VhFbBXQAjPNhzpo/rBW63hmpvGT3emFTTOSwz8aU6i1sB6mC7au4YlPh2h3oHLm+ K4p3iMqrh7YCFZgiO9dtqMRqb6PNMelIeKGmyOmMSmz1fCNQufq281rFc8jdVFq9 2RO1G+iqm5G8dI+86TiRbylP197UqEa68FA4OO+h6pSsIwzWDX8FyXQefhLSUP3w Nwq9KBgz15NS3/xkR/N6fzvOcC/+60Cl/j56HIKRqz/F7N8zcCDv7S1kkubCtrNr 9s3+VJvCIm3qnw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:10:06 2026 by rpki-client