This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json) Hash identifier: 12clK16NDtkFno29PVyh71jwJaICZPIUEK4lizXkQ/s= Subject key identifier: 4C:D1:A2:32:7E:88:5A:AF:15:F9:E2:1E:42:33:4B:67:89:6A:1E:70 Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Certificate serial: 019BF619F7D51A976220F2A501FA2F0F982A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft Manifest number: 0F2D Signing time: Sun 25 Jan 2026 17:00:55 +0000 Manifest this update: Sun 25 Jan 2026 17:00:55 +0000 Manifest next update: Mon 26 Jan 2026 17:00:55 +0000 Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=) 2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=) 3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: mepvE7q2kV+i4W/JEnsp1PlEpXmvwJ6IIk28wFnwXXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:f7:d5:1a:97:62:20:f2:a5:01:fa:2f:0f:98:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111 Validity Not Before: Jan 25 17:00:55 2026 GMT Not After : Jan 26 17:00:55 2026 GMT Subject: CN=4cd1a2327e885aaf15f9e21e42334b67896a1e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:2e:1a:d1:ab:37:94:b0:a5:a2:6c:b3:c2: 73:63:e8:69:2e:55:ea:b0:03:ec:97:35:00:83:47: 86:73:9e:98:db:93:b3:2e:e4:bb:b8:cf:f6:54:99: fc:cf:43:57:52:9e:cc:f9:02:0a:dd:50:56:f2:d1: 31:6d:96:9f:1c:13:f6:58:e5:03:9a:40:61:80:ad: 95:4e:e8:f6:85:c7:e0:75:fa:1e:b4:ad:40:c7:6f: 3c:23:e4:65:d1:da:95:19:3a:6f:37:28:06:6a:2e: 5d:cc:a2:70:3c:6f:4b:71:cb:33:ca:ea:87:83:0c: 61:8c:7e:72:c8:bf:a8:f2:76:55:3e:c5:e2:11:f6: 99:73:dd:5a:90:bf:bd:32:91:c8:ad:8d:a7:81:99: bb:c0:1a:a1:d3:51:ff:b4:d1:53:3e:8c:3a:59:10: 05:7f:c0:0b:8a:41:02:e0:c8:b6:b5:b3:28:27:df: 7d:1e:e8:0a:5a:8a:d3:96:fb:9f:d1:52:b2:9b:d3: a7:71:65:87:47:0b:ab:c5:99:b7:b8:c9:dd:43:e8: c8:9d:d7:c3:fc:30:f2:af:05:8f:70:7f:29:c4:9c: 4d:dd:97:63:96:1a:37:de:04:6d:26:ae:fd:c3:ac: 3d:c2:d0:89:a6:6f:ea:2b:f7:8c:a2:a3:32:c9:3f: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D1:A2:32:7E:88:5A:AF:15:F9:E2:1E:42:33:4B:67:89:6A:1E:70 X509v3 Authority Key Identifier: keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:89:45:e9:4b:96:6c:cd:a5:86:04:4f:df:88:7c:1a:f4:15: d4:10:89:da:01:96:ce:34:b6:b8:31:05:41:88:29:33:a1:65: a4:d9:3f:f4:89:c6:c8:23:ed:ec:0f:c0:e8:e5:0f:69:5b:3c: 3f:b8:cb:bb:5b:35:82:f2:91:08:00:63:1a:1f:47:c6:5d:89: c3:1b:4c:ba:b8:80:4c:b9:c9:c5:09:b3:9d:e8:fc:72:5c:c1: 09:29:58:ea:30:f6:f5:0c:43:37:75:63:9b:71:bc:51:cf:ac: 42:53:65:77:4b:55:b3:e1:e4:f5:17:c6:23:34:ca:8e:71:bd: d3:cd:52:54:02:02:51:7b:62:a8:31:16:ac:74:ac:21:c2:f4: 58:5b:b8:32:a1:b9:58:d1:33:ce:4c:d6:bd:94:ea:23:ce:fa: 9a:7e:51:df:18:dd:70:59:31:0c:00:91:b0:76:f3:05:23:69: 51:d4:66:66:0a:59:b0:d9:0b:86:fa:97:e1:81:20:74:3b:39: 5e:14:85:1c:11:7f:94:4e:70:49:07:fa:ab:72:2a:d9:5c:c8: 57:48:ed:33:91:cb:54:ad:40:fb:e2:61:06:44:c8:67:a8:5d: 43:52:e7:74:6c:81:bc:31:a0:d2:cd:4f:f7:e0:22:69:ad:56: e7:2d:6c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GffVGpdiIPKlAfovD5gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1 MWIxMTEwHhcNMjYwMTI1MTcwMDU1WhcNMjYwMTI2MTcwMDU1WjAzMTEwLwYDVQQD Eyg0Y2QxYTIzMjdlODg1YWFmMTVmOWUyMWU0MjMzNGI2Nzg5NmExZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W4uGtGrN5SwpaJss8JzY+hpLlXq sAPslzUAg0eGc56Y25OzLuS7uM/2VJn8z0NXUp7M+QIK3VBW8tExbZafHBP2WOUD mkBhgK2VTuj2hcfgdfoetK1Ax288I+Rl0dqVGTpvNygGai5dzKJwPG9LccszyuqH gwxhjH5yyL+o8nZVPsXiEfaZc91akL+9MpHIrY2ngZm7wBqh01H/tNFTPow6WRAF f8ALikEC4Mi2tbMoJ999HugKWorTlvuf0VKym9OncWWHRwurxZm3uMndQ+jIndfD /DDyrwWPcH8pxJxN3Zdjlho33gRtJq79w6w9wtCJpm/qK/eMoqMyyT8rpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzRojJ+iFqvFfniHkIzS2eJah5wMB8GA1UdIwQY MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4lF6UuW bM2lhgRP34h8GvQV1BCJ2gGWzjS2uDEFQYgpM6FlpNk/9InGyCPt7A/A6OUPaVs8 P7jLu1s1gvKRCABjGh9Hxl2JwxtMuriATLnJxQmznej8clzBCSlY6jD29QxDN3Vj m3G8Uc+sQlNld0tVs+Hk9RfGIzTKjnG9081SVAICUXtiqDEWrHSsIcL0WFu4MqG5 WNEzzkzWvZTqI876mn5R3xjdcFkxDACRsHbzBSNpUdRmZgpZsNkLhvqX4YEgdDs5 XhSFHBF/lE5wSQf6q3Iq2VzIV0jtM5HLVK1A++JhBkTIZ6hdQ1LndGyBvDGg0s1P 9+Aiaa1W5y1s0w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:43 2026 by rpki-client