This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json) Hash identifier: vQYpmkSIQwyhXVhIQN5UD7/pTPMw9dKKVNATD1x6YAc= Subject key identifier: AE:E2:CA:23:87:A4:E0:8F:D4:55:D1:B6:4D:31:F4:0D:26:ED:0B:66 Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Certificate serial: 019BF318E91ADAD137F8FA4C76373CCE1842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft Manifest number: 0F0F Signing time: Sun 25 Jan 2026 03:00:54 +0000 Manifest this update: Sun 25 Jan 2026 03:00:54 +0000 Manifest next update: Mon 26 Jan 2026 03:00:54 +0000 Files and hashes: 1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=) 2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=) 3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=) 4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: jDErtiHRQZxE7DQ/TtHYxmpEd8wiIUkYWyqYbpAtS3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:e9:1a:da:d1:37:f8:fa:4c:76:37:3c:ce:18:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Validity Not Before: Jan 25 03:00:54 2026 GMT Not After : Jan 26 03:00:54 2026 GMT Subject: CN=aee2ca2387a4e08fd455d1b64d31f40d26ed0b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:7a:0a:8e:d6:f2:7b:58:41:07:5a:9d:f9: 18:e0:4a:f7:54:9a:b4:a2:6c:c7:81:4e:1b:3f:ab: 02:88:1b:63:da:e9:cc:42:41:c6:13:aa:14:eb:2b: 5c:06:ee:d5:2b:14:1b:45:e8:40:70:eb:79:bf:5e: 80:14:29:2a:00:38:94:f4:1a:15:65:ef:a4:3c:9c: 88:fb:99:b1:28:b4:45:e9:1c:bf:45:7b:ca:1b:56: dd:97:45:45:ea:56:74:46:e0:c8:7d:af:a8:6d:d7: fb:33:c4:d0:16:78:38:52:54:03:9e:07:1a:e4:4d: 67:31:e3:c1:3a:9c:ac:5e:66:f4:ed:9f:1f:a2:84: 5d:e4:fe:da:a1:cf:38:8c:62:25:1c:0c:7a:a5:33: 21:77:30:65:ed:5a:0e:22:70:ce:57:4a:09:95:f2: 88:01:53:6d:4d:67:1b:c1:be:12:ee:4c:1c:49:d1: 31:5a:d1:71:e4:e0:39:50:5f:65:d8:eb:c2:10:f7: 28:0b:11:6e:d7:8c:2b:1a:21:45:a8:5a:2c:a6:e1: 52:a7:01:65:70:91:63:96:fd:30:d0:96:68:9c:85: 98:28:61:25:31:85:05:8d:a1:4d:e2:31:5d:3d:b1: 96:b8:03:ed:c5:f2:f9:9d:06:09:dc:70:f8:9b:a6: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:CA:23:87:A4:E0:8F:D4:55:D1:B6:4D:31:F4:0D:26:ED:0B:66 X509v3 Authority Key Identifier: keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:f1:84:ad:26:47:1b:e9:21:cd:24:88:1d:e2:47:b1:29: c1:22:86:61:80:2f:fc:5d:8c:28:2e:5d:5f:50:79:65:ac:e1: 1d:dd:0b:89:ee:04:62:79:d3:a4:6d:d2:78:6d:0c:00:9a:43: da:c1:65:0e:40:f4:10:56:c3:87:ac:fe:39:9d:18:07:27:b3: 21:a1:c1:4d:be:1a:5a:95:99:d8:5e:33:b5:d5:ab:68:50:a2: e4:c5:34:c2:35:90:fb:24:9d:24:08:3b:5b:fd:fc:51:79:32: 2d:d3:98:6f:74:99:5f:cc:da:4a:cd:69:0b:bd:67:94:76:6b: 4e:b0:81:7e:e6:2f:f3:b1:85:3c:51:d9:6a:6d:9b:87:27:9a: 32:67:d1:8a:ec:e5:71:02:2e:89:1c:2d:af:b7:cc:8c:4e:4d: 87:eb:48:19:a3:b7:49:71:ba:a0:22:2d:bd:a5:fc:9e:31:30: 16:29:25:37:9c:a7:98:7e:b7:89:ff:90:0a:c9:37:2c:db:7e: 60:25:79:58:f2:5b:07:32:c3:f1:b6:53:11:50:86:69:49:ec: 30:9b:cb:20:30:90:9f:e4:25:bd:7b:bc:c5:97:87:0a:d4:22: 7b:85:04:2a:dd:c5:87:bc:74:2a:45:ef:20:a8:04:a8:e2:6d: 29:37:ea:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGOka2tE3+PpMdjc8zhhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx M2RiZTQwHhcNMjYwMTI1MDMwMDU0WhcNMjYwMTI2MDMwMDU0WjAzMTEwLwYDVQQD EyhhZWUyY2EyMzg3YTRlMDhmZDQ1NWQxYjY0ZDMxZjQwZDI2ZWQwYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVt6Co7W8ntYQQdanfkY4Er3VJq0 omzHgU4bP6sCiBtj2unMQkHGE6oU6ytcBu7VKxQbRehAcOt5v16AFCkqADiU9BoV Ze+kPJyI+5mxKLRF6Ry/RXvKG1bdl0VF6lZ0RuDIfa+obdf7M8TQFng4UlQDngca 5E1nMePBOpysXmb07Z8fooRd5P7aoc84jGIlHAx6pTMhdzBl7VoOInDOV0oJlfKI AVNtTWcbwb4S7kwcSdExWtFx5OA5UF9l2OvCEPcoCxFu14wrGiFFqFospuFSpwFl cJFjlv0w0JZonIWYKGElMYUFjaFN4jFdPbGWuAPtxfL5nQYJ3HD4m6ZB1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7iyiOHpOCP1FXRtk0x9A0m7QtmMB8GA1UdIwQY MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0 LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMTxhK0m RxvpIc0kiB3iR7EpwSKGYYAv/F2MKC5dX1B5ZazhHd0Lie4EYnnTpG3SeG0MAJpD 2sFlDkD0EFbDh6z+OZ0YByezIaHBTb4aWpWZ2F4ztdWraFCi5MU0wjWQ+ySdJAg7 W/38UXkyLdOYb3SZX8zaSs1pC71nlHZrTrCBfuYv87GFPFHZam2bhyeaMmfRiuzl cQIuiRwtr7fMjE5Nh+tIGaO3SXG6oCItvaX8njEwFiklN5ynmH63if+QCsk3LNt+ YCV5WPJbBzLD8bZTEVCGaUnsMJvLIDCQn+QlvXu8xZeHCtQie4UEKt3Fh7x0KkXv IKgEqOJtKTfqQw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:01 2026 by rpki-client