This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json) Hash identifier: 7Pj84eEEHERl8qm9AkJ/o+dga52e6LAuESc595L0nlU= Subject key identifier: CA:16:08:AA:DA:9E:BA:63:C8:B8:D4:C7:3B:93:6C:16:97:8C:B3:1E Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Certificate serial: 019BF98966403F90EF0C3BDC10B57DCAC20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft Manifest number: 10F1 Signing time: Mon 26 Jan 2026 09:01:29 +0000 Manifest this update: Mon 26 Jan 2026 09:01:29 +0000 Manifest next update: Tue 27 Jan 2026 09:01:29 +0000 Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=) 2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: NPKrh/rS0/wZI+t/fICtpkFgzN4I7d4MauYn8toQ32c=) 3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=) 4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:66:40:3f:90:ef:0c:3b:dc:10:b5:7d:ca:c2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743 Validity Not Before: Jan 26 09:01:29 2026 GMT Not After : Jan 27 09:01:29 2026 GMT Subject: CN=ca1608aada9eba63c8b8d4c73b936c16978cb31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:ed:3c:cf:a8:97:f6:35:07:76:c9:0b:5c: 8c:5f:f6:be:81:ef:e9:1d:8c:51:a9:0a:ab:60:c2: ac:0f:9a:73:be:d1:b4:3f:75:ee:1c:92:93:72:40: a1:5f:4f:a2:91:fc:21:d1:3b:68:b6:be:46:f1:5a: f6:4f:4a:f8:c0:34:7d:ea:29:25:e8:bd:86:eb:95: 5e:36:61:2a:ac:ac:40:e1:d8:5f:0f:80:a8:2f:71: 63:0a:04:46:99:21:5c:a2:56:c6:f3:fa:d5:56:02: 4c:e5:30:99:f8:7e:0a:75:73:29:63:3e:59:f7:65: db:a0:a7:a4:81:ec:29:94:3f:65:2a:f4:f7:f5:e9: 7d:20:df:4e:55:95:11:87:4e:d6:53:4b:9f:4b:07: 32:c6:ae:ac:4b:55:11:b3:35:4e:60:ae:f0:33:e4: ee:79:f6:05:fa:6d:c2:18:58:a3:18:89:87:7a:bf: 51:48:f8:42:af:39:51:69:89:6f:7e:a6:b2:43:92: 62:cb:f4:ac:a8:ea:ac:71:5a:26:3e:6e:a0:14:ee: 2c:3b:28:c6:f6:fc:57:90:dd:d3:07:76:6c:5d:27: 99:49:28:46:13:b0:6c:14:f2:a5:fe:b7:c1:bf:39: 11:01:a8:f2:8e:7b:3f:48:7b:10:c7:de:a4:0e:45: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:08:AA:DA:9E:BA:63:C8:B8:D4:C7:3B:93:6C:16:97:8C:B3:1E X509v3 Authority Key Identifier: keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9f:90:d0:88:6d:41:80:22:38:30:29:a4:fa:e8:74:ba:d2: 22:55:21:ad:29:24:e9:da:38:23:ab:83:eb:dd:d4:48:ba:47: e3:b2:18:12:01:e1:a6:46:3f:2b:7d:54:20:5d:13:96:19:13: b3:e4:e5:03:75:7a:66:7f:5c:21:4a:23:08:36:1a:a2:12:0d: f2:76:eb:24:8b:b3:8f:7f:02:87:7e:78:bc:d1:9c:01:76:bb: f4:f7:b4:a1:14:bf:34:46:43:a4:e2:56:f8:7c:1d:67:bc:69: 0c:5a:82:95:ab:cc:18:c3:c0:b7:ef:46:b2:a6:4e:36:8c:f4: e6:09:72:4f:5d:62:9b:16:6b:3b:66:d0:7c:8e:b7:52:64:fe: c8:30:09:27:7f:2c:7c:22:7e:3c:4c:9b:b4:69:e9:2c:96:8f: 9d:fe:b1:a6:34:a1:1f:9b:71:7c:66:0e:01:92:6f:1b:23:f3: 08:d1:a9:87:a3:df:37:85:bb:e6:aa:f9:1d:83:25:59:81:e0: 51:01:f2:c5:f1:b4:1a:d7:d2:3b:59:d2:2d:71:35:42:e8:1c: ee:a3:c8:d9:4d:47:93:86:0f:ff:36:8f:d3:98:9e:00:2a:67: 29:41:32:90:55:f3:05:bc:e7:2f:d8:b7:d6:e5:ad:9e:87:00: 4f:8a:1d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iWZAP5DvDDvcELV9ysIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz YjM3NDMwHhcNMjYwMTI2MDkwMTI5WhcNMjYwMTI3MDkwMTI5WjAzMTEwLwYDVQQD EyhjYTE2MDhhYWRhOWViYTYzYzhiOGQ0YzczYjkzNmMxNjk3OGNiMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dXtPM+ol/Y1B3bJC1yMX/a+ge/p HYxRqQqrYMKsD5pzvtG0P3XuHJKTckChX0+ikfwh0Ttotr5G8Vr2T0r4wDR96ikl 6L2G65VeNmEqrKxA4dhfD4CoL3FjCgRGmSFcolbG8/rVVgJM5TCZ+H4KdXMpYz5Z 92XboKekgewplD9lKvT39el9IN9OVZURh07WU0ufSwcyxq6sS1URszVOYK7wM+Tu efYF+m3CGFijGImHer9RSPhCrzlRaYlvfqayQ5Jiy/SsqOqscVomPm6gFO4sOyjG 9vxXkN3TB3ZsXSeZSShGE7BsFPKl/rfBvzkRAajyjns/SHsQx96kDkVgnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoWCKranrpjyLjUxzuTbBaXjLMeMB8GA1UdIwQY MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZ+Q0Iht QYAiODAppProdLrSIlUhrSkk6do4I6uD693USLpH47IYEgHhpkY/K31UIF0TlhkT s+TlA3V6Zn9cIUojCDYaohIN8nbrJIuzj38Ch354vNGcAXa79Pe0oRS/NEZDpOJW +HwdZ7xpDFqClavMGMPAt+9GsqZONoz05glyT11imxZrO2bQfI63UmT+yDAJJ38s fCJ+PEybtGnpLJaPnf6xpjShH5txfGYOAZJvGyPzCNGph6PfN4W75qr5HYMlWYHg UQHyxfG0GtfSO1nSLXE1Qugc7qPI2U1Hk4YP/zaP05ieACpnKUEykFXzBbznL9i3 1uWtnocAT4odbg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:34 2026 by rpki-client