This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json) Hash identifier: R36QnW0IeMTv8UT30JJ49pMEM/vSS+CAHuu8lVTR/e4= Subject key identifier: D9:80:E3:0F:43:67:8C:66:79:60:48:FB:58:7D:9D:66:7B:C1:5D:56 Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Certificate serial: 019BF34F8F394E4BD5A8831D2198E03444C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft Manifest number: 0E36 Signing time: Sun 25 Jan 2026 04:00:35 +0000 Manifest this update: Sun 25 Jan 2026 04:00:35 +0000 Manifest next update: Mon 26 Jan 2026 04:00:35 +0000 Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=) 2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=) 3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: M90auMsElTemXI33faAoQK8HIE1NfJJv4b95RGOrllI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:8f:39:4e:4b:d5:a8:83:1d:21:98:e0:34:44:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea Validity Not Before: Jan 25 04:00:35 2026 GMT Not After : Jan 26 04:00:35 2026 GMT Subject: CN=d980e30f43678c66796048fb587d9d667bc15d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:df:c2:65:17:cf:0e:59:08:16:ae:88:d5: c0:d2:b1:06:54:9c:8f:b9:5c:69:45:48:1d:5e:a1: 27:9b:6d:b9:d8:29:db:e5:69:6d:7d:04:a2:36:7a: 22:03:03:a8:48:1e:05:ad:41:bf:0a:39:e9:a2:dc: 33:30:ea:65:db:78:8f:f3:d0:99:26:54:86:4e:5e: de:d0:11:d0:38:de:13:d7:e9:f4:5d:70:98:f3:bb: 15:36:3d:ec:b2:de:15:54:d5:32:ab:33:50:ad:86: d5:e9:bf:18:58:08:3c:2b:11:97:d5:32:eb:06:d6: 18:61:c9:62:3c:1f:e3:98:35:f8:73:65:60:fe:ed: 64:5a:17:26:b9:10:73:94:57:e0:75:ff:58:6d:ad: a4:0f:a8:4a:99:ba:46:e6:40:b1:24:85:37:16:43: c4:7b:ba:90:7a:0e:c5:23:b5:98:2d:ee:0f:96:98: ce:5f:5d:b2:a5:29:1c:c0:f9:19:90:b9:15:c3:b7: 41:7f:5f:9c:ab:00:a5:59:26:05:d9:bc:60:6c:ba: 38:9f:3e:e0:0e:3a:ee:db:a5:c0:ee:e5:2c:4a:c4: 7b:f6:5e:1e:ab:d7:1e:c1:60:d6:f4:8a:97:01:a6: 40:54:51:77:ee:00:01:3c:2c:a2:10:6d:e6:87:4b: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:80:E3:0F:43:67:8C:66:79:60:48:FB:58:7D:9D:66:7B:C1:5D:56 X509v3 Authority Key Identifier: keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:72:8c:d8:86:15:49:5e:17:6a:3d:45:62:a2:66:07:74: f2:a3:7e:20:b2:41:65:b2:fa:af:06:10:b3:28:21:bb:e3:e8: 59:14:71:1b:61:fb:b6:2e:da:43:19:25:39:ce:79:29:1a:6c: a3:d8:9d:61:50:ce:c2:31:98:37:4b:f4:5e:5d:f0:90:7e:eb: fd:23:6e:9a:78:6e:01:02:76:ea:46:8e:78:ab:d4:47:04:5e: 99:e4:df:4b:7a:4b:2e:ce:1f:a4:22:1b:70:5d:4d:46:e7:04: 41:f9:b0:65:37:2f:15:f3:df:67:6f:4a:ea:1a:64:26:5a:26: 3a:91:22:31:0e:52:cf:02:5c:ba:fc:36:13:d9:22:1c:59:16: 61:4d:23:da:6b:49:a6:60:17:ec:75:55:ab:46:3b:31:52:e6: 04:ef:24:3e:13:36:32:cb:89:78:57:8c:09:ff:a1:24:5e:08: 1c:c7:be:80:1d:1f:a1:bd:f1:8f:4a:2a:71:b8:c2:06:cf:b5: 8a:96:d2:b1:75:52:6c:2b:b2:24:aa:a3:88:ad:e8:b8:8e:a9: 41:3e:1d:09:4b:e1:1e:8d:9a:2f:a1:c6:5f:10:2b:48:69:93: e8:2e:74:d4:a5:a7:6b:39:f4:3f:85:dc:7f:4e:09:0f:80:78: f3:9b:b5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT485TkvVqIMdIZjgNETFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4 MjhkZWEwHhcNMjYwMTI1MDQwMDM1WhcNMjYwMTI2MDQwMDM1WjAzMTEwLwYDVQQD EyhkOTgwZTMwZjQzNjc4YzY2Nzk2MDQ4ZmI1ODdkOWQ2NjdiYzE1ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54nfwmUXzw5ZCBauiNXA0rEGVJyP uVxpRUgdXqEnm2252Cnb5WltfQSiNnoiAwOoSB4FrUG/CjnpotwzMOpl23iP89CZ JlSGTl7e0BHQON4T1+n0XXCY87sVNj3sst4VVNUyqzNQrYbV6b8YWAg8KxGX1TLr BtYYYcliPB/jmDX4c2Vg/u1kWhcmuRBzlFfgdf9Yba2kD6hKmbpG5kCxJIU3FkPE e7qQeg7FI7WYLe4PlpjOX12ypSkcwPkZkLkVw7dBf1+cqwClWSYF2bxgbLo4nz7g Djru26XA7uUsSsR79l4eq9cewWDW9IqXAaZAVFF37gABPCyiEG3mh0vNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmA4w9DZ4xmeWBI+1h9nWZ7wV1WMB8GA1UdIwQY MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1 LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZZyjNiG FUleF2o9RWKiZgd08qN+ILJBZbL6rwYQsyghu+PoWRRxG2H7ti7aQxklOc55KRps o9idYVDOwjGYN0v0Xl3wkH7r/SNumnhuAQJ26kaOeKvURwRemeTfS3pLLs4fpCIb cF1NRucEQfmwZTcvFfPfZ29K6hpkJlomOpEiMQ5SzwJcuvw2E9kiHFkWYU0j2mtJ pmAX7HVVq0Y7MVLmBO8kPhM2MsuJeFeMCf+hJF4IHMe+gB0fob3xj0oqcbjCBs+1 ipbSsXVSbCuyJKqjiK3ouI6pQT4dCUvhHo2aL6HGXxArSGmT6C501KWnazn0P4Xc f04JD4B485u12w== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:35 2026 by rpki-client