This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json) Hash identifier: 0KGRSplJCHlUUq/1Cy87NXeEggIK4EW0aM8d1p0dlYQ= Subject key identifier: 91:1D:E6:79:1F:7E:2A:95:FF:BD:AA:7F:DB:54:A8:A7:C4:19:9B:FD Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Certificate serial: 019BF46332211D237ABF0B334BB117B1415B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 09:01:40 +0000 Manifest this update: Sun 25 Jan 2026 09:01:40 +0000 Manifest next update: Mon 26 Jan 2026 09:01:40 +0000 Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=) 2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=) 3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=) 4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=) 5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: +0na9uN8UleOKQ0A/WkkAYGJsgClILY35Bmu5o0RU7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:32:21:1d:23:7a:bf:0b:33:4b:b1:17:b1:41:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Validity Not Before: Jan 25 09:01:40 2026 GMT Not After : Jan 26 09:01:40 2026 GMT Subject: CN=911de6791f7e2a95ffbdaa7fdb54a8a7c4199bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:ec:73:ea:0a:e9:e6:2f:91:e1:49:0a:bd: c5:d0:d7:4e:a6:58:4c:c1:4b:5f:66:ab:e2:87:03: 58:95:15:86:db:6c:c4:78:fc:44:f4:b4:56:b5:31: a6:86:ad:f5:06:2e:5e:39:bf:74:0b:85:ef:31:92: 5e:06:b8:83:6b:56:8c:4b:06:40:7a:38:d3:c9:ff: 4f:42:f3:a1:0f:73:25:6e:fb:bb:d7:1b:05:f2:65: 6d:66:57:fe:99:13:d5:d5:29:99:ab:14:36:53:fe: 9c:f1:d1:04:62:8b:16:81:32:aa:e7:19:78:e1:d4: 2d:85:45:6f:ed:14:73:49:b7:1d:af:9f:7b:90:cf: fe:c8:6b:73:88:5a:e5:0b:b7:50:8f:35:1e:54:a6: 62:db:45:19:d2:a4:a2:b0:41:48:03:7c:6d:9f:93: 66:93:62:9c:4c:65:bb:b9:f9:93:f4:a7:1e:93:61: e0:ff:f4:b2:e5:af:f0:f4:7c:41:17:49:a8:85:45: e0:fd:7d:71:5b:96:d6:80:a5:9e:32:2f:cc:b0:9f: 45:83:e9:52:b5:b0:28:1d:42:5c:8f:b5:53:a8:58: eb:da:d4:d3:3c:49:db:c8:cf:f9:d8:81:e3:e9:54: 38:7e:b6:e1:71:e5:c9:37:c0:06:ae:bf:56:7b:6b: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:E6:79:1F:7E:2A:95:FF:BD:AA:7F:DB:54:A8:A7:C4:19:9B:FD X509v3 Authority Key Identifier: keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:73:87:5f:6e:1a:78:78:64:70:13:43:55:e8:f0:d8:9e:e0: f0:2b:41:7c:21:ae:97:22:4b:e2:22:7e:f3:d7:8c:e9:25:19: c0:1c:f5:5b:21:4c:25:e5:de:c5:58:e6:fc:bc:b3:35:92:9b: cb:8e:8f:7a:80:71:fa:28:a5:bc:79:6d:b9:d3:20:3f:da:2a: 46:e7:d6:d4:be:43:53:4b:14:4c:21:0d:d4:d4:8f:9e:37:45: 38:94:2e:21:ed:ad:ed:dc:ee:5c:dd:26:72:58:db:7c:9b:34: 74:a3:d4:d6:af:f6:f0:05:e2:20:59:56:b1:9c:2b:41:08:55: 01:18:b7:ea:c3:0c:bb:a2:cb:c6:55:f4:fd:71:99:8a:47:b8: d7:23:7c:2f:02:c1:50:8d:f2:18:f2:4b:59:a5:15:49:98:2b: 5a:76:e9:92:92:be:29:de:6e:2b:c5:b9:f2:dc:58:ab:00:45: b7:a6:91:f0:14:4c:b0:18:60:61:5d:3a:de:e0:5a:a6:06:fa: e5:2b:81:2a:8d:7d:de:ba:f9:e5:93:e5:b8:8a:04:15:0a:e2: 73:7c:05:55:13:8c:b8:b3:a6:68:68:e2:08:29:4d:03:ee:c4: 27:a8:a6:a1:b3:a7:83:ad:f2:b4:ab:61:2a:b2:10:10:52:ae: fd:df:39:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YzIhHSN6vwszS7EXsUFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5 YjZhNmQwHhcNMjYwMTI1MDkwMTQwWhcNMjYwMTI2MDkwMTQwWjAzMTEwLwYDVQQD Eyg5MTFkZTY3OTFmN2UyYTk1ZmZiZGFhN2ZkYjU0YThhN2M0MTk5YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusnsc+oK6eYvkeFJCr3F0NdOplhM wUtfZqvihwNYlRWG22zEePxE9LRWtTGmhq31Bi5eOb90C4XvMZJeBriDa1aMSwZA ejjTyf9PQvOhD3Mlbvu71xsF8mVtZlf+mRPV1SmZqxQ2U/6c8dEEYosWgTKq5xl4 4dQthUVv7RRzSbcdr597kM/+yGtziFrlC7dQjzUeVKZi20UZ0qSisEFIA3xtn5Nm k2KcTGW7ufmT9Kcek2Hg//Sy5a/w9HxBF0mohUXg/X1xW5bWgKWeMi/MsJ9Fg+lS tbAoHUJcj7VTqFjr2tTTPEnbyM/52IHj6VQ4frbhceXJN8AGrr9We2tnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEd5nkffiqV/72qf9tUqKfEGZv9MB8GA1UdIwQY MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4 LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHOHX24a eHhkcBNDVejw2J7g8CtBfCGulyJL4iJ+89eM6SUZwBz1WyFMJeXexVjm/LyzNZKb y46PeoBx+iilvHltudMgP9oqRufW1L5DU0sUTCEN1NSPnjdFOJQuIe2t7dzuXN0m cljbfJs0dKPU1q/28AXiIFlWsZwrQQhVARi36sMMu6LLxlX0/XGZike41yN8LwLB UI3yGPJLWaUVSZgrWnbpkpK+Kd5uK8W58txYqwBFt6aR8BRMsBhgYV063uBapgb6 5SuBKo193rr55ZPluIoEFQric3wFVROMuLOmaGjiCClNA+7EJ6imobOng63ytKth KrIQEFKu/d85qA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:51 2026 by rpki-client