This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json) Hash identifier: 0b4PwAvFWi8zfZig67UKhcEotymK8Vs6mEs9vXA4Mr4= Subject key identifier: F6:60:49:FA:70:3C:90:DF:B0:37:3E:4D:A9:6E:80:35:E6:40:1D:66 Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c Certificate serial: 019BF4D0A7261E1429501B62B4BF8F7D214E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft Manifest number: 163B Signing time: Sun 25 Jan 2026 11:01:13 +0000 Manifest this update: Sun 25 Jan 2026 11:01:13 +0000 Manifest next update: Mon 26 Jan 2026 11:01:13 +0000 Files and hashes: 1: VfhG622X05ueKbyBW99s2Fx6Fvo.roa (hash: Otn+DYA7TkvkGAtuxIAHKcouTj233mRIPs1zHqZ4ddQ=) 2: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: eZCnRTcQ7N1y7oz4eW+TSwjOGjsIJjMU0h+Styy3n9M=) 3: xmuJajCxW6CAKzBKO0HZKxX3wCE.roa (hash: ISJ5kbE0xjYL9zMLc4XnOd0MhdPOaMjlbz5SKGrN7dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a7:26:1e:14:29:50:1b:62:b4:bf:8f:7d:21:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c Validity Not Before: Jan 25 11:01:13 2026 GMT Not After : Jan 26 11:01:13 2026 GMT Subject: CN=f66049fa703c90dfb0373e4da96e8035e6401d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:f8:95:f7:d2:85:d7:4c:e0:56:92:4d:bb: ab:a4:bd:f2:28:ea:ed:54:26:85:d7:f1:66:34:d4: 3c:0a:3e:83:00:5d:cb:ce:b2:7c:e0:b7:ed:4b:22: 07:72:8e:43:48:ca:ca:3a:3d:a1:2b:33:e6:57:e8: f1:d4:33:0a:14:25:21:b4:5b:3a:45:56:d2:8a:f8: 32:33:ba:26:b1:b9:d1:56:83:59:17:2f:7f:56:54: 28:e8:3c:f0:27:fe:35:fe:06:6d:67:74:d7:2e:af: db:86:54:cf:9b:22:41:89:4d:2c:36:8f:e1:a3:40: bf:60:e0:09:e0:6a:8b:3e:56:c1:d6:0e:ea:6e:f6: e8:13:26:99:c7:2b:44:e4:a3:f6:fa:37:ad:b3:44: fb:e1:53:1d:77:a1:b5:8c:3c:82:aa:82:0d:d6:f7: 8a:89:b3:6c:d0:2f:22:30:76:21:0b:c8:c6:12:b9: 28:dd:3e:bb:10:88:3b:e7:0d:a7:93:33:0c:91:98: f7:3a:5a:f2:fd:68:01:a9:b8:45:17:80:f5:df:0e: 35:a0:16:02:fb:9d:ef:d9:52:28:cf:e9:46:30:98: 04:3e:82:f5:f3:c2:b6:4b:25:e1:31:53:06:73:83: 3f:69:0f:4a:df:a0:6b:1d:d9:29:cf:ad:a8:bc:00: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:49:FA:70:3C:90:DF:B0:37:3E:4D:A9:6E:80:35:E6:40:1D:66 X509v3 Authority Key Identifier: keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:21:68:f8:90:f8:7c:9c:11:ae:1d:51:e5:be:1f:1c:b1:7e: 94:80:48:11:2d:8a:5a:ee:ca:c0:fa:bf:09:29:30:fd:78:b4: c9:8d:30:5b:36:de:11:c9:44:9b:95:03:6f:a4:48:21:04:ae: 27:6a:a7:0e:61:1f:82:42:5b:27:40:0a:69:3d:90:9a:fc:17: 66:c9:20:7d:b1:00:ae:81:93:fd:5d:26:e8:bd:b8:dd:0b:5c: fe:e2:c3:c3:0c:3d:f9:ba:e1:04:ae:91:22:b2:d4:a9:c9:75: 36:5a:42:4a:b3:3a:ea:85:2c:c9:e8:8e:6b:2a:11:55:74:cd: d6:21:4a:3e:f5:aa:59:83:cf:b5:b7:99:c5:73:c1:93:75:27: eb:50:d5:c6:b8:b4:4c:e8:6c:d6:07:03:04:d5:25:93:cb:3f: bc:52:ff:3d:99:d4:f8:a7:11:b0:ab:b7:4e:77:ba:5e:6a:fc: 24:ca:df:39:c4:2e:0c:91:1a:6a:0e:65:52:37:58:8f:9d:41: e3:c3:c8:0f:9d:bf:b1:17:fb:a8:09:2e:19:41:44:1c:a2:8d: 77:33:3c:8d:47:ae:a2:b7:da:e0:24:66:95:44:ee:f4:9e:77: 07:79:a5:8a:cd:55:5c:ae:96:08:5e:78:21:ec:57:e2:fb:4c: 45:a2:02:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00KcmHhQpUBtitL+PfSFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZkMTIzY2I5M2UyNGUwMjVmOTUyODQyMTA4NDAyOTU4 ZDRhNGMwHhcNMjYwMTI1MTEwMTEzWhcNMjYwMTI2MTEwMTEzWjAzMTEwLwYDVQQD EyhmNjYwNDlmYTcwM2M5MGRmYjAzNzNlNGRhOTZlODAzNWU2NDAxZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusr4lffShddM4FaSTburpL3yKOrt VCaF1/FmNNQ8Cj6DAF3LzrJ84LftSyIHco5DSMrKOj2hKzPmV+jx1DMKFCUhtFs6 RVbSivgyM7omsbnRVoNZFy9/VlQo6DzwJ/41/gZtZ3TXLq/bhlTPmyJBiU0sNo/h o0C/YOAJ4GqLPlbB1g7qbvboEyaZxytE5KP2+jets0T74VMdd6G1jDyCqoIN1veK ibNs0C8iMHYhC8jGErko3T67EIg75w2nkzMMkZj3Olry/WgBqbhFF4D13w41oBYC +53v2VIoz+lGMJgEPoL188K2SyXhMVMGc4M/aQ9K36BrHdkpz62ovACJXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZgSfpwPJDfsDc+TalugDXmQB1mMB8GA1UdIwQY MBaAFLv/0SPLk+JOAl+VKEIQhAKVjUpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjIt YWM0YTQwNjE3NDZkLzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZGNmYzktNTdkYS00MDdmLWE2YjItYWM0YTQwNjE3NDZk LzEvdV9fUkk4dVQ0azRDWDVVb1FoQ0VBcFdOU2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCFo+JD4 fJwRrh1R5b4fHLF+lIBIES2KWu7KwPq/CSkw/Xi0yY0wWzbeEclEm5UDb6RIIQSu J2qnDmEfgkJbJ0AKaT2QmvwXZskgfbEAroGT/V0m6L243Qtc/uLDwww9+brhBK6R IrLUqcl1NlpCSrM66oUsyeiOayoRVXTN1iFKPvWqWYPPtbeZxXPBk3Un61DVxri0 TOhs1gcDBNUlk8s/vFL/PZnU+KcRsKu3Tne6Xmr8JMrfOcQuDJEaag5lUjdYj51B 48PID52/sRf7qAkuGUFEHKKNdzM8jUeuorfa4CRmlUTu9J53B3mlis1VXK6WCF54 IexX4vtMRaICog== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:20 2026 by rpki-client