This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json) Hash identifier: 9NjdgrjwHIV7HOmYsPTMG+YDNSMQLUDTSjDwJtGgpsg= Subject key identifier: 60:85:C9:8C:F4:65:67:77:6B:1B:5E:E4:C5:BB:B5:DE:CD:D6:6B:C4 Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Certificate serial: 019BF53EBD94B3114071B94ECE26429B1F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft Manifest number: 101C Signing time: Sun 25 Jan 2026 13:01:28 +0000 Manifest this update: Sun 25 Jan 2026 13:01:28 +0000 Manifest next update: Mon 26 Jan 2026 13:01:28 +0000 Files and hashes: 1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=) 2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=) 3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=) 4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: q9rgKyBNKjFK3pm/KV1jqbuAW5tuTW36QG9NQq74UQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:bd:94:b3:11:40:71:b9:4e:ce:26:42:9b:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Validity Not Before: Jan 25 13:01:28 2026 GMT Not After : Jan 26 13:01:28 2026 GMT Subject: CN=6085c98cf46567776b1b5ee4c5bbb5decdd66bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:b7:81:85:f4:ab:bc:42:78:c4:8e:39:a5: 3a:3f:22:f8:4c:c1:03:d9:5e:84:82:e5:89:ff:2a: 67:17:60:d6:24:19:f4:12:4e:79:37:06:fb:ce:fb: 0b:c9:eb:f9:da:a8:0f:ca:78:e1:cc:90:d2:38:6d: d8:23:84:c6:b4:00:00:d4:ca:b0:af:38:a9:ac:27: cb:71:90:68:a6:ee:cf:3a:73:c3:8a:60:a2:42:ca: 84:ab:dc:46:0a:e6:cf:2f:ff:ca:a8:45:6f:dc:22: 62:1b:10:11:e2:a9:b7:18:d8:67:a7:62:bf:1c:b9: f5:4d:e6:8a:89:75:dc:ba:97:4e:f1:7d:77:21:dd: 90:4c:bc:d2:8d:c6:52:73:a8:77:3d:df:dd:ad:a3: 93:0d:22:99:d9:4f:96:bb:5e:c9:7f:01:31:c0:0f: b2:30:da:66:2a:5d:4c:44:2f:44:81:f5:94:71:5b: 9d:b6:7a:4a:4f:74:6f:d1:0e:17:a2:be:b4:df:5e: 63:e2:56:98:1d:aa:3a:a6:2b:11:a0:e2:4f:e8:4e: 31:24:cb:8c:e2:ad:20:e0:25:7e:63:1b:d2:3f:5d: 78:57:9f:9f:78:2c:6e:66:df:fc:c8:fe:55:f1:f8: 33:b1:d0:09:a0:de:70:7f:64:39:b6:27:c4:04:5c: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:85:C9:8C:F4:65:67:77:6B:1B:5E:E4:C5:BB:B5:DE:CD:D6:6B:C4 X509v3 Authority Key Identifier: keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:57:c8:b1:59:93:7a:6f:bf:f9:12:50:32:05:ff:d9:f2:83: 99:ad:62:fb:d2:77:b7:ee:3d:f1:26:99:4f:35:d1:01:1d:d5: 8c:6c:e2:6d:bc:72:71:d0:83:29:81:1f:08:c4:c6:70:3b:5a: a8:40:3e:b3:25:1d:aa:68:57:86:b3:b3:56:dc:fe:01:3c:54: af:e8:a4:51:d8:9e:62:7a:7b:90:0e:4b:9f:08:03:4a:3c:d7: 86:26:66:ca:a3:f1:cb:23:d8:04:18:71:f2:f9:fa:d7:e9:5f: 1c:98:b0:8b:bf:23:9c:2e:af:a1:50:58:d5:b5:9f:37:01:b2: ea:38:aa:6b:8e:d3:9b:07:0b:06:38:06:df:7d:6e:d1:ef:32: dd:d8:17:bb:1d:24:c2:5c:c2:9e:92:b7:78:c3:aa:73:3a:1d: e3:15:17:5c:97:7a:b0:3e:00:cf:aa:be:f0:eb:4d:42:27:f4: d0:cc:a5:4b:0e:5c:c8:43:a8:c8:1b:77:d6:66:6b:3c:05:87: ed:92:68:e3:65:e1:d6:cd:5f:e2:c3:8c:0f:2b:5b:ad:2b:18: 87:18:60:76:4f:a4:ba:af:cb:2e:03:08:da:89:44:b3:7c:f0: 25:ef:db:1d:66:57:aa:6a:95:52:0c:78:63:6f:f9:57:61:9b: 67:62:3a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pr2UsxFAcblOziZCmx83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm ZjFjNjEwHhcNMjYwMTI1MTMwMTI4WhcNMjYwMTI2MTMwMTI4WjAzMTEwLwYDVQQD Eyg2MDg1Yzk4Y2Y0NjU2Nzc3NmIxYjVlZTRjNWJiYjVkZWNkZDY2YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8q3gYX0q7xCeMSOOaU6PyL4TMED 2V6EguWJ/ypnF2DWJBn0Ek55Nwb7zvsLyev52qgPynjhzJDSOG3YI4TGtAAA1Mqw rziprCfLcZBopu7POnPDimCiQsqEq9xGCubPL//KqEVv3CJiGxAR4qm3GNhnp2K/ HLn1TeaKiXXcupdO8X13Id2QTLzSjcZSc6h3Pd/draOTDSKZ2U+Wu17JfwExwA+y MNpmKl1MRC9EgfWUcVudtnpKT3Rv0Q4Xor60315j4laYHao6pisRoOJP6E4xJMuM 4q0g4CV+YxvSP114V5+feCxuZt/8yP5V8fgzsdAJoN5wf2Q5tifEBFzvhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCFyYz0ZWd3axte5MW7td7N1mvEMB8GA1UdIwQY MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFfIsVmT em+/+RJQMgX/2fKDma1i+9J3t+498SaZTzXRAR3VjGzibbxycdCDKYEfCMTGcDta qEA+syUdqmhXhrOzVtz+ATxUr+ikUdieYnp7kA5LnwgDSjzXhiZmyqPxyyPYBBhx 8vn61+lfHJiwi78jnC6voVBY1bWfNwGy6jiqa47TmwcLBjgG331u0e8y3dgXux0k wlzCnpK3eMOqczod4xUXXJd6sD4Az6q+8OtNQif00MylSw5cyEOoyBt31mZrPAWH 7ZJo42Xh1s1f4sOMDytbrSsYhxhgdk+kuq/LLgMI2olEs3zwJe/bHWZXqmqVUgx4 Y2/5V2GbZ2I6Xw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:38 2026 by rpki-client