This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json) Hash identifier: ft6J2XfE4zfLmN2X0jpUBHWkSC1BiG78b1r+fz4bBXI= Subject key identifier: C2:DB:DE:95:20:74:DF:FC:81:B9:84:E5:07:3C:1C:D7:86:93:F7:ED Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e Certificate serial: 019BF20714833A6669C4638393D91F4A3433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft Manifest number: 077F Signing time: Sat 24 Jan 2026 22:01:48 +0000 Manifest this update: Sat 24 Jan 2026 22:01:48 +0000 Manifest next update: Sun 25 Jan 2026 22:01:48 +0000 Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=) 2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: Kza/SMOne7AqQgP7vaIzlNOd6v+VE5puaftDjn7qML0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:07:14:83:3a:66:69:c4:63:83:93:d9:1f:4a:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e Validity Not Before: Jan 24 22:01:48 2026 GMT Not After : Jan 25 22:01:48 2026 GMT Subject: CN=c2dbde952074dffc81b984e5073c1cd78693f7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:a7:d5:6d:51:7b:a4:bf:56:0c:ec:da:c0: cb:1a:57:ae:a0:83:eb:61:5a:42:9a:3b:22:a0:c6: 05:bc:c5:f9:8c:e3:6d:d8:1b:93:5e:0b:fc:72:bd: 70:3c:c8:3b:a3:62:84:c7:e3:18:db:5d:22:95:77: 7d:b0:c5:15:ff:2d:50:89:ed:57:74:7b:d7:2f:14: b3:9c:5b:23:82:65:4d:f1:c0:bb:e2:92:9a:0b:7f: 02:b1:87:1a:33:1d:57:0c:a9:45:d3:bc:69:2b:08: 6b:b1:d5:81:ae:f6:fa:8a:9e:b4:fb:19:68:3b:2a: c6:c4:83:2b:0c:b0:2e:a5:ac:66:25:ad:ec:25:e5: c8:52:c7:86:71:d7:f2:28:32:fc:c0:78:01:53:2c: 9e:97:e9:42:14:a3:4a:2a:e1:37:4b:6a:00:32:b2: e7:1b:97:96:5c:6c:af:fc:3c:aa:4d:a2:b9:8e:82: 53:33:a3:30:4d:23:3d:ea:11:64:0c:f8:17:49:49: 5b:fb:3c:56:14:2b:0d:70:55:ce:e4:ff:3b:ac:7f: b9:48:ff:d9:4e:ec:03:3c:e6:b2:a9:92:8c:33:83: dd:b4:fb:6b:db:c1:0d:ae:6f:7f:8a:75:1c:84:9e: a4:c2:6b:a0:55:cc:f4:18:45:19:b4:3b:84:c1:e7: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DB:DE:95:20:74:DF:FC:81:B9:84:E5:07:3C:1C:D7:86:93:F7:ED X509v3 Authority Key Identifier: keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8e:99:61:3d:01:6a:71:f4:4e:7d:b8:58:8b:ed:2a:09:6b: c5:6f:b9:ab:1b:dd:94:ca:ba:98:da:b9:21:e2:11:d1:cd:05: 8e:4a:ce:58:ca:70:fc:55:3a:8f:89:eb:65:83:84:c9:46:51: 3b:55:9e:b3:92:93:ec:6a:86:cc:a6:fc:a0:c1:16:6b:7e:e2: c0:80:54:f9:2f:57:5c:65:df:35:cb:fe:37:08:1f:36:6d:45: c0:d5:86:3e:c6:08:e9:b1:35:ce:a3:db:21:fe:a2:d0:bb:11: b6:7c:d7:15:54:c9:7c:4d:c0:6a:bf:9a:ff:c0:e5:b3:81:31: b3:39:6c:dc:79:4e:b8:e5:3f:6d:56:52:e6:75:ae:30:78:86: 8b:8b:11:23:5e:c8:23:f7:6c:30:4f:df:64:34:40:4f:6a:ba: f5:81:b2:f0:7b:a0:6c:f0:82:96:4d:4e:8f:3e:7b:ff:cd:0f: 39:12:eb:17:82:78:43:b4:6c:fb:dc:89:72:3a:ea:b4:39:43: 4a:c9:fa:f4:4b:7d:e9:51:42:20:65:47:35:1a:20:e7:a7:b3: f5:2d:1e:7b:a7:3c:12:3d:ba:20:3a:b1:28:d7:5c:a5:7a:31: 82:e4:ff:a1:4e:30:19:67:e6:e9:c8:e3:56:ce:08:2b:d2:b2: 2f:1c:62:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBxSDOmZpxGODk9kfSjQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj ZDI5MmUwHhcNMjYwMTI0MjIwMTQ4WhcNMjYwMTI1MjIwMTQ4WjAzMTEwLwYDVQQD EyhjMmRiZGU5NTIwNzRkZmZjODFiOTg0ZTUwNzNjMWNkNzg2OTNmN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUGn1W1Re6S/Vgzs2sDLGleuoIPr YVpCmjsioMYFvMX5jONt2BuTXgv8cr1wPMg7o2KEx+MY210ilXd9sMUV/y1Qie1X dHvXLxSznFsjgmVN8cC74pKaC38CsYcaMx1XDKlF07xpKwhrsdWBrvb6ip60+xlo OyrGxIMrDLAupaxmJa3sJeXIUseGcdfyKDL8wHgBUyyel+lCFKNKKuE3S2oAMrLn G5eWXGyv/DyqTaK5joJTM6MwTSM96hFkDPgXSUlb+zxWFCsNcFXO5P87rH+5SP/Z TuwDPOayqZKMM4PdtPtr28ENrm9/inUchJ6kwmugVcz0GEUZtDuEwef+5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLb3pUgdN/8gbmE5Qc8HNeGk/ftMB8GA1UdIwQY MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct MDcwYTFmNzE4ODVlLzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo6ZYT0B anH0Tn24WIvtKglrxW+5qxvdlMq6mNq5IeIR0c0FjkrOWMpw/FU6j4nrZYOEyUZR O1Wes5KT7GqGzKb8oMEWa37iwIBU+S9XXGXfNcv+NwgfNm1FwNWGPsYI6bE1zqPb If6i0LsRtnzXFVTJfE3Aar+a/8Dls4Exszls3HlOuOU/bVZS5nWuMHiGi4sRI17I I/dsME/fZDRAT2q69YGy8HugbPCClk1Ojz57/80PORLrF4J4Q7Rs+9yJcjrqtDlD Ssn69Et96VFCIGVHNRog56ez9S0ee6c8Ej26IDqxKNdcpXoxguT/oU4wGWfm6cjj Vs4IK9KyLxximA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:29:17 2026 by rpki-client