This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json) Hash identifier: Dhdb/5oPyneFtndMPFXUUH9jewA7zIG9iaOvfS5DUEw= Subject key identifier: 67:8E:D0:3B:97:41:CC:D0:34:84:BA:02:40:5E:B1:A0:14:93:8A:95 Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Certificate serial: 019BF4D10FC8AE5432125F798B6448227294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:01:40 +0000 Manifest this update: Sun 25 Jan 2026 11:01:40 +0000 Manifest next update: Mon 26 Jan 2026 11:01:40 +0000 Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=) 2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: lUj6e3mpz/60cfhmkWhyBs/dJQi3GL7khppdk32BeCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:0f:c8:ae:54:32:12:5f:79:8b:64:48:22:72:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Validity Not Before: Jan 25 11:01:40 2026 GMT Not After : Jan 26 11:01:40 2026 GMT Subject: CN=678ed03b9741ccd03484ba02405eb1a014938a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:b5:2c:21:67:95:f6:8a:05:b1:db:12:e3: f4:85:87:f8:35:28:2c:72:f2:79:5c:e7:9e:59:db: fe:0f:16:3d:b1:41:75:ed:9d:0f:f4:fb:cf:4c:86: 18:90:06:2b:40:13:53:ca:a3:7c:5b:e7:94:dc:14: ba:8f:c9:8c:8e:3f:f2:27:bf:0b:a7:25:65:0d:79: 18:fd:6b:88:14:2f:cb:12:23:fa:3f:8f:b3:40:ba: a6:ab:fa:e5:e3:1d:01:c9:1f:c8:41:ac:cd:7a:2a: ca:55:ba:22:4e:93:61:7d:c2:13:d1:eb:13:d8:21: 52:f4:02:5a:45:c2:4e:2e:b6:6b:61:d2:62:36:17: 2d:40:c4:5a:86:30:92:91:f9:4a:a8:d3:29:09:7d: 30:bf:f6:c0:11:30:3a:12:8f:48:4a:7d:8c:df:29: 01:55:d7:85:e8:a7:8d:54:e5:50:ba:72:f5:5a:d8: 4b:66:ef:0d:ef:9d:3d:f3:d6:db:13:67:0b:b3:84: ff:b1:a7:12:23:c0:e8:97:20:89:f6:a6:6d:ce:90: 4a:da:4d:29:97:a8:0a:e0:dc:22:5a:79:c2:9a:ff: 4c:51:91:10:56:77:9f:30:cb:b2:e4:34:81:ba:43: 5d:8b:60:b0:3c:0f:70:68:03:02:1a:49:cd:93:6d: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8E:D0:3B:97:41:CC:D0:34:84:BA:02:40:5E:B1:A0:14:93:8A:95 X509v3 Authority Key Identifier: keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c4:d4:cc:18:4c:2b:e1:c4:f5:d9:09:b5:dc:4a:51:30:59: c6:ef:13:0f:8a:3d:84:98:cf:73:e0:b7:ba:63:3a:df:8f:98: 67:90:6e:98:05:ef:29:47:7b:7f:19:8f:18:90:e2:2b:88:88: 05:18:f3:e9:d9:fa:e7:c1:0a:fe:65:db:f1:cf:29:90:90:6b: 99:62:56:fd:19:d8:8a:29:30:b1:41:2c:61:93:ab:ff:27:e6: 02:06:d6:0e:e0:55:5d:7a:e9:e5:6a:34:65:ea:73:f3:c5:e3: d6:17:43:9c:d5:2a:31:11:d8:62:12:a3:4c:6e:d0:52:89:2e: d5:09:d5:d7:a7:d4:e8:53:56:13:dd:73:89:18:49:20:d9:f8: de:53:e5:82:58:99:ff:97:56:9b:e4:a7:cb:38:af:25:59:2b: 2c:7e:e1:3f:00:06:fa:09:db:8b:93:41:17:4c:bb:b1:7a:98: 3c:38:c0:e1:b1:82:7d:39:1a:71:e0:b7:a7:46:48:2a:84:ee: 03:93:57:7a:d8:a8:51:25:d9:88:93:ce:7e:6f:a3:98:b5:6b: f1:6d:3d:e2:29:ea:cb:5a:d7:fc:3f:29:2f:55:57:1c:bc:7c: 96:d3:b0:3f:3e:a5:ac:40:58:6c:3e:f7:74:26:4a:47:05:e9: 77:e1:71:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Q/IrlQyEl95i2RIInKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk YTlkNDMwHhcNMjYwMTI1MTEwMTQwWhcNMjYwMTI2MTEwMTQwWjAzMTEwLwYDVQQD Eyg2NzhlZDAzYjk3NDFjY2QwMzQ4NGJhMDI0MDVlYjFhMDE0OTM4YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTm1LCFnlfaKBbHbEuP0hYf4NSgs cvJ5XOeeWdv+DxY9sUF17Z0P9PvPTIYYkAYrQBNTyqN8W+eU3BS6j8mMjj/yJ78L pyVlDXkY/WuIFC/LEiP6P4+zQLqmq/rl4x0ByR/IQazNeirKVboiTpNhfcIT0esT 2CFS9AJaRcJOLrZrYdJiNhctQMRahjCSkflKqNMpCX0wv/bAETA6Eo9ISn2M3ykB VdeF6KeNVOVQunL1WthLZu8N750989bbE2cLs4T/sacSI8DolyCJ9qZtzpBK2k0p l6gK4NwiWnnCmv9MUZEQVnefMMuy5DSBukNdi2CwPA9waAMCGknNk234+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeO0DuXQczQNIS6AkBesaAUk4qVMB8GA1UdIwQY MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksTUzBhM K+HE9dkJtdxKUTBZxu8TD4o9hJjPc+C3umM634+YZ5BumAXvKUd7fxmPGJDiK4iI BRjz6dn658EK/mXb8c8pkJBrmWJW/RnYiikwsUEsYZOr/yfmAgbWDuBVXXrp5Wo0 Zepz88Xj1hdDnNUqMRHYYhKjTG7QUoku1QnV16fU6FNWE91ziRhJINn43lPlgliZ /5dWm+SnyzivJVkrLH7hPwAG+gnbi5NBF0y7sXqYPDjA4bGCfTkaceC3p0ZIKoTu A5NXetioUSXZiJPOfm+jmLVr8W094inqy1rX/D8pL1VXHLx8ltOwPz6lrEBYbD73 dCZKRwXpd+Fx/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:49 2026 by rpki-client