This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json) Hash identifier: 5s5RwWXJXbjdcv6d3E2hn4RTF1CJfbIkAaZVAR6jZZU= Subject key identifier: BD:77:E6:83:FB:81:32:00:BF:7B:4A:61:B9:E3:E9:9F:A4:13:EC:02 Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Certificate serial: 019BF6BE927BDDB053DFB283FEE29680AD0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:00:43 +0000 Manifest this update: Sun 25 Jan 2026 20:00:43 +0000 Manifest next update: Mon 26 Jan 2026 20:00:43 +0000 Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=) 2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: GyltqRifU06ncU/PmrpjbuzIABY/b9x8RCeEBxqFdVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:92:7b:dd:b0:53:df:b2:83:fe:e2:96:80:ad:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Validity Not Before: Jan 25 20:00:43 2026 GMT Not After : Jan 26 20:00:43 2026 GMT Subject: CN=bd77e683fb813200bf7b4a61b9e3e99fa413ec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:21:dc:ca:f6:73:26:a5:4d:02:ef:7d:96: 65:b4:9b:21:01:6a:bb:a9:74:7e:d9:50:f1:3e:4b: 56:76:9c:0b:b3:4f:26:d5:26:f3:42:3a:6f:66:e1: ee:7f:f5:b3:76:d6:2d:f9:35:61:04:e9:28:1b:37: ec:c4:33:e8:5f:ec:f4:a9:76:2f:89:67:91:99:05: aa:6e:aa:15:48:3c:9d:f6:12:60:90:d5:03:20:d1: 6a:4c:85:b6:75:d9:5d:b0:4a:a9:1c:dd:b1:68:10: 13:cf:19:77:4e:19:fc:43:fd:f0:6a:3d:af:a4:c8: d6:67:f1:b6:0a:11:52:e6:30:4d:ff:a0:61:80:cb: 0b:9d:41:a8:89:fe:a4:cd:cf:3b:4c:cf:ff:57:89: fc:1a:d5:9f:34:3f:71:7f:64:59:31:48:49:f1:64: a6:28:c6:20:2d:0a:87:35:f5:90:3d:53:ea:f1:9d: b3:39:fc:73:0d:1f:bb:46:c0:c0:e6:20:eb:5e:7d: 47:11:e8:78:42:5a:54:80:75:36:5c:d0:f9:bd:eb: fa:9d:5a:5b:76:84:36:5c:67:9c:28:43:74:f6:34: 0e:d1:83:06:b5:c9:b1:bf:2a:fa:bc:f3:06:a8:b0: 7a:cb:0c:59:6b:d6:43:d8:18:b7:53:4e:7f:86:31: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:77:E6:83:FB:81:32:00:BF:7B:4A:61:B9:E3:E9:9F:A4:13:EC:02 X509v3 Authority Key Identifier: keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:db:e1:12:d3:fa:5a:a4:9d:e3:a2:72:20:34:e0:1d:8e:96: 67:f6:99:0d:be:59:ea:3c:d1:6c:78:c0:dd:f0:5d:f2:ce:f1: 2a:f2:07:38:28:ea:6b:c6:82:32:e1:17:7b:81:3f:97:f2:e6: 15:70:33:98:76:14:5f:e0:c8:49:57:71:77:3b:e3:99:61:16: ae:1f:cc:96:e2:02:a5:62:0e:be:b1:cd:99:2a:c4:5f:42:85: a9:47:b6:da:fa:bc:9e:d2:c3:fa:40:61:b7:2a:e5:69:70:dc: 44:4b:69:25:66:41:3c:6a:2c:12:9d:ee:c6:6a:f1:57:db:50: f7:bd:d5:4b:63:1c:f6:c0:91:65:b4:42:dc:96:8a:3a:ca:8c: 8b:4b:b8:e9:cd:7d:05:15:b1:a3:41:1d:5e:24:da:bb:da:22: 7c:da:5f:fe:f2:14:2d:d3:5f:a2:10:48:2c:e6:a0:6f:b0:dd: 40:6b:26:a2:f3:9a:f0:79:b4:d8:40:83:b0:2b:56:b7:96:fa: 30:92:99:b4:65:d8:04:21:5d:88:0e:e6:25:34:dd:a8:c4:a5: 72:65:33:68:49:01:ae:8a:f8:42:5a:07:39:e4:f6:e3:15:02: 5a:dd:17:6c:e7:7e:51:aa:1a:70:ab:5f:72:3a:40:e6:43:f3: 41:e6:83:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpJ73bBT37KD/uKWgK0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk YTlkNDMwHhcNMjYwMTI1MjAwMDQzWhcNMjYwMTI2MjAwMDQzWjAzMTEwLwYDVQQD EyhiZDc3ZTY4M2ZiODEzMjAwYmY3YjRhNjFiOWUzZTk5ZmE0MTNlYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lQh3Mr2cyalTQLvfZZltJshAWq7 qXR+2VDxPktWdpwLs08m1SbzQjpvZuHuf/WzdtYt+TVhBOkoGzfsxDPoX+z0qXYv iWeRmQWqbqoVSDyd9hJgkNUDINFqTIW2ddldsEqpHN2xaBATzxl3Thn8Q/3waj2v pMjWZ/G2ChFS5jBN/6BhgMsLnUGoif6kzc87TM//V4n8GtWfND9xf2RZMUhJ8WSm KMYgLQqHNfWQPVPq8Z2zOfxzDR+7RsDA5iDrXn1HEeh4QlpUgHU2XND5vev6nVpb doQ2XGecKEN09jQO0YMGtcmxvyr6vPMGqLB6ywxZa9ZD2Bi3U05/hjFK3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL135oP7gTIAv3tKYbnj6Z+kE+wCMB8GA1UdIwQY MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNvhEtP6 WqSd46JyIDTgHY6WZ/aZDb5Z6jzRbHjA3fBd8s7xKvIHOCjqa8aCMuEXe4E/l/Lm FXAzmHYUX+DISVdxdzvjmWEWrh/MluICpWIOvrHNmSrEX0KFqUe22vq8ntLD+kBh tyrlaXDcREtpJWZBPGosEp3uxmrxV9tQ973VS2Mc9sCRZbRC3JaKOsqMi0u46c19 BRWxo0EdXiTau9oifNpf/vIULdNfohBILOagb7DdQGsmovOa8Hm02ECDsCtWt5b6 MJKZtGXYBCFdiA7mJTTdqMSlcmUzaEkBror4QloHOeT24xUCWt0XbOd+UaoacKtf cjpA5kPzQeaDoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:46:14 2026 by rpki-client