This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json) Hash identifier: 7w9aa5IAjP7gwj1y9x2ODv+w8p2Np/30MvdWAymNPNY= Subject key identifier: EA:54:CF:27:75:81:D1:BA:99:0F:DD:1E:0D:C0:5B:A3:FD:2B:CA:A8 Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Certificate serial: 019BF6BF4E2C89E9DD72B88DE42EBA4F3CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft Manifest number: 0A9E Signing time: Sun 25 Jan 2026 20:01:30 +0000 Manifest this update: Sun 25 Jan 2026 20:01:30 +0000 Manifest next update: Mon 26 Jan 2026 20:01:30 +0000 Files and hashes: 1: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (hash: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y=) 2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: qpcEvF6SxznUrS0qSFrLZeOEKQ95UHEzyXWuNkPK5a0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:4e:2c:89:e9:dd:72:b8:8d:e4:2e:ba:4f:3c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Validity Not Before: Jan 25 20:01:30 2026 GMT Not After : Jan 26 20:01:30 2026 GMT Subject: CN=ea54cf277581d1ba990fdd1e0dc05ba3fd2bcaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:31:ef:70:e9:5e:eb:2a:f5:ac:10:ce:32: 6d:ba:21:1a:ed:03:00:91:45:fa:77:21:2e:a5:e0: fc:f7:a0:b6:08:4d:ef:27:ca:10:c7:4f:55:f4:8d: 50:f7:e3:01:f4:99:14:94:1c:5e:16:97:9e:e2:3e: 42:31:c1:20:5e:9d:6e:46:f2:b7:cc:e2:97:74:0f: b9:63:eb:c8:09:53:f3:bd:f9:55:a5:3c:76:5e:f0: 58:65:24:ad:14:02:cc:b6:2a:2e:b5:8b:36:67:f5: d9:8a:3d:47:77:ba:97:c3:66:b3:76:0f:fd:ad:de: 39:37:08:17:20:98:3b:9a:39:f9:fb:3c:d7:42:61: b8:d4:c0:85:91:87:00:58:45:dd:bd:7b:fd:77:e4: 42:8a:5e:4d:68:9a:76:c9:82:b4:e6:f3:0a:08:c4: 3c:22:57:34:0d:23:9d:c0:5e:f6:68:d4:57:83:66: b7:5b:7d:e0:47:38:91:26:40:3f:36:79:a3:3b:b6: fb:a7:f6:7c:02:d2:e8:6f:74:30:85:aa:fc:df:0b: 9f:b6:1b:a2:53:b5:e8:b0:2f:3b:4e:b0:6d:62:cd: 4e:f8:85:f1:c7:8f:af:78:1c:d0:b9:82:28:87:d4: db:a1:e4:ac:13:76:b3:6f:ca:de:dc:24:51:11:2e: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:54:CF:27:75:81:D1:BA:99:0F:DD:1E:0D:C0:5B:A3:FD:2B:CA:A8 X509v3 Authority Key Identifier: keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7b:30:08:85:e3:a8:d3:06:6f:38:99:ff:cd:dc:9d:7d:a0: fe:d1:f3:11:84:01:90:e9:60:f2:90:34:f4:b0:bf:1d:8d:a4: a2:84:eb:56:ae:93:71:2b:13:b1:44:50:f5:b5:b6:6a:58:ca: 08:6f:59:e2:8c:ef:b7:62:ac:ca:a0:c2:e4:95:7a:78:27:8e: 0c:0c:13:9e:bc:92:12:48:61:76:1c:54:d5:f7:ab:c9:1b:2b: bf:57:d2:7b:a7:c6:39:00:0c:e4:0e:8e:9e:0f:63:2a:55:76: 50:45:6f:e9:48:bb:54:eb:e4:e1:c5:8b:cc:79:e1:ed:a4:bd: 6a:40:e1:04:4b:10:86:ba:61:83:4f:33:4b:77:56:7c:56:b4: c9:6d:c1:2d:10:46:64:63:c0:f6:26:44:02:ad:48:9b:a6:bc: 4c:2e:2b:b6:64:0c:d4:ae:f8:ae:63:04:49:01:2c:12:8a:4b: 78:1d:bb:f7:ca:4e:6d:ca:84:7b:cf:25:00:7e:39:a5:ae:a3: b1:56:f2:ce:82:64:5d:82:89:f5:8d:22:d4:16:e6:59:51:56: a3:db:f5:5f:86:ae:8a:b8:ef:34:70:cf:e9:ad:9e:4c:a3:3d: 1c:6c:29:e6:54:30:c0:17:a3:da:0a:ca:3f:eb:17:1b:33:70: d2:05:ac:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v04siendcriN5C66TzzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZGFmYTdlYTU1MzE3ODEzM2U3ZTg0ZmVlYjhhYzNhOWRi Y2Y5Y2EwHhcNMjYwMTI1MjAwMTMwWhcNMjYwMTI2MjAwMTMwWjAzMTEwLwYDVQQD EyhlYTU0Y2YyNzc1ODFkMWJhOTkwZmRkMWUwZGMwNWJhM2ZkMmJjYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H0x73DpXusq9awQzjJtuiEa7QMA kUX6dyEupeD896C2CE3vJ8oQx09V9I1Q9+MB9JkUlBxeFpee4j5CMcEgXp1uRvK3 zOKXdA+5Y+vICVPzvflVpTx2XvBYZSStFALMtioutYs2Z/XZij1Hd7qXw2azdg/9 rd45NwgXIJg7mjn5+zzXQmG41MCFkYcAWEXdvXv9d+RCil5NaJp2yYK05vMKCMQ8 Ilc0DSOdwF72aNRXg2a3W33gRziRJkA/NnmjO7b7p/Z8AtLob3Qwhar83wufthui U7XosC87TrBtYs1O+IXxx4+veBzQuYIoh9TboeSsE3azb8re3CRRES5ftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpUzyd1gdG6mQ/dHg3AW6P9K8qoMB8GA1UdIwQY MBaAFLja+n6lUxeBM+foT+64rDqdvPnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUt NmI4OWZhNDY3NTdjLzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNTdiOTMtZDI1My00ZmJiLWEzMWUtNmI4OWZhNDY3NTdj LzEvdU5yNmZxVlRGNEV6NS1oUDdyaXNPcDI4LWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHswCIXj qNMGbziZ/83cnX2g/tHzEYQBkOlg8pA09LC/HY2kooTrVq6TcSsTsURQ9bW2aljK CG9Z4ozvt2KsyqDC5JV6eCeODAwTnrySEkhhdhxU1feryRsrv1fSe6fGOQAM5A6O ng9jKlV2UEVv6Ui7VOvk4cWLzHnh7aS9akDhBEsQhrphg08zS3dWfFa0yW3BLRBG ZGPA9iZEAq1Im6a8TC4rtmQM1K74rmMESQEsEopLeB2798pObcqEe88lAH45pa6j sVbyzoJkXYKJ9Y0i1BbmWVFWo9v1X4auirjvNHDP6a2eTKM9HGwp5lQwwBej2grK P+sXGzNw0gWsBg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:46 2026 by rpki-client