This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json) Hash identifier: NFqQQD35Qo/Pg2qs6z41++FDzh6Y500PEQ46BpKUCAI= Subject key identifier: AC:DA:EF:5D:84:63:F4:2C:23:77:19:D2:1B:58:E6:98:64:98:BC:02 Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Certificate serial: 019BF68795383ED49D49F726B8B86DEFCAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft Manifest number: 0341 Signing time: Sun 25 Jan 2026 19:00:39 +0000 Manifest this update: Sun 25 Jan 2026 19:00:39 +0000 Manifest next update: Mon 26 Jan 2026 19:00:39 +0000 Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: X/VFjHP3Dsl/qEowAjeYibwr1D3r0eDAolFDM9X4UAQ=) 2: qAWpsleSdTKU2QK0ge-DYDJtKTg.roa (hash: hBYa6IMYEuL9W6YmuZd1vKmz/EkBj75T5fHCqH+FPYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:95:38:3e:d4:9d:49:f7:26:b8:b8:6d:ef:ca:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8 Validity Not Before: Jan 25 19:00:39 2026 GMT Not After : Jan 26 19:00:39 2026 GMT Subject: CN=acdaef5d8463f42c237719d21b58e6986498bc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:52:68:e4:2a:cd:70:a4:e8:b3:d8:32:53: 6d:52:23:d4:34:05:ac:e2:fa:45:40:9e:28:82:f5: 92:a9:16:51:44:92:9f:2d:c2:30:40:d5:72:5f:b6: cd:96:a1:ce:03:09:5e:45:48:01:7b:1f:7e:64:64: 9d:2d:db:c3:62:6b:40:e0:da:81:06:39:60:85:76: 9c:32:c2:37:8d:a7:18:b3:b2:8a:3d:ae:76:8a:1f: c3:91:5c:03:7a:89:61:b9:ba:af:ad:5c:fd:f1:a7: 1c:1b:5a:a0:0b:eb:6f:d5:4c:10:ea:a1:ae:30:7b: 0e:e1:11:22:99:59:27:f3:2a:12:a5:27:b5:4f:a7: 6f:60:86:a0:39:d2:4b:65:44:e2:7d:86:fa:f3:96: 0d:ed:54:96:87:8b:33:bc:53:52:7e:d3:fa:e2:ba: e7:13:6e:e6:9d:2a:19:ad:49:88:1d:5d:31:51:a2: 5e:e2:5d:28:da:6f:b2:64:dc:2e:1d:ed:1d:3c:cc: 34:04:b7:e9:6d:99:bd:ad:5d:5b:d0:17:06:a8:e8: 35:ee:fe:54:e3:d1:44:82:d1:0c:19:aa:61:a7:e8: 22:b6:6d:e5:ee:24:54:6e:9d:8c:da:6d:2a:e3:b2: 83:88:c9:54:a1:34:81:55:e2:fe:4b:88:17:dd:8d: 0f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:EF:5D:84:63:F4:2C:23:77:19:D2:1B:58:E6:98:64:98:BC:02 X509v3 Authority Key Identifier: keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b0:d7:15:3f:b2:c4:6e:bd:10:f0:f0:e3:51:d1:f1:2f:73: 22:59:be:91:d4:fe:47:c9:94:cc:bc:cc:a6:6b:6c:24:c5:0f: d7:81:d2:fc:77:7f:fe:e5:09:83:ec:de:c3:06:83:16:e6:cd: d2:ff:9b:02:5b:c9:83:5e:32:d7:51:4c:1f:ba:83:d1:21:15: 25:8c:a5:e1:63:75:b0:1e:b6:3f:ad:3e:de:50:40:71:7d:ca: a0:23:06:47:ee:af:c8:ae:9c:31:e9:7c:53:6a:a5:95:a1:e9: 89:be:ed:4c:ec:90:7e:1e:57:1e:48:2f:c3:e9:e6:e0:fc:31: 6f:08:a6:5d:07:41:a4:e9:56:8f:ca:c0:f5:ef:95:d5:aa:11: 5e:59:0a:02:91:de:83:31:de:60:f5:44:3a:88:9c:0e:6e:15: 1d:d3:8d:5e:6c:ae:c2:35:49:2d:73:2a:00:0b:e2:69:6a:44: 49:74:09:44:82:5c:70:71:d3:1f:8b:88:89:15:63:90:1f:95: 88:12:be:1d:ee:9c:83:77:23:48:be:89:74:f0:8f:04:5d:58: 04:67:68:22:84:40:15:5c:ff:d9:d4:09:57:ba:4f:10:0c:b2: aa:e8:cc:c8:07:30:38:1f:4b:3e:91:80:56:fd:99:dc:36:cd: 65:82:1f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5U4PtSdSfcmuLht78rXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzAwNzMxYzVhZGM3MGJjYjcxM2U1N2E1MWE0MDNlNjRl ZDkxYzgwHhcNMjYwMTI1MTkwMDM5WhcNMjYwMTI2MTkwMDM5WjAzMTEwLwYDVQQD EyhhY2RhZWY1ZDg0NjNmNDJjMjM3NzE5ZDIxYjU4ZTY5ODY0OThiYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFSaOQqzXCk6LPYMlNtUiPUNAWs 4vpFQJ4ogvWSqRZRRJKfLcIwQNVyX7bNlqHOAwleRUgBex9+ZGSdLdvDYmtA4NqB BjlghXacMsI3jacYs7KKPa52ih/DkVwDeolhubqvrVz98accG1qgC+tv1UwQ6qGu MHsO4REimVkn8yoSpSe1T6dvYIagOdJLZUTifYb685YN7VSWh4szvFNSftP64rrn E27mnSoZrUmIHV0xUaJe4l0o2m+yZNwuHe0dPMw0BLfpbZm9rV1b0BcGqOg17v5U 49FEgtEMGaphp+gitm3l7iRUbp2M2m0q47KDiMlUoTSBVeL+S4gX3Y0PLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKza712EY/QsI3cZ0htY5phkmLwCMB8GA1UdIwQY MBaAFFNwBzHFrccLy3E+V6UaQD5k7ZHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQt N2M1MjNiNThkZWNmLzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC84M2NmNzMtYjdjZS00NDQwLWE0YWQtN2M1MjNiNThkZWNm LzEvVTNBSE1jV3R4d3ZMY1Q1WHBScEFQbVR0a2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbDXFT+y xG69EPDw41HR8S9zIlm+kdT+R8mUzLzMpmtsJMUP14HS/Hd//uUJg+zewwaDFubN 0v+bAlvJg14y11FMH7qD0SEVJYyl4WN1sB62P60+3lBAcX3KoCMGR+6vyK6cMel8 U2qllaHpib7tTOyQfh5XHkgvw+nm4PwxbwimXQdBpOlWj8rA9e+V1aoRXlkKApHe gzHeYPVEOoicDm4VHdONXmyuwjVJLXMqAAviaWpESXQJRIJccHHTH4uIiRVjkB+V iBK+He6cg3cjSL6JdPCPBF1YBGdoIoRAFVz/2dQJV7pPEAyyqujMyAcwOB9LPpGA Vv2Z3DbNZYIfcg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:28 2026 by rpki-client