This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json) Hash identifier: jOklXasSdjoZBuD2eZ44QG7GYWOIDAZ/a/H7LCmU7vw= Subject key identifier: 9A:A0:D1:1A:BB:BC:63:CD:80:EE:A0:B1:77:CA:21:D0:35:E8:57:69 Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706 Certificate serial: 019BF53E9A7732BEF88C6319BB6171FCB456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:01:19 +0000 Manifest this update: Sun 25 Jan 2026 13:01:19 +0000 Manifest next update: Mon 26 Jan 2026 13:01:19 +0000 Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: tLK895lf41kNHoUdHuQrFFGysER7ncXhnfGGY7WCDeY=) 2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:9a:77:32:be:f8:8c:63:19:bb:61:71:fc:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706 Validity Not Before: Jan 25 13:01:19 2026 GMT Not After : Jan 26 13:01:19 2026 GMT Subject: CN=9aa0d11abbbc63cd80eea0b177ca21d035e85769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:0e:2c:5f:b8:e6:82:6b:ef:c8:7a:57:f7: 55:76:0b:99:8b:7e:2a:c8:e2:7f:ae:81:81:ea:85: 4b:4b:1e:75:93:ae:b0:a1:c6:30:0f:9b:bc:1b:11: a0:d1:4a:4e:8c:8b:8d:de:82:19:8a:3a:d4:12:c9: 83:c6:1b:35:9e:55:b3:7c:9b:6a:7b:62:d1:1c:e3: a5:73:19:9f:ed:5e:bd:64:7b:97:7f:9d:5a:e6:bd: 0e:5a:45:ed:5c:45:54:de:dd:29:52:bf:f9:33:59: 2e:d6:70:dd:de:6c:90:9a:25:c8:de:a9:fb:8e:a0: 90:71:69:01:cb:e4:eb:af:91:4f:b1:bf:be:23:b8: 1f:84:d4:0a:b4:16:12:d6:ec:17:0b:a2:da:4c:67: e3:68:fd:7c:42:3d:73:d6:cd:fe:30:f1:61:15:25: 5d:55:15:24:bc:00:bc:df:00:fa:ad:00:60:88:b6: 9b:4f:cf:8b:da:35:82:c0:9d:a9:da:03:23:3d:1b: c5:0f:87:8c:12:c2:8c:e7:3f:cc:db:56:4d:7d:1c: 43:77:e0:df:b8:05:68:a1:c2:d5:bd:cd:c0:0a:27: 42:d1:38:2e:15:73:7e:6f:e9:95:87:bb:8a:5d:b3: 0c:a3:61:b4:db:f3:e7:13:ed:df:05:8e:21:81:f9: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:D1:1A:BB:BC:63:CD:80:EE:A0:B1:77:CA:21:D0:35:E8:57:69 X509v3 Authority Key Identifier: keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b3:f4:37:23:e9:a3:1f:4b:b4:5d:38:f4:bc:ec:86:9f:d9: 24:1e:9c:fd:dd:df:a2:16:1c:40:1b:1b:da:d0:6e:5d:e0:49: be:95:9e:b4:77:9e:2c:c7:f0:ce:a0:2a:bd:e1:7a:03:25:3e: 98:e9:cd:ea:90:bd:b0:73:0e:13:6a:84:dc:83:38:67:d2:3b: 4f:6b:a9:a7:80:84:9c:02:55:f6:dc:39:46:49:3b:a7:8a:8c: 28:c0:50:64:e6:ed:9e:65:e1:da:a8:29:6a:37:e8:d8:12:66: 7d:b6:e4:bd:75:4c:d6:ca:1e:90:66:c4:a5:4e:b3:7a:a1:fc: f5:be:af:1f:ba:e3:3c:41:9b:19:b9:92:ab:f6:f6:b4:2b:de: 00:ca:13:c7:90:12:73:12:48:7a:8e:b5:36:57:e5:84:d5:c4: 89:f5:c2:31:08:e5:76:92:68:87:96:5a:38:0c:b9:bd:3a:c0: 00:7b:69:6e:f2:2b:80:07:8e:57:00:f3:30:7c:20:48:a7:fc: ef:47:52:97:7d:0b:db:29:f1:1d:7a:31:ae:75:95:a0:b6:a6: 40:36:a5:aa:fb:7d:3f:a9:ff:c3:30:f4:07:52:4d:fa:0a:0f: 79:d7:20:b8:fa:6f:d8:b5:0d:43:4d:55:53:cf:87:94:52:34: 38:26:98:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Ppp3Mr74jGMZu2Fx/LRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0 Nzk3MDYwHhcNMjYwMTI1MTMwMTE5WhcNMjYwMTI2MTMwMTE5WjAzMTEwLwYDVQQD Eyg5YWEwZDExYWJiYmM2M2NkODBlZWEwYjE3N2NhMjFkMDM1ZTg1NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SwOLF+45oJr78h6V/dVdguZi34q yOJ/roGB6oVLSx51k66wocYwD5u8GxGg0UpOjIuN3oIZijrUEsmDxhs1nlWzfJtq e2LRHOOlcxmf7V69ZHuXf51a5r0OWkXtXEVU3t0pUr/5M1ku1nDd3myQmiXI3qn7 jqCQcWkBy+Trr5FPsb++I7gfhNQKtBYS1uwXC6LaTGfjaP18Qj1z1s3+MPFhFSVd VRUkvAC83wD6rQBgiLabT8+L2jWCwJ2p2gMjPRvFD4eMEsKM5z/M21ZNfRxDd+Df uAVoocLVvc3ACidC0TguFXN+b+mVh7uKXbMMo2G02/PnE+3fBY4hgfnE3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqg0Rq7vGPNgO6gsXfKIdA16FdpMB8GA1UdIwQY MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt OGVkODQzM2QzOGM0LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0 LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbP0NyPp ox9LtF049Lzshp/ZJB6c/d3fohYcQBsb2tBuXeBJvpWetHeeLMfwzqAqveF6AyU+ mOnN6pC9sHMOE2qE3IM4Z9I7T2upp4CEnAJV9tw5Rkk7p4qMKMBQZObtnmXh2qgp ajfo2BJmfbbkvXVM1soekGbEpU6zeqH89b6vH7rjPEGbGbmSq/b2tCveAMoTx5AS cxJIeo61NlflhNXEifXCMQjldpJoh5ZaOAy5vTrAAHtpbvIrgAeOVwDzMHwgSKf8 70dSl30L2ynxHXoxrnWVoLamQDalqvt9P6n/wzD0B1JN+goPedcguPpv2LUNQ01V U8+HlFI0OCaYiA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:32 2026 by rpki-client