This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json) Hash identifier: 5OKMh7pSd+E8QTQlhcz1Zc2NKSesQWffPq6S8joZgjQ= Subject key identifier: DA:F9:DD:48:DD:07:63:2D:75:DA:BA:18:D8:84:68:5D:BE:9C:FA:28 Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c Certificate serial: 019BF386D287AE20D552536A88DD424DB535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft Manifest number: 02D3 Signing time: Sun 25 Jan 2026 05:00:57 +0000 Manifest this update: Sun 25 Jan 2026 05:00:57 +0000 Manifest next update: Mon 26 Jan 2026 05:00:57 +0000 Files and hashes: 1: og-DO9CncoCadS5HOAJ0BfOSnew.roa (hash: sKXs67ay0NB66Jdkd/yiUU/rBcBdOHYEFZ52pYLtyEc=) 2: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: q+ih3DtUeOEfzjJPcAmq9BHETvLefAK4ttWthL7zNF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:d2:87:ae:20:d5:52:53:6a:88:dd:42:4d:b5:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c Validity Not Before: Jan 25 05:00:57 2026 GMT Not After : Jan 26 05:00:57 2026 GMT Subject: CN=daf9dd48dd07632d75daba18d884685dbe9cfa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:42:dc:68:27:91:46:6d:28:68:a8:29:b5: 15:7a:e0:d8:ce:79:cb:ea:69:14:57:1f:51:06:9d: 7f:c3:3a:7a:a8:5c:d2:89:74:b8:6e:82:f1:e5:cb: e1:c5:cb:19:d8:53:43:8c:f9:18:ee:e3:a2:be:52: ad:f3:01:f2:26:27:10:ed:6f:1e:03:c6:6b:13:31: 4e:ce:9d:b9:2c:c1:27:76:6d:6a:32:0b:2c:b5:86: 7d:4f:9e:16:9b:23:a3:54:f4:5c:c6:b2:a4:17:5c: 20:6d:74:84:61:91:dc:75:a3:e7:08:7c:b8:d9:21: c5:ee:9f:67:08:eb:2c:9f:42:aa:38:c4:3b:5d:6a: ff:38:55:e0:0e:04:88:dd:db:8b:e4:43:1f:ac:50: 21:2a:c0:c2:6d:16:1c:f3:93:02:d8:df:fa:06:fd: 94:e0:e1:cd:ef:f6:7a:cd:a1:fc:5e:a6:77:6e:b5: 6b:42:de:2e:73:f3:14:ec:04:61:79:01:44:b0:49: 25:e9:3a:4f:be:25:7b:3f:5c:7d:da:e9:82:7d:d1: de:8d:70:92:aa:a2:fb:cc:07:cd:82:52:c7:bc:d5: 46:8e:14:71:e3:cd:4c:f2:e3:af:34:4e:05:b3:a5: 89:e5:28:d5:08:af:26:c3:72:f8:38:b8:d2:eb:e9: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F9:DD:48:DD:07:63:2D:75:DA:BA:18:D8:84:68:5D:BE:9C:FA:28 X509v3 Authority Key Identifier: keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:87:62:fe:f8:40:0f:32:47:c4:0a:bf:d9:45:3b:49:5a:12: 22:f7:01:0a:e9:2e:b6:8a:cd:14:68:f5:9b:60:42:e3:7c:5d: 51:ef:77:ca:ee:72:22:a8:f8:ce:ec:7e:9e:71:54:51:a4:a7: f9:d8:0b:50:59:a8:85:cb:29:94:fa:ce:4a:e3:5a:57:6e:7b: 80:84:17:81:2f:82:63:99:c5:84:96:a7:ac:b6:0d:22:ff:96: eb:89:90:28:b3:47:9d:b0:e6:e4:fe:1d:42:37:86:10:19:2a: 45:f4:1b:d2:73:08:85:96:34:d4:a2:3a:0b:d7:02:5f:c8:e0: b5:0f:37:a4:b1:b5:f3:72:cb:68:05:e8:82:1b:ac:b2:96:84: 02:f7:70:0e:f5:91:02:bc:d3:f7:79:17:a4:ab:f0:28:fd:e6: 87:81:48:78:10:14:db:6e:76:5f:87:9a:74:5e:16:c9:74:cd: 13:e4:34:73:84:8e:64:f1:b9:f3:c5:c7:83:a6:b0:66:da:67: 66:6b:a2:96:7e:f2:a0:d4:17:6e:65:e7:6b:e4:7f:bc:49:e1: 5b:68:fa:c4:8f:2c:b7:47:98:2b:9b:f5:16:be:56:d1:a5:da: 05:22:a8:7f:63:29:32:21:bb:a3:eb:9c:c9:6f:25:5f:22:cb: 06:7f:42:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhtKHriDVUlNqiN1CTbU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjk4ZjhhNDRmZDYwZWVmNmI3NDlkMjE0ZTU2YzgxMTg5 NzY2MGMwHhcNMjYwMTI1MDUwMDU3WhcNMjYwMTI2MDUwMDU3WjAzMTEwLwYDVQQD EyhkYWY5ZGQ0OGRkMDc2MzJkNzVkYWJhMThkODg0Njg1ZGJlOWNmYTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocZC3GgnkUZtKGioKbUVeuDYznnL 6mkUVx9RBp1/wzp6qFzSiXS4boLx5cvhxcsZ2FNDjPkY7uOivlKt8wHyJicQ7W8e A8ZrEzFOzp25LMEndm1qMgsstYZ9T54WmyOjVPRcxrKkF1wgbXSEYZHcdaPnCHy4 2SHF7p9nCOssn0KqOMQ7XWr/OFXgDgSI3duL5EMfrFAhKsDCbRYc85MC2N/6Bv2U 4OHN7/Z6zaH8XqZ3brVrQt4uc/MU7ARheQFEsEkl6TpPviV7P1x92umCfdHejXCS qqL7zAfNglLHvNVGjhRx481M8uOvNE4Fs6WJ5SjVCK8mw3L4OLjS6+lTQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr53UjdB2Mtddq6GNiEaF2+nPooMB8GA1UdIwQY MBaAFLv5j4pE/WDu9rdJ0hTlbIEYl2YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYt NDE5MzM5NTViNzNmLzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYtNDE5MzM5NTViNzNm LzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIodi/vhA DzJHxAq/2UU7SVoSIvcBCukutorNFGj1m2BC43xdUe93yu5yIqj4zux+nnFUUaSn +dgLUFmohcsplPrOSuNaV257gIQXgS+CY5nFhJanrLYNIv+W64mQKLNHnbDm5P4d QjeGEBkqRfQb0nMIhZY01KI6C9cCX8jgtQ83pLG183LLaAXoghusspaEAvdwDvWR ArzT93kXpKvwKP3mh4FIeBAU2252X4eadF4WyXTNE+Q0c4SOZPG588XHg6awZtpn Zmuiln7yoNQXbmXna+R/vEnhW2j6xI8st0eYK5v1Fr5W0aXaBSKof2MpMiG7o+uc yW8lXyLLBn9Cjw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:17:48 2026 by rpki-client