This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json) Hash identifier: InHQHl0EMiODnC6MQRokKdvg4fAUuSEayI9AcsfTmQU= Subject key identifier: 0B:04:51:FC:A2:D5:C3:CE:B1:EF:73:87:CB:65:AC:70:C2:8B:49:AF Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec Certificate serial: 019BF83F6501E1A446E7A341B8704C943BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft Manifest number: 0F45 Signing time: Mon 26 Jan 2026 03:01:02 +0000 Manifest this update: Mon 26 Jan 2026 03:01:02 +0000 Manifest next update: Tue 27 Jan 2026 03:01:02 +0000 Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=) 2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 6GeY37EAWLNO29k0YBZaq1XVYGUFCuVDb60Gh0KDPAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:65:01:e1:a4:46:e7:a3:41:b8:70:4c:94:3b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec Validity Not Before: Jan 26 03:01:02 2026 GMT Not After : Jan 27 03:01:02 2026 GMT Subject: CN=0b0451fca2d5c3ceb1ef7387cb65ac70c28b49af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:4d:ac:fc:ab:31:64:f8:4d:0f:37:3b:20: 20:65:ec:f4:c8:19:31:9e:8c:e6:aa:74:50:17:36: 1a:f9:7f:32:ee:c2:37:9a:91:3f:be:84:f2:be:a4: c6:9d:2c:3a:27:23:2a:28:50:14:22:a8:2e:9b:1b: 3c:a7:be:62:59:96:fc:20:d4:4f:81:d1:17:35:ad: 9f:04:75:28:36:ae:98:1d:b7:d7:38:24:20:48:32: f2:0a:e7:d9:05:6c:8c:6a:fd:54:74:c3:63:d9:d5: a8:17:47:58:d7:57:a4:68:1e:b2:0b:a6:81:69:ae: 75:bd:8b:bf:59:27:03:f3:56:28:14:0d:ae:09:6e: da:43:8e:57:8c:7a:40:d8:f6:6e:d4:e0:ab:76:ea: b8:4f:88:21:96:5d:cd:9e:85:2e:8f:19:46:f2:e1: 00:1a:2e:09:90:30:46:44:58:9f:66:94:86:8d:1a: 86:af:c9:a2:89:96:e3:fd:57:20:0f:6b:76:d2:93: ac:3a:78:e9:ec:c0:f7:13:36:72:2a:46:18:e5:48: 33:61:78:e4:7e:4e:54:57:53:63:db:e2:33:cb:6a: 0c:e6:f9:f6:fc:eb:8b:79:5b:9a:53:98:35:cf:b5: 44:6b:07:31:58:64:3f:ca:b9:09:a0:06:72:42:7b: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:51:FC:A2:D5:C3:CE:B1:EF:73:87:CB:65:AC:70:C2:8B:49:AF X509v3 Authority Key Identifier: keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:5f:1b:6f:0e:54:14:01:4c:7b:e6:4a:be:d1:60:2e:fd:04: a5:02:9a:c0:9e:63:f2:ce:12:15:df:bd:11:32:ba:19:5f:13: 40:5f:7e:db:6c:ff:04:3f:da:8d:eb:e5:53:20:71:a8:a1:23: 8a:09:41:09:c7:bd:0c:19:cd:ef:18:b6:6b:23:1c:47:ad:99: 02:96:ba:f9:07:4b:ac:28:65:34:4f:5f:14:06:b0:a7:19:cf: 97:92:86:b8:a1:d0:5c:25:81:cc:38:5a:19:4e:67:00:55:13: 00:13:68:98:52:0a:4b:85:0a:ac:f3:a1:01:ad:c7:b9:18:91: fd:31:b3:a4:4d:5a:11:25:65:48:15:4b:30:78:08:cc:98:0c: c3:fb:4b:38:7a:34:59:59:63:43:72:fc:31:b4:47:2e:33:3a: 64:8a:e8:a4:08:bc:7f:3f:d3:0e:4b:65:6a:ab:7f:65:2b:99: 15:e7:78:29:a7:92:c8:8b:d2:7b:00:5a:98:ca:01:cc:3b:e5: 58:bc:4c:c6:69:b6:0a:ad:34:ae:fe:cf:e1:12:85:ac:2b:81: 26:4b:48:6f:78:9e:33:9f:0f:b4:36:4a:a4:53:87:33:81:9d: e2:b0:3a:17:55:d2:0f:d5:7a:d4:79:cb:e8:23:87:7a:ef:25: ff:33:92:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2UB4aRG56NBuHBMlDvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTlkYjdmMmMyZTNiM2FiZDhiZjQxNWYwY2UxZmZmMzM0 MzI5ZWMwHhcNMjYwMTI2MDMwMTAyWhcNMjYwMTI3MDMwMTAyWjAzMTEwLwYDVQQD EygwYjA0NTFmY2EyZDVjM2NlYjFlZjczODdjYjY1YWM3MGMyOGI0OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzxNrPyrMWT4TQ83OyAgZez0yBkx nozmqnRQFzYa+X8y7sI3mpE/voTyvqTGnSw6JyMqKFAUIqgumxs8p75iWZb8INRP gdEXNa2fBHUoNq6YHbfXOCQgSDLyCufZBWyMav1UdMNj2dWoF0dY11ekaB6yC6aB aa51vYu/WScD81YoFA2uCW7aQ45XjHpA2PZu1OCrduq4T4ghll3NnoUujxlG8uEA Gi4JkDBGRFifZpSGjRqGr8miiZbj/VcgD2t20pOsOnjp7MD3EzZyKkYY5UgzYXjk fk5UV1Nj2+Izy2oM5vn2/OuLeVuaU5g1z7VEawcxWGQ/yrkJoAZyQnuhuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsEUfyi1cPOse9zh8tlrHDCi0mvMB8GA1UdIwQY MBaAFLhZ238sLjs6vYv0FfDOH/8zQynsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzIt NGMxYzU3YTgxZmZkLzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzItNGMxYzU3YTgxZmZk LzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxV8bbw5U FAFMe+ZKvtFgLv0EpQKawJ5j8s4SFd+9ETK6GV8TQF9+22z/BD/ajevlUyBxqKEj iglBCce9DBnN7xi2ayMcR62ZApa6+QdLrChlNE9fFAawpxnPl5KGuKHQXCWBzDha GU5nAFUTABNomFIKS4UKrPOhAa3HuRiR/TGzpE1aESVlSBVLMHgIzJgMw/tLOHo0 WVljQ3L8MbRHLjM6ZIropAi8fz/TDktlaqt/ZSuZFed4KaeSyIvSewBamMoBzDvl WLxMxmm2Cq00rv7P4RKFrCuBJktIb3ieM58PtDZKpFOHM4Gd4rA6F1XSD9V61HnL 6COHeu8l/zOSgw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:05 2026 by rpki-client