This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json) Hash identifier: KEGPGKq3dk9uv1PiIK9vjwK1yORyyyGXRtDYGqopJeo= Subject key identifier: 7D:91:E1:C9:B4:E7:7F:45:71:B5:90:EC:DC:9F:D9:EB:78:AC:41:E4 Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc Certificate serial: 019BF8AD6021738EA02BD83BC0E45C00C8E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:10 +0000 Manifest this update: Mon 26 Jan 2026 05:01:10 +0000 Manifest next update: Tue 27 Jan 2026 05:01:10 +0000 Files and hashes: 1: B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa (hash: t/j281gNgiB9Sq9gQq9hfuM5gVj9+dvI5Rbkgb3tQsY=) 2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: TGI5qhinqY7cQnwLbGQBl35eauirP2kKrtONFwJyWY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:60:21:73:8e:a0:2b:d8:3b:c0:e4:5c:00:c8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc Validity Not Before: Jan 26 05:01:10 2026 GMT Not After : Jan 27 05:01:10 2026 GMT Subject: CN=7d91e1c9b4e77f4571b590ecdc9fd9eb78ac41e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:fa:eb:0f:90:66:02:0c:07:23:78:57:88: 11:0c:35:ef:e5:75:69:4a:fc:a3:9e:f6:d0:9b:d7: 4d:bb:20:69:08:27:7a:70:92:40:d5:b1:7c:b4:78: f8:6e:4d:40:cf:84:a6:d0:db:68:2e:00:94:3d:2a: bd:c9:82:68:88:5b:e2:ef:3f:02:b9:cd:c9:60:87: 52:cd:13:e0:67:1c:0a:6f:6c:cb:68:70:3e:f6:26: fd:d9:5f:31:c7:c5:9f:61:53:41:cf:15:5f:7a:d0: 71:3f:1b:d2:57:5c:aa:c5:f1:ed:af:a2:cb:eb:51: 32:b6:8e:f9:62:86:fe:70:23:e0:99:f3:47:69:23: b2:bb:08:e1:86:da:94:16:79:99:31:6a:66:d2:a6: 8c:d7:e4:4e:32:18:6e:0e:3c:48:28:b2:c8:74:60: 55:66:5e:02:6b:c6:51:23:28:85:29:61:aa:99:be: 22:11:e6:17:d5:24:f4:51:7d:f8:ec:2d:b8:c0:79: 20:c1:54:be:ac:cc:81:e6:27:4b:fe:37:66:f9:2c: 30:d8:7b:7e:9e:3e:fd:3c:87:b5:f5:af:75:6a:fd: 0f:0c:d5:65:04:25:d9:67:58:79:0a:0b:ff:de:c1: 1d:48:42:c9:8d:21:6f:79:f5:ba:a6:0d:f1:91:ff: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:91:E1:C9:B4:E7:7F:45:71:B5:90:EC:DC:9F:D9:EB:78:AC:41:E4 X509v3 Authority Key Identifier: keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:c8:85:a6:0c:b6:94:68:7d:55:b6:e7:04:3c:0a:c8:71: 12:c0:83:70:0c:99:94:11:83:8c:bf:13:7e:df:a4:1c:8c:7b: 3b:96:6f:23:69:0c:5f:44:b6:34:f5:ad:75:f9:9b:5b:3a:3e: 46:a7:98:74:da:21:5c:f4:9b:2d:f2:6c:c3:44:96:a2:81:ac: b5:65:af:bb:3a:f6:04:81:b2:6c:66:c5:da:20:40:b0:1f:9c: c0:f8:17:7e:70:0a:1e:71:a4:81:c0:f1:13:e3:5e:16:1e:66: da:4b:05:34:cb:0d:51:5d:af:94:31:8d:19:68:87:e7:f7:f7: b1:70:7d:dd:1c:80:41:bc:07:b1:60:da:36:af:14:bb:5d:5b: af:34:47:21:e3:9b:83:d3:c8:d5:95:35:b2:4b:d9:0a:ca:0b: 2e:3a:ff:67:bd:bb:bd:a3:a5:b7:fc:c3:ed:df:1e:7b:88:2f: 0d:1a:86:05:ee:a7:3a:e6:f3:5f:18:0b:87:69:f8:5a:27:b3: e3:bf:c0:3b:49:24:12:13:e4:33:d0:df:6e:88:ff:1f:de:63: 7c:45:fc:8e:2c:49:34:c6:0f:83:cf:af:7a:e8:6b:41:21:5b: 53:45:5a:3b:bf:bb:a7:ea:04:f7:4d:70:70:23:22:60:41:ac: aa:43:61:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWAhc46gK9g7wORcAMjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh YzJiZmMwHhcNMjYwMTI2MDUwMTEwWhcNMjYwMTI3MDUwMTEwWjAzMTEwLwYDVQQD Eyg3ZDkxZTFjOWI0ZTc3ZjQ1NzFiNTkwZWNkYzlmZDllYjc4YWM0MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwD66w+QZgIMByN4V4gRDDXv5XVp SvyjnvbQm9dNuyBpCCd6cJJA1bF8tHj4bk1Az4Sm0NtoLgCUPSq9yYJoiFvi7z8C uc3JYIdSzRPgZxwKb2zLaHA+9ib92V8xx8WfYVNBzxVfetBxPxvSV1yqxfHtr6LL 61Eyto75Yob+cCPgmfNHaSOyuwjhhtqUFnmZMWpm0qaM1+ROMhhuDjxIKLLIdGBV Zl4Ca8ZRIyiFKWGqmb4iEeYX1ST0UX347C24wHkgwVS+rMyB5idL/jdm+Sww2Ht+ nj79PIe19a91av0PDNVlBCXZZ1h5Cgv/3sEdSELJjSFvefW6pg3xkf821wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2R4cm0539FcbWQ7Nyf2et4rEHkMB8GA1UdIwQY MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJrIhaYM tpRofVW25wQ8CshxEsCDcAyZlBGDjL8Tft+kHIx7O5ZvI2kMX0S2NPWtdfmbWzo+ RqeYdNohXPSbLfJsw0SWooGstWWvuzr2BIGybGbF2iBAsB+cwPgXfnAKHnGkgcDx E+NeFh5m2ksFNMsNUV2vlDGNGWiH5/f3sXB93RyAQbwHsWDaNq8Uu11brzRHIeOb g9PI1ZU1skvZCsoLLjr/Z727vaOlt/zD7d8ee4gvDRqGBe6nOubzXxgLh2n4Wiez 47/AO0kkEhPkM9Dfboj/H95jfEX8jixJNMYPg8+veuhrQSFbU0VaO7+7p+oE901w cCMiYEGsqkNh+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:40 2026 by rpki-client