This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json) Hash identifier: GLP5rKrGoR7wZMEqXgcwGAokmZ1g0HaVlt2Qh+26q34= Subject key identifier: 52:97:BF:60:F3:42:B4:29:7F:EE:1E:9D:27:F2:40:F9:44:28:43:A3 Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019BF42BCD91C6145DF83863D0E165B620DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft Manifest number: 097C Signing time: Sun 25 Jan 2026 08:01:09 +0000 Manifest this update: Sun 25 Jan 2026 08:01:09 +0000 Manifest next update: Mon 26 Jan 2026 08:01:09 +0000 Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=) 2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: jS5E2qfvhi7EJSMmQy4d0ChUDGSSZT0M7p2f8CNu84o=) 3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=) 4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:cd:91:c6:14:5d:f8:38:63:d0:e1:65:b6:20:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Jan 25 08:01:09 2026 GMT Not After : Jan 26 08:01:09 2026 GMT Subject: CN=5297bf60f342b4297fee1e9d27f240f9442843a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:9f:0f:69:88:50:a1:3a:c1:cd:71:21:19: 15:46:15:2d:26:ad:6f:2f:1f:cc:0c:b2:e5:ae:5c: c8:a2:14:ec:24:e7:0d:40:cc:17:d3:85:18:eb:3d: 18:f7:c9:98:3c:d7:2f:f4:2f:a8:14:2f:a5:81:e7: 4b:1b:ef:6a:bc:89:83:bf:d0:65:45:4f:43:a1:8c: 00:be:b7:30:44:12:71:ed:e1:d9:a6:ed:f3:7e:dd: fa:48:64:e7:8a:1f:32:51:fc:77:bb:7c:20:67:22: b1:fa:75:ee:89:cc:2c:3f:a9:9a:79:fe:83:9c:b1: 12:1b:40:04:d2:06:3b:92:ae:55:b5:8a:80:cb:ea: da:75:7b:52:9b:66:4a:0e:0d:d8:fb:83:a1:2d:5b: 41:20:48:19:fb:e8:6a:3c:09:ef:5e:d5:c2:4a:95: 88:27:01:c8:8a:90:41:75:c2:53:9b:14:d4:2c:86: 7e:37:cd:85:a4:7f:f5:4d:1b:44:04:a7:8c:33:ad: 5b:3b:5e:0b:cb:e9:ca:a6:9d:80:1e:85:9d:f4:7d: e9:87:a1:c2:18:d6:6a:5d:e8:9e:04:2b:29:11:c8: 87:0f:d3:ac:11:ea:7f:eb:55:c2:2c:a4:37:cf:3e: 82:d7:0a:98:9a:1a:e4:f7:32:00:7c:17:fa:31:50: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:BF:60:F3:42:B4:29:7F:EE:1E:9D:27:F2:40:F9:44:28:43:A3 X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:fb:15:83:d1:fa:54:4a:80:56:12:63:d8:87:11:0b:78: 65:46:2e:9a:3e:0a:3c:9a:d7:69:9e:45:6c:97:da:0e:be:6a: 7e:9a:28:6f:b8:e1:41:17:1a:11:91:de:34:28:83:42:69:4a: 4f:fd:41:91:5c:27:62:e1:37:0e:a6:1e:ba:de:55:b3:1a:22: cf:fc:73:7a:be:ad:db:5a:f7:8e:78:af:70:30:1d:50:77:d4: 59:29:8a:29:d5:ff:0f:67:2d:db:6a:9e:c9:25:de:56:11:3b: ea:6a:54:c3:e2:a0:14:95:15:d6:56:02:ea:d5:cf:ee:40:a7: e9:3f:2f:0f:a2:49:41:8e:82:33:44:6d:54:b4:ca:97:8d:a1: 2e:e2:af:9c:b4:62:b8:11:91:59:bf:4b:11:d1:b1:f9:33:06: 00:90:58:2d:35:28:3f:08:3b:ca:fd:41:dd:55:96:42:c9:cf: 91:df:b3:e4:bf:f7:3d:65:27:7f:e8:3b:43:9e:37:aa:75:13: 35:66:7c:7c:a3:5c:53:b6:40:d5:4d:8f:3b:3d:7e:e5:a1:61: a7:44:51:8a:f8:6b:3f:7b:86:0c:32:e0:09:dd:d5:43:7d:25: df:15:d7:2e:ec:d8:52:99:f3:fb:33:8d:e3:49:2f:63:e0:0a: 2a:4b:89:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K82RxhRd+Dhj0OFltiDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjYwMTI1MDgwMTA5WhcNMjYwMTI2MDgwMTA5WjAzMTEwLwYDVQQD Eyg1Mjk3YmY2MGYzNDJiNDI5N2ZlZTFlOWQyN2YyNDBmOTQ0Mjg0M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYifD2mIUKE6wc1xIRkVRhUtJq1v Lx/MDLLlrlzIohTsJOcNQMwX04UY6z0Y98mYPNcv9C+oFC+lgedLG+9qvImDv9Bl RU9DoYwAvrcwRBJx7eHZpu3zft36SGTnih8yUfx3u3wgZyKx+nXuicwsP6maef6D nLESG0AE0gY7kq5VtYqAy+radXtSm2ZKDg3Y+4OhLVtBIEgZ++hqPAnvXtXCSpWI JwHIipBBdcJTmxTULIZ+N82FpH/1TRtEBKeMM61bO14Ly+nKpp2AHoWd9H3ph6HC GNZqXeieBCspEciHD9OsEep/61XCLKQ3zz6C1wqYmhrk9zIAfBf6MVA7DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKXv2DzQrQpf+4enSfyQPlEKEOjMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3/7FYPR +lRKgFYSY9iHEQt4ZUYumj4KPJrXaZ5FbJfaDr5qfpoob7jhQRcaEZHeNCiDQmlK T/1BkVwnYuE3DqYeut5Vsxoiz/xzer6t21r3jnivcDAdUHfUWSmKKdX/D2ct22qe ySXeVhE76mpUw+KgFJUV1lYC6tXP7kCn6T8vD6JJQY6CM0RtVLTKl42hLuKvnLRi uBGRWb9LEdGx+TMGAJBYLTUoPwg7yv1B3VWWQsnPkd+z5L/3PWUnf+g7Q543qnUT NWZ8fKNcU7ZA1U2POz1+5aFhp0RRivhrP3uGDDLgCd3VQ30l3xXXLuzYUpnz+zON 40kvY+AKKkuJPA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:18 2026 by rpki-client