This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json) Hash identifier: 6CvoFSqqYNuIkjdz6s5Ozwi0d0ekELCQ7TSlzdg7Qm8= Subject key identifier: CD:C2:2E:AB:E5:6B:24:79:BA:29:D9:01:6E:ED:48:54:9F:6A:38:77 Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33 Certificate serial: 019BF53E75500412E7E5F9292D6151BB6176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 13:01:09 +0000 Manifest this update: Sun 25 Jan 2026 13:01:09 +0000 Manifest next update: Mon 26 Jan 2026 13:01:09 +0000 Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: D1kBUi4VSoJ/+sFgwv7OvIci+/MlS/B917WxDa3lPu8=) 2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:75:50:04:12:e7:e5:f9:29:2d:61:51:bb:61:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33 Validity Not Before: Jan 25 13:01:09 2026 GMT Not After : Jan 26 13:01:09 2026 GMT Subject: CN=cdc22eabe56b2479ba29d9016eed48549f6a3877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:0d:8c:70:f0:b0:c7:5d:05:ee:c4:5a:a1: d0:6f:98:4c:58:81:8a:22:0b:8d:a7:20:96:80:80: 55:36:f5:2a:12:a1:d5:be:d8:8a:da:19:c1:92:39: 41:a0:b8:11:9c:a8:70:a5:3b:bf:db:f8:60:e2:40: 0a:a5:fa:fc:dc:74:95:98:a7:94:fb:4d:14:d7:11: 57:4e:a4:ed:24:87:77:52:4d:51:6a:d1:a6:9d:00: f2:17:39:7b:36:8e:4e:b7:1e:47:95:a4:58:89:1d: 24:ef:77:e0:d3:8b:20:33:97:b5:24:4a:7d:2f:bb: c7:94:65:a2:a4:86:35:01:34:65:fd:cf:87:76:ac: ee:c8:c5:6e:5c:59:24:73:01:56:64:22:91:f6:09: 3d:e5:d8:75:76:ef:dc:c9:f2:d1:54:21:10:c1:d4: f9:09:20:35:a7:d1:4d:a0:65:bc:04:8a:d0:27:03: 0b:31:9d:f5:cb:63:56:ec:9a:a9:bc:d5:87:0f:69: 83:6e:03:25:19:f5:a6:8b:04:13:77:dc:c6:2d:c3: b8:fe:2a:fb:31:74:72:0e:d4:f8:95:da:59:0d:34: cc:44:de:8e:a3:24:46:5b:39:d1:8d:70:9c:65:af: bf:e1:39:82:d3:f1:a6:6d:5c:1f:72:24:8b:ac:7a: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C2:2E:AB:E5:6B:24:79:BA:29:D9:01:6E:ED:48:54:9F:6A:38:77 X509v3 Authority Key Identifier: keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:6a:2a:82:cd:72:a4:37:86:2e:74:97:ee:85:a4:11:41: 99:d9:b4:43:d1:a8:23:df:5b:11:12:1d:07:ce:25:bc:a4:34: 52:07:90:24:14:ae:62:8d:9a:a3:38:20:aa:d2:a3:2e:5b:d1: 84:21:22:f8:41:47:f3:9b:bf:ce:8b:76:73:36:af:f5:b1:89: 59:1f:23:40:3a:48:eb:6b:0e:98:e7:0c:ca:af:de:50:3b:62: cd:68:fb:c9:6d:38:3f:94:a3:e2:1b:72:9a:a2:d4:2e:df:8f: 8b:7b:ac:35:4c:5d:30:8d:97:8d:e9:7c:a9:7c:94:49:7b:6a: e2:ca:fd:21:b3:bd:21:c0:97:88:3d:a9:a2:f4:d1:b4:9d:58: d9:57:a1:e8:ac:a0:8e:6d:94:27:c9:fd:89:08:27:96:f2:67: 36:9a:93:97:4c:04:9d:f3:1a:dc:82:69:ab:a9:c0:91:31:0f: e1:2a:d3:49:d9:a8:89:d0:d7:87:c4:d4:17:cb:cf:c5:cb:5a: d8:fc:bd:80:84:cf:77:da:18:b5:f3:f1:71:dd:ce:be:8c:61: 24:a9:45:f4:a2:36:0d:69:1d:70:1a:a6:05:e7:67:f1:08:1c: 26:fe:c5:5b:47:4c:4d:c3:9f:c1:49:f1:73:31:93:0e:11:8e: b3:85:5f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PnVQBBLn5fkpLWFRu2F2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk ZThiMzMwHhcNMjYwMTI1MTMwMTA5WhcNMjYwMTI2MTMwMTA5WjAzMTEwLwYDVQQD EyhjZGMyMmVhYmU1NmIyNDc5YmEyOWQ5MDE2ZWVkNDg1NDlmNmEzODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15sNjHDwsMddBe7EWqHQb5hMWIGK IguNpyCWgIBVNvUqEqHVvtiK2hnBkjlBoLgRnKhwpTu/2/hg4kAKpfr83HSVmKeU +00U1xFXTqTtJId3Uk1RatGmnQDyFzl7No5Otx5HlaRYiR0k73fg04sgM5e1JEp9 L7vHlGWipIY1ATRl/c+HdqzuyMVuXFkkcwFWZCKR9gk95dh1du/cyfLRVCEQwdT5 CSA1p9FNoGW8BIrQJwMLMZ31y2NW7JqpvNWHD2mDbgMlGfWmiwQTd9zGLcO4/ir7 MXRyDtT4ldpZDTTMRN6OoyRGWznRjXCcZa+/4TmC0/GmbVwfciSLrHo/dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3CLqvlayR5uinZAW7tSFSfajh3MB8GA1UdIwQY MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt YjQ1MWU0NzdiOWMyLzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL5qKoLN cqQ3hi50l+6FpBFBmdm0Q9GoI99bERIdB84lvKQ0UgeQJBSuYo2aozggqtKjLlvR hCEi+EFH85u/zot2czav9bGJWR8jQDpI62sOmOcMyq/eUDtizWj7yW04P5Sj4hty mqLULt+Pi3usNUxdMI2Xjel8qXyUSXtq4sr9IbO9IcCXiD2povTRtJ1Y2Veh6Kyg jm2UJ8n9iQgnlvJnNpqTl0wEnfMa3IJpq6nAkTEP4SrTSdmoidDXh8TUF8vPxcta 2Py9gITPd9oYtfPxcd3OvoxhJKlF9KI2DWkdcBqmBedn8QgcJv7FW0dMTcOfwUnx czGTDhGOs4VfOg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:12 2026 by rpki-client