This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json) Hash identifier: oVFPIQNyFU0Ulk6cU9jAfKS/vtjeNCnkCjAxnijb9yI= Subject key identifier: 83:29:4E:02:29:CC:C2:87:45:15:57:47:67:D0:09:AD:07:95:58:E2 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019BF34FD51FC72FC61CD39D73405C840135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft Manifest number: 01BC Signing time: Sun 25 Jan 2026 04:00:53 +0000 Manifest this update: Sun 25 Jan 2026 04:00:53 +0000 Manifest next update: Mon 26 Jan 2026 04:00:53 +0000 Files and hashes: 1: Duh6SwtMzsKup_Nf-xoOxxIx7Zg.roa (hash: IBv7s5P6POwx8+kL08na/WDUeDlbx9dF9cCZPWWH6T4=) 2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=) 3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=) 4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=) 5: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=) 6: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: IWBZoO4s58F9emugWtA7EQWusY4rdkEASZnpnzACuRA=) 7: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:d5:1f:c7:2f:c6:1c:d3:9d:73:40:5c:84:01:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Jan 25 04:00:53 2026 GMT Not After : Jan 26 04:00:53 2026 GMT Subject: CN=83294e0229ccc2874515574767d009ad079558e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:f3:ca:ff:12:9c:5d:7e:ac:b1:e7:f5:54: 92:4e:cc:a5:a5:f4:fb:a5:57:82:08:e8:f0:4c:51: 52:c1:6a:64:65:76:e6:ff:1a:e8:0b:ff:0c:39:a9: 18:8f:2f:33:c1:e3:7c:94:90:c1:73:6d:b8:1b:c0: 68:f3:67:6b:59:a0:72:87:13:57:8b:6e:e4:4c:cb: fd:81:d9:2b:5e:6a:02:e5:2b:f4:58:59:8c:9b:f5: c7:32:10:3b:5d:a3:19:ba:fd:71:26:6c:81:39:1e: 16:79:3a:f2:d2:4b:59:6a:64:32:23:ca:66:64:11: f3:ba:6f:11:ce:1a:41:c0:d7:60:10:6e:75:e4:98: 23:3f:4f:9e:70:11:f6:c1:40:16:cf:b1:cf:da:68: 6c:b0:9a:ae:4e:4a:fb:56:ca:1d:13:8b:48:70:51: 53:5d:85:2c:13:11:bf:e9:29:1b:d0:77:a4:13:7a: e2:30:0c:02:54:ee:fa:86:ff:3d:d6:39:82:ef:4e: 4c:9c:9c:31:a2:3e:90:f5:1b:49:aa:c0:f5:32:c0: e5:72:fe:75:62:4f:ce:9d:a5:2a:f6:ef:73:89:31: 8e:86:57:71:7b:79:f5:bb:ef:fc:57:a2:96:a0:d3: ea:97:6f:41:a8:0d:2f:3a:58:fe:76:52:ec:9f:22: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:29:4E:02:29:CC:C2:87:45:15:57:47:67:D0:09:AD:07:95:58:E2 X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:94:b6:ab:b8:9b:a2:de:88:a1:35:98:7e:03:e4:a9:a3: 5a:0d:26:9a:15:b5:5c:47:3c:6c:e7:0c:1b:79:d6:71:52:89: d2:9d:20:7b:5e:09:de:fb:02:1a:ea:8e:52:84:5f:5f:3d:37: 54:9d:20:fa:ad:de:60:86:e5:87:d8:04:ee:af:92:37:ca:21: 3e:29:48:c2:67:23:d3:7e:14:50:e9:3c:af:9d:eb:41:15:7f: 81:08:b0:10:1e:67:d2:e7:76:6d:f1:ca:c5:71:9e:c9:06:1b: e8:78:c7:f9:dd:1a:16:1e:16:44:79:59:cd:0c:df:5c:17:0b: 47:f8:80:60:1d:08:2c:22:07:18:a9:90:4a:46:0a:40:25:bb: a1:84:17:03:05:d9:88:a4:90:8e:9c:0e:11:94:44:c6:1e:7c: 05:1c:5c:e3:aa:e0:db:5f:e4:6d:cb:77:f5:24:66:4d:0f:c8: b6:d8:3f:ce:8a:50:5a:af:37:db:7f:24:ad:5a:2d:ee:15:c7: 3a:6b:2d:f6:bd:e3:5b:31:1a:2a:9e:62:43:9d:c0:e4:8e:cb: 0e:5e:f8:d5:f0:8e:ab:ba:5a:86:0a:b7:7c:c3:ec:ff:26:5e: e0:8e:aa:04:f0:89:eb:fa:a4:43:16:5b:9d:fc:64:81:91:ca: a7:8d:51:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT9Ufxy/GHNOdc0BchAE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjYwMTI1MDQwMDUzWhcNMjYwMTI2MDQwMDUzWjAzMTEwLwYDVQQD Eyg4MzI5NGUwMjI5Y2NjMjg3NDUxNTU3NDc2N2QwMDlhZDA3OTU1OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Xzyv8SnF1+rLHn9VSSTsylpfT7 pVeCCOjwTFFSwWpkZXbm/xroC/8MOakYjy8zweN8lJDBc224G8Bo82drWaByhxNX i27kTMv9gdkrXmoC5Sv0WFmMm/XHMhA7XaMZuv1xJmyBOR4WeTry0ktZamQyI8pm ZBHzum8RzhpBwNdgEG515JgjP0+ecBH2wUAWz7HP2mhssJquTkr7VsodE4tIcFFT XYUsExG/6Skb0HekE3riMAwCVO76hv891jmC705MnJwxoj6Q9RtJqsD1MsDlcv51 Yk/OnaUq9u9ziTGOhldxe3n1u+/8V6KWoNPql29BqA0vOlj+dlLsnyLJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMpTgIpzMKHRRVXR2fQCa0HlVjiMB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDOUtqu4 m6LeiKE1mH4D5KmjWg0mmhW1XEc8bOcMG3nWcVKJ0p0ge14J3vsCGuqOUoRfXz03 VJ0g+q3eYIblh9gE7q+SN8ohPilIwmcj034UUOk8r53rQRV/gQiwEB5n0ud2bfHK xXGeyQYb6HjH+d0aFh4WRHlZzQzfXBcLR/iAYB0ILCIHGKmQSkYKQCW7oYQXAwXZ iKSQjpwOEZRExh58BRxc46rg21/kbct39SRmTQ/Ittg/zopQWq83238krVot7hXH Omst9r3jWzEaKp5iQ53A5I7LDl741fCOq7pahgq3fMPs/yZe4I6qBPCJ6/qkQxZb nfxkgZHKp41RCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:03 2026 by rpki-client