This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json) Hash identifier: h5mLsyU9rGb2lCT6aJZ2yDtBLaKgl0rAHgw/ULDXx1M= Subject key identifier: E9:07:E5:69:58:51:4A:AF:B6:45:BC:CD:54:46:61:7A:0D:EC:AA:C9 Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452 Certificate serial: 019BF650D1E23C5B190C4CEFC86355F8764D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft Manifest number: 17F8 Signing time: Sun 25 Jan 2026 18:00:50 +0000 Manifest this update: Sun 25 Jan 2026 18:00:50 +0000 Manifest next update: Mon 26 Jan 2026 18:00:50 +0000 Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=) 2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: 3AljdqmMVNQoM7z8Yx9qU7RZeHYZkt8aU/adQOswTPc=) 3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:d1:e2:3c:5b:19:0c:4c:ef:c8:63:55:f8:76:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336107179715609dca422bc07a098468c529452 Validity Not Before: Jan 25 18:00:50 2026 GMT Not After : Jan 26 18:00:50 2026 GMT Subject: CN=e907e56958514aafb645bccd5446617a0decaac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:1f:36:b8:f7:13:81:d4:0e:43:9c:ce:11: 52:c0:f9:bd:4b:28:91:c9:08:c4:d0:66:77:fd:69: 57:f7:e6:07:37:99:a6:10:cf:85:58:12:eb:58:7a: 5d:01:86:44:f5:69:f4:9c:36:7a:4c:05:97:56:7d: 68:e3:c3:ef:35:12:ca:5d:ad:a8:aa:b1:95:40:7a: d0:3d:ec:a5:d6:fa:21:fd:32:ab:4f:ea:56:8c:f1: f7:ad:81:c0:c1:55:8f:31:a1:55:6a:03:ec:90:db: a9:ed:be:d6:1d:4b:a7:00:89:0e:87:ef:86:c0:a2: e3:97:38:31:c3:fd:77:05:2b:60:93:7d:96:df:60: f7:9a:50:aa:ea:8d:f3:7b:c9:a6:3f:b7:9a:eb:0e: bf:51:66:fe:a6:49:70:32:55:0f:c1:a9:0a:59:b5: 34:ca:ae:c8:f6:de:88:75:20:1f:0d:74:d7:34:5f: 82:ac:a7:fc:7a:18:76:90:e3:63:ff:04:b0:8e:e4: a1:60:54:53:0a:cd:bf:1e:13:96:6c:18:d0:f4:75: 47:cb:10:61:be:dd:1b:01:42:ff:f2:67:7c:61:a0: 2d:f1:34:de:c2:4c:10:a9:1b:bb:27:36:88:af:28: 1c:20:9d:e6:63:f2:f0:76:41:fe:e5:27:fd:57:f1: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:07:E5:69:58:51:4A:AF:B6:45:BC:CD:54:46:61:7A:0D:EC:AA:C9 X509v3 Authority Key Identifier: keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ca:dd:9f:68:03:a2:13:31:15:60:43:ac:1b:ed:ed:56:0a: a6:8e:d7:fb:5f:1e:ab:08:b5:7b:86:e5:37:7a:d0:a3:5d:26: e9:4f:d1:ae:f6:7a:55:b5:43:cd:31:48:9b:34:0c:17:de:65: 32:74:2f:d0:52:76:6f:c6:b7:a1:08:89:47:8b:f6:db:90:38: 36:97:53:f7:2f:62:61:b9:70:0d:39:1b:96:1f:d6:ff:ac:22: 9b:7d:2c:91:dd:9a:90:f7:71:ed:6e:ad:7d:f6:4b:15:53:88: 69:e8:55:7f:72:88:1e:d4:6c:a6:f3:a6:b2:b9:29:5c:2e:ef: 7d:3e:ec:27:55:af:77:53:ef:d2:a2:3f:ba:8a:92:16:c9:8a: ed:85:e3:74:12:59:0a:84:81:9f:cd:d7:73:74:fb:3d:e5:e0: fd:41:2f:a1:fe:8e:03:d3:46:0f:6b:5a:5b:07:07:00:53:fb: 8f:7a:1c:1c:81:ed:76:88:65:72:9a:22:15:93:8d:ba:9c:30: 5b:68:4c:64:77:50:1e:20:76:03:72:57:f8:a9:22:22:8e:c1: e5:82:af:25:09:d8:d2:91:6e:20:7c:95:e7:a0:0d:04:37:ce: 72:2f:84:ee:0a:d4:e9:a6:5c:00:aa:aa:ab:7f:8b:d3:94:2a: 0b:cc:2e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UNHiPFsZDEzvyGNV+HZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1 Mjk0NTIwHhcNMjYwMTI1MTgwMDUwWhcNMjYwMTI2MTgwMDUwWjAzMTEwLwYDVQQD EyhlOTA3ZTU2OTU4NTE0YWFmYjY0NWJjY2Q1NDQ2NjE3YTBkZWNhYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp98fNrj3E4HUDkOczhFSwPm9SyiR yQjE0GZ3/WlX9+YHN5mmEM+FWBLrWHpdAYZE9Wn0nDZ6TAWXVn1o48PvNRLKXa2o qrGVQHrQPeyl1voh/TKrT+pWjPH3rYHAwVWPMaFVagPskNup7b7WHUunAIkOh++G wKLjlzgxw/13BStgk32W32D3mlCq6o3ze8mmP7ea6w6/UWb+pklwMlUPwakKWbU0 yq7I9t6IdSAfDXTXNF+CrKf8ehh2kONj/wSwjuShYFRTCs2/HhOWbBjQ9HVHyxBh vt0bAUL/8md8YaAt8TTewkwQqRu7JzaIrygcIJ3mY/LwdkH+5Sf9V/FaUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkH5WlYUUqvtkW8zVRGYXoN7KrJMB8GA1UdIwQY MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt ZDE4NjEwMDc1ZWZjLzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccrdn2gD ohMxFWBDrBvt7VYKpo7X+18eqwi1e4blN3rQo10m6U/RrvZ6VbVDzTFImzQMF95l MnQv0FJ2b8a3oQiJR4v225A4NpdT9y9iYblwDTkblh/W/6wim30skd2akPdx7W6t ffZLFVOIaehVf3KIHtRspvOmsrkpXC7vfT7sJ1Wvd1Pv0qI/uoqSFsmK7YXjdBJZ CoSBn83Xc3T7PeXg/UEvof6OA9NGD2taWwcHAFP7j3ocHIHtdohlcpoiFZONupww W2hMZHdQHiB2A3JX+KkiIo7B5YKvJQnY0pFuIHyV56ANBDfOci+E7grU6aZcAKqq q3+L05QqC8wu7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:33 2026 by rpki-client