This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json) Hash identifier: dAJK/LhXOQwn0DTEKeG+zrFcFCMCboYrSs2NMNE0PBI= Subject key identifier: 06:E7:C5:B2:FB:5B:88:6B:9D:66:65:EA:02:C5:3C:0C:89:85:EC:DD Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Certificate serial: 019BF7D1CADE60621919DB6D9D38E54538AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft Manifest number: 04CF Signing time: Mon 26 Jan 2026 01:01:19 +0000 Manifest this update: Mon 26 Jan 2026 01:01:19 +0000 Manifest next update: Tue 27 Jan 2026 01:01:19 +0000 Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: SNMWnEToRN1EIc29YTLtDLLcH0EZyvqTg2x75LXCJuA=) 2: gG12zQ9GIzWIe8J-nL_3zIACec4.roa (hash: 7EVnJBXzQgBi1RMypgklddOJkUa6XyxYAb4uWOaA9Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:ca:de:60:62:19:19:db:6d:9d:38:e5:45:38:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc Validity Not Before: Jan 26 01:01:19 2026 GMT Not After : Jan 27 01:01:19 2026 GMT Subject: CN=06e7c5b2fb5b886b9d6665ea02c53c0c8985ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:39:5a:98:d3:be:50:9e:91:46:e8:1a:3f: f6:83:80:6e:37:f1:b2:5f:ba:56:9f:2e:f7:6d:c9: 80:0b:ce:75:45:46:bd:53:af:83:ac:92:21:89:5e: dc:ba:f2:e0:a9:c1:6a:4e:8b:f3:78:71:84:5f:ab: 64:e3:5a:26:48:8b:2c:f8:72:65:5c:dc:75:b7:0b: 2e:82:58:cf:e5:79:f0:04:91:e6:69:b7:2c:74:d7: 8b:c7:2a:06:cd:27:f5:cf:5c:f2:54:e5:84:44:d6: 16:75:b6:d2:07:cf:3e:49:27:49:f1:cd:02:71:de: 64:3d:ee:79:3a:cf:2d:c5:e4:7f:24:4e:11:32:63: f0:ae:ec:6b:e0:f3:35:0e:19:e7:3a:bc:06:b5:aa: 1c:68:f2:c3:dc:12:6e:d0:1b:68:22:08:62:17:69: bd:8a:78:5f:f5:14:be:04:79:17:26:cf:3f:4e:38: 37:25:e0:a7:84:e7:0b:5b:b4:93:87:3b:5d:62:8f: c9:e7:45:6a:87:52:a2:9b:ad:a7:f1:02:e4:9c:48: 3c:ad:27:28:d2:36:01:23:ae:a2:c0:8a:c4:9d:89: c8:be:02:e0:4b:39:49:ac:81:1d:33:95:1e:f1:45: e2:52:24:4f:11:da:3b:d1:dc:39:0d:48:6f:82:93: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:C5:B2:FB:5B:88:6B:9D:66:65:EA:02:C5:3C:0C:89:85:EC:DD X509v3 Authority Key Identifier: keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:74:6f:70:ed:36:fd:92:69:5b:48:c7:a7:dd:52:49:ea:2a: 00:30:0a:07:06:40:7c:90:45:61:d8:41:45:98:b7:58:f2:2a: bf:fa:6a:71:ae:bd:59:e4:b9:39:ac:9e:8f:1d:fc:0f:e5:e6: ec:c8:7e:43:12:3a:4e:69:82:17:96:bf:6b:d3:3a:14:94:bd: 52:99:eb:45:ef:11:18:3f:7c:5b:a0:1b:d2:cd:56:c0:d5:cb: 59:c3:70:16:2d:a8:d3:d7:4e:0a:8e:ac:2b:a7:d5:77:b7:13: eb:42:e0:d1:ef:35:3a:df:95:53:29:cd:71:fd:26:6b:e4:d7: 59:e1:2f:22:33:e5:66:ed:a1:3f:b5:12:db:42:7c:03:6d:da: 33:83:03:7f:62:0f:ac:97:8f:c6:43:68:d1:b7:88:35:1f:f4: ee:9e:03:b0:bd:6a:e3:3b:69:bc:b0:9e:c7:2d:47:24:cf:4f: e8:51:b2:24:d7:0e:c5:d1:28:8d:a3:c5:16:df:9c:7a:fb:3f: c0:fe:d5:ef:16:a2:58:1b:e8:66:6a:9f:b7:3f:1f:26:1b:e2: 5e:6c:f9:c5:c6:43:e4:bb:ee:77:f7:3b:97:2c:f7:26:a5:57: a4:fb:17:ac:96:28:82:d2:90:68:ae:6e:5f:14:ed:e1:8c:3e: 44:6c:b3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30creYGIZGdttnTjlRTiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNWIxY2Q1ZWU1ZWIwM2RmYmY2ZDQyNWQ2OTc5ZThkNTM1 MDE1YmMwHhcNMjYwMTI2MDEwMTE5WhcNMjYwMTI3MDEwMTE5WjAzMTEwLwYDVQQD EygwNmU3YzViMmZiNWI4ODZiOWQ2NjY1ZWEwMmM1M2MwYzg5ODVlY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFM5WpjTvlCekUboGj/2g4BuN/Gy X7pWny73bcmAC851RUa9U6+DrJIhiV7cuvLgqcFqTovzeHGEX6tk41omSIss+HJl XNx1twsugljP5XnwBJHmabcsdNeLxyoGzSf1z1zyVOWERNYWdbbSB88+SSdJ8c0C cd5kPe55Os8txeR/JE4RMmPwruxr4PM1DhnnOrwGtaocaPLD3BJu0BtoIghiF2m9 inhf9RS+BHkXJs8/Tjg3JeCnhOcLW7SThztdYo/J50Vqh1Kim62n8QLknEg8rSco 0jYBI66iwIrEnYnIvgLgSzlJrIEdM5Ue8UXiUiRPEdo70dw5DUhvgpMIwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbnxbL7W4hrnWZl6gLFPAyJhezdMB8GA1UdIwQY MBaAFFNbHNXuXrA9+/bUJdaXno1TUBW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2Zjkt ZTJiOWY2ZGJlMDAwLzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2ZjktZTJiOWY2ZGJlMDAw LzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHRvcO02 /ZJpW0jHp91SSeoqADAKBwZAfJBFYdhBRZi3WPIqv/pqca69WeS5Oayejx38D+Xm 7Mh+QxI6TmmCF5a/a9M6FJS9UpnrRe8RGD98W6Ab0s1WwNXLWcNwFi2o09dOCo6s K6fVd7cT60Lg0e81Ot+VUynNcf0ma+TXWeEvIjPlZu2hP7US20J8A23aM4MDf2IP rJePxkNo0beINR/07p4DsL1q4ztpvLCexy1HJM9P6FGyJNcOxdEojaPFFt+cevs/ wP7V7xaiWBvoZmqftz8fJhviXmz5xcZD5Lvud/c7lyz3JqVXpPsXrJYogtKQaK5u XxTt4Yw+RGyz1g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:23 2026 by rpki-client