This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json) Hash identifier: OPwAuiqpDc/ORhJUQfdLL/JflzTsQuo87dO+6zLM7+8= Subject key identifier: 23:7B:0C:4A:83:E8:46:ED:3C:8D:F6:FF:2E:00:4D:D0:54:82:34:C1 Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Certificate serial: 019BF8E3B96CDC6060A69C3435FC675B6E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft Manifest number: 07A3 Signing time: Mon 26 Jan 2026 06:00:32 +0000 Manifest this update: Mon 26 Jan 2026 06:00:32 +0000 Manifest next update: Tue 27 Jan 2026 06:00:32 +0000 Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: FNwFDvFWoFWsHsOT6zwgKBUiMhhwiYlH90x7QDyURMQ=) 2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:b9:6c:dc:60:60:a6:9c:34:35:fc:67:5b:6e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Validity Not Before: Jan 26 06:00:32 2026 GMT Not After : Jan 27 06:00:32 2026 GMT Subject: CN=237b0c4a83e846ed3c8df6ff2e004dd0548234c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:b6:22:ca:bc:b4:ce:42:84:0d:3e:52:6e: c4:7a:78:28:f1:7a:fa:25:6d:bc:7b:ef:c8:25:1b: 93:0d:5a:79:d2:2b:1d:61:31:4c:09:93:b7:44:43: 91:5b:63:c0:98:28:78:2b:aa:ee:c3:31:a1:47:e8: 52:65:42:96:95:ef:1d:d3:ca:3b:79:0f:7f:e5:cc: 30:16:b3:04:81:fa:47:10:15:e9:2d:f7:56:21:08: 6b:0e:a2:e0:40:75:df:e2:06:70:c5:57:ff:26:4f: 96:2e:e8:1f:4c:c6:17:1f:72:bf:c7:ae:ea:0b:1e: 34:37:a5:e9:9e:c4:35:e7:02:4a:7c:af:b4:87:21: 85:38:7f:f3:80:b3:90:95:a1:f5:15:c9:cd:30:f0: 30:da:5b:69:6b:c3:bf:28:a4:07:c0:10:3b:5e:76: 29:3b:42:59:51:74:51:15:21:88:04:64:cc:43:52: 49:a1:b9:c8:99:33:a5:14:28:46:41:ff:b7:72:86: f4:4a:80:a6:07:ab:91:8c:c0:33:17:ff:74:df:97: 3f:d0:3d:19:7c:29:61:56:ee:55:88:f9:1f:bf:00: 7a:f2:28:07:13:91:e5:67:b2:ac:6c:53:72:ee:b9: 81:30:d9:4f:d4:ec:9a:7e:85:9e:cc:e3:f8:5a:5c: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:0C:4A:83:E8:46:ED:3C:8D:F6:FF:2E:00:4D:D0:54:82:34:C1 X509v3 Authority Key Identifier: keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:47:9f:1e:37:59:b7:5c:fd:fc:5a:2c:02:4f:50:3f:0e:d3: f2:a6:16:e3:50:11:c3:3a:ef:25:bc:cb:0e:1c:32:07:93:17: d2:3d:6c:9d:21:9c:d1:14:60:6e:9f:50:c0:04:01:a7:ce:a1: 82:5c:02:24:5a:d6:72:50:a7:00:93:eb:4c:b0:87:47:23:18: e3:ad:5d:ca:5a:55:8b:6b:1c:40:5a:fe:47:3e:b4:4c:5b:9d: 59:90:af:34:d4:f5:99:91:90:2d:b7:70:51:5c:49:60:86:99: 0b:57:26:48:b3:b9:da:80:eb:f3:b8:bd:a2:c3:04:e9:ec:02: 3d:26:47:19:0f:9e:56:23:24:a0:5f:1a:6e:a9:f3:aa:7b:74: 75:e5:60:18:d3:24:74:23:74:12:00:a2:da:64:03:00:29:42: bd:1c:71:e6:d7:7d:f1:f4:f1:61:ae:3e:86:77:c1:67:c9:c9: 80:d8:e4:d5:4a:fc:26:63:d8:bd:03:06:63:94:bc:81:2e:5e: 85:04:69:bc:fc:f8:a7:e1:e6:25:3c:7a:44:8d:3e:30:6a:a7: 73:de:49:44:bc:1d:62:46:4c:b0:55:43:57:7f:14:7e:c3:ec: 7c:06:3c:0e:bc:4c:c0:ab:9c:de:23:cc:6d:cc:16:fb:bb:6d: fe:37:f2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv447ls3GBgppw0NfxnW25PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj ZWY1ZWIwHhcNMjYwMTI2MDYwMDMyWhcNMjYwMTI3MDYwMDMyWjAzMTEwLwYDVQQD EygyMzdiMGM0YTgzZTg0NmVkM2M4ZGY2ZmYyZTAwNGRkMDU0ODIzNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzK2Isq8tM5ChA0+Um7Eengo8Xr6 JW28e+/IJRuTDVp50isdYTFMCZO3REORW2PAmCh4K6ruwzGhR+hSZUKWle8d08o7 eQ9/5cwwFrMEgfpHEBXpLfdWIQhrDqLgQHXf4gZwxVf/Jk+WLugfTMYXH3K/x67q Cx40N6XpnsQ15wJKfK+0hyGFOH/zgLOQlaH1FcnNMPAw2ltpa8O/KKQHwBA7XnYp O0JZUXRRFSGIBGTMQ1JJobnImTOlFChGQf+3cob0SoCmB6uRjMAzF/9035c/0D0Z fClhVu5ViPkfvwB68igHE5HlZ7KsbFNy7rmBMNlP1OyafoWezOP4WlzbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN7DEqD6EbtPI32/y4ATdBUgjTBMB8GA1UdIwQY MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt ZmQ2ZjIzNWRhZjBiLzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkefHjdZ t1z9/FosAk9QPw7T8qYW41ARwzrvJbzLDhwyB5MX0j1snSGc0RRgbp9QwAQBp86h glwCJFrWclCnAJPrTLCHRyMY461dylpVi2scQFr+Rz60TFudWZCvNNT1mZGQLbdw UVxJYIaZC1cmSLO52oDr87i9osME6ewCPSZHGQ+eViMkoF8abqnzqnt0deVgGNMk dCN0EgCi2mQDAClCvRxx5td98fTxYa4+hnfBZ8nJgNjk1Ur8JmPYvQMGY5S8gS5e hQRpvPz4p+HmJTx6RI0+MGqnc95JRLwdYkZMsFVDV38UfsPsfAY8DrxMwKuc3iPM bcwW+7tt/jfy4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:27 2026 by rpki-client