This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json) Hash identifier: PH6wG4qp9IvBujeAyP/MaUBpzOzghkFpkxhVmq5X9Bk= Subject key identifier: 66:C1:B9:00:46:2D:BA:91:8D:0E:DE:9C:28:46:C3:34:D0:B6:EC:47 Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Certificate serial: 019BF5E3E23E25A5A503B5A79252B0FA4FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft Manifest number: 01D9 Signing time: Sun 25 Jan 2026 16:01:51 +0000 Manifest this update: Sun 25 Jan 2026 16:01:51 +0000 Manifest next update: Mon 26 Jan 2026 16:01:51 +0000 Files and hashes: 1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=) 2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: 2GV5YHZL+K0EBTb1u9Xqymyl8ibr1EH1kRrA4p5XYis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:e2:3e:25:a5:a5:03:b5:a7:92:52:b0:fa:4f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820 Validity Not Before: Jan 25 16:01:51 2026 GMT Not After : Jan 26 16:01:51 2026 GMT Subject: CN=66c1b900462dba918d0ede9c2846c334d0b6ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:80:00:66:c8:22:59:72:b9:59:0d:99:55: 3b:cd:c3:e5:02:98:b9:39:ab:03:e2:f3:46:d8:e4: 5b:46:ec:20:92:7c:5e:06:e2:ed:58:36:f5:67:36: b4:b2:69:ae:c0:5f:71:4f:1a:6f:62:be:5c:59:3c: fb:c3:c2:23:8b:47:18:f7:28:ae:79:df:18:cf:a5: 63:05:4c:69:54:13:94:8f:b5:1b:4a:c4:d4:71:6a: 0a:6d:52:50:8f:0d:2a:3c:a4:88:77:db:52:b9:c4: 28:03:48:eb:0f:a7:c3:46:40:4f:28:4b:ea:8e:02: 2a:8b:cb:25:b2:0d:dd:51:bf:d6:69:52:ab:f6:c0: a0:f3:3f:8d:b9:83:50:a1:d7:df:5d:b0:3c:56:10: ce:a6:bf:42:1c:2c:99:e8:ef:fd:bb:45:aa:b1:f0: 54:9b:d8:a7:54:6b:aa:c9:a0:e8:3f:45:12:5f:99: 54:c1:be:58:24:51:75:3c:15:29:6a:78:66:ca:25: 0b:ea:04:a3:ea:2d:c5:2d:21:1d:f9:e0:27:29:b0: e3:8a:63:97:35:e9:cb:2b:33:ed:07:ac:4d:cd:03: 6f:0b:4c:26:de:5f:af:38:72:3f:3a:87:41:19:10: 63:a9:ff:c4:08:2a:47:8d:bd:bd:62:d1:9e:a2:97: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C1:B9:00:46:2D:BA:91:8D:0E:DE:9C:28:46:C3:34:D0:B6:EC:47 X509v3 Authority Key Identifier: keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:99:53:dc:9a:b4:46:b5:4a:69:da:09:73:87:44:3c:27:13: 1d:ec:d2:aa:ee:56:77:50:1d:dc:f6:84:04:55:b2:89:3d:a1: b8:14:0c:a0:16:26:12:c5:6d:9b:ea:c2:50:23:37:4e:82:e3: 46:f9:f5:2b:6c:10:44:e4:04:3e:6e:70:6e:a6:55:84:7b:96: 3a:c8:72:43:3d:de:97:70:aa:d5:ec:a9:fc:ea:05:8c:41:93: fe:ee:84:b2:28:a8:7d:0b:41:d5:cf:25:e7:3b:76:27:34:b5: 5d:fe:c1:2c:a0:9f:1c:2c:d3:96:1b:bc:69:6b:42:07:90:72: 30:90:04:48:c5:6d:02:7c:3a:fa:b3:3e:45:13:f4:77:28:f0: e1:2f:e7:f8:e9:f2:b3:57:a5:52:5e:1f:9a:0b:d2:da:85:92: 29:57:43:5b:31:0b:a7:19:fa:32:d7:85:42:84:1f:4c:68:6b: 91:b8:0f:56:ee:54:73:d4:a9:c7:b0:29:26:f4:28:d8:60:cc: c0:a3:3e:66:0a:0e:41:21:ba:3a:4b:2e:e5:0a:d6:34:c6:73: 4a:46:b3:79:57:13:f8:f4:7f:61:91:73:10:80:f8:4d:5d:1d: c9:ab:f3:a7:06:aa:f1:85:dc:35:28:64:80:ef:ff:40:e0:9c: a6:c1:6e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14+I+JaWlA7WnklKw+k/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2 MGE4MjAwHhcNMjYwMTI1MTYwMTUxWhcNMjYwMTI2MTYwMTUxWjAzMTEwLwYDVQQD Eyg2NmMxYjkwMDQ2MmRiYTkxOGQwZWRlOWMyODQ2YzMzNGQwYjZlYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcyAAGbIIllyuVkNmVU7zcPlApi5 OasD4vNG2ORbRuwgknxeBuLtWDb1Zza0smmuwF9xTxpvYr5cWTz7w8Iji0cY9yiu ed8Yz6VjBUxpVBOUj7UbSsTUcWoKbVJQjw0qPKSId9tSucQoA0jrD6fDRkBPKEvq jgIqi8slsg3dUb/WaVKr9sCg8z+NuYNQodffXbA8VhDOpr9CHCyZ6O/9u0WqsfBU m9inVGuqyaDoP0USX5lUwb5YJFF1PBUpanhmyiUL6gSj6i3FLSEd+eAnKbDjimOX NenLKzPtB6xNzQNvC0wm3l+vOHI/OodBGRBjqf/ECCpHjb29YtGeopeDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbBuQBGLbqRjQ7enChGwzTQtuxHMB8GA1UdIwQY MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABplT3Jq0 RrVKadoJc4dEPCcTHezSqu5Wd1Ad3PaEBFWyiT2huBQMoBYmEsVtm+rCUCM3ToLj Rvn1K2wQROQEPm5wbqZVhHuWOshyQz3el3Cq1eyp/OoFjEGT/u6EsiiofQtB1c8l 5zt2JzS1Xf7BLKCfHCzTlhu8aWtCB5ByMJAESMVtAnw6+rM+RRP0dyjw4S/n+Ony s1elUl4fmgvS2oWSKVdDWzELpxn6MteFQoQfTGhrkbgPVu5Uc9Spx7ApJvQo2GDM wKM+ZgoOQSG6Oksu5QrWNMZzSkazeVcT+PR/YZFzEID4TV0dyavzpwaq8YXcNShk gO//QOCcpsFuUg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:22 2026 by rpki-client