This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json) Hash identifier: RRWQExnlTMliOFWumewMu1QrioleY+pgZc4N/ukrQas= Subject key identifier: FF:CB:62:17:0D:E8:E3:9D:DF:AC:53:14:F1:D7:F2:6A:DD:4D:86:DB Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Certificate serial: 019BF8ACDCC205DE8EA12E1F99A570AE8C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 05:00:36 +0000 Manifest this update: Mon 26 Jan 2026 05:00:36 +0000 Manifest next update: Tue 27 Jan 2026 05:00:36 +0000 Files and hashes: 1: MQJyHdCQqrR49YtqfP5n2nCmdBc.roa (hash: tayylzbDzrQ2vAXY3YULZKX+Mr7ci8knVpJFx/AOaaM=) 2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: CY2DvTIEKzm2RoCtQ4AjQa90OekzJr+1xA74yexnslU=) 3: VDLlDzAUnpp3yY9jYEhslsSDEio.roa (hash: U4N6I7gKlIzNINdJyuTqu3g1hmT4TUUCZ4OMW8ayoD4=) 4: jSW60U-IDuUsjOlqZECJM6Mt8QM.roa (hash: wz6ZP0fktYKLcRgNv3R96YBySJmIs8qgZe1Q2mMxP04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:dc:c2:05:de:8e:a1:2e:1f:99:a5:70:ae:8c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Validity Not Before: Jan 26 05:00:36 2026 GMT Not After : Jan 27 05:00:36 2026 GMT Subject: CN=ffcb62170de8e39ddfac5314f1d7f26add4d86db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:28:d6:8b:f6:ec:69:3f:2d:12:25:05:34: 1a:d1:a6:55:3b:54:02:19:e2:3c:08:cb:69:65:db: 36:7a:2d:e4:80:48:50:9d:c7:e5:73:f4:0a:9e:cf: 08:32:c2:88:51:75:90:32:10:a5:e0:54:90:06:3b: 90:ff:ba:8f:d3:fe:c0:bc:32:2b:81:a7:36:7c:91: 0a:c6:df:f4:97:be:a2:c8:b4:d8:8c:fc:08:55:2a: 72:92:d5:30:e3:c5:8d:32:f2:ca:27:c6:92:50:f2: 2f:77:30:04:44:64:24:3b:2f:14:25:a5:60:f2:5f: 5d:a3:30:a7:16:e4:80:58:54:a6:b2:4e:84:5f:11: b9:8c:08:61:35:ad:ff:0d:f8:d6:2b:9b:72:3e:db: 8d:3c:f2:e6:4e:52:44:6f:2b:18:8a:cf:fa:bf:ca: 30:ae:ad:4d:85:dd:d6:17:0c:65:b2:6d:91:90:ac: 1f:74:39:5e:b1:15:c3:1d:f9:96:f3:54:aa:14:c9: f9:98:3c:42:d2:3f:88:f7:f9:75:18:70:02:66:50: 58:63:3b:15:ec:21:c3:30:04:c5:ec:c9:cc:79:61: 37:a6:50:0d:e2:a1:9c:52:a1:d8:f7:f1:60:51:45: 64:7b:91:eb:31:77:32:5d:41:3c:3e:83:a5:22:ac: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CB:62:17:0D:E8:E3:9D:DF:AC:53:14:F1:D7:F2:6A:DD:4D:86:DB X509v3 Authority Key Identifier: keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e5:e7:7e:89:ac:52:2f:e7:e2:e3:53:67:3f:06:4e:f7:60: dc:92:bf:5c:f2:25:e4:fb:83:84:94:4a:f2:dc:c5:1e:cc:00: 7e:3d:7c:38:f1:03:2f:28:5e:59:9c:c1:e7:1f:42:25:93:47: 01:b6:24:f0:10:e7:49:00:6c:66:e9:a8:e4:99:84:52:5f:fe: 29:6c:c2:ea:c7:11:e0:1d:fa:52:a8:30:63:9b:d4:b6:ec:98: 22:8e:a4:77:8e:92:75:3b:4e:80:cd:09:ea:cf:98:17:1e:66: 9e:b3:53:6b:27:30:d2:19:c2:ec:f6:6d:ac:d3:75:ad:fb:86: 5a:48:9d:6c:71:0a:12:f5:34:9d:ce:29:35:97:3e:89:09:5a: f5:bb:60:b9:37:fc:d7:77:e0:de:82:4c:0b:fc:9a:4e:bd:48: e6:5c:b3:6a:78:f2:4b:6f:1c:f0:5e:ee:04:9d:25:fd:30:5a: 9b:b0:3b:9d:47:37:a5:f9:e3:f5:fb:cc:d8:ce:27:86:86:80: 37:1e:1f:8f:7c:7f:3d:0b:81:54:94:47:2b:16:32:ba:db:62: 93:34:89:59:27:12:1f:53:ba:0c:53:2a:69:59:5d:b1:b7:a8: 69:58:72:ba:9e:6e:44:51:07:ba:00:c2:cb:0a:38:d1:33:cc: 55:cc:2c:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rNzCBd6OoS4fmaVwrow7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3 ZTZjOTgwHhcNMjYwMTI2MDUwMDM2WhcNMjYwMTI3MDUwMDM2WjAzMTEwLwYDVQQD EyhmZmNiNjIxNzBkZThlMzlkZGZhYzUzMTRmMWQ3ZjI2YWRkNGQ4NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGQo1ov27Gk/LRIlBTQa0aZVO1QC GeI8CMtpZds2ei3kgEhQncflc/QKns8IMsKIUXWQMhCl4FSQBjuQ/7qP0/7AvDIr gac2fJEKxt/0l76iyLTYjPwIVSpyktUw48WNMvLKJ8aSUPIvdzAERGQkOy8UJaVg 8l9dozCnFuSAWFSmsk6EXxG5jAhhNa3/DfjWK5tyPtuNPPLmTlJEbysYis/6v8ow rq1Nhd3WFwxlsm2RkKwfdDlesRXDHfmW81SqFMn5mDxC0j+I9/l1GHACZlBYYzsV 7CHDMATF7MnMeWE3plAN4qGcUqHY9/FgUUVke5HrMXcyXUE8PoOlIqxD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/LYhcN6OOd36xTFPHX8mrdTYbbMB8GA1UdIwQY MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt MzhhMzkyNDc3NmU5LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5 LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuXnfoms Ui/n4uNTZz8GTvdg3JK/XPIl5PuDhJRK8tzFHswAfj18OPEDLyheWZzB5x9CJZNH AbYk8BDnSQBsZumo5JmEUl/+KWzC6scR4B36UqgwY5vUtuyYIo6kd46SdTtOgM0J 6s+YFx5mnrNTaycw0hnC7PZtrNN1rfuGWkidbHEKEvU0nc4pNZc+iQla9btguTf8 13fg3oJMC/yaTr1I5lyzanjyS28c8F7uBJ0l/TBam7A7nUc3pfnj9fvM2M4nhoaA Nx4fj3x/PQuBVJRHKxYyuttikzSJWScSH1O6DFMqaVldsbeoaVhyup5uRFEHugDC ywo40TPMVcwsUg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:31 2026 by rpki-client