This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json) Hash identifier: 44yY9li0GPRzxU23G3uqO7+CV+9tvpH+HR1o4gK/D0Q= Subject key identifier: E4:4A:BE:14:89:12:BD:5B:69:B2:3F:E4:9C:13:69:0C:9C:B7:F0:16 Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb Certificate serial: 019BF5076498EA67CC9B1DC75B4CAEAB070F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 12:01:00 +0000 Manifest this update: Sun 25 Jan 2026 12:01:00 +0000 Manifest next update: Mon 26 Jan 2026 12:01:00 +0000 Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: H+ksISBMbg7MRdnxk4Ke1STaML4q6KM6sf/bILsI12g=) 2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:64:98:ea:67:cc:9b:1d:c7:5b:4c:ae:ab:07:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb Validity Not Before: Jan 25 12:01:00 2026 GMT Not After : Jan 26 12:01:00 2026 GMT Subject: CN=e44abe148912bd5b69b23fe49c13690c9cb7f016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:f8:40:5a:11:b8:0d:38:47:b4:ae:c4:94: 8b:f3:47:39:67:1c:c6:cd:5c:d1:ac:3b:38:d5:17: b6:80:91:2f:78:44:23:51:7a:15:1d:b1:06:40:a9: 21:f7:87:44:f9:d3:2b:69:97:20:6d:4f:f8:b8:c4: 40:a6:6c:e1:f4:a1:77:dc:88:1f:68:35:8c:d1:f0: c1:69:4d:d9:a9:54:fe:08:1c:34:a9:25:6b:12:13: 1e:1b:6f:43:3a:8f:60:d9:1f:71:b2:85:ac:64:cc: 26:96:8f:84:ed:74:12:cc:3e:ce:24:7b:fc:59:96: 8d:11:78:5d:6a:ba:19:64:1f:72:48:6e:7f:78:e6: 28:87:d1:27:3c:b2:e2:33:9f:70:e3:ff:55:bc:b2: 4c:1c:3f:38:41:8b:9d:81:87:e0:5d:23:b2:dc:db: 8c:33:2f:b9:56:db:be:fa:37:41:f8:9a:8e:f4:39: be:d4:5a:cb:87:0d:a0:47:a7:54:9d:ff:d5:56:e9: a2:df:30:a4:7d:ac:d0:91:41:90:3e:94:5d:c1:62: c5:09:ee:21:92:4b:fc:b0:2e:01:16:2d:f4:71:55: ed:db:1d:07:4e:08:27:b1:fe:82:f6:d3:dd:e6:3e: 31:63:8e:70:02:f4:ab:88:03:d5:ac:9b:1a:7e:0e: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:BE:14:89:12:BD:5B:69:B2:3F:E4:9C:13:69:0C:9C:B7:F0:16 X509v3 Authority Key Identifier: keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7c:05:cd:c4:5f:21:20:4e:bc:e2:a5:ae:85:7a:d7:07:f0: 7c:b8:85:47:97:60:e4:06:02:66:00:5e:1e:0e:e7:74:25:a0: fd:23:30:8c:de:aa:ba:7c:c6:e9:5b:c8:cc:8b:5d:78:4c:17: 80:31:0b:8b:c0:75:23:44:71:3f:88:52:ae:0c:00:58:50:28: e4:3f:29:c1:cf:27:a1:1f:bf:09:9d:7d:de:31:11:25:31:15: e3:83:81:93:6d:87:a9:d8:74:56:51:3d:07:df:69:47:d2:ba: 3d:2d:21:9e:67:2b:f9:10:0e:1a:ac:52:da:14:69:63:20:02: 5e:f9:9a:18:5c:c5:43:b2:4c:6d:c8:70:1d:c6:0f:79:1a:b3: 64:ba:98:f9:a3:ef:17:32:39:9a:16:00:2a:19:4f:1a:2a:9e: e8:4c:ae:c0:a0:25:d2:f4:b9:ac:b0:e0:01:3f:8a:61:4b:9b: 9e:9b:0d:28:3c:53:b7:f4:c8:04:f0:b1:9c:d2:cc:11:82:30: a6:0d:b9:84:5a:d8:a2:60:48:43:ba:0b:b9:5f:d1:1d:ae:21: f6:dd:06:5b:24:db:87:de:a5:aa:2d:b6:8b:b0:c1:97:06:75: fd:92:75:d3:d0:33:55:2d:57:79:c1:45:8b:e0:eb:b8:6b:35: 4a:61:b2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2SY6mfMmx3HW0yuqwcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYjEwNTA2NWMwZDkxMzliNWZmZWRjMzJjOTAwY2Y2NGI0 MzEyZWIwHhcNMjYwMTI1MTIwMTAwWhcNMjYwMTI2MTIwMTAwWjAzMTEwLwYDVQQD EyhlNDRhYmUxNDg5MTJiZDViNjliMjNmZTQ5YzEzNjkwYzljYjdmMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5n4QFoRuA04R7SuxJSL80c5ZxzG zVzRrDs41Re2gJEveEQjUXoVHbEGQKkh94dE+dMraZcgbU/4uMRApmzh9KF33Igf aDWM0fDBaU3ZqVT+CBw0qSVrEhMeG29DOo9g2R9xsoWsZMwmlo+E7XQSzD7OJHv8 WZaNEXhdaroZZB9ySG5/eOYoh9EnPLLiM59w4/9VvLJMHD84QYudgYfgXSOy3NuM My+5Vtu++jdB+JqO9Dm+1FrLhw2gR6dUnf/VVumi3zCkfazQkUGQPpRdwWLFCe4h kkv8sC4BFi30cVXt2x0HTggnsf6C9tPd5j4xY45wAvSriAPVrJsafg4IUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORKvhSJEr1babI/5JwTaQyct/AWMB8GA1UdIwQY MBaAFFOxBQZcDZE5tf/twyyQDPZLQxLrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjIt YTdlODY0NTNhYmNkLzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MWMwOTEtMGE0ZS00MDA1LWJlMjItYTdlODY0NTNhYmNk LzEvVTdFRkJsd05rVG0xXy0zRExKQU05a3RERXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHwFzcRf ISBOvOKlroV61wfwfLiFR5dg5AYCZgBeHg7ndCWg/SMwjN6qunzG6VvIzItdeEwX gDELi8B1I0RxP4hSrgwAWFAo5D8pwc8noR+/CZ193jERJTEV44OBk22Hqdh0VlE9 B99pR9K6PS0hnmcr+RAOGqxS2hRpYyACXvmaGFzFQ7JMbchwHcYPeRqzZLqY+aPv FzI5mhYAKhlPGiqe6EyuwKAl0vS5rLDgAT+KYUubnpsNKDxTt/TIBPCxnNLMEYIw pg25hFrYomBIQ7oLuV/RHa4h9t0GWyTbh96lqi22i7DBlwZ1/ZJ109AzVS1XecFF i+DruGs1SmGyKw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:40 2026 by rpki-client