This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json) Hash identifier: sjdsCLcgWj0qgbbrocYwl4J+MoCoYp4we9Yz36bCJwE= Subject key identifier: 12:5D:AD:B9:4C:FB:1B:6A:B6:4C:31:21:F4:F9:B4:35:1C:FD:6E:69 Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Certificate serial: 019BF8ACF7227916E6216D15390E7C5ACEC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft Manifest number: 095D Signing time: Mon 26 Jan 2026 05:00:43 +0000 Manifest this update: Mon 26 Jan 2026 05:00:43 +0000 Manifest next update: Tue 27 Jan 2026 05:00:43 +0000 Files and hashes: 1: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: hje4Nr4D9u2K8qYIfv7PjzFqSectqbPY2JNVz1JJtV0=) 2: vEwz57dImPsiNennVONbeEnvc1Q.roa (hash: FKFQdv+BqbEkz4WNye1S2doTpa1n1DGJ3Pa6LhxLa3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:f7:22:79:16:e6:21:6d:15:39:0e:7c:5a:ce:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982 Validity Not Before: Jan 26 05:00:43 2026 GMT Not After : Jan 27 05:00:43 2026 GMT Subject: CN=125dadb94cfb1b6ab64c3121f4f9b4351cfd6e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:b7:37:31:51:9a:89:44:2e:8e:93:7e:57: 3e:13:67:f4:97:e2:e3:df:95:27:34:2e:bc:45:63: e7:59:38:b2:10:0d:85:b0:99:7f:ea:a6:7e:b1:9d: c7:28:20:e5:89:35:34:7f:1d:02:5e:76:f7:f5:75: 6c:42:0b:a8:a9:a9:40:eb:26:7e:c9:b5:cf:89:da: e7:d1:f8:61:9d:02:20:0d:6c:7b:38:5a:fc:15:2f: 05:53:7d:4c:5d:a5:97:ad:3c:89:2e:a6:50:7d:ac: ce:8f:e6:56:51:6d:b6:5f:47:71:81:5a:01:23:8b: eb:aa:a0:de:b4:1d:2e:2b:e3:10:36:52:dc:58:c3: 85:84:56:06:c0:7a:54:2d:32:2c:59:80:44:ae:9e: e5:d5:4b:00:11:e3:a8:80:11:c4:f6:1b:a1:43:01: c1:86:84:e6:2d:20:7d:a3:f0:a4:e6:ed:5c:fb:6a: e2:e9:71:af:78:0c:09:3c:76:dc:fa:cc:6d:e0:bf: 38:ef:66:27:08:a0:be:84:54:01:ee:aa:36:70:ea: 2a:16:17:44:a8:57:6c:02:a8:1b:08:ec:58:94:a8: 00:b3:cc:9c:07:d4:52:15:57:f3:cd:e6:93:e7:52: 63:3a:cc:32:b8:25:a2:25:d2:aa:b2:00:2a:c5:21: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5D:AD:B9:4C:FB:1B:6A:B6:4C:31:21:F4:F9:B4:35:1C:FD:6E:69 X509v3 Authority Key Identifier: keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:5e:e4:79:96:3a:ae:0e:e8:fb:ce:9c:fa:34:9c:cf:df: 02:6e:35:e7:7b:dc:1a:d8:29:cd:b0:09:42:65:4c:77:6e:ae: 97:1f:85:aa:3f:74:5e:4f:93:46:5f:e9:04:12:f3:3f:d4:5d: c8:49:a4:ec:29:24:5d:b3:5e:bd:ef:b3:3c:c0:b7:bf:0a:f6: 5e:fb:19:d0:ce:b2:d0:dc:c0:1c:c9:42:73:ac:7a:38:57:10: ba:07:71:bb:5a:7d:d1:5d:2f:12:d9:34:39:f7:66:70:0b:89: 47:5c:c7:77:be:d8:72:d2:fb:66:e3:bc:82:1c:d5:72:09:69: a0:52:26:56:a3:60:8e:17:99:f9:4b:da:5b:2b:83:d4:99:2e: 80:ca:3f:f5:c1:99:ef:3e:54:9e:50:2e:5c:62:17:22:52:4a: 17:57:e3:e0:19:64:72:eb:1c:2f:61:3f:d9:7e:1d:14:77:87: 6e:1a:9e:65:4a:ce:88:7c:0c:e8:65:64:ed:ad:88:d4:b9:4c: 51:b0:b0:f0:38:23:5d:81:50:dd:f9:d7:6c:ab:9d:3a:5d:3f: 01:66:85:73:0b:0d:c9:2f:5f:dd:d4:2d:9c:11:cf:2a:b6:23: 4a:41:99:29:a5:74:07:29:cf:a0:6e:53:da:d5:b3:07:f7:32: 73:2d:4b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rPcieRbmIW0VOQ58Ws7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZDkzMDVmY2JkNTljZGE0YjY4Zjg4OGRmNjAyMDQ4NWI3 NGU5ODIwHhcNMjYwMTI2MDUwMDQzWhcNMjYwMTI3MDUwMDQzWjAzMTEwLwYDVQQD EygxMjVkYWRiOTRjZmIxYjZhYjY0YzMxMjFmNGY5YjQzNTFjZmQ2ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbS3NzFRmolELo6Tflc+E2f0l+Lj 35UnNC68RWPnWTiyEA2FsJl/6qZ+sZ3HKCDliTU0fx0CXnb39XVsQguoqalA6yZ+ ybXPidrn0fhhnQIgDWx7OFr8FS8FU31MXaWXrTyJLqZQfazOj+ZWUW22X0dxgVoB I4vrqqDetB0uK+MQNlLcWMOFhFYGwHpULTIsWYBErp7l1UsAEeOogBHE9huhQwHB hoTmLSB9o/Ck5u1c+2ri6XGveAwJPHbc+sxt4L8472YnCKC+hFQB7qo2cOoqFhdE qFdsAqgbCOxYlKgAs8ycB9RSFVfzzeaT51JjOswyuCWiJdKqsgAqxSGcbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJdrblM+xtqtkwxIfT5tDUc/W5pMB8GA1UdIwQY MBaAFLnZMF/L1ZzaS2j4iN9gIEhbdOmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYt MWQwOWM3OWIyNTQwLzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xOWYzN2ItNDQ2Yy00OTEwLTljNmYtMWQwOWM3OWIyNTQw LzEvdWRrd1g4dlZuTnBMYVBpSTMyQWdTRnQwNllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmle5HmW Oq4O6PvOnPo0nM/fAm4153vcGtgpzbAJQmVMd26ulx+Fqj90Xk+TRl/pBBLzP9Rd yEmk7CkkXbNeve+zPMC3vwr2XvsZ0M6y0NzAHMlCc6x6OFcQugdxu1p90V0vEtk0 OfdmcAuJR1zHd77YctL7ZuO8ghzVcglpoFImVqNgjheZ+UvaWyuD1JkugMo/9cGZ 7z5UnlAuXGIXIlJKF1fj4BlkcuscL2E/2X4dFHeHbhqeZUrOiHwM6GVk7a2I1LlM UbCw8DgjXYFQ3fnXbKudOl0/AWaFcwsNyS9f3dQtnBHPKrYjSkGZKaV0BynPoG5T 2tWzB/cycy1LYA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:57 2026 by rpki-client