This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json) Hash identifier: tnXmOuXr7XTk3KVsK6U9dmcAuq7PXutpIvN6BzXwWFw= Subject key identifier: 79:CB:EA:7D:DD:A2:A5:D0:DD:A3:17:5B:C7:B6:B4:2F:56:41:28:40 Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5 Certificate serial: 019BF6878D288FD936237D0843BCDD0DA6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft Manifest number: 0ED0 Signing time: Sun 25 Jan 2026 19:00:37 +0000 Manifest this update: Sun 25 Jan 2026 19:00:37 +0000 Manifest next update: Mon 26 Jan 2026 19:00:37 +0000 Files and hashes: 1: Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa (hash: lf4lQFDrnk5VRiTZ4XBPmQTyhm8ggaJBhIQsymhNxRU=) 2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: iEFqrs4ZI6khQK3Zq3ZR7V6OOETx9UpUxUE2C0Q6OfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:8d:28:8f:d9:36:23:7d:08:43:bc:dd:0d:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5 Validity Not Before: Jan 25 19:00:37 2026 GMT Not After : Jan 26 19:00:37 2026 GMT Subject: CN=79cbea7ddda2a5d0dda3175bc7b6b42f56412840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:f0:f1:d2:f2:09:87:0e:8c:5d:f5:5b:35: 79:71:f1:bb:a9:7b:40:c9:60:87:00:63:2e:f0:a6: 79:36:22:73:34:5a:dc:7c:cd:db:d7:d2:54:ba:b0: 3c:45:ac:d3:76:2b:62:f1:3e:f9:c8:e9:fc:e5:75: 02:2e:7d:5e:24:df:e1:1f:ef:09:0e:0f:81:95:7c: b1:e7:d4:47:e1:65:0e:d9:ff:2c:c4:d4:ba:62:09: 6e:bb:cb:eb:da:b7:da:74:8e:4f:03:09:7d:20:f9: 50:fc:76:ee:6d:77:08:51:db:f1:70:41:94:b5:ff: 2c:44:a0:de:ef:3e:fb:4d:c8:85:d9:c0:b6:64:a8: a4:cb:40:97:6b:c2:69:b7:97:d3:1c:f3:b9:fb:e9: 07:6d:ab:f1:17:d0:64:9d:a6:21:c4:fd:21:d6:36: 4f:f9:bd:a7:46:db:21:7c:bf:db:2d:ed:47:f1:55: ef:24:d5:c2:52:98:4f:d3:50:72:62:6f:d3:af:0a: ca:e9:7e:be:ca:d6:f9:d7:ee:ad:81:02:34:26:76: 89:80:44:92:e5:bc:7d:ab:17:7d:9e:90:26:2d:30: 2a:21:18:c1:05:4f:82:2b:47:70:e6:62:bf:85:a5: 8b:96:ba:26:6b:d1:23:6f:5c:b7:a2:12:15:9f:6c: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:EA:7D:DD:A2:A5:D0:DD:A3:17:5B:C7:B6:B4:2F:56:41:28:40 X509v3 Authority Key Identifier: keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0c:39:76:87:99:c4:54:c8:9d:22:40:d7:e2:6d:2a:88:99: 2e:42:17:84:6d:24:c5:c9:3a:f0:96:3a:df:60:7e:98:43:65: fc:c0:24:31:a3:4b:33:1a:b7:44:90:00:53:71:bb:5b:5e:3e: 3e:c5:61:fe:5d:27:fe:97:a1:6a:a5:d4:6b:be:fa:9f:66:0a: 1a:a6:2f:62:46:ca:6e:a4:ef:b9:85:ff:2a:d4:d9:fb:e6:68: 95:66:af:c1:ab:77:9a:bb:c0:96:61:81:fb:a5:7a:33:89:74: 3e:2c:c5:7d:83:a2:f9:63:2f:18:d2:79:0f:83:c2:11:40:08: 3e:fd:df:c2:7f:a4:20:36:1d:d9:d5:89:9e:0a:bf:e5:b5:9a: cb:5e:c8:49:d7:72:d5:c6:2d:b3:de:f1:fd:37:96:f0:65:da: 61:e9:56:3e:4d:a0:03:ee:a0:d9:44:c4:68:b5:d6:6f:bc:c0: ad:f2:8f:62:f8:97:8a:b1:bb:82:e5:32:f2:d9:53:80:2f:1d: 90:e7:20:57:f5:4c:d7:52:6d:29:c2:c5:18:0c:45:d6:70:d7: c4:a9:a8:a8:ce:83:c6:8b:10:98:3b:ff:03:04:11:ef:6a:29: 2e:66:d9:7c:02:e1:2c:4c:2c:8d:d9:e0:16:ad:4a:f5:46:90: 6a:3e:72:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h40oj9k2I30IQ7zdDaapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODlkYjJlNWY1NzRkZGEwZTNjMTdlMzk1ZDVmMDViNjYy NTRlYzUwHhcNMjYwMTI1MTkwMDM3WhcNMjYwMTI2MTkwMDM3WjAzMTEwLwYDVQQD Eyg3OWNiZWE3ZGRkYTJhNWQwZGRhMzE3NWJjN2I2YjQyZjU2NDEyODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jjw8dLyCYcOjF31WzV5cfG7qXtA yWCHAGMu8KZ5NiJzNFrcfM3b19JUurA8RazTditi8T75yOn85XUCLn1eJN/hH+8J Dg+BlXyx59RH4WUO2f8sxNS6Ygluu8vr2rfadI5PAwl9IPlQ/HbubXcIUdvxcEGU tf8sRKDe7z77TciF2cC2ZKiky0CXa8Jpt5fTHPO5++kHbavxF9BknaYhxP0h1jZP +b2nRtshfL/bLe1H8VXvJNXCUphP01ByYm/TrwrK6X6+ytb51+6tgQI0JnaJgESS 5bx9qxd9npAmLTAqIRjBBU+CK0dw5mK/haWLlroma9Ejb1y3ohIVn2xw9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnL6n3doqXQ3aMXW8e2tC9WQShAMB8GA1UdIwQY MBaAFFGJ2y5fV03aDjwX45XV8FtmJU7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMt ZTIxYzZkMGY4ZjA0LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMtZTIxYzZkMGY4ZjA0 LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeww5doeZ xFTInSJA1+JtKoiZLkIXhG0kxck68JY632B+mENl/MAkMaNLMxq3RJAAU3G7W14+ PsVh/l0n/pehaqXUa776n2YKGqYvYkbKbqTvuYX/KtTZ++ZolWavwat3mrvAlmGB +6V6M4l0PizFfYOi+WMvGNJ5D4PCEUAIPv3fwn+kIDYd2dWJngq/5bWay17ISddy 1cYts97x/TeW8GXaYelWPk2gA+6g2UTEaLXWb7zArfKPYviXirG7guUy8tlTgC8d kOcgV/VM11JtKcLFGAxF1nDXxKmoqM6DxosQmDv/AwQR72opLmbZfALhLEwsjdng Fq1K9UaQaj5ykg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:06 2026 by rpki-client