This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json) Hash identifier: 8jhfyArmRS5rcsjpyVf2kt+L9S0nSYEj08TliYR0CDA= Subject key identifier: 06:56:B4:C0:35:2A:E2:B9:E1:08:C1:CD:D0:43:D9:4D:E7:11:1C:67 Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Certificate serial: 019BFA644245744F4BC77A9CC845B2EF47E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft Manifest number: 12C5 Signing time: Mon 26 Jan 2026 13:00:32 +0000 Manifest this update: Mon 26 Jan 2026 13:00:32 +0000 Manifest next update: Tue 27 Jan 2026 13:00:32 +0000 Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=) 2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: LkgTxFAh7MUYvk+JyYGlsmtOBolg4m3Zzj27yPDtHeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:42:45:74:4f:4b:c7:7a:9c:c8:45:b2:ef:47:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0 Validity Not Before: Jan 26 13:00:32 2026 GMT Not After : Jan 27 13:00:32 2026 GMT Subject: CN=0656b4c0352ae2b9e108c1cdd043d94de7111c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:d2:2f:04:4d:66:db:89:0c:03:6a:96:ba: 04:26:9b:95:9a:c0:fd:69:6b:52:ab:6a:e2:6f:aa: a0:2a:e9:21:2b:1f:f8:b9:1e:8e:1d:4e:e6:22:48: bb:11:70:ad:18:2c:67:ae:df:28:26:47:24:28:4c: 1c:4b:28:16:9c:16:1e:c9:81:14:c1:d7:7a:08:75: 4c:87:c4:0f:ff:d1:03:7f:30:7a:4d:bf:23:1f:63: a9:09:f0:9b:ab:b5:7d:15:f3:df:26:fb:b2:bd:d1: c5:84:f8:b2:c2:f6:5b:10:b9:26:1b:6e:c7:50:f0: 43:70:af:ae:39:7c:17:5f:3a:1c:a0:a5:44:f9:2e: a9:e1:80:76:d2:0e:72:49:34:46:5c:4b:60:d3:d8: bf:6b:71:63:e6:d7:cc:84:52:d0:9d:13:9b:b6:3e: 02:14:ae:2b:be:a4:a2:bb:43:37:f2:57:db:0b:ed: 5c:6a:f6:47:a3:31:45:55:ef:f7:9f:50:c9:3f:2e: f5:31:83:cd:81:ea:12:35:d7:b1:b3:c2:d3:89:1b: fe:8a:b8:f5:88:c8:d8:13:c9:97:94:f9:00:e9:ee: b9:0e:29:5f:82:cb:3e:dd:0c:5e:7e:bd:05:7a:f0: 2d:65:0b:fb:44:fc:f6:88:45:ad:97:24:f9:68:ad: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:B4:C0:35:2A:E2:B9:E1:08:C1:CD:D0:43:D9:4D:E7:11:1C:67 X509v3 Authority Key Identifier: keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:80:f1:94:bd:a3:3e:4f:e8:9b:55:22:88:3c:39:e2:21:1a: 4f:c1:f5:ae:cc:3a:b1:48:4e:6b:c6:47:12:65:9b:b1:3d:64: ed:e5:df:aa:c1:df:6f:96:cc:bc:15:2f:8a:da:2b:f7:50:0d: 24:9d:9c:b0:19:45:2a:77:4b:d4:80:c1:26:f6:69:51:37:0d: 99:d0:4c:f3:92:64:43:1f:e0:19:d8:89:f5:39:f8:a2:3f:02: c2:aa:80:3a:33:c3:f3:3c:94:81:7a:67:d7:70:ef:59:09:ed: 63:b1:e5:4e:b7:cd:ca:a5:96:9b:1b:15:1c:9a:00:77:4f:fe: 7b:3c:8f:04:2a:85:9a:a9:f9:8d:5d:75:aa:a7:2a:a9:2f:43: 6f:bf:4c:0f:41:7d:64:a8:d7:99:e5:ed:a6:96:f2:94:6d:80: af:c6:ef:5f:cc:bb:ba:80:d7:f5:0a:06:c4:60:ca:63:99:2c: 6f:f4:cd:e6:5b:48:5a:37:1f:79:f9:e5:f1:fa:d8:0a:c6:3c: 2b:5f:09:0a:79:e5:fb:5f:93:e0:53:f1:ee:55:c9:64:18:47: 46:13:0d:84:77:d5:7e:aa:cf:d0:b9:28:1c:39:1f:e8:50:bb: fd:f7:db:bc:ef:4e:35:02:a2:2d:a5:e9:fd:e7:f7:78:3a:43: 5d:68:dc:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZEJFdE9Lx3qcyEWy70fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy YmM3ZDAwHhcNMjYwMTI2MTMwMDMyWhcNMjYwMTI3MTMwMDMyWjAzMTEwLwYDVQQD EygwNjU2YjRjMDM1MmFlMmI5ZTEwOGMxY2RkMDQzZDk0ZGU3MTExYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAronSLwRNZtuJDANqlroEJpuVmsD9 aWtSq2rib6qgKukhKx/4uR6OHU7mIki7EXCtGCxnrt8oJkckKEwcSygWnBYeyYEU wdd6CHVMh8QP/9EDfzB6Tb8jH2OpCfCbq7V9FfPfJvuyvdHFhPiywvZbELkmG27H UPBDcK+uOXwXXzocoKVE+S6p4YB20g5ySTRGXEtg09i/a3Fj5tfMhFLQnRObtj4C FK4rvqSiu0M38lfbC+1cavZHozFFVe/3n1DJPy71MYPNgeoSNdexs8LTiRv+irj1 iMjYE8mXlPkA6e65Dilfgss+3Qxefr0FevAtZQv7RPz2iEWtlyT5aK2ftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZWtMA1KuK54QjBzdBD2U3nERxnMB8GA1UdIwQY MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIDxlL2j Pk/om1UiiDw54iEaT8H1rsw6sUhOa8ZHEmWbsT1k7eXfqsHfb5bMvBUvitor91AN JJ2csBlFKndL1IDBJvZpUTcNmdBM85JkQx/gGdiJ9Tn4oj8CwqqAOjPD8zyUgXpn 13DvWQntY7HlTrfNyqWWmxsVHJoAd0/+ezyPBCqFmqn5jV11qqcqqS9Db79MD0F9 ZKjXmeXtppbylG2Ar8bvX8y7uoDX9QoGxGDKY5ksb/TN5ltIWjcfefnl8frYCsY8 K18JCnnl+1+T4FPx7lXJZBhHRhMNhHfVfqrP0LkoHDkf6FC7/ffbvO9ONQKiLaXp /ef3eDpDXWjcNQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:54 2026 by rpki-client