This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json) Hash identifier: nH4ZS5jiZXFtR+2KW3NyZLNMD1sczpkX82Tg+3HhwDE= Subject key identifier: DB:94:8A:8E:71:0C:A3:D9:02:25:B1:F0:0B:BE:F7:48:85:FC:65:04 Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26 Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26 Certificate serial: 019BF4D095765BED3C04C0A66A9CA4D1A175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft Manifest number: 1259 Signing time: Sun 25 Jan 2026 11:01:08 +0000 Manifest this update: Sun 25 Jan 2026 11:01:08 +0000 Manifest next update: Mon 26 Jan 2026 11:01:08 +0000 Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: QdhE23IJcvhKsRD3CJM1adj7fMP0L76nzF0yoDmo9T0=) 2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:95:76:5b:ed:3c:04:c0:a6:6a:9c:a4:d1:a1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26 Validity Not Before: Jan 25 11:01:08 2026 GMT Not After : Jan 26 11:01:08 2026 GMT Subject: CN=db948a8e710ca3d90225b1f00bbef74885fc6504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:7b:03:c2:c8:66:b0:ad:be:26:11:ce:9f: 0d:40:b6:0c:98:58:f2:42:5a:a6:67:9e:75:81:4b: f4:a8:6f:91:df:06:4f:24:84:f6:bd:cb:2a:77:67: 4a:dd:15:bc:27:cd:3c:30:e7:9b:30:e4:c5:80:26: d5:e5:54:f1:26:03:a7:f1:dc:52:79:4d:da:2d:9a: a4:7d:35:3c:11:35:e1:a3:89:80:b9:83:fd:a9:8e: 00:4c:9b:02:97:7e:82:94:80:c7:61:95:35:7d:17: 9a:f3:82:10:15:4b:2f:53:e9:22:63:03:f2:13:df: 86:b3:cc:b5:61:87:a1:aa:30:98:76:b1:8e:da:2c: 7d:53:d0:76:6a:8b:20:16:a6:7a:11:11:a6:16:c9: 23:43:17:db:3c:a5:93:5b:45:39:5f:b2:cc:03:b0: 45:70:27:d8:d2:91:36:17:9b:56:3e:1b:be:ca:47: 04:d0:dc:49:4f:8e:8c:3c:57:df:e5:3a:2d:47:46: 0e:5a:00:5c:b3:a8:22:b6:e1:d2:05:e4:22:0e:51: 28:a0:86:06:ca:4b:df:f3:80:48:06:9a:37:c8:84: f6:12:50:b9:cc:52:54:7d:78:a1:40:ac:6a:e2:cd: 4f:1d:4d:f1:9d:78:a6:3f:72:b1:41:a8:43:12:eb: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:94:8A:8E:71:0C:A3:D9:02:25:B1:F0:0B:BE:F7:48:85:FC:65:04 X509v3 Authority Key Identifier: keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ea:39:62:1c:5b:de:f5:19:4c:08:88:da:b9:88:92:92:fe: 0b:22:2b:9e:54:41:fb:a9:f1:aa:77:30:98:a4:9c:38:ca:49: 49:09:32:e4:aa:04:b4:e2:35:47:1e:66:63:ce:d1:48:16:b4: c8:e0:2e:c6:84:1e:9c:40:42:62:51:67:b4:a6:f6:ca:24:59: 96:fe:70:f4:1e:df:37:b4:72:1d:6f:ed:c8:33:4c:c0:83:0a: 60:25:07:74:c1:2d:19:28:fa:b8:2a:61:cb:4c:8e:42:a7:95: 57:75:69:84:07:95:78:ad:dc:72:45:b4:8f:db:dd:25:8f:42: 38:87:ce:14:0a:5a:c4:6f:dd:21:1b:c9:0d:2f:c7:04:ff:9b: ed:d8:72:b3:ff:10:7f:87:2c:9b:45:0a:95:68:76:7f:a2:3f: ee:e6:7e:79:c7:61:cd:8c:6b:df:44:11:79:15:27:d1:ca:c2: cc:cf:bb:ae:24:e4:48:7c:75:0c:de:0f:3b:9f:d4:9d:1d:67: 18:a4:7f:c2:09:ae:7a:64:4d:16:d6:fc:57:db:b5:3c:ff:ea: 7e:cf:76:4b:aa:8f:70:bb:76:fa:cf:48:03:22:6e:69:e6:e3: 9b:b8:6f:10:5a:63:76:51:4d:a2:64:60:ee:ea:c4:fb:ff:42: 2c:00:72:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JV2W+08BMCmapyk0aF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTZiZGZlNDI3ODAwOGY3MTZkNGQ3YjBiOWY5MmY3ZTAz NmViMjYwHhcNMjYwMTI1MTEwMTA4WhcNMjYwMTI2MTEwMTA4WjAzMTEwLwYDVQQD EyhkYjk0OGE4ZTcxMGNhM2Q5MDIyNWIxZjAwYmJlZjc0ODg1ZmM2NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoih7A8LIZrCtviYRzp8NQLYMmFjy QlqmZ551gUv0qG+R3wZPJIT2vcsqd2dK3RW8J808MOebMOTFgCbV5VTxJgOn8dxS eU3aLZqkfTU8ETXho4mAuYP9qY4ATJsCl36ClIDHYZU1fRea84IQFUsvU+kiYwPy E9+Gs8y1YYehqjCYdrGO2ix9U9B2aosgFqZ6ERGmFskjQxfbPKWTW0U5X7LMA7BF cCfY0pE2F5tWPhu+ykcE0NxJT46MPFff5TotR0YOWgBcs6gituHSBeQiDlEooIYG ykvf84BIBpo3yIT2ElC5zFJUfXihQKxq4s1PHU3xnXimP3KxQahDEuu8vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuUio5xDKPZAiWx8Au+90iF/GUEMB8GA1UdIwQY MBaAFNrmvf5CeACPcW1NewufkvfgNusmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMt YmYyNGU3NzViMmJjLzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84MGQwODctNDcwMC00ZTg1LWE3ODMtYmYyNGU3NzViMmJj LzEvMnVhOV9rSjRBSTl4YlUxN0M1LVM5LUEyNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOo5Yhxb 3vUZTAiI2rmIkpL+CyIrnlRB+6nxqncwmKScOMpJSQky5KoEtOI1Rx5mY87RSBa0 yOAuxoQenEBCYlFntKb2yiRZlv5w9B7fN7RyHW/tyDNMwIMKYCUHdMEtGSj6uCph y0yOQqeVV3VphAeVeK3cckW0j9vdJY9COIfOFApaxG/dIRvJDS/HBP+b7dhys/8Q f4csm0UKlWh2f6I/7uZ+ecdhzYxr30QReRUn0crCzM+7riTkSHx1DN4PO5/UnR1n GKR/wgmuemRNFtb8V9u1PP/qfs92S6qPcLt2+s9IAyJuaebjm7hvEFpjdlFNomRg 7urE+/9CLAByQw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:04 2026 by rpki-client