This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: APbDB6p1mzJ3/HjNeB7SecddFmpf/yaDbC6rP/pJpCg= Subject key identifier: D7:C4:20:93:82:67:03:6C:AE:BC:D4:FF:7A:22:D6:67:93:B0:8A:64 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019BF2AAE50CF842193C4111D2C88B229D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1480 Signing time: Sun 25 Jan 2026 01:00:44 +0000 Manifest this update: Sun 25 Jan 2026 01:00:44 +0000 Manifest next update: Mon 26 Jan 2026 01:00:44 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 6STXpyp9qGkZY6wdqAlUte4FX2k.roa (hash: h/xbukG0IeP954/751eJeDYhad1+QRH3XUPVSkfy640=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 10: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 11: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 12: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: tBBpKZvcS+Qm21lh6LkVNqHO9/G1YJC3a4fLvKr0cj4=) 14: VxN6JcI_Al-4lvATIRpsV8BDi8o.roa (hash: DRF2TKeetuuj0lnAt0xVtWt2l+8JadQL6Cr7oW/zWzc=) 15: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: _XErDvpFkzUya7trCS2vLYDjQlo.roa (hash: Yns1NKHmZhWUbTECwAzkHx9Sc1oUfRWEA2tFejiuDu0=) 18: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=) 19: dKCh7yZe8FNLO1VuBvygQCSKwoo.roa (hash: vyQvKYy/XVn4iGMkDt97MOyHZ4JXy9RdrZJ5+cuKD4A=) 20: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 21: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 23: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 24: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=) 25: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:e5:0c:f8:42:19:3c:41:11:d2:c8:8b:22:9d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 25 01:00:44 2026 GMT Not After : Jan 26 01:00:44 2026 GMT Subject: CN=d7c420938267036caebcd4ff7a22d66793b08a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:5d:65:85:e1:f2:4e:15:ab:98:89:17:bc: c2:f2:ed:9a:f2:f6:d0:ca:b9:35:49:0a:d8:a9:3c: 8f:4e:f3:89:b8:06:4b:02:bd:06:3f:18:7c:b1:f0: 80:79:26:64:f8:27:8a:e5:f0:81:73:ea:00:b2:49: 74:ee:1b:c4:bc:3e:35:67:11:ad:79:d4:76:56:03: 60:64:6e:82:e6:a1:33:55:81:0a:6f:61:d4:17:5b: a9:f9:96:83:38:fc:31:f2:dd:c9:f6:a3:0a:60:91: 96:ea:f1:a7:b0:1a:0f:89:a7:99:6e:21:d0:f1:59: 3f:42:41:a4:3d:3b:93:a3:39:dc:2b:cb:70:3a:f3: 59:b4:84:10:aa:21:10:d1:b9:d0:24:e1:64:0d:56: 42:26:69:14:c6:73:c8:7b:d9:af:8b:3b:a5:89:94: 0f:ea:96:17:d7:fa:f2:b0:9b:38:01:6a:ac:f2:4e: 6e:db:6d:a5:cb:0a:39:80:82:ec:b1:21:06:49:f9: fa:ef:0d:c9:45:ae:38:37:d4:13:17:d9:20:55:e4: 9d:bb:e9:d4:09:3e:53:d7:76:74:8b:c6:5f:9a:c9: 2f:0b:f9:8c:d8:b1:72:c6:e4:38:b8:18:2d:d8:0c: 8a:73:94:14:0f:75:a1:12:b2:97:7d:e5:7e:99:4b: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:20:93:82:67:03:6C:AE:BC:D4:FF:7A:22:D6:67:93:B0:8A:64 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a2:f5:72:5b:ed:a9:24:54:e1:3f:4a:b2:af:5a:d8:24:eb: 79:76:63:3f:1f:71:74:f8:b2:42:65:46:3a:bd:53:af:00:ad: ac:97:e7:ef:cb:5f:af:05:59:25:26:f1:be:e2:17:d0:1c:82: b3:74:53:c9:7d:08:1f:4d:26:bc:8b:75:15:0d:c9:30:ec:92: ef:ef:79:ef:b3:8f:37:b8:48:12:e6:42:26:61:55:76:92:58: 23:30:71:f5:3f:30:08:2a:f8:c1:13:dd:72:58:14:3a:63:ec: 9d:1f:90:d0:5e:a2:fb:4a:ed:f7:24:cb:ff:a3:c3:f0:18:32: c7:af:71:eb:df:56:fc:0d:e7:08:de:c2:2f:5c:a9:ba:2d:ca: 70:19:c3:18:51:80:f7:22:47:4b:97:47:c7:20:e7:51:26:79: 26:c1:1e:2a:16:dc:9d:59:15:14:d5:5c:09:5a:e6:1c:6f:34: f5:77:11:8f:7b:42:81:88:9f:33:e1:48:fd:5d:56:10:4e:d8: a3:d5:59:70:27:60:4e:26:b0:c2:25:17:d5:61:82:7e:43:4b: 2c:d5:c8:47:46:d9:cd:2a:98:46:86:5a:52:96:c4:c3:82:5b: e2:1d:22:d6:33:23:ee:e1:99:2d:62:db:70:44:78:de:d9:0d: 28:a1:67:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyquUM+EIZPEER0siLIp1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTI1MDEwMDQ0WhcNMjYwMTI2MDEwMDQ0WjAzMTEwLwYDVQQD EyhkN2M0MjA5MzgyNjcwMzZjYWViY2Q0ZmY3YTIyZDY2NzkzYjA4YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC9dZYXh8k4Vq5iJF7zC8u2a8vbQ yrk1SQrYqTyPTvOJuAZLAr0GPxh8sfCAeSZk+CeK5fCBc+oAskl07hvEvD41ZxGt edR2VgNgZG6C5qEzVYEKb2HUF1up+ZaDOPwx8t3J9qMKYJGW6vGnsBoPiaeZbiHQ 8Vk/QkGkPTuTozncK8twOvNZtIQQqiEQ0bnQJOFkDVZCJmkUxnPIe9mvizuliZQP 6pYX1/rysJs4AWqs8k5u222lywo5gILssSEGSfn67w3JRa44N9QTF9kgVeSdu+nU CT5T13Z0i8ZfmskvC/mM2LFyxuQ4uBgt2AyKc5QUD3WhErKXfeV+mUssbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfEIJOCZwNsrrzU/3oi1meTsIpkMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKL1clvt qSRU4T9Ksq9a2CTreXZjPx9xdPiyQmVGOr1TrwCtrJfn78tfrwVZJSbxvuIX0ByC s3RTyX0IH00mvIt1FQ3JMOyS7+9577OPN7hIEuZCJmFVdpJYIzBx9T8wCCr4wRPd clgUOmPsnR+Q0F6i+0rt9yTL/6PD8Bgyx69x699W/A3nCN7CL1ypui3KcBnDGFGA 9yJHS5dHxyDnUSZ5JsEeKhbcnVkVFNVcCVrmHG809XcRj3tCgYifM+FI/V1WEE7Y o9VZcCdgTiawwiUX1WGCfkNLLNXIR0bZzSqYRoZaUpbEw4Jb4h0i1jMj7uGZLWLb cER43tkNKKFncw== -----END CERTIFICATE-----Generated at Sun Jan 25 07:33:33 2026 by rpki-client