This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json) Hash identifier: +OWk71iD/WpHA4+OSkRvVASinEW9tMTDkPHeQ3JHk9w= Subject key identifier: 36:DC:2D:18:15:06:76:26:64:53:E1:A0:A5:CC:77:F0:C6:D2:89:BD Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Certificate serial: 019BF4D11D556400ED30344C91A973BAC160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft Manifest number: 02F5 Signing time: Sun 25 Jan 2026 11:01:43 +0000 Manifest this update: Sun 25 Jan 2026 11:01:43 +0000 Manifest next update: Mon 26 Jan 2026 11:01:43 +0000 Files and hashes: 1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: gz//6E3hWVw0YOZkMV+TfwKrSTMuuSjm22o6AUOEQoI=) 2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:1d:55:64:00:ed:30:34:4c:91:a9:73:ba:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Validity Not Before: Jan 25 11:01:43 2026 GMT Not After : Jan 26 11:01:43 2026 GMT Subject: CN=36dc2d18150676266453e1a0a5cc77f0c6d289bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:b8:26:f4:93:39:4a:67:07:75:30:81:5f: 3c:1f:f4:32:1c:1c:18:ef:9a:cb:86:33:42:62:7c: 45:c7:69:83:4c:4e:f6:39:3e:46:5e:ff:26:1f:36: 2a:e9:54:68:bd:be:a8:0e:8d:00:8c:35:af:9c:a7: 67:0b:3e:db:1d:4c:d1:35:8e:46:b2:3c:df:1f:77: 94:a3:74:fe:ee:40:de:d8:47:98:c8:21:1c:56:b6: 80:ce:89:45:5e:d2:91:82:08:d5:cf:43:d4:9c:0a: 40:0f:25:f0:1d:29:96:56:ca:a5:f1:24:cc:50:61: 8c:7b:4d:bf:2e:fb:4a:88:f0:d2:a0:0b:fc:1c:9b: 86:b3:77:f5:7c:8d:3e:54:36:0c:2d:80:54:92:c6: 58:06:75:84:c6:02:71:b2:fb:c9:93:a6:c4:bd:40: 79:15:a9:4d:cf:a8:db:90:06:8a:d9:76:05:f3:46: f3:b0:25:2a:cd:bc:1a:16:9d:b7:62:b8:81:47:73: a3:5c:d0:d3:9f:30:10:69:69:03:69:c8:64:c0:7e: 3a:89:38:4d:1f:67:d4:30:13:17:21:3a:db:e0:10: e7:8d:b7:e5:48:93:19:3d:7d:80:63:56:b2:07:8d: 25:08:c3:7b:dd:4b:bf:ef:eb:4e:4d:b6:99:4b:fa: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:2D:18:15:06:76:26:64:53:E1:A0:A5:CC:77:F0:C6:D2:89:BD X509v3 Authority Key Identifier: keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2e:ce:19:9e:f6:c0:dd:60:96:2a:2b:3d:be:bc:44:9f:25: 60:f0:7b:b1:0d:dd:18:45:39:25:e4:6d:96:cb:18:90:d5:32: 4f:09:14:9e:79:08:f5:fb:8b:ae:f3:0f:c6:fb:fb:80:70:93: 11:c4:e5:39:7d:c1:d2:5c:ad:32:e0:67:2c:ed:73:f4:2c:f2: e9:2a:81:8e:4a:9e:ae:8b:36:c7:82:ac:78:7b:21:9b:10:3d: 3a:0c:06:ce:3f:6f:f1:f9:f7:01:bb:a2:1d:7f:b9:53:4a:5b: 43:a1:fc:db:36:9e:eb:09:3b:ee:94:f1:a3:0a:2e:fa:13:d0: 57:7b:f8:6d:18:d8:70:b4:25:83:e6:23:f7:0b:41:ed:0f:a1: e4:79:08:01:c3:2d:c3:02:ba:94:59:82:b5:39:cd:68:20:f4: 63:b1:2f:f2:91:ba:79:e4:0e:27:40:70:7b:95:22:6c:5e:97: 4d:e3:ce:be:5d:c8:47:8f:47:47:93:b3:b9:8c:ef:b1:ae:d6: af:47:e1:01:da:6e:a1:4b:55:d5:bc:19:04:c3:5f:dd:36:bb: a0:df:e5:b7:12:74:92:d4:2d:01:eb:1f:c2:70:b8:54:7c:b5: a5:52:cb:de:d6:c7:74:76:0d:d7:51:8e:ba:ab:73:02:56:63: 80:8c:12:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00R1VZADtMDRMkalzusFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi OTEzOTgwHhcNMjYwMTI1MTEwMTQzWhcNMjYwMTI2MTEwMTQzWjAzMTEwLwYDVQQD EygzNmRjMmQxODE1MDY3NjI2NjQ1M2UxYTBhNWNjNzdmMGM2ZDI4OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqa4JvSTOUpnB3UwgV88H/QyHBwY 75rLhjNCYnxFx2mDTE72OT5GXv8mHzYq6VRovb6oDo0AjDWvnKdnCz7bHUzRNY5G sjzfH3eUo3T+7kDe2EeYyCEcVraAzolFXtKRggjVz0PUnApADyXwHSmWVsql8STM UGGMe02/LvtKiPDSoAv8HJuGs3f1fI0+VDYMLYBUksZYBnWExgJxsvvJk6bEvUB5 FalNz6jbkAaK2XYF80bzsCUqzbwaFp23YriBR3OjXNDTnzAQaWkDachkwH46iThN H2fUMBMXITrb4BDnjbflSJMZPX2AY1ayB40lCMN73Uu/7+tOTbaZS/oMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbcLRgVBnYmZFPhoKXMd/DG0om9MB8GA1UdIwQY MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS7OGZ72 wN1gliorPb68RJ8lYPB7sQ3dGEU5JeRtlssYkNUyTwkUnnkI9fuLrvMPxvv7gHCT EcTlOX3B0lytMuBnLO1z9Czy6SqBjkqeros2x4KseHshmxA9OgwGzj9v8fn3Abui HX+5U0pbQ6H82zae6wk77pTxowou+hPQV3v4bRjYcLQlg+Yj9wtB7Q+h5HkIAcMt wwK6lFmCtTnNaCD0Y7Ev8pG6eeQOJ0Bwe5UibF6XTePOvl3IR49HR5OzuYzvsa7W r0fhAdpuoUtV1bwZBMNf3Ta7oN/ltxJ0ktQtAesfwnC4VHy1pVLL3tbHdHYN11GO uqtzAlZjgIwSFA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:57 2026 by rpki-client