This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json) Hash identifier: 1kbEM/OhT7YgjA2SugPbT65t+qqlsZ5yqOmqBeFOptc= Subject key identifier: 14:53:88:DE:67:21:5D:72:D0:AA:92:45:04:96:1A:66:E0:E0:BA:74 Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39 Certificate serial: 019BF462408D4B5E17E4376225B3BAFF2191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft Manifest number: 07BD Signing time: Sun 25 Jan 2026 09:00:38 +0000 Manifest this update: Sun 25 Jan 2026 09:00:38 +0000 Manifest next update: Mon 26 Jan 2026 09:00:38 +0000 Files and hashes: 1: U1OgyFWpYB0xgt1zUe_Xabq5QUk.roa (hash: FE6pVOLnYWKz4tHW+KV6wVdY9LEvvCCMY15EnpTO5NU=) 2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: do0gFRfS3UZQ77jh2EdU052jjS0eE+Dp4raeNjdCQbw=) 3: ZiID9bA4kVJXaS6I_e7XfY_pEWQ.roa (hash: Si+JLMLd7OiqxpqpbnGko1NX7RV2TJpWFgx4YxD8Q9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:40:8d:4b:5e:17:e4:37:62:25:b3:ba:ff:21:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39 Validity Not Before: Jan 25 09:00:38 2026 GMT Not After : Jan 26 09:00:38 2026 GMT Subject: CN=145388de67215d72d0aa924504961a66e0e0ba74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:14:51:d9:89:69:e0:47:a2:8e:ae:11:a0: 3f:21:91:35:c4:51:bf:77:2f:a2:cf:ba:b6:49:0e: 95:cf:b7:a0:25:74:c6:f5:14:50:e9:5e:cd:0a:19: 1e:d7:93:bb:6e:0f:9f:e7:d0:05:40:1f:0f:2f:fc: f2:7b:7a:65:e7:a9:da:bb:29:9a:52:03:4c:fb:b1: 16:c3:f0:b2:3c:6b:66:28:21:81:e7:91:41:ec:56: f1:ca:ea:db:1c:dc:e4:fd:fd:d1:0f:df:8d:c5:6a: 2f:86:44:ac:cb:9a:d7:56:83:2d:4f:46:99:ed:8f: 01:98:ed:41:26:af:29:e5:a0:b3:f0:d1:fa:4d:8a: 69:f6:61:f1:be:76:eb:72:3f:b2:82:09:73:39:a7: 9d:d0:d6:26:d2:74:50:c2:35:1a:02:7e:84:04:91: 1a:fa:11:38:43:e0:d9:28:8f:08:13:33:a0:f2:a4: 01:4f:cd:b2:db:bf:2a:7c:24:8a:5a:22:4e:1c:05: dc:2b:02:10:80:d4:4c:f1:b5:6a:39:83:5d:19:f6: 79:ce:3e:48:47:5d:07:fb:10:1f:fe:a4:2d:3e:74: f4:f8:f9:95:5b:20:8b:66:2f:14:87:7c:5b:87:a9: 4b:e1:96:29:fa:3b:44:c6:a9:92:4d:4e:b0:ae:2b: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:53:88:DE:67:21:5D:72:D0:AA:92:45:04:96:1A:66:E0:E0:BA:74 X509v3 Authority Key Identifier: keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b6:5d:85:42:25:0a:74:93:ed:af:c2:bb:fd:0a:85:2d:b4: fb:c7:c8:64:e2:1b:fd:47:2c:05:74:a3:47:19:d0:13:ee:c5: 24:a8:52:aa:4e:9d:38:6f:8d:ff:d4:db:a3:0a:5b:ce:02:45: b7:5f:cc:bd:a1:c5:95:24:e7:c7:b1:39:2c:ed:61:a4:a0:9e: ee:ff:69:59:ad:7d:1d:b4:87:d9:55:bc:77:82:42:52:89:a9: 9b:9d:8a:ec:9c:1d:f2:09:05:7a:0c:17:05:35:71:50:0d:59: 75:ff:aa:0a:45:83:3d:68:5c:f0:63:c4:a5:36:46:d1:ca:5a: 89:e9:a3:7f:3b:2f:d1:e1:08:66:53:eb:ff:4e:e0:84:42:16: d6:32:83:2a:8e:a7:37:d7:9d:ab:ae:12:01:6e:36:67:02:ee: 6f:67:8b:95:28:5b:a9:d1:45:68:68:ef:4c:e5:61:94:f5:ee: a8:2e:02:3d:3d:42:79:55:ec:32:93:d1:a9:68:5b:3b:28:de: c2:07:5d:5a:65:14:57:e7:bb:f4:bf:f2:1a:c8:c0:7e:08:e7: 64:2f:ec:a6:6a:82:89:72:39:11:00:97:58:47:b9:c0:48:e8: eb:f3:fc:e5:6f:91:fa:a3:61:04:af:ff:fd:48:0e:18:9e:ac: 7b:d2:d7:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YkCNS14X5DdiJbO6/yGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTI5ZDA0OGRlYjJlMGJmNjIyNzEzOTlhMDkwYjkwMTAx NjBiMzkwHhcNMjYwMTI1MDkwMDM4WhcNMjYwMTI2MDkwMDM4WjAzMTEwLwYDVQQD EygxNDUzODhkZTY3MjE1ZDcyZDBhYTkyNDUwNDk2MWE2NmUwZTBiYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8MUUdmJaeBHoo6uEaA/IZE1xFG/ dy+iz7q2SQ6Vz7egJXTG9RRQ6V7NChke15O7bg+f59AFQB8PL/zye3pl56nauyma UgNM+7EWw/CyPGtmKCGB55FB7FbxyurbHNzk/f3RD9+NxWovhkSsy5rXVoMtT0aZ 7Y8BmO1BJq8p5aCz8NH6TYpp9mHxvnbrcj+ygglzOaed0NYm0nRQwjUaAn6EBJEa +hE4Q+DZKI8IEzOg8qQBT82y278qfCSKWiJOHAXcKwIQgNRM8bVqOYNdGfZ5zj5I R10H+xAf/qQtPnT0+PmVWyCLZi8Uh3xbh6lL4ZYp+jtExqmSTU6writLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRTiN5nIV1y0KqSRQSWGmbg4Lp0MB8GA1UdIwQY MBaAFFMSnQSN6y4L9iJxOZoJC5AQFgs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMt N2FlNjM1OWQzMTEwLzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZDU4ZTQtODhmNi00YWVkLWJhNDMtN2FlNjM1OWQzMTEw LzEvVXhLZEJJM3JMZ3YySW5FNW1na0xrQkFXQ3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7ZdhUIl CnST7a/Cu/0KhS20+8fIZOIb/UcsBXSjRxnQE+7FJKhSqk6dOG+N/9TbowpbzgJF t1/MvaHFlSTnx7E5LO1hpKCe7v9pWa19HbSH2VW8d4JCUompm52K7Jwd8gkFegwX BTVxUA1Zdf+qCkWDPWhc8GPEpTZG0cpaiemjfzsv0eEIZlPr/07ghEIW1jKDKo6n N9edq64SAW42ZwLub2eLlShbqdFFaGjvTOVhlPXuqC4CPT1CeVXsMpPRqWhbOyje wgddWmUUV+e79L/yGsjAfgjnZC/spmqCiXI5EQCXWEe5wEjo6/P85W+R+qNhBK// /UgOGJ6se9LXDw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:59 2026 by rpki-client