This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json) Hash identifier: c1HL8KN9GXZt3aK/liTxTMk+1d6KZFlabFdHOkhXtGU= Subject key identifier: 42:CF:2F:AE:7A:3C:93:F3:40:37:8C:7C:12:85:FD:5A:66:13:4E:6D Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Certificate serial: 019BF50703CEC53D7F9E46B1B17FE168C06C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft Manifest number: 0A49 Signing time: Sun 25 Jan 2026 12:00:36 +0000 Manifest this update: Sun 25 Jan 2026 12:00:36 +0000 Manifest next update: Mon 26 Jan 2026 12:00:36 +0000 Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=) 2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=) 3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: NBb54TR0YrxN33TRl5t3UPVpyXnRsydAhj/2myUTp8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:03:ce:c5:3d:7f:9e:46:b1:b1:7f:e1:68:c0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Validity Not Before: Jan 25 12:00:36 2026 GMT Not After : Jan 26 12:00:36 2026 GMT Subject: CN=42cf2fae7a3c93f340378c7c1285fd5a66134e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:9f:2b:f9:ce:90:be:8f:fb:42:9f:15:23: 04:b3:c6:a0:18:8a:79:35:02:8f:aa:74:7f:23:0f: cb:c9:a6:c6:bb:65:a2:47:67:c0:54:e4:21:ce:ae: e3:5d:58:70:06:36:cc:ee:e3:be:a1:6a:9f:d9:06: 0c:14:b6:72:3b:9c:b7:2a:8b:0b:eb:18:84:d6:05: 5f:55:09:49:f8:5a:54:78:e8:6c:08:16:2a:7f:28: c3:76:35:2c:73:59:97:48:fe:8d:4d:51:b0:1a:4f: b3:c6:6a:84:25:37:e0:55:28:6b:c7:4a:41:f6:8c: af:7d:a5:e5:d3:4d:c6:9e:2f:d1:f1:17:3f:a3:19: 14:ff:ab:a5:f9:53:1d:4b:65:1a:eb:43:91:f8:18: f7:a0:9b:89:52:40:8c:94:db:99:27:30:e2:f0:a6: 08:34:c1:eb:ee:23:59:93:1e:f4:0e:d6:c2:24:1d: 70:ea:23:63:74:89:5b:59:39:4a:e2:f9:26:60:c4: 8b:0a:c6:50:2e:ff:f4:b2:2b:34:32:dc:6e:1e:83: 9f:06:4a:0a:dd:28:ce:cd:38:28:a0:1c:5a:8e:66: f8:7a:cb:dc:88:f0:6a:26:40:9b:2b:4b:6d:95:ce: b8:ac:a7:63:4b:24:56:84:d2:a7:d0:e4:e6:0a:0d: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CF:2F:AE:7A:3C:93:F3:40:37:8C:7C:12:85:FD:5A:66:13:4E:6D X509v3 Authority Key Identifier: keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4a:b5:5a:b8:95:57:40:73:b4:dd:a7:a9:69:6d:43:7b:d5: 46:33:66:50:a6:fb:2f:99:8e:a6:e0:40:35:8a:8e:b3:8b:2e: 2e:c6:77:98:2c:aa:73:51:17:66:6c:4f:57:69:bc:21:a2:23: 0b:9a:58:ef:b4:59:67:4c:01:8c:fc:8a:ed:03:3a:77:17:f2: f5:f5:19:45:9a:d6:83:99:ad:a7:a5:a3:b6:0f:d9:8b:27:fb: 98:fe:a3:8e:59:fd:2d:77:02:b4:59:dc:44:c8:79:24:02:69: 24:42:e1:da:cb:5a:9f:32:6a:09:20:13:8f:34:1c:de:8c:04: dd:70:19:f5:05:1a:d0:10:e8:b4:75:d4:a5:a1:e9:a9:cf:8d: 12:56:70:40:76:44:2b:b4:8e:26:7c:6a:cf:7a:66:14:42:1b: 66:68:03:34:51:7e:53:4d:a2:0f:8d:60:02:45:a4:c2:12:1b: 91:cb:19:04:6d:6f:d3:59:6c:8d:d9:fb:4a:f5:a3:22:ce:3a: 96:f1:f1:6a:39:62:10:dc:d7:bb:cb:e6:4c:26:fd:e8:64:f7: c1:60:a1:c0:f0:82:33:02:0a:81:d3:c3:07:62:5f:59:35:bb: f5:c9:3a:90:a3:1d:b4:21:6f:ea:f0:69:ab:77:23:34:54:fc: ea:0b:13:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwPOxT1/nkaxsX/haMBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx YWQzNGUwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD Eyg0MmNmMmZhZTdhM2M5M2YzNDAzNzhjN2MxMjg1ZmQ1YTY2MTM0ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCKfK/nOkL6P+0KfFSMEs8agGIp5 NQKPqnR/Iw/LyabGu2WiR2fAVOQhzq7jXVhwBjbM7uO+oWqf2QYMFLZyO5y3KosL 6xiE1gVfVQlJ+FpUeOhsCBYqfyjDdjUsc1mXSP6NTVGwGk+zxmqEJTfgVShrx0pB 9oyvfaXl003Gni/R8Rc/oxkU/6ul+VMdS2Ua60OR+Bj3oJuJUkCMlNuZJzDi8KYI NMHr7iNZkx70DtbCJB1w6iNjdIlbWTlK4vkmYMSLCsZQLv/0sis0MtxuHoOfBkoK 3SjOzTgooBxajmb4esvciPBqJkCbK0ttlc64rKdjSyRWhNKn0OTmCg0y4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELPL656PJPzQDeMfBKF/VpmE05tMB8GA1UdIwQY MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt Y2E1ZTY4NTQzOGEyLzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEq1WriV V0BztN2nqWltQ3vVRjNmUKb7L5mOpuBANYqOs4suLsZ3mCyqc1EXZmxPV2m8IaIj C5pY77RZZ0wBjPyK7QM6dxfy9fUZRZrWg5mtp6Wjtg/Ziyf7mP6jjln9LXcCtFnc RMh5JAJpJELh2stanzJqCSATjzQc3owE3XAZ9QUa0BDotHXUpaHpqc+NElZwQHZE K7SOJnxqz3pmFEIbZmgDNFF+U02iD41gAkWkwhIbkcsZBG1v01lsjdn7SvWjIs46 lvHxajliENzXu8vmTCb96GT3wWChwPCCMwIKgdPDB2JfWTW79ck6kKMdtCFv6vBp q3cjNFT86gsT1w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:06 2026 by rpki-client