This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json) Hash identifier: HeLI9Nvu/54UnLVsA3E2EZHEw7G7uXhlP9W22QzFvFg= Subject key identifier: 49:92:DB:7B:B4:40:DE:A2:1E:5A:87:7F:4B:39:9E:93:64:59:9D:BC Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Certificate serial: 019BF5E3CBB7F1FEFEC8160E309680B96E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft Manifest number: 0F4A Signing time: Sun 25 Jan 2026 16:01:45 +0000 Manifest this update: Sun 25 Jan 2026 16:01:45 +0000 Manifest next update: Mon 26 Jan 2026 16:01:45 +0000 Files and hashes: 1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=) 2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: l8xd8lYI7nWVqyy9ynGCodDlYb1x3knRogmlpDLINdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:cb:b7:f1:fe:fe:c8:16:0e:30:96:80:b9:6e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Validity Not Before: Jan 25 16:01:45 2026 GMT Not After : Jan 26 16:01:45 2026 GMT Subject: CN=4992db7bb440dea21e5a877f4b399e9364599dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:8b:80:f0:d9:31:9b:a9:7e:7c:91:fe:59: 87:32:3b:68:1d:37:84:1b:e3:54:41:87:2d:85:99: 93:06:9a:0e:08:71:93:11:5d:48:66:44:24:d5:1c: c8:f2:b5:a9:75:74:3b:54:55:ab:86:d3:ea:59:4e: fa:ce:1b:9f:93:52:53:a3:fe:70:26:91:e8:4a:28: 7d:54:b6:a8:2c:de:a9:e3:c1:e1:73:e8:c3:80:65: 07:6c:e8:6c:88:cf:e6:25:3a:72:30:5f:f0:4f:ac: 54:cf:1e:44:ab:a4:52:99:9a:92:04:be:4a:6b:60: b2:cb:f9:42:2b:20:76:b8:b7:b3:e3:ca:da:3f:32: 3d:a7:0e:d8:88:09:7f:9f:d7:25:1b:e0:e5:61:5a: 68:14:11:e0:d4:8c:df:8b:b9:57:e1:e5:a0:10:c6: b3:73:fe:f2:62:d5:33:5b:e7:72:3e:a1:bd:b2:90: 45:40:30:75:65:7a:36:86:7d:cb:53:44:c0:e4:da: e4:18:9e:ec:52:44:35:ac:3c:d0:29:5b:3f:6c:41: 83:fb:26:a0:7d:5e:0e:1c:22:bb:d4:a2:32:6d:88: 71:54:f4:c2:0f:e0:09:84:17:c7:1f:06:77:b0:21: 67:9c:2d:84:14:51:a0:e2:fd:1f:e0:a2:29:e9:31: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:DB:7B:B4:40:DE:A2:1E:5A:87:7F:4B:39:9E:93:64:59:9D:BC X509v3 Authority Key Identifier: keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c3:cf:f0:f5:0e:cc:f7:c7:da:6d:00:6d:bd:8a:d0:54:a6: 72:01:9a:87:13:a8:0b:ea:84:87:eb:45:e9:b2:7c:23:b2:d3: cf:f6:db:31:e8:7b:1f:21:8e:a2:6e:80:98:36:f8:92:3d:fb: 62:dd:19:83:17:83:d6:e3:c3:41:9b:e0:6e:a4:f2:65:65:9f: 45:23:ac:ea:62:07:fd:e4:61:a5:77:b3:da:66:7a:d5:b7:4e: db:0d:80:63:ee:8a:d6:23:48:cf:19:6a:0c:7c:ac:fd:8a:e2: 16:45:cf:b6:a1:9b:16:7d:e6:eb:6f:6f:07:df:86:04:60:97: e5:11:03:9c:d5:6a:72:1b:90:e0:5f:f4:7c:79:80:df:76:5b: 6a:d8:7a:96:11:f6:94:c4:61:87:91:ab:f0:0a:2c:af:65:ed: 82:06:a2:e6:89:09:ba:0f:2b:8e:92:ff:dd:c9:a9:6f:2c:c2: ed:dc:c7:17:4c:9c:64:e4:ba:bf:e3:21:06:d7:9e:42:c2:a7: ce:49:51:4a:04:06:04:12:9b:ea:3f:2e:3a:a1:8c:06:b6:40: 86:eb:ef:15:00:11:f9:9a:28:33:92:05:7b:3a:5b:74:5f:36: 0c:64:c8:2f:74:e1:d1:d9:9c:55:92:a1:d5:83:ce:9a:81:53: 41:07:10:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv148u38f7+yBYOMJaAuW6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3 YzNmOGEwHhcNMjYwMTI1MTYwMTQ1WhcNMjYwMTI2MTYwMTQ1WjAzMTEwLwYDVQQD Eyg0OTkyZGI3YmI0NDBkZWEyMWU1YTg3N2Y0YjM5OWU5MzY0NTk5ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnCLgPDZMZupfnyR/lmHMjtoHTeE G+NUQYcthZmTBpoOCHGTEV1IZkQk1RzI8rWpdXQ7VFWrhtPqWU76zhufk1JTo/5w JpHoSih9VLaoLN6p48Hhc+jDgGUHbOhsiM/mJTpyMF/wT6xUzx5Eq6RSmZqSBL5K a2Cyy/lCKyB2uLez48raPzI9pw7YiAl/n9clG+DlYVpoFBHg1Izfi7lX4eWgEMaz c/7yYtUzW+dyPqG9spBFQDB1ZXo2hn3LU0TA5NrkGJ7sUkQ1rDzQKVs/bEGD+yag fV4OHCK71KIybYhxVPTCD+AJhBfHHwZ3sCFnnC2EFFGg4v0f4KIp6TGTqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmS23u0QN6iHlqHf0s5npNkWZ28MB8GA1UdIwQY MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMPP8PUO zPfH2m0Abb2K0FSmcgGahxOoC+qEh+tF6bJ8I7LTz/bbMeh7HyGOom6AmDb4kj37 Yt0ZgxeD1uPDQZvgbqTyZWWfRSOs6mIH/eRhpXez2mZ61bdO2w2AY+6K1iNIzxlq DHys/YriFkXPtqGbFn3m629vB9+GBGCX5REDnNVqchuQ4F/0fHmA33Zbath6lhH2 lMRhh5Gr8Aosr2Xtggai5okJug8rjpL/3cmpbyzC7dzHF0ycZOS6v+MhBteeQsKn zklRSgQGBBKb6j8uOqGMBrZAhuvvFQAR+ZooM5IFezpbdF82DGTIL3Th0dmcVZKh 1YPOmoFTQQcQ+w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:00 2026 by rpki-client