This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json) Hash identifier: 6RrYxX2SsZXIAZe8VoAPJHEkhUAmjWgL02B24R22ccs= Subject key identifier: 67:9B:F9:18:E6:D8:D7:27:10:D3:0A:FD:5F:28:C6:EB:01:A0:4A:8A Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019BF53E997697A039328081260D1220A800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft Manifest number: 0BAF Signing time: Sun 25 Jan 2026 13:01:18 +0000 Manifest this update: Sun 25 Jan 2026 13:01:18 +0000 Manifest next update: Mon 26 Jan 2026 13:01:18 +0000 Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=) 2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=) 3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: 13Y67ZoFnkuYOB3s+N8DV7rcdnivNkkNYnXcW8wYDvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:99:76:97:a0:39:32:80:81:26:0d:12:20:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Jan 25 13:01:18 2026 GMT Not After : Jan 26 13:01:18 2026 GMT Subject: CN=679bf918e6d8d72710d30afd5f28c6eb01a04a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:98:e7:42:61:16:d3:47:ab:21:15:57:16: e2:a1:6b:68:0d:31:96:29:60:b7:2d:c8:48:69:4a: 99:03:84:36:52:36:8a:2c:74:8c:fb:92:c1:1a:96: 76:0c:98:45:53:6d:7e:3f:d5:01:e3:80:b7:ad:d3: d4:7f:0f:2a:8f:9d:73:14:f0:c5:23:7c:d1:37:aa: 7b:cb:50:31:00:7d:64:ca:35:d7:94:19:bd:66:2a: 51:2c:09:04:d9:3c:0c:d5:c9:64:e3:c0:a8:ae:dd: e4:0a:a4:61:72:7f:81:96:16:f6:99:58:a5:48:3e: 5e:19:0b:f6:04:66:dc:69:af:6d:20:c0:6d:f6:88: 70:42:82:f2:d1:40:c6:ca:4a:33:70:e1:e0:39:cb: 6d:a4:0e:34:ac:b2:ef:7a:18:69:fc:61:27:60:76: 0d:4d:95:12:88:2a:44:eb:de:26:8a:e9:e6:e4:69: a1:3a:70:b2:b4:2e:82:c1:48:c1:8e:4c:81:4a:a4: f5:00:e4:13:1d:3e:f1:b3:91:74:b7:e7:33:1e:22: e0:5e:c1:4d:0a:90:80:2a:3f:75:00:0f:da:3e:2b: 77:cf:05:3f:70:a9:34:1e:dd:5b:e5:8f:3a:0e:49: 2b:1b:6f:eb:6a:97:fd:c7:4a:ec:1a:c2:65:af:47: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9B:F9:18:E6:D8:D7:27:10:D3:0A:FD:5F:28:C6:EB:01:A0:4A:8A X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7b:d3:2e:d0:b8:9b:42:d0:f5:42:7d:29:e9:c2:00:8b:3d: 26:0d:46:2a:e7:59:72:3a:92:44:f3:ad:ed:7b:6c:88:c9:99: e4:f9:d3:a7:f1:1b:b6:f9:dd:81:0b:27:7a:1c:34:03:33:55: b7:1b:e4:51:44:8c:2d:cc:3d:8b:3d:2b:db:0b:85:4a:6b:ae: 86:88:68:54:13:a4:73:e4:42:64:67:c8:7c:d8:8c:b4:a8:e3: e7:9c:28:b0:51:08:d1:11:04:ae:3f:da:e7:98:ae:ef:61:b8: e7:e9:b0:47:28:e2:3e:33:34:9d:0b:5b:2a:0c:47:49:f0:95: 49:ee:8a:69:4d:99:c4:90:ca:2a:50:16:0a:ab:ec:c1:31:a2: e1:ad:c6:2a:e7:b0:f9:9b:5f:03:c9:8d:c7:3f:37:bc:58:e1: b4:4c:59:a5:6c:da:27:2e:ba:0e:87:d1:4b:db:13:12:32:f1: 68:0a:cb:7f:86:ab:69:56:5c:43:81:b3:21:78:f1:62:26:74: 6c:46:3c:74:d6:9c:1f:a8:97:fd:a3:7d:18:19:ec:81:f1:f3: 24:51:c9:28:b0:63:70:a5:8a:4c:37:ac:85:08:8c:84:a5:2e: 80:50:e3:46:b4:8b:9a:88:e7:c4:9b:0e:4f:04:37:4a:f6:65: f2:13:66:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Ppl2l6A5MoCBJg0SIKgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjYwMTI1MTMwMTE4WhcNMjYwMTI2MTMwMTE4WjAzMTEwLwYDVQQD Eyg2NzliZjkxOGU2ZDhkNzI3MTBkMzBhZmQ1ZjI4YzZlYjAxYTA0YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuomY50JhFtNHqyEVVxbioWtoDTGW KWC3LchIaUqZA4Q2UjaKLHSM+5LBGpZ2DJhFU21+P9UB44C3rdPUfw8qj51zFPDF I3zRN6p7y1AxAH1kyjXXlBm9ZipRLAkE2TwM1clk48Cort3kCqRhcn+Blhb2mVil SD5eGQv2BGbcaa9tIMBt9ohwQoLy0UDGykozcOHgOcttpA40rLLvehhp/GEnYHYN TZUSiCpE694miunm5GmhOnCytC6CwUjBjkyBSqT1AOQTHT7xs5F0t+czHiLgXsFN CpCAKj91AA/aPit3zwU/cKk0Ht1b5Y86DkkrG2/rapf9x0rsGsJlr0dyAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeb+Rjm2NcnENMK/V8oxusBoEqKMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3vTLtC4 m0LQ9UJ9KenCAIs9Jg1GKudZcjqSRPOt7XtsiMmZ5PnTp/EbtvndgQsnehw0AzNV txvkUUSMLcw9iz0r2wuFSmuuhohoVBOkc+RCZGfIfNiMtKjj55wosFEI0REErj/a 55iu72G45+mwRyjiPjM0nQtbKgxHSfCVSe6KaU2ZxJDKKlAWCqvswTGi4a3GKuew +ZtfA8mNxz83vFjhtExZpWzaJy66DofRS9sTEjLxaArLf4araVZcQ4GzIXjxYiZ0 bEY8dNacH6iX/aN9GBnsgfHzJFHJKLBjcKWKTDeshQiMhKUugFDjRrSLmojnxJsO TwQ3SvZl8hNmkA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:51 2026 by rpki-client