This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json) Hash identifier: O/3aVO2i3vDhPmAHyV6Pd8RlIeKErtYafuBJXmlzP/0= Subject key identifier: 12:FF:DC:33:D8:15:2A:4B:33:3D:F3:3B:80:A7:8F:90:37:5F:64:32 Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880 Certificate serial: 019BF72DA3DA14BA9260ACAD3EF55DD1D1C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft Manifest number: 0836 Signing time: Sun 25 Jan 2026 22:02:01 +0000 Manifest this update: Sun 25 Jan 2026 22:02:01 +0000 Manifest next update: Mon 26 Jan 2026 22:02:01 +0000 Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: 8nVW4/fmCf7V3ojkbkhYgW0jyMQls0PIvd0pXred4oc=) 2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a3:da:14:ba:92:60:ac:ad:3e:f5:5d:d1:d1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880 Validity Not Before: Jan 25 22:02:01 2026 GMT Not After : Jan 26 22:02:01 2026 GMT Subject: CN=12ffdc33d8152a4b333df33b80a78f90375f6432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:c7:8f:d0:3f:8b:ce:c5:d6:e4:7f:79:8b: 59:8d:d1:d1:11:41:b5:b9:d3:f2:61:4e:61:af:66: 46:ec:71:3c:32:34:00:9f:7a:ab:07:c7:c5:97:be: f2:72:34:88:c3:b6:fe:3a:a7:4e:4f:5f:52:69:86: b1:d1:54:8f:c8:86:aa:21:51:37:95:b2:0d:85:31: fc:23:70:a9:f1:60:ea:e4:17:6e:3e:cf:3c:48:95: c5:d5:3c:3c:20:82:24:a9:43:f9:4c:0e:4b:82:57: fb:ea:d6:dc:bf:16:3a:54:c6:95:0f:8a:8c:cd:f9: 5f:f5:f6:ce:80:7f:05:eb:04:e0:fc:6c:19:ee:43: a0:f3:b8:a9:de:55:f7:d5:80:04:e1:45:c8:75:31: e1:ba:d8:e4:e7:31:f0:a7:0d:df:e0:e0:2c:8c:8c: 92:b5:d6:ce:10:53:f6:53:1a:67:75:87:9b:88:12: 8f:37:59:62:8e:d4:40:bf:ec:65:90:76:e1:2d:6e: 38:a5:e3:5f:ec:62:bc:e5:e1:71:46:7f:a6:77:be: 9e:9d:dd:a8:27:12:e2:66:1b:e7:28:40:9b:f0:d5: 6f:34:e2:e3:13:be:22:06:31:07:d5:b2:1e:09:99: d8:12:e3:50:cf:8f:cb:60:4f:ea:d6:ec:ec:7d:3f: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:DC:33:D8:15:2A:4B:33:3D:F3:3B:80:A7:8F:90:37:5F:64:32 X509v3 Authority Key Identifier: keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ab:b2:16:fb:40:fc:f0:13:b2:1d:f8:49:d1:a5:b3:e3:24: 8a:2b:ab:0e:04:a6:a0:67:42:48:4a:88:6e:48:15:72:4a:34: c2:1f:a3:9b:d4:5d:4f:8e:0b:50:53:03:15:0c:b1:07:66:81: 5e:c2:79:8e:d4:75:1c:89:28:bb:0d:a7:a3:05:25:bb:66:d6: fe:65:ae:0a:ce:7d:a4:02:2b:a9:87:36:9e:a3:da:e3:82:96: 9a:42:d1:10:ef:17:e0:f3:6c:cf:97:ae:53:0d:d9:9a:9f:97: 3c:37:c4:14:c5:2f:24:5c:d0:58:6d:ab:1c:ff:7e:98:0b:5b: 1c:dc:e9:9c:d4:27:02:b9:dd:26:3f:db:33:de:ca:09:d2:a5: ab:ad:b3:32:72:75:93:ba:34:51:a7:4e:fc:41:aa:ae:1f:97: ee:67:5e:a1:af:8f:d0:b1:ff:83:8a:be:41:c0:f6:02:9c:80: db:80:d9:70:84:6e:b2:a0:09:11:76:ec:9d:41:39:41:94:a0: c2:0c:a0:0c:18:10:68:b0:54:4f:2e:f6:ce:76:12:92:b4:fd: d8:1a:d7:36:c1:88:1a:9d:a6:4a:73:05:88:1f:bb:39:19:ba: c3:e6:3f:2f:8a:2b:16:bd:3e:5f:11:4e:50:b7:da:c0:c9:1a: c9:99:cd:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaPaFLqSYKytPvVd0dHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5 OWY4ODAwHhcNMjYwMTI1MjIwMjAxWhcNMjYwMTI2MjIwMjAxWjAzMTEwLwYDVQQD EygxMmZmZGMzM2Q4MTUyYTRiMzMzZGYzM2I4MGE3OGY5MDM3NWY2NDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC/Hj9A/i87F1uR/eYtZjdHREUG1 udPyYU5hr2ZG7HE8MjQAn3qrB8fFl77ycjSIw7b+OqdOT19SaYax0VSPyIaqIVE3 lbINhTH8I3Cp8WDq5BduPs88SJXF1Tw8IIIkqUP5TA5Lglf76tbcvxY6VMaVD4qM zflf9fbOgH8F6wTg/GwZ7kOg87ip3lX31YAE4UXIdTHhutjk5zHwpw3f4OAsjIyS tdbOEFP2UxpndYebiBKPN1lijtRAv+xlkHbhLW44peNf7GK85eFxRn+md76end2o JxLiZhvnKECb8NVvNOLjE74iBjEH1bIeCZnYEuNQz4/LYE/q1uzsfT/sYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL/3DPYFSpLMz3zO4Cnj5A3X2QyMB8GA1UdIwQY MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4 LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJauyFvtA /PATsh34SdGls+MkiiurDgSmoGdCSEqIbkgVcko0wh+jm9RdT44LUFMDFQyxB2aB XsJ5jtR1HIkouw2nowUlu2bW/mWuCs59pAIrqYc2nqPa44KWmkLREO8X4PNsz5eu Uw3Zmp+XPDfEFMUvJFzQWG2rHP9+mAtbHNzpnNQnArndJj/bM97KCdKlq62zMnJ1 k7o0UadO/EGqrh+X7mdeoa+P0LH/g4q+QcD2ApyA24DZcIRusqAJEXbsnUE5QZSg wgygDBgQaLBUTy72znYSkrT92BrXNsGIGp2mSnMFiB+7ORm6w+Y/L4orFr0+XxFO ULfawMkayZnNlw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:44 2026 by rpki-client