This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json) Hash identifier: 4s5ujnM7IHu54+x2E5obdYg2COA4j4PkBMJQgJtVqNE= Subject key identifier: 4B:D8:96:96:6E:A4:57:71:2C:35:9C:8C:E1:BB:2B:9B:5C:A8:BD:F9 Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a Certificate serial: 019BF4628A0880C9E8F8AF30CE512E358906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft Manifest number: 08F6 Signing time: Sun 25 Jan 2026 09:00:57 +0000 Manifest this update: Sun 25 Jan 2026 09:00:57 +0000 Manifest next update: Mon 26 Jan 2026 09:00:57 +0000 Files and hashes: 1: gH0BmhGdI-4jnerabl4mUmUrBX4.roa (hash: vNs9/H6iuDqV1b/jbRlgh+sdKrOOTZh6C5aRY+PDcq0=) 2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: ibezV0WcUBUU3QZb08uhO0nOrLsqNZlanfTlIh2AIjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:8a:08:80:c9:e8:f8:af:30:ce:51:2e:35:89:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a Validity Not Before: Jan 25 09:00:57 2026 GMT Not After : Jan 26 09:00:57 2026 GMT Subject: CN=4bd896966ea457712c359c8ce1bb2b9b5ca8bdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:a9:09:bb:f2:4a:7d:f1:d4:e3:9f:bc:e1: 94:43:03:5a:29:d3:e7:8c:05:0d:ee:1a:a8:55:7a: 04:dc:b5:45:ec:65:86:33:28:5e:69:60:b6:f4:28: 24:ed:a8:f8:53:8a:12:90:8f:ca:35:8a:fd:2c:90: bb:f4:a1:cb:89:17:e8:c1:77:2a:74:a3:5b:6c:b7: 77:30:ef:29:c6:60:39:6f:7f:d6:9a:b3:62:29:28: e5:9b:92:69:9d:3f:32:e3:3a:cf:46:c8:df:a4:1c: 5a:b6:e1:da:1e:0a:98:57:72:f6:66:81:dd:44:f0: 5b:1a:68:1b:39:06:a2:c3:3f:b1:22:ef:29:9e:ea: 08:db:61:02:33:c8:9b:cc:d9:ab:7d:67:0a:d5:88: fe:dd:bd:c6:b5:82:f1:21:ae:6f:02:41:36:a4:61: 6d:db:23:0a:ca:88:c9:6c:90:f6:66:a8:3f:90:2b: 8a:18:af:b8:71:a0:9b:e5:1c:e3:35:e2:5e:2b:e2: f4:19:46:77:17:90:55:3c:5b:9b:bb:25:bb:5e:80: ef:6d:b0:46:5a:c4:db:e0:e4:e0:c9:17:75:89:91: 0f:6e:ce:b0:af:fa:e3:3b:3e:69:12:27:a3:40:d6: 44:86:74:36:eb:16:94:06:5a:2f:c7:64:d2:a9:5f: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D8:96:96:6E:A4:57:71:2C:35:9C:8C:E1:BB:2B:9B:5C:A8:BD:F9 X509v3 Authority Key Identifier: keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:82:86:87:af:ce:63:75:d3:c4:6b:7c:77:9f:09:cf:82:73: 4a:71:5f:b6:be:35:82:d5:78:c7:f3:23:da:fd:01:ce:49:cb: 0b:8e:46:c7:d3:11:0a:00:d6:a8:59:29:32:80:79:a3:80:bc: 05:be:45:0e:7d:f5:ff:77:53:0e:cb:55:a6:c2:86:b0:04:9e: d3:35:e1:b2:e9:de:ac:e2:7f:8e:44:7d:36:09:16:f8:84:7b: 7b:f9:9c:18:0e:9d:e1:b6:97:e8:b0:6a:d9:6f:7d:c8:28:03: 76:ec:ce:4f:af:1c:45:93:57:60:3a:8b:4a:4d:28:90:06:5c: 02:da:69:af:bb:24:da:34:b6:18:7d:79:c8:2f:3a:2f:35:43: 19:03:2d:bf:a5:00:57:52:0f:8f:98:41:c6:86:e2:ce:1f:44: 4f:80:f3:ab:0b:15:26:47:37:8e:70:06:85:32:8d:bf:46:1a: e1:9f:1d:01:7f:99:f3:91:ba:00:15:8e:30:84:47:4f:00:69: e2:0d:a2:8a:3c:a0:fb:96:79:2c:65:8b:24:3a:64:06:42:0e: ae:61:75:68:90:99:49:8e:b6:92:e2:fb:ed:5a:9b:4d:f3:a7: 6d:14:49:7b:83:2c:ef:69:27:97:8b:fa:a7:fb:2d:f0:26:3b: 99:14:4d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YooIgMno+K8wzlEuNYkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzY4Y2RhNjVmNjY5NjJjY2I5NjgzZjE1NTBkMTRlNTYx MDdhMGEwHhcNMjYwMTI1MDkwMDU3WhcNMjYwMTI2MDkwMDU3WjAzMTEwLwYDVQQD Eyg0YmQ4OTY5NjZlYTQ1NzcxMmMzNTljOGNlMWJiMmI5YjVjYThiZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4KpCbvySn3x1OOfvOGUQwNaKdPn jAUN7hqoVXoE3LVF7GWGMyheaWC29Cgk7aj4U4oSkI/KNYr9LJC79KHLiRfowXcq dKNbbLd3MO8pxmA5b3/WmrNiKSjlm5JpnT8y4zrPRsjfpBxatuHaHgqYV3L2ZoHd RPBbGmgbOQaiwz+xIu8pnuoI22ECM8ibzNmrfWcK1Yj+3b3GtYLxIa5vAkE2pGFt 2yMKyojJbJD2Zqg/kCuKGK+4caCb5RzjNeJeK+L0GUZ3F5BVPFubuyW7XoDvbbBG WsTb4OTgyRd1iZEPbs6wr/rjOz5pEiejQNZEhnQ26xaUBlovx2TSqV871wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvYlpZupFdxLDWcjOG7K5tcqL35MB8GA1UdIwQY MBaAFLjGjNpl9mlizLloPxVQ0U5WEHoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt OGY0OGEzNzAyZjkwLzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw LzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIKGh6/O Y3XTxGt8d58Jz4JzSnFftr41gtV4x/Mj2v0BzknLC45Gx9MRCgDWqFkpMoB5o4C8 Bb5FDn31/3dTDstVpsKGsASe0zXhsunerOJ/jkR9NgkW+IR7e/mcGA6d4baX6LBq 2W99yCgDduzOT68cRZNXYDqLSk0okAZcAtppr7sk2jS2GH15yC86LzVDGQMtv6UA V1IPj5hBxobizh9ET4DzqwsVJkc3jnAGhTKNv0Ya4Z8dAX+Z85G6ABWOMIRHTwBp 4g2iijyg+5Z5LGWLJDpkBkIOrmF1aJCZSY62kuL77VqbTfOnbRRJe4Ms72knl4v6 p/st8CY7mRRNwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:13 2026 by rpki-client