This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json) Hash identifier: Wto5k1FSgi513UsLP2sVvkBYvAxlh5fTlNDeIhziXVs= Subject key identifier: D7:25:3D:4A:A5:F1:58:F5:01:FE:60:82:A5:45:2E:82:AA:23:11:2B Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a Certificate serial: 019BF650EDB0E61145B357D20A517359C9F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft Manifest number: 08F7 Signing time: Sun 25 Jan 2026 18:00:57 +0000 Manifest this update: Sun 25 Jan 2026 18:00:57 +0000 Manifest next update: Mon 26 Jan 2026 18:00:57 +0000 Files and hashes: 1: gH0BmhGdI-4jnerabl4mUmUrBX4.roa (hash: vNs9/H6iuDqV1b/jbRlgh+sdKrOOTZh6C5aRY+PDcq0=) 2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: nPqbihbn1mcG1PCeF+nK+3L/10xN2vu7iqQXYhKgHf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ed:b0:e6:11:45:b3:57:d2:0a:51:73:59:c9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a Validity Not Before: Jan 25 18:00:57 2026 GMT Not After : Jan 26 18:00:57 2026 GMT Subject: CN=d7253d4aa5f158f501fe6082a5452e82aa23112b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:c4:69:45:d3:53:49:d8:06:25:99:ac:2e: 82:a4:20:b2:84:5c:63:cf:70:8c:94:df:1a:b4:5d: 1c:45:33:ea:9b:e8:f5:83:9b:5a:ff:b7:93:a3:06: 36:ca:b9:ea:3c:29:47:48:d8:2c:77:d8:0f:7b:66: c1:d7:ba:ea:8c:ad:a0:38:f8:52:20:27:95:9e:90: 8a:7a:6f:d0:34:cf:b9:01:8b:4e:d5:2d:7c:7f:5b: c4:a3:55:7b:b8:26:32:98:d3:5c:19:f1:8d:e6:12: 15:22:e2:41:7a:ad:11:dc:58:6d:55:86:eb:56:f1: 8b:a0:b3:65:44:b1:fd:b3:3e:f8:7a:df:05:a8:8e: 18:5f:8a:a0:5c:70:1b:df:9c:9c:b7:d7:a2:8c:46: 90:16:56:76:92:27:77:95:bb:21:01:67:0f:81:81: fb:bc:fa:59:e8:05:9a:9b:30:1a:68:3a:bb:8f:1b: d4:4f:d2:65:b8:02:e2:9d:71:be:10:7a:46:0d:3b: dd:42:0a:9f:1c:f7:fc:23:4e:ae:d8:47:82:4d:a7: 49:76:1d:2b:5f:00:97:4c:70:d5:e1:41:b8:f3:5f: f5:a3:e5:32:dc:38:70:33:48:dc:37:79:1c:2c:a4: 78:55:2f:fc:2b:c2:52:ed:63:f8:33:88:d8:c3:a8: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:3D:4A:A5:F1:58:F5:01:FE:60:82:A5:45:2E:82:AA:23:11:2B X509v3 Authority Key Identifier: keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:eb:ca:6f:e8:27:c9:e5:5e:ff:c4:aa:db:ac:79:36:20: ea:48:44:84:20:43:28:39:53:c6:3a:63:7f:dc:52:41:c8:bf: dd:a2:02:ba:e8:e9:80:17:c8:94:43:f5:69:2c:9a:d8:5d:2b: 5a:98:4e:2b:d6:14:13:f0:2e:48:e0:4f:ea:05:90:fc:71:d4: fe:fe:c9:bc:fd:2e:5a:d9:61:31:14:bf:39:65:9d:fa:4b:bd: e3:2b:5c:c0:4a:ff:32:d2:2a:2d:34:4f:c5:89:a7:24:cb:1d: 0c:35:3a:39:7e:8f:5d:95:06:a4:3f:0b:af:f9:1b:c8:b1:fb: 61:e5:4c:3d:06:aa:9f:f9:5e:2f:a2:28:b8:8b:fd:e4:60:73: c2:dc:f1:f0:d1:f7:04:b7:b4:3b:18:38:87:33:e5:57:ec:14: 49:6c:a7:be:aa:ed:73:49:09:fa:1d:88:11:99:ae:b8:3e:ef: 9d:97:92:16:5c:e2:67:2c:8a:9c:1c:5d:16:47:e1:4d:a5:64: 9f:1d:94:e4:0a:38:62:bc:5d:b3:65:91:c7:19:e3:4c:1c:91: ae:d4:57:24:3f:a4:c6:d3:a6:34:7b:5a:0b:ab:70:e7:04:7f: 51:81:60:0a:b1:f7:33:a6:4a:0e:c7:86:d5:39:b1:b7:39:59: 75:05:6a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UO2w5hFFs1fSClFzWcn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzY4Y2RhNjVmNjY5NjJjY2I5NjgzZjE1NTBkMTRlNTYx MDdhMGEwHhcNMjYwMTI1MTgwMDU3WhcNMjYwMTI2MTgwMDU3WjAzMTEwLwYDVQQD EyhkNzI1M2Q0YWE1ZjE1OGY1MDFmZTYwODJhNTQ1MmU4MmFhMjMxMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjDEaUXTU0nYBiWZrC6CpCCyhFxj z3CMlN8atF0cRTPqm+j1g5ta/7eTowY2yrnqPClHSNgsd9gPe2bB17rqjK2gOPhS ICeVnpCKem/QNM+5AYtO1S18f1vEo1V7uCYymNNcGfGN5hIVIuJBeq0R3FhtVYbr VvGLoLNlRLH9sz74et8FqI4YX4qgXHAb35yct9eijEaQFlZ2kid3lbshAWcPgYH7 vPpZ6AWamzAaaDq7jxvUT9JluALinXG+EHpGDTvdQgqfHPf8I06u2EeCTadJdh0r XwCXTHDV4UG481/1o+Uy3DhwM0jcN3kcLKR4VS/8K8JS7WP4M4jYw6gJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNclPUql8Vj1Af5ggqVFLoKqIxErMB8GA1UdIwQY MBaAFLjGjNpl9mlizLloPxVQ0U5WEHoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt OGY0OGEzNzAyZjkwLzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw LzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcG3rym/o J8nlXv/EqtuseTYg6khEhCBDKDlTxjpjf9xSQci/3aICuujpgBfIlEP1aSya2F0r WphOK9YUE/AuSOBP6gWQ/HHU/v7JvP0uWtlhMRS/OWWd+ku94ytcwEr/MtIqLTRP xYmnJMsdDDU6OX6PXZUGpD8Lr/kbyLH7YeVMPQaqn/leL6IouIv95GBzwtzx8NH3 BLe0Oxg4hzPlV+wUSWynvqrtc0kJ+h2IEZmuuD7vnZeSFlziZyyKnBxdFkfhTaVk nx2U5Ao4Yrxds2WRxxnjTByRrtRXJD+kxtOmNHtaC6tw5wR/UYFgCrH3M6ZKDseG 1TmxtzlZdQVqLg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:28:19 2026 by rpki-client