This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json) Hash identifier: i0SRKu00wtM3JYY0b+489dY0EjFwz/mxTdU1ZEbpW1w= Subject key identifier: 67:2C:67:DC:BB:2C:11:C8:91:3A:D0:53:78:B7:34:A8:BC:1C:3D:E5 Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414 Certificate serial: 019BF6883639FD8D1625B1E20C708BE8D9BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft Manifest number: F0 Signing time: Sun 25 Jan 2026 19:01:20 +0000 Manifest this update: Sun 25 Jan 2026 19:01:20 +0000 Manifest next update: Mon 26 Jan 2026 19:01:20 +0000 Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: LVRcM/YXxOhRymSFlgknWvphtuKvm6s5SZ+lxHrX4EU=) 2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:36:39:fd:8d:16:25:b1:e2:0c:70:8b:e8:d9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414 Validity Not Before: Jan 25 19:01:20 2026 GMT Not After : Jan 26 19:01:20 2026 GMT Subject: CN=672c67dcbb2c11c8913ad05378b734a8bc1c3de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:36:43:2a:28:cc:31:db:6d:f7:69:d4:8f: 91:33:79:de:36:0d:ce:f0:c2:39:b7:88:e3:f5:cb: d7:50:66:7b:0d:3a:3b:6d:c9:a2:44:c4:29:5d:bf: b2:b9:c6:b8:81:a2:53:25:3e:05:03:80:45:a2:b0: 81:a4:70:ea:13:7f:6c:ed:0e:b6:e4:db:d3:53:02: da:a5:fa:02:ce:a3:5f:58:a5:98:15:17:08:69:36: af:4a:ea:c7:62:8e:de:7f:ba:74:c9:2e:f3:6e:9a: b9:39:ab:4f:61:2b:91:85:c7:14:d7:55:24:f5:04: 84:30:19:2b:4d:9b:84:57:90:c3:61:c6:c4:42:67: e6:5a:b7:9e:86:02:72:eb:39:50:20:9e:03:8c:5e: 78:c8:40:75:a7:b1:2a:a8:14:a5:14:37:12:e9:62: c3:15:5b:41:8b:ab:2d:bd:d5:51:11:20:9b:fb:29: c3:1f:9b:35:97:e3:a8:f1:06:1d:60:14:31:58:9c: 75:0d:50:c4:a1:38:28:53:86:ac:3f:10:17:63:78: a3:18:89:55:26:4b:25:6c:c6:11:83:a2:07:c4:6f: 8d:ad:9f:c7:ab:ae:79:74:fc:37:b5:1d:7c:f9:64: d8:42:41:da:74:08:de:bc:2b:e0:e4:28:fd:ae:55: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2C:67:DC:BB:2C:11:C8:91:3A:D0:53:78:B7:34:A8:BC:1C:3D:E5 X509v3 Authority Key Identifier: keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:15:16:4a:07:d3:1c:26:b4:59:bf:33:c4:a1:58:8d:f6: 46:76:a8:6c:2f:b7:fe:1d:27:8e:4a:cf:85:8a:9e:b6:bb:82: 2c:71:e5:6e:a7:a9:65:aa:35:3f:ff:a2:cb:aa:7e:ae:4d:35: 97:e1:ed:5f:e4:3f:7a:0d:7a:b4:06:cb:c1:ec:aa:91:af:38: 82:f1:d6:0d:af:fe:44:b1:ab:f2:bc:15:a3:db:f0:80:46:00: 86:23:66:2b:f9:47:de:b3:9e:be:b5:7a:9a:ce:ab:85:fc:ab: 10:24:d6:ff:df:df:02:f1:1e:bd:53:92:99:df:28:03:c5:5f: 71:a1:9e:50:f6:ee:27:9b:b7:e2:86:41:10:2a:a2:d0:f3:7a: 7d:03:d4:d5:5f:71:4b:e5:67:27:b7:c6:00:90:44:d1:d2:03: 17:61:45:3e:f4:2b:4e:1a:05:6f:f5:c1:be:83:86:d6:58:5d: 22:3b:17:ea:d9:fd:55:f3:31:14:06:27:43:fd:83:59:d8:f2: 29:8e:9c:1d:31:3e:82:1a:d0:f4:ce:dd:46:06:bc:8c:55:27: 98:49:18:30:66:28:60:3f:ff:13:fa:91:89:b2:2e:96:f8:e4: e9:63:c2:cf:f5:6a:ee:b2:80:4f:fe:a8:8d:4b:05:82:43:be: a4:bd:2b:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iDY5/Y0WJbHiDHCL6Nm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjBlNzE1NzE0N2E5MGNlMzc0NjBiNzE5Y2I3NjA2OTRh YjU0MTQwHhcNMjYwMTI1MTkwMTIwWhcNMjYwMTI2MTkwMTIwWjAzMTEwLwYDVQQD Eyg2NzJjNjdkY2JiMmMxMWM4OTEzYWQwNTM3OGI3MzRhOGJjMWMzZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX02QyoozDHbbfdp1I+RM3neNg3O 8MI5t4jj9cvXUGZ7DTo7bcmiRMQpXb+yuca4gaJTJT4FA4BForCBpHDqE39s7Q62 5NvTUwLapfoCzqNfWKWYFRcIaTavSurHYo7ef7p0yS7zbpq5OatPYSuRhccU11Uk 9QSEMBkrTZuEV5DDYcbEQmfmWreehgJy6zlQIJ4DjF54yEB1p7EqqBSlFDcS6WLD FVtBi6stvdVRESCb+ynDH5s1l+Oo8QYdYBQxWJx1DVDEoTgoU4asPxAXY3ijGIlV JkslbMYRg6IHxG+NrZ/Hq655dPw3tR18+WTYQkHadAjevCvg5Cj9rlVZQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcsZ9y7LBHIkTrQU3i3NKi8HD3lMB8GA1UdIwQY MBaAFFCw5xVxR6kM43RgtxnLdgaUq1QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYt MTRjOTE5YWQ4NzY4LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYtMTRjOTE5YWQ4NzY4 LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFkVFkoH 0xwmtFm/M8ShWI32RnaobC+3/h0njkrPhYqetruCLHHlbqepZao1P/+iy6p+rk01 l+HtX+Q/eg16tAbLweyqka84gvHWDa/+RLGr8rwVo9vwgEYAhiNmK/lH3rOevrV6 ms6rhfyrECTW/9/fAvEevVOSmd8oA8VfcaGeUPbuJ5u34oZBECqi0PN6fQPU1V9x S+VnJ7fGAJBE0dIDF2FFPvQrThoFb/XBvoOG1lhdIjsX6tn9VfMxFAYnQ/2DWdjy KY6cHTE+ghrQ9M7dRga8jFUnmEkYMGYoYD//E/qRibIulvjk6WPCz/Vq7rKAT/6o jUsFgkO+pL0riQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:43 2026 by rpki-client