This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json) Hash identifier: /ebRarPyWWzLqX0/cxtJBcsBxDO2fOETJSwpsG1qgK8= Subject key identifier: AE:82:20:F9:0C:E8:32:FC:2D:EC:0C:C7:94:58:C3:A7:33:33:BC:B9 Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b Certificate serial: 019BF80848F302CA31A9AAB59BFDDA9BB041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 02:00:51 +0000 Manifest this update: Mon 26 Jan 2026 02:00:51 +0000 Manifest next update: Tue 27 Jan 2026 02:00:51 +0000 Files and hashes: 1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=) 2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: 6kzY9sDSQsJiEFKhk1ZmnqFvkZVmwA1NcZu200TCtaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:48:f3:02:ca:31:a9:aa:b5:9b:fd:da:9b:b0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b Validity Not Before: Jan 26 02:00:51 2026 GMT Not After : Jan 27 02:00:51 2026 GMT Subject: CN=ae8220f90ce832fc2dec0cc79458c3a73333bcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:c1:e9:7c:79:12:0c:0c:f3:b2:51:fb:a9: 65:0e:6b:91:e2:31:3c:73:f0:3e:b0:e5:fa:cb:6f: 46:64:60:07:85:1c:05:e7:e5:df:f8:7f:53:0c:14: 1b:ba:52:fb:3c:4b:a2:ef:22:b8:4b:26:51:1c:de: 8b:48:3f:76:88:83:37:1e:82:a8:ca:38:e9:ff:45: 93:6b:36:a6:14:65:a4:5f:6e:aa:68:4f:20:37:1d: 02:c8:b7:32:71:4b:ef:d6:e2:61:c9:ed:41:ff:a9: 52:ec:55:fc:ad:6c:33:2c:77:76:08:d3:5d:aa:48: 46:b6:c0:32:0a:3f:69:76:7a:6e:be:c6:b2:85:9a: 3a:46:8b:65:f7:53:66:f5:d3:b9:91:f5:6f:57:1b: 86:af:8d:91:f5:5a:7d:16:2c:19:5b:16:3b:9f:f4: 85:89:00:f8:89:01:21:7a:92:2f:9a:a9:af:ab:b7: 2e:4a:97:f8:31:8e:00:d8:c0:87:dd:46:c0:50:7c: a6:0b:9d:ce:5b:15:e2:04:c5:19:d6:0c:09:f0:77: 9e:c3:2c:9b:f5:65:a7:4f:bf:59:f8:22:ef:0b:d0: 5a:8f:7b:ab:cb:8b:0f:b8:3a:1e:1f:7b:1b:9e:d1: 0f:7c:32:ba:ba:9a:15:d7:fd:41:49:a7:0f:05:a0: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:82:20:F9:0C:E8:32:FC:2D:EC:0C:C7:94:58:C3:A7:33:33:BC:B9 X509v3 Authority Key Identifier: keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c6:eb:ff:89:d2:d7:c6:f9:c0:23:05:8a:a3:e2:b7:79:dd: 34:39:c6:5a:a8:25:26:dd:eb:25:f8:56:62:05:d6:2f:c1:78: 97:4b:51:b8:89:b1:9c:88:a7:10:73:9f:ca:c7:91:2d:81:47: 7a:d1:4b:6f:8e:04:30:9d:f2:b9:e7:50:4f:9a:d0:2f:b1:99: fd:8c:14:66:02:2a:71:5a:af:06:84:c5:fb:3d:6b:c8:67:48: 68:8c:19:60:31:9e:89:61:3f:c5:3c:01:25:4c:56:b6:12:fd: 81:9c:43:78:ba:9d:9c:de:a1:f7:de:58:e3:41:4d:87:49:00: 8d:c6:d7:f9:71:6c:dd:a4:91:d5:1c:84:dd:75:b0:57:ae:e8: 86:c9:36:88:29:21:3b:a4:df:40:23:09:2e:9d:a2:34:e4:c6: 91:29:b3:b4:3c:8a:ed:12:db:7b:66:3c:b5:1a:90:5c:3a:88: 2f:0a:71:f9:1e:98:78:37:e0:5b:b2:56:9b:a5:58:c9:fc:eb: ec:09:d9:8a:b6:a8:17:05:95:fc:c1:e4:2d:ff:34:04:34:76: 5d:fa:3a:57:8e:4b:a6:0a:fb:93:68:c8:cf:03:2a:b5:47:26: 52:03:0c:6f:17:97:1e:17:3a:f2:af:c4:d9:e7:ad:df:57:70: 42:6c:bf:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CEjzAsoxqaq1m/3am7BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNDA0YzA0YzZjMjdkMzI5ZjljODdhMDJhZjA2ZGQ5ODZl ZTc2N2IwHhcNMjYwMTI2MDIwMDUxWhcNMjYwMTI3MDIwMDUxWjAzMTEwLwYDVQQD EyhhZTgyMjBmOTBjZTgzMmZjMmRlYzBjYzc5NDU4YzNhNzMzMzNiY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKbB6Xx5EgwM87JR+6llDmuR4jE8 c/A+sOX6y29GZGAHhRwF5+Xf+H9TDBQbulL7PEui7yK4SyZRHN6LSD92iIM3HoKo yjjp/0WTazamFGWkX26qaE8gNx0CyLcycUvv1uJhye1B/6lS7FX8rWwzLHd2CNNd qkhGtsAyCj9pdnpuvsayhZo6Rotl91Nm9dO5kfVvVxuGr42R9Vp9FiwZWxY7n/SF iQD4iQEhepIvmqmvq7cuSpf4MY4A2MCH3UbAUHymC53OWxXiBMUZ1gwJ8Heewyyb 9WWnT79Z+CLvC9Baj3ury4sPuDoeH3sbntEPfDK6upoV1/1BSacPBaB65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6CIPkM6DL8LewMx5RYw6czM7y5MB8GA1UdIwQY MBaAFIFATATGwn0yn5yHoCrwbdmG7nZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2Yjct ZjQ2OGVlMzMxNDc0LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yYmVhNDUtODNlYy00YmJiLTk2YjctZjQ2OGVlMzMxNDc0 LzEvZ1VCTUJNYkNmVEtmbkllZ0t2QnQyWWJ1ZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsbr/4nS 18b5wCMFiqPit3ndNDnGWqglJt3rJfhWYgXWL8F4l0tRuImxnIinEHOfyseRLYFH etFLb44EMJ3yuedQT5rQL7GZ/YwUZgIqcVqvBoTF+z1ryGdIaIwZYDGeiWE/xTwB JUxWthL9gZxDeLqdnN6h995Y40FNh0kAjcbX+XFs3aSR1RyE3XWwV67ohsk2iCkh O6TfQCMJLp2iNOTGkSmztDyK7RLbe2Y8tRqQXDqILwpx+R6YeDfgW7JWm6VYyfzr 7AnZiraoFwWV/MHkLf80BDR2Xfo6V45Lpgr7k2jIzwMqtUcmUgMMbxeXHhc68q/E 2eet31dwQmy/dA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:55 2026 by rpki-client