This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json) Hash identifier: X6hpWIuOzfaKHsd2cvkczmJkdhX/vQ+TAXkSCdHnJC0= Subject key identifier: A0:08:2D:44:08:5A:D0:BC:19:DC:50:84:E6:FB:AF:9A:8B:4D:AE:D7 Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Certificate serial: 019BF274428C436FA0E0076BF2B28CC3207B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft Manifest number: 03F6 Signing time: Sun 25 Jan 2026 00:01:03 +0000 Manifest this update: Sun 25 Jan 2026 00:01:03 +0000 Manifest next update: Mon 26 Jan 2026 00:01:03 +0000 Files and hashes: 1: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (hash: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o=) 2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: 6wXJ9VSY8GBVRg7V/wNXvr1zB2Yssc8UvsVPRSNVr9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:42:8c:43:6f:a0:e0:07:6b:f2:b2:8c:c3:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Validity Not Before: Jan 25 00:01:03 2026 GMT Not After : Jan 26 00:01:03 2026 GMT Subject: CN=a0082d44085ad0bc19dc5084e6fbaf9a8b4daed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:31:28:3e:cf:31:71:31:c4:21:bb:fd:34: 6a:be:73:71:51:05:31:f7:93:ba:1c:bc:0c:4d:0b: 3d:aa:9b:fa:da:f3:d2:e8:73:a7:5f:73:3e:b8:fc: 94:3b:5c:67:20:fa:27:24:7e:ca:3e:80:f2:40:b5: 6c:87:eb:a1:53:05:cd:40:4a:98:57:47:71:d4:ef: 5e:04:cd:2a:e3:34:5a:03:35:2e:7f:54:28:be:d9: 64:6a:b1:6d:a9:93:ab:2f:97:fa:3e:83:d9:e1:a7: 0a:34:8a:32:8f:58:02:d1:10:99:7a:dc:07:c3:ee: 54:4e:f3:ac:00:9d:20:bc:b5:1c:4d:1b:94:77:76: 87:12:8b:3c:e1:4a:36:a9:4c:54:1c:35:b4:be:c8: 78:82:07:3a:12:53:35:c4:fb:74:ac:67:76:23:dd: cd:b6:8e:e2:cd:11:5f:3c:83:29:5e:02:bf:fe:e7: 22:63:39:4d:87:d4:13:44:b2:91:aa:a0:5a:d2:f9: 77:5e:71:04:39:bd:cc:19:de:66:da:a4:73:5c:1c: d9:d3:2d:e0:75:8e:30:2a:da:e1:7f:91:60:a2:d8: b1:15:65:c4:bd:ac:a8:b8:f9:ce:37:4f:36:ec:c8: 30:9b:ba:51:b2:45:4a:5b:65:f8:5e:ef:cc:b2:ff: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:08:2D:44:08:5A:D0:BC:19:DC:50:84:E6:FB:AF:9A:8B:4D:AE:D7 X509v3 Authority Key Identifier: keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:fd:b8:6d:ef:3d:fa:56:5e:e8:27:c3:57:11:52:1c:7e: 55:44:a2:3d:8c:1d:a2:20:85:94:db:bd:dc:01:20:c7:27:f0: b0:e3:2e:6d:b9:7a:1a:94:5d:b2:5a:9f:6f:0d:6b:eb:7d:6f: 7a:f4:97:59:f6:b0:a3:a9:6d:3d:25:7a:f4:2e:a3:fa:13:19: ba:56:45:c3:a4:55:44:b3:7e:56:eb:a3:e3:52:ac:68:a2:23: 78:91:91:78:62:29:e7:03:5e:d3:18:a4:ad:14:0a:a6:56:b9: 98:57:a2:dd:f3:f5:4c:37:7b:f8:aa:50:44:07:47:e5:fb:9b: 2e:1e:3a:cf:71:5f:b1:48:92:eb:e5:f3:f6:cb:22:cd:31:92: 4d:93:47:0b:22:60:62:b9:26:48:19:b4:1f:5c:bd:39:37:ff: 81:72:fd:03:a5:f5:45:1a:ca:61:ac:59:cc:a3:45:f9:0d:58: 87:19:1d:1e:a5:4f:35:39:40:6d:b1:8f:56:ec:07:d9:4c:3b: 8c:40:d3:55:15:6d:01:aa:72:b8:dd:e8:fc:b8:37:54:21:b9: 5f:3d:37:3b:4a:34:bb:e8:c7:c8:e2:e6:73:de:af:18:c1:d1: c8:b4:54:4a:3d:ee:c9:49:f6:81:5f:5f:b6:df:95:2e:5d:74: b4:32:28:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydEKMQ2+g4Adr8rKMwyB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj ZDFmOGYwHhcNMjYwMTI1MDAwMTAzWhcNMjYwMTI2MDAwMTAzWjAzMTEwLwYDVQQD EyhhMDA4MmQ0NDA4NWFkMGJjMTlkYzUwODRlNmZiYWY5YThiNGRhZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ExKD7PMXExxCG7/TRqvnNxUQUx 95O6HLwMTQs9qpv62vPS6HOnX3M+uPyUO1xnIPonJH7KPoDyQLVsh+uhUwXNQEqY V0dx1O9eBM0q4zRaAzUuf1QovtlkarFtqZOrL5f6PoPZ4acKNIoyj1gC0RCZetwH w+5UTvOsAJ0gvLUcTRuUd3aHEos84Uo2qUxUHDW0vsh4ggc6ElM1xPt0rGd2I93N to7izRFfPIMpXgK//uciYzlNh9QTRLKRqqBa0vl3XnEEOb3MGd5m2qRzXBzZ0y3g dY4wKtrhf5FgotixFWXEvayouPnON0827Mgwm7pRskVKW2X4Xu/Msv9meQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAILUQIWtC8GdxQhOb7r5qLTa7XMB8GA1UdIwQY MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3L9uG3v PfpWXugnw1cRUhx+VUSiPYwdoiCFlNu93AEgxyfwsOMubbl6GpRdslqfbw1r631v evSXWfawo6ltPSV69C6j+hMZulZFw6RVRLN+Vuuj41KsaKIjeJGReGIp5wNe0xik rRQKpla5mFei3fP1TDd7+KpQRAdH5fubLh46z3FfsUiS6+Xz9ssizTGSTZNHCyJg YrkmSBm0H1y9OTf/gXL9A6X1RRrKYaxZzKNF+Q1YhxkdHqVPNTlAbbGPVuwH2Uw7 jEDTVRVtAapyuN3o/Lg3VCG5Xz03O0o0u+jHyOLmc96vGMHRyLRUSj3uyUn2gV9f tt+VLl10tDIoqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:55 2026 by rpki-client