This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json) Hash identifier: xoDq1uBXb9ms42qtLqszz+YmB/Hx6aPvDWj+xAkKiXU= Subject key identifier: 49:AE:CF:AB:F6:82:F0:1D:4E:11:49:E8:FD:7E:54:AC:61:7F:79:B7 Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Certificate serial: 019BF7632D0F81D43D98782A6815DBEABF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft Manifest number: 11E6 Signing time: Sun 25 Jan 2026 23:00:30 +0000 Manifest this update: Sun 25 Jan 2026 23:00:30 +0000 Manifest next update: Mon 26 Jan 2026 23:00:30 +0000 Files and hashes: 1: 1-GMVzwMDxSiYZaD7figfVQ0BMo8.roa (hash: 6cucZyQkv8Clqp8Dmj2mB2zHAVxhCmtUwPlqKFCqEpw=) 2: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: /+J0hTcrGOGhV+9S4qhBt+13iJNx3kkYfv5dWtP/w5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:2d:0f:81:d4:3d:98:78:2a:68:15:db:ea:bf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628 Validity Not Before: Jan 25 23:00:30 2026 GMT Not After : Jan 26 23:00:30 2026 GMT Subject: CN=49aecfabf682f01d4e1149e8fd7e54ac617f79b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:cd:97:f7:bc:54:a9:b7:51:76:cd:2f:13: 2d:9e:ab:41:6b:0f:10:26:b8:f0:d7:0d:15:5e:1d: 32:d8:c0:97:9b:86:45:ce:97:fe:20:d7:eb:b4:2f: af:f5:7e:d7:d7:7f:9c:b7:44:eb:eb:50:94:78:1c: de:94:a7:b9:2d:c1:c8:88:00:95:28:f5:27:40:b5: c9:a5:44:83:57:61:11:af:f2:e1:37:7f:bc:af:36: d5:5d:0d:ee:3e:4c:9a:f2:d7:85:27:33:b0:06:96: 95:41:2a:41:88:e9:02:72:d5:ef:4f:20:20:77:b1: ae:ab:73:30:8c:58:fd:ef:8b:78:a1:0a:8f:ac:48: ac:68:48:88:b1:a2:d0:5e:ee:d1:72:0c:29:e4:33: 17:43:56:43:65:04:c1:79:70:ba:e4:cd:97:4e:f0: 51:29:89:b8:64:72:6b:28:fe:37:4a:05:9b:d7:0f: b0:43:87:26:fc:72:96:90:f2:ef:90:57:49:c9:b6: 00:5d:2f:49:ff:02:29:5c:08:fa:92:23:1c:ba:07: 51:66:04:af:3e:96:e1:c0:59:34:d4:d5:e8:36:dc: 09:17:99:44:6d:9a:29:60:87:de:aa:29:e0:25:0a: 88:a2:cc:62:0c:30:8d:f0:01:b8:b4:eb:b9:60:28: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AE:CF:AB:F6:82:F0:1D:4E:11:49:E8:FD:7E:54:AC:61:7F:79:B7 X509v3 Authority Key Identifier: keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e8:52:7d:6d:5f:50:a2:b4:01:0c:a1:0c:8e:ab:3b:8e:d8: 18:58:c1:6b:cf:7e:27:37:07:23:29:19:56:d5:23:c4:3d:7a: bd:2c:41:88:0f:a9:7d:c6:0a:ba:db:a6:a2:69:e5:5d:37:78: c9:42:02:ee:0b:ff:34:6d:f9:52:60:60:50:25:d1:c4:0f:85: 61:d0:12:be:88:e6:aa:fb:cd:22:65:9f:17:a7:dc:28:ae:2e: af:50:6b:fe:bc:b4:28:7d:0f:bc:bd:75:59:08:b9:91:5a:a1: bf:20:e6:63:29:56:b3:42:e9:f3:58:b5:10:43:d3:2f:aa:61: 6c:6f:11:d3:3c:0b:c5:3a:62:01:81:ec:de:cd:3f:34:aa:e8: 23:1d:7f:c6:88:e1:19:1b:37:0e:ec:c2:ad:d3:c9:28:3d:c8: eb:ce:51:aa:28:71:57:83:10:27:57:8f:23:08:b9:36:bd:2e: 82:2a:0a:83:cc:63:19:eb:dc:b9:2f:a3:50:08:1e:7b:12:dd: cb:45:83:25:3d:7c:84:21:ad:42:5c:a6:b7:78:2a:5e:fb:5f: 41:b1:4a:a7:6e:53:13:c9:4e:8c:9b:94:3a:18:4b:66:cc:a8: d8:bc:4a:f5:ae:4c:9d:1c:b3:30:ad:de:23:c1:2c:cc:01:53: c3:d5:8a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Yy0PgdQ9mHgqaBXb6r+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi Yjc2MjgwHhcNMjYwMTI1MjMwMDMwWhcNMjYwMTI2MjMwMDMwWjAzMTEwLwYDVQQD Eyg0OWFlY2ZhYmY2ODJmMDFkNGUxMTQ5ZThmZDdlNTRhYzYxN2Y3OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1LNl/e8VKm3UXbNLxMtnqtBaw8Q Jrjw1w0VXh0y2MCXm4ZFzpf+INfrtC+v9X7X13+ct0Tr61CUeBzelKe5LcHIiACV KPUnQLXJpUSDV2ERr/LhN3+8rzbVXQ3uPkya8teFJzOwBpaVQSpBiOkCctXvTyAg d7Guq3MwjFj974t4oQqPrEisaEiIsaLQXu7Rcgwp5DMXQ1ZDZQTBeXC65M2XTvBR KYm4ZHJrKP43SgWb1w+wQ4cm/HKWkPLvkFdJybYAXS9J/wIpXAj6kiMcugdRZgSv PpbhwFk01NXoNtwJF5lEbZopYIfeqingJQqIosxiDDCN8AG4tOu5YCgUdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmuz6v2gvAdThFJ6P1+VKxhf3m3MB8GA1UdIwQY MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4 LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOhSfW1f UKK0AQyhDI6rO47YGFjBa89+JzcHIykZVtUjxD16vSxBiA+pfcYKutumomnlXTd4 yUIC7gv/NG35UmBgUCXRxA+FYdASvojmqvvNImWfF6fcKK4ur1Br/ry0KH0PvL11 WQi5kVqhvyDmYylWs0Lp81i1EEPTL6phbG8R0zwLxTpiAYHs3s0/NKroIx1/xojh GRs3DuzCrdPJKD3I685RqihxV4MQJ1ePIwi5Nr0ugioKg8xjGevcuS+jUAgeexLd y0WDJT18hCGtQlymt3gqXvtfQbFKp25TE8lOjJuUOhhLZsyo2LxK9a5MnRyzMK3e I8EszAFTw9WKcw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:23 2026 by rpki-client