This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json) Hash identifier: V+MV8cpuSH9qnGCU5uzuCawta6mROeUOs4W3TWMU9Zc= Subject key identifier: 68:A0:0D:C7:DA:E7:50:A7:66:F2:B0:7F:A9:22:01:2A:CF:2C:7D:84 Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Certificate serial: 019BF3F5A665BA1CCC98DCD0F88B1D58CFD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft Manifest number: 0BAE Signing time: Sun 25 Jan 2026 07:02:00 +0000 Manifest this update: Sun 25 Jan 2026 07:02:00 +0000 Manifest next update: Mon 26 Jan 2026 07:02:00 +0000 Files and hashes: 1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=) 2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=) 3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: qNY000s+gbw12UXssHKU+0DXM6h8KiSVMJnFiRO683k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:a6:65:ba:1c:cc:98:dc:d0:f8:8b:1d:58:cf:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015 Validity Not Before: Jan 25 07:02:00 2026 GMT Not After : Jan 26 07:02:00 2026 GMT Subject: CN=68a00dc7dae750a766f2b07fa922012acf2c7d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:87:fa:38:f1:77:78:91:72:68:d7:49:a7: 4e:a5:11:ca:46:9c:97:a0:54:35:61:67:ef:5d:7b: 03:c8:72:b3:34:d2:66:da:4a:b2:ac:ac:18:a1:f4: 55:2d:f3:fd:ba:35:82:d6:e7:1f:5a:b8:3d:fa:a6: 85:ab:62:86:aa:f6:0a:d3:5a:c9:00:a4:11:ac:ad: 05:25:de:b3:b3:69:69:7a:25:d3:f3:4b:2f:37:2c: 71:1e:2f:0b:97:b3:03:a4:df:39:c4:8e:65:73:39: 74:14:ba:d1:f1:7b:8f:67:a4:db:1a:cf:58:f1:83: d9:13:39:d0:55:f0:62:f2:2d:7d:c1:39:e9:c6:a3: 03:39:ca:19:54:ab:a6:bd:bf:6b:03:f7:9b:66:c2: d0:50:9c:50:57:07:cd:ad:3d:1a:f7:d5:4a:1e:1a: 2b:47:d0:b7:a0:ce:e1:66:62:20:a1:aa:65:4b:00: 40:23:e5:62:94:bc:6e:4b:1c:88:26:30:c8:94:bf: 6a:3d:1b:fe:c3:bc:0e:e4:56:98:dc:00:70:65:1b: 94:1b:30:b9:40:c9:e5:71:72:a4:5f:35:47:87:7e: 9a:6a:a4:9d:1c:22:11:62:c6:c5:1d:9b:f5:7a:06: 22:d8:84:a4:1c:f1:62:4f:8a:55:c2:66:cc:6e:8d: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A0:0D:C7:DA:E7:50:A7:66:F2:B0:7F:A9:22:01:2A:CF:2C:7D:84 X509v3 Authority Key Identifier: keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:43:d3:16:c8:c9:2c:ee:a4:7c:30:82:71:11:ff:82:28: 2d:aa:19:41:9b:05:fd:72:bd:4d:1a:48:b0:5b:6f:9f:50:cd: 52:d1:b7:9b:a1:bf:ef:92:13:33:f1:09:45:bb:88:02:24:e7: 2e:b0:aa:27:cc:f6:be:de:22:62:dc:d0:84:48:73:15:51:a6: b1:92:e0:43:42:57:85:55:c5:fa:96:82:e7:1a:5f:67:89:e6: 76:85:f5:2e:3f:f5:c3:6d:5a:65:04:90:a0:29:90:d8:c9:f0: 76:91:02:85:a3:ae:d9:ab:2c:ee:78:ed:ca:95:b2:07:c7:31: c7:d8:83:70:6e:ea:b2:bd:0e:1d:ad:f5:01:e1:55:3d:da:7a: 70:3a:82:a3:47:05:1e:89:57:89:7a:68:a9:e0:2b:aa:26:34: b4:d5:2f:78:59:ed:ee:4b:67:04:cc:90:5c:10:79:2b:a2:c0: 22:0f:f5:9c:fa:9d:0f:e7:17:e1:3d:8b:53:e2:d2:2e:14:83: 07:26:7a:fd:ac:3c:eb:78:48:96:e5:cd:34:c3:a0:95:59:c4: 20:d9:89:5f:9b:9a:42:7d:d9:3b:03:06:9f:4a:e9:e2:a0:d9: d9:0f:da:6e:35:12:06:97:d7:bb:a6:df:8a:56:ae:61:a0:8c: de:8b:80:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9aZluhzMmNzQ+IsdWM/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGM2ODVlZmE2YTJjMTA0NTYzN2YwMjdhMzI1YzBhZWM3 OWMwMTUwHhcNMjYwMTI1MDcwMjAwWhcNMjYwMTI2MDcwMjAwWjAzMTEwLwYDVQQD Eyg2OGEwMGRjN2RhZTc1MGE3NjZmMmIwN2ZhOTIyMDEyYWNmMmM3ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1byH+jjxd3iRcmjXSadOpRHKRpyX oFQ1YWfvXXsDyHKzNNJm2kqyrKwYofRVLfP9ujWC1ucfWrg9+qaFq2KGqvYK01rJ AKQRrK0FJd6zs2lpeiXT80svNyxxHi8Ll7MDpN85xI5lczl0FLrR8XuPZ6TbGs9Y 8YPZEznQVfBi8i19wTnpxqMDOcoZVKumvb9rA/ebZsLQUJxQVwfNrT0a99VKHhor R9C3oM7hZmIgoaplSwBAI+VilLxuSxyIJjDIlL9qPRv+w7wO5FaY3ABwZRuUGzC5 QMnlcXKkXzVHh36aaqSdHCIRYsbFHZv1egYi2ISkHPFiT4pVwmbMbo1VzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGigDcfa51CnZvKwf6kiASrPLH2EMB8GA1UdIwQY MBaAFLpMaF76aiwQRWN/AnoyXArsecAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQt Yzg2MDQ3MjA2NDJkLzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80Mjg3MmEtNTYxNy00ZWMyLWFiOGQtYzg2MDQ3MjA2NDJk LzEvdWt4b1h2cHFMQkJGWTM4Q2VqSmNDdXg1d0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3lD0xbI ySzupHwwgnER/4IoLaoZQZsF/XK9TRpIsFtvn1DNUtG3m6G/75ITM/EJRbuIAiTn LrCqJ8z2vt4iYtzQhEhzFVGmsZLgQ0JXhVXF+paC5xpfZ4nmdoX1Lj/1w21aZQSQ oCmQ2MnwdpEChaOu2ass7njtypWyB8cxx9iDcG7qsr0OHa31AeFVPdp6cDqCo0cF HolXiXpoqeArqiY0tNUveFnt7ktnBMyQXBB5K6LAIg/1nPqdD+cX4T2LU+LSLhSD ByZ6/aw863hIluXNNMOglVnEINmJX5uaQn3ZOwMGn0rp4qDZ2Q/abjUSBpfXu6bf ilauYaCM3ouAEA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:53:05 2026 by rpki-client