This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft File: Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json) Hash identifier: f4slo1kspslx1pcp/QTWRJpVm3Hww/m/dS3lV/PYUvk= Subject key identifier: 7C:B5:C8:50:9F:C1:7F:E3:AA:BD:5D:95:8F:5C:03:51:79:D5:24:13 Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09 Certificate serial: 019BF876872C73B2449522E5A2A422CB2999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft Manifest number: 7D Signing time: Mon 26 Jan 2026 04:01:15 +0000 Manifest this update: Mon 26 Jan 2026 04:01:15 +0000 Manifest next update: Tue 27 Jan 2026 04:01:15 +0000 Files and hashes: 1: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: pBQW0STA34TQFB0Dhw2S4IMsJsEvLqvlke8O4IL0WC0=) 2: yb5tB73Np2D1lNGtzmycYpeEJ3M.roa (hash: R8cB18o3wipqodyDiw0A9Cbd4ddNmYwVxpX/xGXqoV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:87:2c:73:b2:44:95:22:e5:a2:a4:22:cb:29:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09 Validity Not Before: Jan 26 04:01:15 2026 GMT Not After : Jan 27 04:01:15 2026 GMT Subject: CN=7cb5c8509fc17fe3aabd5d958f5c035179d52413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:8d:6b:ad:4d:35:70:16:94:06:95:7c:a4: f2:d7:b6:a8:b1:93:7c:76:2f:7a:6c:4d:98:e2:9d: 3f:b1:50:ed:a4:13:7e:fd:0e:c8:32:5e:a7:62:ee: da:6a:5e:c5:93:3b:c0:72:8c:ef:df:05:17:98:b1: ff:8e:76:2e:a0:d9:35:91:e8:67:c4:de:71:32:a6: 98:5b:cf:da:02:2d:25:e4:a1:7c:db:83:aa:13:51: f8:56:f9:37:f3:41:18:2b:ee:30:1f:69:b7:30:cd: 42:c7:9c:94:5f:55:fd:b2:81:07:ce:eb:9b:3a:26: 63:d6:c5:eb:75:82:1f:de:fe:fa:f3:45:d8:a5:98: 8e:a2:5f:98:83:0d:11:7e:20:c4:3e:5e:29:86:86: 42:50:5e:4f:40:4c:09:be:d7:07:fc:d8:65:6f:1f: c4:b8:fb:7b:32:9b:95:a7:77:09:60:64:73:e7:83: f4:a3:4b:25:e4:2c:58:6b:8c:30:a0:c5:19:0d:05: bc:27:12:d9:d6:f0:86:63:a4:2a:90:57:3a:55:67: d0:8f:4b:a0:af:c1:84:96:09:3b:8a:1e:05:a9:13: 20:52:3f:88:6e:d3:1f:5f:a7:5e:e4:cb:ec:3d:53: d5:7b:77:34:1c:4c:39:b4:b3:0b:f5:d7:ca:ce:a5: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B5:C8:50:9F:C1:7F:E3:AA:BD:5D:95:8F:5C:03:51:79:D5:24:13 X509v3 Authority Key Identifier: keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cf:4e:38:96:bd:d8:cc:81:c4:95:ec:69:f1:eb:47:9c:b9: 00:ad:6a:c0:25:6f:4c:35:b2:53:f7:05:2d:f3:e4:6b:da:27: 55:c4:86:32:95:60:9e:c6:e2:41:3e:92:2f:15:74:a8:90:0f: 42:97:1e:6c:6b:e8:02:fb:ca:2c:e3:dc:ad:55:db:33:a9:c3: f6:48:87:f3:18:93:1d:e8:cf:9b:74:fa:c5:36:93:72:8a:5b: 11:d5:aa:dd:02:55:f6:cc:8a:87:e6:af:51:d9:2e:5f:56:ab: ed:43:cf:1e:4e:9c:a5:08:e8:0e:6e:fd:ba:69:a7:9c:4f:d5: 46:d4:a7:63:73:3a:5c:7b:aa:e1:f9:7c:09:bb:a2:87:fb:0f: e5:08:fb:ce:90:f4:35:e8:47:8e:d3:73:20:93:b8:14:7d:7f: 9e:55:76:4a:9e:05:e6:ad:0a:ce:97:18:91:a6:49:fc:03:61: 99:7d:dc:4c:b8:da:e8:88:ae:99:22:bd:1a:46:5f:89:7b:b5: 7f:89:a5:7d:8c:9f:a1:30:54:cb:84:19:a9:8c:76:54:9d:ce: 21:80:ad:dc:64:71:32:1d:2b:74:0a:67:c7:aa:be:17:95:1e: 6c:45:4f:cd:e8:3c:e4:e1:b9:3b:8d:c0:5b:f4:09:59:45:76: 6f:e8:66:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4docsc7JElSLloqQiyymZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1 MzBiMDkwHhcNMjYwMTI2MDQwMTE1WhcNMjYwMTI3MDQwMTE1WjAzMTEwLwYDVQQD Eyg3Y2I1Yzg1MDlmYzE3ZmUzYWFiZDVkOTU4ZjVjMDM1MTc5ZDUyNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKaNa61NNXAWlAaVfKTy17aosZN8 di96bE2Y4p0/sVDtpBN+/Q7IMl6nYu7aal7FkzvAcozv3wUXmLH/jnYuoNk1kehn xN5xMqaYW8/aAi0l5KF824OqE1H4Vvk380EYK+4wH2m3MM1Cx5yUX1X9soEHzuub OiZj1sXrdYIf3v7680XYpZiOol+Ygw0RfiDEPl4phoZCUF5PQEwJvtcH/Nhlbx/E uPt7MpuVp3cJYGRz54P0o0sl5CxYa4wwoMUZDQW8JxLZ1vCGY6QqkFc6VWfQj0ug r8GElgk7ih4FqRMgUj+IbtMfX6de5MvsPVPVe3c0HEw5tLML9dfKzqU8ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy1yFCfwX/jqr1dlY9cA1F51SQTMB8GA1UdIwQY MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt M2JiOGIwNzVkNjlmLzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc9OOJa9 2MyBxJXsafHrR5y5AK1qwCVvTDWyU/cFLfPka9onVcSGMpVgnsbiQT6SLxV0qJAP QpcebGvoAvvKLOPcrVXbM6nD9kiH8xiTHejPm3T6xTaTcopbEdWq3QJV9syKh+av UdkuX1ar7UPPHk6cpQjoDm79ummnnE/VRtSnY3M6XHuq4fl8Cbuih/sP5Qj7zpD0 NehHjtNzIJO4FH1/nlV2Sp4F5q0KzpcYkaZJ/ANhmX3cTLja6IiumSK9GkZfiXu1 f4mlfYyfoTBUy4QZqYx2VJ3OIYCt3GRxMh0rdApnx6q+F5UebEVPzeg85OG5O43A W/QJWUV2b+hmQg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:22 2026 by rpki-client