This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json) Hash identifier: XVS9E+q9S8elIsFEMj3dcucTFbQ9gq8VMBgyv/Esb9c= Subject key identifier: 5C:A7:D8:2E:77:CB:81:50:21:02:4C:D6:1B:74:E8:BB:63:02:CE:D5 Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753 Certificate serial: 019BF651A10E9C07EE0F0E6B6E9B8273513C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft Manifest number: 1067 Signing time: Sun 25 Jan 2026 18:01:43 +0000 Manifest this update: Sun 25 Jan 2026 18:01:43 +0000 Manifest next update: Mon 26 Jan 2026 18:01:43 +0000 Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: vALqUFFFLR/qCuVbm+FXVe7U/XTCorHH0+RqIYf84IU=) 2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:a1:0e:9c:07:ee:0f:0e:6b:6e:9b:82:73:51:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753 Validity Not Before: Jan 25 18:01:43 2026 GMT Not After : Jan 26 18:01:43 2026 GMT Subject: CN=5ca7d82e77cb815021024cd61b74e8bb6302ced5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:98:9b:ba:45:ef:be:35:b0:3a:c6:99:ab: a8:03:bf:c8:10:81:3a:e5:41:1f:68:26:d9:34:93: 32:b3:9f:11:2f:81:91:0d:96:c4:52:ec:88:ba:e2: c9:6e:dd:c3:00:ba:a7:6f:47:04:4d:5e:95:7f:a6: 4f:92:0c:34:22:0e:0f:04:ae:10:dc:10:7d:40:34: 8c:fb:6c:43:03:9d:b2:3b:fb:e5:76:89:30:4b:71: e4:2c:3d:e3:67:60:b9:28:ea:b7:78:18:6e:f1:09: 6f:81:37:3a:c9:06:b2:b5:a6:38:ee:f7:c8:12:97: b2:e6:77:e3:5a:ee:3a:a1:6d:fa:d3:fd:05:29:9e: d4:77:3f:6e:0c:d8:78:8b:db:ce:39:ba:1e:4e:75: 21:a9:92:0f:f7:ce:04:8e:4d:6a:3a:8e:48:d3:34: 45:5b:3e:cd:b4:e4:9a:0e:90:d8:20:c9:df:a0:3e: 54:1b:d9:f6:e5:dc:44:79:e7:6f:53:6f:0d:02:5b: c6:02:7b:12:5a:23:95:31:d9:40:31:8f:52:b4:ef: 02:fa:12:ef:cd:f6:1b:ff:ca:ce:d1:9f:d4:0d:f3: 73:2c:eb:47:74:43:7e:96:a4:3d:98:44:f4:a8:13: e5:ee:e6:d4:86:80:5e:04:97:b3:f4:ec:98:ee:05: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:D8:2E:77:CB:81:50:21:02:4C:D6:1B:74:E8:BB:63:02:CE:D5 X509v3 Authority Key Identifier: keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:91:eb:ec:85:32:ee:ba:67:ca:aa:9f:fa:d7:81:bf:75:14: 1b:5d:fc:7e:b9:82:93:df:96:a2:86:49:8b:85:42:72:04:8a: 4b:3d:2d:a8:a0:ea:62:96:d4:03:a9:9c:bd:66:42:c1:1e:e9: 74:b3:a7:20:e5:80:db:65:5d:36:fe:42:1a:71:80:e7:75:d9: 92:8f:28:f1:79:1f:eb:7f:64:24:9e:65:ba:84:ff:fa:78:ad: cf:6b:44:04:13:b1:51:fe:e0:f8:e3:29:38:9e:9e:e0:05:5a: 93:34:f8:7b:13:ef:4b:35:e1:6f:6c:3c:09:4e:80:be:53:cd: 24:12:3d:5a:b6:ce:89:5c:b6:9f:af:33:54:bc:81:ec:41:b3: fd:e7:45:16:39:93:96:56:53:45:53:a4:e0:1f:50:fe:d3:bc: 65:78:22:f5:28:d6:a5:ef:98:5b:57:93:7f:01:06:97:73:d1: b8:5a:38:bd:bb:a6:74:5b:ee:57:b7:6e:35:8c:25:af:f3:57: 3d:c0:4a:29:f0:48:07:49:f0:28:19:fa:31:d6:1b:61:58:20: 0e:08:a8:6d:bd:c6:c7:d0:21:1a:01:03:a1:bc:8d:a5:e8:0b: e0:e3:20:0c:35:32:b7:c7:4a:64:e9:de:52:67:51:e5:ab:dc: 05:07:06:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UaEOnAfuDw5rbpuCc1E8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1 MjA3NTMwHhcNMjYwMTI1MTgwMTQzWhcNMjYwMTI2MTgwMTQzWjAzMTEwLwYDVQQD Eyg1Y2E3ZDgyZTc3Y2I4MTUwMjEwMjRjZDYxYjc0ZThiYjYzMDJjZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FuYm7pF7741sDrGmauoA7/IEIE6 5UEfaCbZNJMys58RL4GRDZbEUuyIuuLJbt3DALqnb0cETV6Vf6ZPkgw0Ig4PBK4Q 3BB9QDSM+2xDA52yO/vldokwS3HkLD3jZ2C5KOq3eBhu8QlvgTc6yQaytaY47vfI Epey5nfjWu46oW360/0FKZ7Udz9uDNh4i9vOOboeTnUhqZIP984Ejk1qOo5I0zRF Wz7NtOSaDpDYIMnfoD5UG9n25dxEeedvU28NAlvGAnsSWiOVMdlAMY9StO8C+hLv zfYb/8rO0Z/UDfNzLOtHdEN+lqQ9mET0qBPl7ubUhoBeBJez9OyY7gX0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyn2C53y4FQIQJM1ht06LtjAs7VMB8GA1UdIwQY MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5Hr7IUy 7rpnyqqf+teBv3UUG138frmCk9+WooZJi4VCcgSKSz0tqKDqYpbUA6mcvWZCwR7p dLOnIOWA22VdNv5CGnGA53XZko8o8Xkf639kJJ5luoT/+nitz2tEBBOxUf7g+OMp OJ6e4AVakzT4exPvSzXhb2w8CU6AvlPNJBI9WrbOiVy2n68zVLyB7EGz/edFFjmT llZTRVOk4B9Q/tO8ZXgi9SjWpe+YW1eTfwEGl3PRuFo4vbumdFvuV7duNYwlr/NX PcBKKfBIB0nwKBn6MdYbYVggDgiobb3Gx9AhGgEDobyNpegL4OMgDDUyt8dKZOne UmdR5avcBQcGrw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:55 2026 by rpki-client