This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json) Hash identifier: 7TLTeYlbL83baUpbKNlMbTu26qCDnzgZLz9IQlCUrDE= Subject key identifier: 2F:33:5B:84:B9:33:48:8E:1C:94:F7:1D:A7:16:A2:CE:62:CB:49:8F Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068 Certificate serial: 019BF76351DA28C6C15F340A26E6AB99BBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft Manifest number: 0425 Signing time: Sun 25 Jan 2026 23:00:39 +0000 Manifest this update: Sun 25 Jan 2026 23:00:39 +0000 Manifest next update: Mon 26 Jan 2026 23:00:39 +0000 Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: lXc4C4k9zCSi+32lCZ+7P/yVlJZ9zHFYVhgoyKNaGKM=) 2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:51:da:28:c6:c1:5f:34:0a:26:e6:ab:99:bb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068 Validity Not Before: Jan 25 23:00:39 2026 GMT Not After : Jan 26 23:00:39 2026 GMT Subject: CN=2f335b84b933488e1c94f71da716a2ce62cb498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:bf:9b:79:6b:e8:3a:0f:94:a4:61:7a:47: c9:a3:6b:c8:cd:32:a3:68:34:b7:97:91:60:8e:10: 1f:47:7e:48:96:24:9b:30:a0:ec:db:0a:fc:d6:c0: 3f:0f:ef:37:2c:0d:1e:55:95:8b:35:a5:88:7f:29: 06:4f:08:1b:48:d7:c3:55:05:b1:a7:68:44:7a:a2: 26:16:5a:d1:4a:87:b8:67:a7:f6:63:98:bb:d2:85: a0:7a:2c:2f:6e:48:47:dd:d4:a7:74:71:d1:0f:4f: 63:d6:fe:f5:ab:f0:40:b3:0a:4c:ff:46:3d:d7:b8: d5:b4:6a:71:00:9a:fa:45:08:fd:2b:f2:25:d7:c3: 83:d4:2a:f3:6f:19:e7:55:16:af:65:eb:78:6a:74: 56:89:1f:2e:63:4e:23:8f:7b:85:4e:7c:79:f5:02: db:de:f3:6a:99:8d:e9:f2:fd:79:90:9a:18:79:77: 3f:21:27:e8:3a:57:10:c8:05:4c:68:67:ac:92:b9: 5a:40:55:e2:8b:30:c4:75:79:23:9f:55:96:33:cf: d3:4f:01:f8:9f:46:d2:fb:ef:9b:0d:01:7c:c7:7f: 02:0f:5d:ef:2e:8a:8b:1c:fc:50:e9:99:af:12:cc: 6d:ad:0c:ce:c3:df:5f:9b:0f:de:4b:99:f9:ab:2b: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:5B:84:B9:33:48:8E:1C:94:F7:1D:A7:16:A2:CE:62:CB:49:8F X509v3 Authority Key Identifier: keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:53:06:34:28:d2:91:1b:af:4a:54:89:35:86:78:e1:66:cb: ca:2f:00:90:d1:d1:4e:ec:4e:01:ae:00:50:06:e9:88:a6:38: 04:2a:65:b1:bb:8e:33:b2:d0:b0:30:95:2d:57:c9:b9:3b:45: ba:ee:5e:8f:15:4d:91:1f:72:00:a2:b2:d0:58:67:e3:e4:06: 5c:8e:29:9b:85:b3:16:97:4b:27:1f:57:c5:f7:d4:63:27:2f: 73:3a:16:c0:7d:50:c8:aa:9a:f2:71:64:3d:20:0b:af:04:0c: b0:7e:c6:b5:6c:d6:82:0e:a1:46:d1:f0:0d:04:dd:0a:25:fb: 4d:93:0e:5e:8d:1b:34:15:23:0e:21:08:06:35:2e:3a:28:ea: 1a:d1:20:d7:90:48:6e:b5:c9:85:d2:b9:d0:f4:d0:80:59:a9: 71:e3:ba:4b:da:f7:19:81:55:60:23:9d:3d:1c:b1:a3:a7:bb: 72:6d:88:3c:71:a6:84:69:63:e8:9b:ef:17:73:51:45:fc:a3: 58:b5:18:48:dc:05:65:61:01:03:b9:68:35:7b:e9:cd:f9:41: 95:a2:c5:fb:77:7a:f7:e0:71:2a:42:79:4b:ee:93:67:07:7e: 4e:2b:8f:a3:79:e0:88:62:94:52:34:98:4a:d4:b0:2b:ae:46: 33:e8:d1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1HaKMbBXzQKJuarmbvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjRmMmRkMGI5ODdhYjc1ZTM3OWY4MTc3YTQxNzZhMzA4 NjAwNjgwHhcNMjYwMTI1MjMwMDM5WhcNMjYwMTI2MjMwMDM5WjAzMTEwLwYDVQQD EygyZjMzNWI4NGI5MzM0ODhlMWM5NGY3MWRhNzE2YTJjZTYyY2I0OThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHu/m3lr6DoPlKRhekfJo2vIzTKj aDS3l5FgjhAfR35IliSbMKDs2wr81sA/D+83LA0eVZWLNaWIfykGTwgbSNfDVQWx p2hEeqImFlrRSoe4Z6f2Y5i70oWgeiwvbkhH3dSndHHRD09j1v71q/BAswpM/0Y9 17jVtGpxAJr6RQj9K/Il18OD1CrzbxnnVRavZet4anRWiR8uY04jj3uFTnx59QLb 3vNqmY3p8v15kJoYeXc/ISfoOlcQyAVMaGeskrlaQFXiizDEdXkjn1WWM8/TTwH4 n0bS+++bDQF8x38CD13vLoqLHPxQ6ZmvEsxtrQzOw99fmw/eS5n5qysUzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8zW4S5M0iOHJT3HacWos5iy0mPMB8GA1UdIwQY MBaAFFJk8t0LmHq3XjefgXekF2owhgBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjkt OWQ3OTRlZTE0ZGQwLzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YzEwZWYtNmQzYy00NWU0LThlZjktOWQ3OTRlZTE0ZGQw LzEvVW1UeTNRdVllcmRlTjUtQmQ2UVhhakNHQUdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFMGNCjS kRuvSlSJNYZ44WbLyi8AkNHRTuxOAa4AUAbpiKY4BCplsbuOM7LQsDCVLVfJuTtF uu5ejxVNkR9yAKKy0Fhn4+QGXI4pm4WzFpdLJx9XxffUYycvczoWwH1QyKqa8nFk PSALrwQMsH7GtWzWgg6hRtHwDQTdCiX7TZMOXo0bNBUjDiEIBjUuOijqGtEg15BI brXJhdK50PTQgFmpceO6S9r3GYFVYCOdPRyxo6e7cm2IPHGmhGlj6JvvF3NRRfyj WLUYSNwFZWEBA7loNXvpzflBlaLF+3d69+BxKkJ5S+6TZwd+TiuPo3ngiGKUUjSY StSwK65GM+jRlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:14 2026 by rpki-client