This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json) Hash identifier: c7gFo7txIJmu2WisuBbd1jRQDtTEgnGZgKEKY5VEUuo= Subject key identifier: A5:0C:D5:00:6C:9E:75:DC:65:77:C8:38:4B:94:A8:68:CD:E8:86:CD Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019BF46323A45BE738F4E306F4E0DA285729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft Manifest number: 09B7 Signing time: Sun 25 Jan 2026 09:01:36 +0000 Manifest this update: Sun 25 Jan 2026 09:01:36 +0000 Manifest next update: Mon 26 Jan 2026 09:01:36 +0000 Files and hashes: 1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=) 2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=) 3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=) 4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=) 5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=) 6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=) 7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: T05ueMbY+zOx0XvbM4Nry/jEIgP1yleLd0kIu1RRD10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:23:a4:5b:e7:38:f4:e3:06:f4:e0:da:28:57:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Jan 25 09:01:36 2026 GMT Not After : Jan 26 09:01:36 2026 GMT Subject: CN=a50cd5006c9e75dc6577c8384b94a868cde886cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:54:1f:90:a5:69:1e:e7:46:0c:b1:60:33:cd: 0f:83:5e:2d:70:ca:f6:be:d6:c9:b8:84:61:5d:b3: 02:01:0d:bb:e8:37:67:d7:55:b6:75:bf:33:a2:a9: 78:3b:3b:1f:33:9f:0a:95:f7:e7:e8:8d:38:80:41: 48:93:fe:f3:ea:78:02:43:7d:47:3c:49:a6:ff:19: 00:56:e5:de:d0:c3:54:fb:9a:a5:36:5f:f2:e0:23: 95:9a:ac:79:29:9d:b0:14:6e:89:07:98:fa:e0:c2: 24:9d:7c:b5:ad:e4:db:88:f2:eb:f2:1f:31:8b:92: 1e:41:8b:d9:07:0c:09:97:f9:e8:2c:d1:bb:2d:42: 38:55:5c:3b:b0:fa:42:70:49:6d:0b:a2:e9:54:5a: 1a:41:52:af:88:b6:ed:14:b3:74:10:81:d6:1d:0e: 88:9a:4a:21:7d:61:f3:85:34:4e:61:b3:a0:d3:9e: 12:10:1d:a1:4e:a5:23:a9:c9:77:88:aa:7d:33:59: 3e:3c:d6:a7:6f:b3:7c:85:9c:4c:c8:c8:1d:61:c3: 19:78:39:d9:91:28:eb:e0:18:1a:ed:c9:7e:de:6d: 62:65:a3:73:aa:72:ee:57:18:d2:a6:3d:e8:e1:ec: 3c:55:7a:a2:66:b3:6f:df:f1:1c:6c:1f:fe:fa:9a: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:D5:00:6C:9E:75:DC:65:77:C8:38:4B:94:A8:68:CD:E8:86:CD X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:85:61:63:c7:1c:65:0a:3a:84:e1:76:73:92:ca:3f:31:03: ed:cd:d6:01:4e:d3:47:d0:cf:34:9f:ba:5a:5a:4c:6c:78:e5: 22:00:38:bf:52:7f:9c:30:2a:b2:c1:87:50:b1:9b:fa:c4:bf: a3:e5:41:26:61:d9:d7:31:4c:90:e9:c8:46:f6:98:57:d0:6a: 78:58:df:53:67:7e:6a:5e:9f:b6:96:c7:62:d5:91:48:00:67: ca:5f:40:4d:79:08:53:a3:7e:a1:48:0c:a4:a8:2d:e9:f1:3d: 2b:e7:d0:31:cd:36:5b:f8:0e:04:86:52:a9:63:59:c0:d9:17: e5:b3:cc:67:39:54:1e:ff:e9:68:5f:fc:e7:9c:75:df:37:fa: d3:70:db:0c:3f:6f:5c:3a:8c:ef:66:57:5c:a0:cf:65:42:9a: 5a:e3:f0:dc:bd:65:d9:87:3a:dd:5f:28:24:7d:31:0b:9b:73: c5:2a:c0:87:38:3b:24:b1:c3:35:c0:a1:73:37:05:d7:5d:5a: 84:9d:50:ec:f9:4e:f8:bb:2b:c3:77:86:40:97:52:a8:16:51: d3:9d:39:b8:cc:cb:d8:a3:81:ee:0c:55:2c:2a:06:8b:83:d8: 93:dd:a5:e8:6a:72:45:53:7a:e5:c9:6d:12:31:0f:6a:9b:9f: 98:2d:a6:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YyOkW+c49OMG9ODaKFcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjYwMTI1MDkwMTM2WhcNMjYwMTI2MDkwMTM2WjAzMTEwLwYDVQQD EyhhNTBjZDUwMDZjOWU3NWRjNjU3N2M4Mzg0Yjk0YTg2OGNkZTg4NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VQfkKVpHudGDLFgM80Pg14tcMr2 vtbJuIRhXbMCAQ276Ddn11W2db8zoql4OzsfM58Klffn6I04gEFIk/7z6ngCQ31H PEmm/xkAVuXe0MNU+5qlNl/y4COVmqx5KZ2wFG6JB5j64MIknXy1reTbiPLr8h8x i5IeQYvZBwwJl/noLNG7LUI4VVw7sPpCcEltC6LpVFoaQVKviLbtFLN0EIHWHQ6I mkohfWHzhTROYbOg054SEB2hTqUjqcl3iKp9M1k+PNanb7N8hZxMyMgdYcMZeDnZ kSjr4Bga7cl+3m1iZaNzqnLuVxjSpj3o4ew8VXqiZrNv3/EcbB/++pqJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUM1QBsnnXcZXfIOEuUqGjN6IbNMB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIVhY8cc ZQo6hOF2c5LKPzED7c3WAU7TR9DPNJ+6WlpMbHjlIgA4v1J/nDAqssGHULGb+sS/ o+VBJmHZ1zFMkOnIRvaYV9BqeFjfU2d+al6ftpbHYtWRSABnyl9ATXkIU6N+oUgM pKgt6fE9K+fQMc02W/gOBIZSqWNZwNkX5bPMZzlUHv/paF/855x13zf603DbDD9v XDqM72ZXXKDPZUKaWuPw3L1l2Yc63V8oJH0xC5tzxSrAhzg7JLHDNcChczcF111a hJ1Q7PlO+Lsrw3eGQJdSqBZR0505uMzL2KOB7gxVLCoGi4PYk92l6GpyRVN65clt EjEPapufmC2m9A== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:38 2026 by rpki-client