This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json) Hash identifier: nFIWqJQ9fQl/WyCxLDemTIs5yNOObR74/dJLoT2StYo= Subject key identifier: A7:A0:8D:BB:50:81:FE:8B:7D:50:DE:20:0B:00:D2:A9:8E:A5:1F:CC Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Certificate serial: 019BF72D16BBB12EB98BEFD724FBD246D83A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft Manifest number: 0EA2 Signing time: Sun 25 Jan 2026 22:01:25 +0000 Manifest this update: Sun 25 Jan 2026 22:01:25 +0000 Manifest next update: Mon 26 Jan 2026 22:01:25 +0000 Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=) 2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: 8T0nXjeWfFu6KvlqPLSa8f49e/lGhi2ys333WHs2BjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:16:bb:b1:2e:b9:8b:ef:d7:24:fb:d2:46:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85 Validity Not Before: Jan 25 22:01:25 2026 GMT Not After : Jan 26 22:01:25 2026 GMT Subject: CN=a7a08dbb5081fe8b7d50de200b00d2a98ea51fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:98:84:12:dd:ac:c6:65:83:45:75:d6:d6: f9:05:4a:6a:a3:f9:83:d9:ad:fd:be:08:37:99:1b: 7c:14:34:84:38:45:6d:64:7e:7f:88:66:d9:95:50: a6:13:03:02:d3:d8:a5:5d:9d:e5:ab:04:7a:00:94: 5a:7d:62:79:f6:43:76:60:0c:19:1f:24:30:49:bb: 8e:3f:b3:28:d6:3b:c4:72:5f:d2:cc:38:91:93:9b: 4a:b7:70:e3:e1:7f:bf:df:14:65:44:f5:2b:2a:e4: c7:69:e9:90:73:96:2b:64:ca:0d:48:5a:59:f2:a4: d2:cb:2a:38:ec:0c:1a:07:59:b6:a6:b7:20:10:d1: e6:4e:c6:06:4d:b9:53:de:ca:b0:16:9e:50:34:ff: 79:d1:71:56:8d:b2:f9:4a:c9:da:e9:00:f4:f3:d8: 41:35:24:c1:91:bf:17:c4:4b:a6:35:b1:dd:70:58: b1:8f:4e:12:f6:89:99:f6:3c:16:80:6e:24:bf:44: 14:24:01:1e:58:8c:bb:2d:ae:a3:5a:18:79:ae:09: ee:15:b8:ca:1f:cf:10:8f:06:b2:fa:c7:e5:38:75: 65:7c:52:ec:04:c9:21:3b:42:12:13:64:ee:d5:2a: f6:73:8b:9e:23:af:29:03:4a:7d:7f:33:46:ac:4c: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:8D:BB:50:81:FE:8B:7D:50:DE:20:0B:00:D2:A9:8E:A5:1F:CC X509v3 Authority Key Identifier: keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:60:7c:df:79:cb:2f:3b:62:3b:4f:8e:c3:41:0d:9a:17:16: b0:78:af:3f:8c:cd:c7:7f:51:ab:fd:f5:06:92:6d:8d:20:37: 2e:e1:46:d9:4c:97:7d:1c:84:5a:bd:d6:b8:19:ef:a8:58:e2: 52:da:d7:53:bb:10:36:91:e6:b9:a0:9e:d5:64:3e:ca:d4:c7: 41:36:0e:70:28:c4:e1:fc:8d:38:d9:25:05:fa:3c:c0:b7:10: 59:bb:f4:f9:82:e0:93:6b:03:02:43:e3:31:0e:a9:14:a2:35: 82:5f:7f:8f:7c:c2:2b:26:2f:28:49:b2:85:a6:dd:af:71:fd: 1c:58:3b:e3:c7:e4:91:8f:ff:42:89:61:25:e9:d9:49:1c:aa: 9b:84:85:8c:0c:84:b3:ff:c4:f5:20:4d:ed:05:67:d7:7c:e3: db:06:4a:a3:a7:92:5a:4c:b0:f6:f3:87:98:57:80:3a:cb:40: 20:d7:49:3b:99:ac:c1:f6:8d:b7:02:7f:65:3e:b7:68:3d:78: 5f:ca:74:16:fb:ce:72:70:58:35:14:d9:3b:1d:fa:84:66:75: 75:16:7b:5a:81:80:77:1e:1f:f0:1e:8c:78:68:e5:79:49:7a: 6c:62:81:33:35:b7:e7:e7:2b:23:d2:e1:79:87:ee:91:88:fd: 67:75:e4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LRa7sS65i+/XJPvSRtg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm MTdkODUwHhcNMjYwMTI1MjIwMTI1WhcNMjYwMTI2MjIwMTI1WjAzMTEwLwYDVQQD EyhhN2EwOGRiYjUwODFmZThiN2Q1MGRlMjAwYjAwZDJhOThlYTUxZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHGYhBLdrMZlg0V11tb5BUpqo/mD 2a39vgg3mRt8FDSEOEVtZH5/iGbZlVCmEwMC09ilXZ3lqwR6AJRafWJ59kN2YAwZ HyQwSbuOP7Mo1jvEcl/SzDiRk5tKt3Dj4X+/3xRlRPUrKuTHaemQc5YrZMoNSFpZ 8qTSyyo47AwaB1m2prcgENHmTsYGTblT3sqwFp5QNP950XFWjbL5Ssna6QD089hB NSTBkb8XxEumNbHdcFixj04S9omZ9jwWgG4kv0QUJAEeWIy7La6jWhh5rgnuFbjK H88Qjway+sflOHVlfFLsBMkhO0ISE2Tu1Sr2c4ueI68pA0p9fzNGrExBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKegjbtQgf6LfVDeIAsA0qmOpR/MMB8GA1UdIwQY MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmB833nL LztiO0+Ow0ENmhcWsHivP4zNx39Rq/31BpJtjSA3LuFG2UyXfRyEWr3WuBnvqFji UtrXU7sQNpHmuaCe1WQ+ytTHQTYOcCjE4fyNONklBfo8wLcQWbv0+YLgk2sDAkPj MQ6pFKI1gl9/j3zCKyYvKEmyhabdr3H9HFg748fkkY//QolhJenZSRyqm4SFjAyE s//E9SBN7QVn13zj2wZKo6eSWkyw9vOHmFeAOstAINdJO5mswfaNtwJ/ZT63aD14 X8p0FvvOcnBYNRTZOx36hGZ1dRZ7WoGAdx4f8B6MeGjleUl6bGKBMzW35+crI9Lh eYfukYj9Z3XkIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:26 2026 by rpki-client