This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json) Hash identifier: T7dAK27RnQMquLbqgxdH8bxyKwtL1q8OseFaD6ORkKE= Subject key identifier: 3D:59:2A:0A:F5:73:C9:56:C7:66:FC:7A:02:95:7A:02:FF:FA:B7:BC Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Certificate serial: 019BF6BED8E01EBA8378D0993CC2F9A6A6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft Manifest number: 0A62 Signing time: Sun 25 Jan 2026 20:01:00 +0000 Manifest this update: Sun 25 Jan 2026 20:01:00 +0000 Manifest next update: Mon 26 Jan 2026 20:01:00 +0000 Files and hashes: 1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=) 2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: orKJ/J/a7bDdR3ozzpG/mk4gZgjwhhV6P4s9NM7E2q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:d8:e0:1e:ba:83:78:d0:99:3c:c2:f9:a6:a6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Validity Not Before: Jan 25 20:01:00 2026 GMT Not After : Jan 26 20:01:00 2026 GMT Subject: CN=3d592a0af573c956c766fc7a02957a02fffab7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:8e:d8:57:f6:f1:89:c4:0a:b5:9c:e7:3b: b3:90:1d:b1:19:fe:2c:de:a7:15:8d:f0:6c:18:5f: f5:11:8d:79:35:4f:46:fa:88:5c:59:9f:a6:56:67: 29:c0:3e:30:48:f7:b7:83:da:8e:23:e6:50:a6:e6: 0f:5d:38:8e:b3:70:7a:83:73:3e:26:24:34:1d:9e: 0f:e1:e9:c9:2c:eb:f7:a3:12:8e:03:8f:d6:32:a0: 7e:b9:65:d2:fc:b5:7f:86:77:71:87:ac:32:ad:41: 63:66:b9:c7:62:bc:d1:0f:98:77:35:2e:cc:70:5b: 7c:ff:43:6f:fd:92:66:fc:66:78:1b:86:02:b5:c9: f6:69:89:4e:7c:1b:30:0c:e4:75:b8:bd:d0:ac:47: 49:46:61:77:68:92:7f:9b:bb:52:17:1b:0f:b5:b0: 0d:5d:1d:89:01:24:ba:35:2a:77:36:02:78:c3:19: fe:fa:e5:12:df:de:d2:dd:58:8a:74:b1:ef:ff:0c: ef:f2:23:e2:8f:97:c9:06:ec:f5:dd:c9:82:7b:29: 97:54:48:37:88:54:92:3d:d3:f9:c1:2f:41:b4:42: 84:00:8f:1d:8e:39:b3:11:ae:d3:04:ac:7b:7b:27: ef:44:95:11:9b:43:f8:b9:6c:ba:c2:eb:64:df:6e: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:59:2A:0A:F5:73:C9:56:C7:66:FC:7A:02:95:7A:02:FF:FA:B7:BC X509v3 Authority Key Identifier: keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fa:a2:2b:a9:d9:c6:b0:8d:3d:08:1d:cf:7b:e6:20:39:e7: 5c:8d:cd:99:f1:10:23:e2:e3:d8:43:4d:8a:28:04:92:c8:24: 84:2d:78:c7:cb:f7:8a:83:73:4b:20:77:f3:d5:68:2f:f7:48: 6e:69:d3:c0:46:59:b2:c4:43:8c:ca:a0:3c:90:b6:86:9e:34: 85:c9:8c:25:72:67:3a:9b:0b:88:16:68:bb:e6:8f:ca:ba:35: e6:f4:66:7e:2e:f6:a8:41:1d:cd:29:7f:60:24:b7:32:06:7d: 08:04:99:8b:cb:54:e9:2b:8c:58:0f:fa:99:22:b3:2f:bc:71: 4e:c5:d2:84:1c:91:12:2a:b0:2b:ec:cc:28:d6:c5:66:a8:67: 36:a6:b8:f7:8f:a1:32:85:9f:ea:ce:7a:ee:63:cc:71:e2:f2: 4d:59:18:39:68:43:01:57:f7:30:5a:68:6f:f3:ed:16:3a:ae: e0:a9:fe:0c:33:3c:5f:63:31:c4:e7:69:e0:a8:a7:a5:84:f5: d4:ac:34:c3:c9:b9:c4:de:35:67:d7:e6:3e:e2:40:55:69:8e: 16:2c:e2:81:13:22:a6:b3:56:9c:1b:12:db:21:78:d6:a2:46: 18:28:8e:38:b0:78:ba:44:f6:a2:0e:b3:2f:39:66:9e:90:a1: db:7b:01:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vtjgHrqDeNCZPML5pqbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4 ZjZkY2IwHhcNMjYwMTI1MjAwMTAwWhcNMjYwMTI2MjAwMTAwWjAzMTEwLwYDVQQD EygzZDU5MmEwYWY1NzNjOTU2Yzc2NmZjN2EwMjk1N2EwMmZmZmFiN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMqO2Ff28YnECrWc5zuzkB2xGf4s 3qcVjfBsGF/1EY15NU9G+ohcWZ+mVmcpwD4wSPe3g9qOI+ZQpuYPXTiOs3B6g3M+ JiQ0HZ4P4enJLOv3oxKOA4/WMqB+uWXS/LV/hndxh6wyrUFjZrnHYrzRD5h3NS7M cFt8/0Nv/ZJm/GZ4G4YCtcn2aYlOfBswDOR1uL3QrEdJRmF3aJJ/m7tSFxsPtbAN XR2JASS6NSp3NgJ4wxn++uUS397S3ViKdLHv/wzv8iPij5fJBuz13cmCeymXVEg3 iFSSPdP5wS9BtEKEAI8djjmzEa7TBKx7eyfvRJURm0P4uWy6wutk327HZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1ZKgr1c8lWx2b8egKVegL/+re8MB8GA1UdIwQY MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPqiK6nZ xrCNPQgdz3vmIDnnXI3NmfEQI+Lj2ENNiigEksgkhC14x8v3ioNzSyB389VoL/dI bmnTwEZZssRDjMqgPJC2hp40hcmMJXJnOpsLiBZou+aPyro15vRmfi72qEEdzSl/ YCS3MgZ9CASZi8tU6SuMWA/6mSKzL7xxTsXShByREiqwK+zMKNbFZqhnNqa494+h MoWf6s567mPMceLyTVkYOWhDAVf3MFpob/PtFjqu4Kn+DDM8X2MxxOdp4KinpYT1 1Kw0w8m5xN41Z9fmPuJAVWmOFizigRMiprNWnBsS2yF41qJGGCiOOLB4ukT2og6z LzlmnpCh23sBZA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:49:21 2026 by rpki-client