This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: 0dfDcxpRxp9lFwrThIoSP/wNz/udIM80rrOaWKO+/4g= Subject key identifier: F1:76:9D:2F:30:75:C1:E0:3C:9E:35:AF:C9:0E:91:73:A2:74:CC:C9 Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019BF507BC8C734C59D4A6A50A024915CEA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0EAB Signing time: Sun 25 Jan 2026 12:01:23 +0000 Manifest this update: Sun 25 Jan 2026 12:01:23 +0000 Manifest next update: Mon 26 Jan 2026 12:01:23 +0000 Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: Uwy4N0Ff1FLn8Ntp8Iq1lXtnFKqRXrEGO0bKYEbY2ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:bc:8c:73:4c:59:d4:a6:a5:0a:02:49:15:ce:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Jan 25 12:01:23 2026 GMT Not After : Jan 26 12:01:23 2026 GMT Subject: CN=f1769d2f3075c1e03c9e35afc90e9173a274ccc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:ee:4d:aa:f7:06:30:31:2d:5b:7c:05:29: b9:76:7e:3f:88:7b:17:d8:80:4d:d3:b4:72:3e:b6: 0f:30:b5:a5:01:44:f6:92:ed:87:cd:7c:0f:01:4d: c9:05:49:f2:7e:27:ef:f4:fc:b1:66:0c:1f:40:1e: f4:cc:c5:9a:c6:64:5e:db:ba:4e:36:c1:00:90:ae: 48:12:32:ad:71:47:d2:c8:9f:48:59:9d:1b:76:00: 9c:25:43:f7:a2:a8:2c:36:f1:83:bd:24:8f:24:61: 1a:0c:c7:9b:9e:ea:d4:eb:81:1c:b1:da:23:17:81: 9d:84:40:b9:20:b0:68:36:ed:f0:3c:61:9d:4b:6b: cf:18:95:c0:33:0a:d7:0a:88:a5:18:ef:f5:50:29: c9:e5:ea:9e:7d:1f:4f:6d:fc:19:7c:bf:61:72:98: 6a:75:da:68:dc:c1:88:1c:f1:5b:2c:11:20:24:02: 93:15:2e:3d:4d:0b:1f:ce:d2:23:9c:0b:39:90:69: 13:36:6b:eb:47:31:32:aa:bc:06:5b:db:30:1a:d0: d6:77:43:97:54:c1:ca:3d:ef:ef:ce:15:a3:3c:03: 4e:6b:c2:ca:ff:a8:f7:d9:e0:99:c8:bf:80:d7:01: df:3c:25:2a:0b:62:fc:84:70:f9:08:e9:43:39:43: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:9D:2F:30:75:C1:E0:3C:9E:35:AF:C9:0E:91:73:A2:74:CC:C9 X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c2:66:54:94:36:77:9b:dc:35:f3:ae:12:96:8c:2d:e6:71: 6a:25:5e:97:e1:28:cc:e7:be:03:f4:cc:b4:72:e8:36:0e:fe: 2a:ae:15:eb:ef:c2:ec:f3:a7:ec:a3:f2:23:ed:0c:0a:b1:0c: 82:76:b1:fe:21:be:b2:2f:ef:39:ad:1a:52:21:80:c5:67:14: 00:bb:03:70:1b:f2:6b:55:27:11:7a:f5:fa:a0:80:bc:75:f9: 44:76:52:9f:89:97:49:c3:c5:8d:6e:e4:97:99:88:3f:d3:f5: 1d:20:5f:6e:43:64:f6:be:3b:94:e8:f8:a1:62:8f:f7:13:25: d7:69:53:41:d4:fd:ea:dd:84:8f:ea:a1:57:df:d9:c7:21:98: dc:da:e0:aa:76:1a:4c:53:78:f2:80:05:44:e9:6b:91:3f:57: cc:48:fe:7a:03:05:19:13:a1:03:90:6f:58:f3:86:ce:24:a9: 86:d7:a3:4f:f2:f5:d9:3a:37:16:94:f2:a0:9d:7b:cb:58:34: ce:5a:fa:17:44:37:f8:d3:e8:d0:91:c0:fd:a0:07:33:b1:75: b9:3f:e8:1a:d0:8c:54:5d:51:51:8b:86:43:71:bd:b5:6f:a2: dc:df:7a:3d:07:3c:46:65:0d:45:21:eb:5a:25:04:7a:85:ad: 67:1a:26:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B7yMc0xZ1KalCgJJFc6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjYwMTI1MTIwMTIzWhcNMjYwMTI2MTIwMTIzWjAzMTEwLwYDVQQD EyhmMTc2OWQyZjMwNzVjMWUwM2M5ZTM1YWZjOTBlOTE3M2EyNzRjY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnfuTar3BjAxLVt8BSm5dn4/iHsX 2IBN07RyPrYPMLWlAUT2ku2HzXwPAU3JBUnyfifv9PyxZgwfQB70zMWaxmRe27pO NsEAkK5IEjKtcUfSyJ9IWZ0bdgCcJUP3oqgsNvGDvSSPJGEaDMebnurU64Ecsdoj F4GdhEC5ILBoNu3wPGGdS2vPGJXAMwrXCoilGO/1UCnJ5eqefR9PbfwZfL9hcphq ddpo3MGIHPFbLBEgJAKTFS49TQsfztIjnAs5kGkTNmvrRzEyqrwGW9swGtDWd0OX VMHKPe/vzhWjPANOa8LK/6j32eCZyL+A1wHfPCUqC2L8hHD5COlDOUPxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF2nS8wdcHgPJ41r8kOkXOidMzJMB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsJmVJQ2 d5vcNfOuEpaMLeZxaiVel+EozOe+A/TMtHLoNg7+Kq4V6+/C7POn7KPyI+0MCrEM gnax/iG+si/vOa0aUiGAxWcUALsDcBvya1UnEXr1+qCAvHX5RHZSn4mXScPFjW7k l5mIP9P1HSBfbkNk9r47lOj4oWKP9xMl12lTQdT96t2Ej+qhV9/ZxyGY3NrgqnYa TFN48oAFROlrkT9XzEj+egMFGROhA5BvWPOGziSphtejT/L12To3FpTyoJ17y1g0 zlr6F0Q3+NPo0JHA/aAHM7F1uT/oGtCMVF1RUYuGQ3G9tW+i3N96PQc8RmUNRSHr WiUEeoWtZxomMg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:43 2026 by rpki-client