This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json) Hash identifier: Q2OmAHlsYIoWQHswfpqAhQUFJ7R9rBP6KnOjwKI5EMY= Subject key identifier: 88:99:E1:36:BB:77:74:C8:11:70:9B:0F:7D:15:DD:E9:B3:FE:18:23 Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Certificate serial: 019BF4D0D8BB68D58EA584CF3C574F719276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 11:01:26 +0000 Manifest this update: Sun 25 Jan 2026 11:01:26 +0000 Manifest next update: Mon 26 Jan 2026 11:01:26 +0000 Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=) 2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=) 3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: N6cPgmnMK1fTl+tHbwKuM2xrdtCoaoFtHsd224qhOU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:d8:bb:68:d5:8e:a5:84:cf:3c:57:4f:71:92:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f Validity Not Before: Jan 25 11:01:26 2026 GMT Not After : Jan 26 11:01:26 2026 GMT Subject: CN=8899e136bb7774c811709b0f7d15dde9b3fe1823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:c4:e2:de:5a:ad:d9:2e:f6:93:fe:e7:c1: 55:2c:f7:b7:1d:01:e5:0b:12:11:58:78:97:db:29: da:d9:73:4d:d1:62:cb:78:6e:09:f7:18:70:75:d1: 3a:27:eb:66:9e:c6:48:d8:ec:a3:8d:c8:80:d0:e0: f9:4e:83:db:c2:9e:0e:83:ea:1e:66:5d:ea:33:ad: 77:e3:87:4a:90:6d:62:8d:72:c2:08:24:51:57:86: 61:47:50:3d:06:4a:b9:bb:f1:bf:2a:84:a9:0d:99: 03:b5:06:cb:48:62:4c:09:78:6d:94:d6:04:39:30: 79:26:1f:5c:28:10:27:c9:d4:7c:37:75:99:4d:e2: c3:29:d8:6a:6a:df:d6:52:47:23:21:c2:d5:8a:c4: 8c:df:44:60:39:04:3c:35:14:98:d8:c9:aa:a0:3a: c5:3d:ff:16:8f:14:4b:03:f3:ef:ab:5c:46:0d:39: 63:e8:25:7f:48:3a:d6:8b:25:34:97:c4:2a:bb:e3: 1f:de:13:3f:0d:51:9a:43:27:f8:04:74:ea:6b:d4: a0:1e:41:20:2a:16:17:ec:0b:6c:68:cb:dc:d5:1b: 2f:68:ab:2d:e4:03:04:aa:3e:a7:44:25:b8:9b:49: c2:ad:9a:38:fa:31:11:88:84:fb:44:7a:c8:8f:42: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:99:E1:36:BB:77:74:C8:11:70:9B:0F:7D:15:DD:E9:B3:FE:18:23 X509v3 Authority Key Identifier: keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:52:0e:44:01:53:08:e1:6e:f8:fc:54:95:97:34:99:f9:11: 32:73:60:fb:02:79:e5:c4:63:10:1d:db:bf:1d:95:c2:09:c6: cd:c0:8e:8e:b1:66:92:3d:d9:7f:71:45:1f:39:6e:a3:97:c8: 91:6b:23:47:f5:b4:97:80:19:4e:5c:42:03:ce:a4:47:dd:f5: bf:8a:88:2f:fb:86:00:79:46:2e:cf:de:46:8c:b0:ce:65:e0: d3:ad:ab:80:6a:b2:8e:6c:9b:18:4e:1f:52:4d:77:e2:0a:60: cd:f3:c8:71:2b:20:6b:c3:2d:b5:71:07:67:30:b0:2a:5b:e4: 6a:08:4c:51:a8:c6:90:4a:d3:76:e1:65:b2:94:d4:3a:6b:82: 15:0b:1b:47:e7:b5:bc:82:bc:4b:3a:5d:b1:70:66:aa:99:1d: 91:47:e0:65:83:32:7e:25:47:74:ef:a0:72:f2:50:22:f9:14: 41:27:d1:ba:a8:78:48:16:8d:fb:ab:81:f7:cb:e2:ba:cf:0e: 94:9b:b4:41:49:f4:80:c5:44:15:2a:43:19:3f:f3:64:60:fc: 0f:31:c7:c4:c9:ba:de:87:83:7a:26:59:e9:73:ac:43:17:4a: 9b:25:29:d7:86:76:8d:05:4c:92:fd:1f:aa:d8:aa:3e:89:4e: 58:59:af:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Ni7aNWOpYTPPFdPcZJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl OWMxOWYwHhcNMjYwMTI1MTEwMTI2WhcNMjYwMTI2MTEwMTI2WjAzMTEwLwYDVQQD Eyg4ODk5ZTEzNmJiNzc3NGM4MTE3MDliMGY3ZDE1ZGRlOWIzZmUxODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T/E4t5ardku9pP+58FVLPe3HQHl CxIRWHiX2yna2XNN0WLLeG4J9xhwddE6J+tmnsZI2OyjjciA0OD5ToPbwp4Og+oe Zl3qM61344dKkG1ijXLCCCRRV4ZhR1A9Bkq5u/G/KoSpDZkDtQbLSGJMCXhtlNYE OTB5Jh9cKBAnydR8N3WZTeLDKdhqat/WUkcjIcLVisSM30RgOQQ8NRSY2MmqoDrF Pf8WjxRLA/Pvq1xGDTlj6CV/SDrWiyU0l8Qqu+Mf3hM/DVGaQyf4BHTqa9SgHkEg KhYX7AtsaMvc1RsvaKst5AMEqj6nRCW4m0nCrZo4+jERiIT7RHrIj0KuCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiZ4Ta7d3TIEXCbD30V3emz/hgjMB8GA1UdIwQY MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5 LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1IORAFT COFu+PxUlZc0mfkRMnNg+wJ55cRjEB3bvx2VwgnGzcCOjrFmkj3Zf3FFHzluo5fI kWsjR/W0l4AZTlxCA86kR931v4qIL/uGAHlGLs/eRoywzmXg062rgGqyjmybGE4f Uk134gpgzfPIcSsga8MttXEHZzCwKlvkaghMUajGkErTduFlspTUOmuCFQsbR+e1 vIK8SzpdsXBmqpkdkUfgZYMyfiVHdO+gcvJQIvkUQSfRuqh4SBaN+6uB98vius8O lJu0QUn0gMVEFSpDGT/zZGD8DzHHxMm63oeDeiZZ6XOsQxdKmyUp14Z2jQVMkv0f qtiqPolOWFmvkw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:41 2026 by rpki-client