This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json) Hash identifier: FFumQjoHi7Evbxw/IO5S7icoLPZR1HzUVvcRut/HXK8= Subject key identifier: 8B:FE:F1:36:54:EB:A3:3A:7A:84:28:C4:38:FB:54:AC:37:39:23:42 Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Certificate serial: 019BF5075C694B6515D863D281D09D72861B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft Manifest number: 11FB Signing time: Sun 25 Jan 2026 12:00:58 +0000 Manifest this update: Sun 25 Jan 2026 12:00:58 +0000 Manifest next update: Mon 26 Jan 2026 12:00:58 +0000 Files and hashes: 1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=) 2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: zgCTLl6meZx5dwGslV9P2jAIBebhsKGkQWJiatgxmbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:5c:69:4b:65:15:d8:63:d2:81:d0:9d:72:86:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee Validity Not Before: Jan 25 12:00:58 2026 GMT Not After : Jan 26 12:00:58 2026 GMT Subject: CN=8bfef13654eba33a7a8428c438fb54ac37392342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:c6:26:42:51:42:9f:ff:dd:64:8a:f5:81: a9:70:7c:ad:37:93:c6:9a:7b:7a:e2:92:e2:d7:3c: 9d:ce:96:1d:11:51:09:9e:96:b7:01:40:4f:2a:e4: a9:0b:a7:d9:63:19:54:ab:5c:ec:0c:2d:1e:e5:1e: 73:59:dc:03:e0:85:9b:ad:5e:0d:1f:ee:77:31:50: c4:79:4f:92:f8:b1:7f:53:96:d1:20:04:76:d5:15: 42:a8:b7:de:0b:fd:3c:0d:b8:b2:7b:01:6f:4c:79: e5:67:f4:d5:ab:f7:96:75:c7:49:65:60:19:09:64: e4:0f:6e:fd:c3:43:e5:81:84:2d:17:fe:1e:5f:fa: 2a:51:55:bf:33:11:05:66:c1:24:6f:e7:00:e6:1e: dd:4d:c2:d5:95:01:72:b4:e3:09:ea:fb:13:d0:0e: 3a:81:53:7a:95:f1:36:0b:2d:59:67:ee:17:d0:2d: 17:0e:88:8d:d0:b3:8c:94:90:2b:9a:cc:58:9e:11: 56:6d:f5:df:38:56:0f:53:61:7e:0b:3d:e3:ed:7d: f8:84:6d:14:e5:f7:5e:fc:f2:bd:b8:8d:6e:b3:41: 68:53:31:43:1d:53:16:9b:1a:f1:aa:aa:fc:30:0a: 29:a1:e3:0e:56:81:e8:fd:2f:dd:d9:00:9f:85:2b: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FE:F1:36:54:EB:A3:3A:7A:84:28:C4:38:FB:54:AC:37:39:23:42 X509v3 Authority Key Identifier: keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d0:21:dd:60:d4:c3:6b:df:e0:e0:17:4d:bc:b6:98:f3:7d: de:41:25:0d:2d:d4:a7:2d:af:ea:17:db:48:54:b7:1f:1d:86: 93:82:8b:d3:a2:ab:ff:ee:78:43:d3:71:be:3a:87:6e:cd:44: e3:af:18:42:50:90:88:4f:f3:f0:7d:92:6e:8b:4d:09:5a:ee: 96:8e:34:10:18:d9:d6:19:6b:06:ee:58:00:32:d8:23:51:39: 13:3b:ff:8c:c6:4b:31:8f:c7:db:0d:9e:e6:af:33:f5:af:3e: 68:5c:40:94:57:72:8d:a3:07:90:3d:c1:de:91:0f:ea:83:e6: 68:ad:fc:5f:a5:fc:3e:42:cb:18:12:cc:2e:09:e4:42:69:f5: 9b:a7:8d:22:6a:ca:04:1b:fd:e1:a7:1c:c6:b0:43:6d:f4:6d: f4:d6:7e:46:da:cc:f6:38:b9:5c:01:e9:f9:1d:34:f6:92:ab: 0e:59:0e:16:17:b8:ac:85:7a:4c:53:71:18:f9:33:ac:ed:1a: f3:de:57:f3:e2:33:15:8b:41:95:fe:2b:75:fe:f1:22:d5:85: 61:20:fc:6f:4d:6d:fb:15:e4:92:3a:7e:f1:77:e8:8d:18:d5: f7:18:35:28:71:98:70:3d:27:f3:00:26:d3:8b:3a:15:b4:13: b9:66:02:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B1xpS2UV2GPSgdCdcoYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk MDBjZWUwHhcNMjYwMTI1MTIwMDU4WhcNMjYwMTI2MTIwMDU4WjAzMTEwLwYDVQQD Eyg4YmZlZjEzNjU0ZWJhMzNhN2E4NDI4YzQzOGZiNTRhYzM3MzkyMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyHGJkJRQp//3WSK9YGpcHytN5PG mnt64pLi1zydzpYdEVEJnpa3AUBPKuSpC6fZYxlUq1zsDC0e5R5zWdwD4IWbrV4N H+53MVDEeU+S+LF/U5bRIAR21RVCqLfeC/08DbiyewFvTHnlZ/TVq/eWdcdJZWAZ CWTkD279w0PlgYQtF/4eX/oqUVW/MxEFZsEkb+cA5h7dTcLVlQFytOMJ6vsT0A46 gVN6lfE2Cy1ZZ+4X0C0XDoiN0LOMlJArmsxYnhFWbfXfOFYPU2F+Cz3j7X34hG0U 5fde/PK9uI1us0FoUzFDHVMWmxrxqqr8MAopoeMOVoHo/S/d2QCfhSu3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv+8TZU66M6eoQoxDj7VKw3OSNCMB8GA1UdIwQY MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt ZTkwN2FmMDdmZjExLzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNAh3WDU w2vf4OAXTby2mPN93kElDS3Upy2v6hfbSFS3Hx2Gk4KL06Kr/+54Q9NxvjqHbs1E 468YQlCQiE/z8H2SbotNCVrulo40EBjZ1hlrBu5YADLYI1E5Ezv/jMZLMY/H2w2e 5q8z9a8+aFxAlFdyjaMHkD3B3pEP6oPmaK38X6X8PkLLGBLMLgnkQmn1m6eNImrK BBv94accxrBDbfRt9NZ+RtrM9ji5XAHp+R009pKrDlkOFhe4rIV6TFNxGPkzrO0a 895X8+IzFYtBlf4rdf7xItWFYSD8b01t+xXkkjp+8XfojRjV9xg1KHGYcD0n8wAm 04s6FbQTuWYC0w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:57 2026 by rpki-client