This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json) Hash identifier: de2SG0RSSCufHNTir/sYdumMW/J2/uF80b4OlbZTDwE= Subject key identifier: C7:DD:52:93:30:75:4A:34:56:74:1B:04:C2:A2:B8:B1:36:FF:25:37 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019BF65146BB724AD40F4754F9B2BFA25895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft Manifest number: 0BC0 Signing time: Sun 25 Jan 2026 18:01:20 +0000 Manifest this update: Sun 25 Jan 2026 18:01:20 +0000 Manifest next update: Mon 26 Jan 2026 18:01:20 +0000 Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=) 2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=) 3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: kXsC1DvvGlCQoDr7l4HwbzJalbUqQrKepQxisc97wGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:46:bb:72:4a:d4:0f:47:54:f9:b2:bf:a2:58:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Jan 25 18:01:20 2026 GMT Not After : Jan 26 18:01:20 2026 GMT Subject: CN=c7dd529330754a3456741b04c2a2b8b136ff2537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:33:c0:e7:6c:dc:66:ff:51:5c:7f:b3:2e: 8f:15:b8:ee:df:8d:44:95:89:b1:87:9e:6e:4b:f9: 82:4b:1c:8a:04:b4:84:4b:1e:a3:e0:6b:5b:e1:59: 5a:29:23:c9:11:a2:e6:47:0e:37:33:cb:02:b7:dc: 70:cb:0e:5c:9e:99:6e:12:03:01:b1:f9:97:82:2e: 79:c3:58:d5:fb:17:98:bf:6b:73:f3:cf:d2:5d:bc: 52:fb:70:f6:1e:96:96:68:5c:21:47:81:e5:a6:9f: 28:ec:74:9f:ad:4b:4c:35:dd:7d:b6:46:5b:5e:85: cb:a9:2a:ec:c9:c9:4f:c7:6d:67:ea:a9:2f:fb:60: 66:4e:a1:c1:b0:7c:26:3b:bc:29:2a:5f:a8:9b:be: be:cd:1e:33:b8:0f:30:19:5d:4d:2e:4f:d8:9b:1b: fa:64:44:0d:50:ef:4e:d5:dd:0b:4e:c3:56:f9:b2: 94:f5:32:64:0a:d2:45:2b:de:5b:21:d6:ac:df:92: 35:f9:b1:a0:5a:be:36:5d:b3:ec:c3:e1:39:e1:f1: 96:55:65:69:30:55:c9:e3:66:dd:9c:a7:a1:b9:6a: f0:68:cb:b7:fd:7b:d4:02:d5:59:72:74:81:01:00: c8:ed:92:26:64:90:fd:e9:20:fe:57:18:cd:59:66: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DD:52:93:30:75:4A:34:56:74:1B:04:C2:A2:B8:B1:36:FF:25:37 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6b:87:0f:1e:89:6b:d3:2c:af:1d:1a:a0:4a:a8:c7:04:ac: 33:b5:ba:d7:f2:cf:9c:35:56:3f:17:f2:3d:6a:75:4b:50:90: 41:69:cd:f7:22:32:ce:03:5c:36:8e:2e:5e:85:e9:2e:79:2c: bc:2a:70:c0:dd:5c:cd:9a:06:10:82:10:68:82:e2:ac:ed:e2: 8a:f4:15:22:91:54:df:4c:a6:f6:e6:fb:76:32:0f:84:07:f8: 6b:43:47:2b:34:9d:70:62:03:5f:b9:1c:13:6d:2e:62:8f:3e: 5b:48:c0:d4:73:0d:f6:42:b6:30:fe:8e:0b:91:a3:c0:b9:69: 52:2d:f6:c3:f8:fc:f5:8c:54:75:8d:e9:5f:2c:6c:c3:e1:4b: f1:3f:60:09:c2:68:93:43:f3:f5:e5:56:0b:70:c8:f6:7a:08: f3:4a:13:57:ba:ff:79:7b:c2:a9:dd:7e:eb:b0:9e:f6:d3:12: 15:a7:40:bf:5e:8c:e1:75:08:81:f3:0a:67:5e:26:bd:50:27: 1d:fc:05:32:99:41:55:92:66:0c:ef:82:e7:83:7d:aa:c8:28: eb:76:cb:95:c0:7f:13:44:05:f8:f6:0b:4a:a9:30:00:0f:f2: be:1b:41:2d:eb:21:c1:8e:90:44:e5:0d:0e:39:fb:bd:dc:ae: d5:63:d0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUa7ckrUD0dU+bK/oliVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjYwMTI1MTgwMTIwWhcNMjYwMTI2MTgwMTIwWjAzMTEwLwYDVQQD EyhjN2RkNTI5MzMwNzU0YTM0NTY3NDFiMDRjMmEyYjhiMTM2ZmYyNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ozwOds3Gb/UVx/sy6PFbju341E lYmxh55uS/mCSxyKBLSESx6j4Gtb4VlaKSPJEaLmRw43M8sCt9xwyw5cnpluEgMB sfmXgi55w1jV+xeYv2tz88/SXbxS+3D2HpaWaFwhR4Hlpp8o7HSfrUtMNd19tkZb XoXLqSrsyclPx21n6qkv+2BmTqHBsHwmO7wpKl+om76+zR4zuA8wGV1NLk/Ymxv6 ZEQNUO9O1d0LTsNW+bKU9TJkCtJFK95bIdas35I1+bGgWr42XbPsw+E54fGWVWVp MFXJ42bdnKehuWrwaMu3/XvUAtVZcnSBAQDI7ZImZJD96SD+VxjNWWbopwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfdUpMwdUo0VnQbBMKiuLE2/yU3MB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWuHDx6J a9Msrx0aoEqoxwSsM7W61/LPnDVWPxfyPWp1S1CQQWnN9yIyzgNcNo4uXoXpLnks vCpwwN1czZoGEIIQaILirO3iivQVIpFU30ym9ub7djIPhAf4a0NHKzSdcGIDX7kc E20uYo8+W0jA1HMN9kK2MP6OC5GjwLlpUi32w/j89YxUdY3pXyxsw+FL8T9gCcJo k0Pz9eVWC3DI9noI80oTV7r/eXvCqd1+67Ce9tMSFadAv16M4XUIgfMKZ14mvVAn HfwFMplBVZJmDO+C54N9qsgo63bLlcB/E0QF+PYLSqkwAA/yvhtBLeshwY6QROUN Djn7vdyu1WPQxw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:31 2026 by rpki-client