This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft File: uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json) Hash identifier: v+Y3pAV8y+E2S4om5YlrL1o9uNOxeskijPLHnFFUt/g= Subject key identifier: 9E:E9:6C:72:C8:19:B1:99:A6:54:FD:CA:47:4C:32:89:9E:17:65:94 Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4 Certificate serial: 019BF763D545E0C5C4F2DB7500A526B7BC1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft Manifest number: 22 Signing time: Sun 25 Jan 2026 23:01:13 +0000 Manifest this update: Sun 25 Jan 2026 23:01:13 +0000 Manifest next update: Mon 26 Jan 2026 23:01:13 +0000 Files and hashes: 1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=) 2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: UfVTIBUapV75Y2t7crzi3sXJpFqUIdViRACcv8L/H2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d5:45:e0:c5:c4:f2:db:75:00:a5:26:b7:bc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4 Validity Not Before: Jan 25 23:01:13 2026 GMT Not After : Jan 26 23:01:13 2026 GMT Subject: CN=9ee96c72c819b199a654fdca474c32899e176594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:7d:a6:15:f6:8b:61:0a:70:c1:e2:95:77: 06:de:b7:78:cc:9f:b9:e4:ee:91:af:78:e2:25:05: 72:11:0e:4f:9c:96:3a:1d:57:0d:5d:1f:e5:cc:6c: a4:1b:4f:0d:c5:84:41:43:62:74:1c:cd:85:29:af: 39:17:79:36:30:2b:49:38:32:a2:ec:73:d0:32:5e: 5e:55:32:0d:bb:ee:7b:19:ef:cd:10:32:d5:b7:a9: 42:b4:4d:ef:27:6c:d4:53:bd:6a:d8:21:c8:7c:a1: 4a:19:1e:63:6f:df:d2:b9:8b:2a:36:fe:2c:68:93: 3b:38:12:97:57:17:11:d6:83:ae:9e:4a:fd:cb:6e: 63:2e:31:1f:f5:e6:4d:30:82:87:ef:1d:89:67:24: 7f:5f:14:49:45:0c:0b:48:da:b2:3e:de:35:88:3a: f1:ba:c4:98:2a:f7:c7:d4:93:c5:5e:b7:e7:4a:23: d6:3c:ce:13:4e:26:4f:e0:95:6b:80:44:1e:eb:9b: 34:55:7c:15:38:2a:c4:f7:0a:97:02:7d:66:96:96: 4c:d7:b0:c6:2f:4d:d0:95:fe:67:9b:d0:7f:40:5f: 7c:ba:e9:2e:9a:32:58:b3:11:49:27:a0:b7:d3:be: 0c:fe:fd:0f:d3:15:4d:90:b4:47:3e:9d:9e:e4:f9: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:6C:72:C8:19:B1:99:A6:54:FD:CA:47:4C:32:89:9E:17:65:94 X509v3 Authority Key Identifier: keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b9:39:3d:f8:d2:ba:3b:b1:c0:9e:2a:39:30:17:95:05:16: 55:4b:ea:9e:09:12:90:1c:6a:7b:d0:da:74:d6:30:49:d3:bd: 20:8b:21:9e:51:04:af:19:f7:2b:c0:91:fa:c3:77:a7:1a:98: 75:60:2a:1e:06:04:78:9a:ed:4e:58:db:1a:4e:de:76:45:9a: 0e:61:31:5a:fe:8f:fb:e5:db:8a:14:ce:12:e6:85:52:98:8b: fb:2d:e9:13:83:71:11:50:e7:ad:d4:05:aa:67:04:3d:73:c3: 95:56:e5:1e:29:10:94:4f:9c:50:4a:40:d7:1a:d0:e8:ca:a2: 00:a8:61:9e:54:9d:c9:7b:d0:3c:52:6d:f1:6f:dc:be:b3:4b: 39:37:f8:77:0e:e5:bf:83:d0:08:be:80:31:ea:5a:4f:25:68: bb:98:e2:30:3e:3c:50:1f:2b:ca:bb:15:68:27:cb:c4:08:04: cf:c6:eb:48:f7:80:9a:e5:78:a3:e0:cf:60:21:7a:a1:ea:95: d6:8f:c1:d3:fb:31:4f:96:e6:16:5a:04:16:0a:ed:0d:a0:4a: 4c:b5:a1:2f:74:89:cd:9a:20:d2:a3:80:c9:4e:1d:da:89:93: 4a:17:d3:67:d5:38:dd:51:15:ab:93:45:37:46:66:5c:eb:b7: 69:00:c5:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9VF4MXE8tt1AKUmt7waMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTdlYjdkNWYwNGQyNzE1NWYyMDE3ODZmMzkwZmI0MDhh NmFhZTQwHhcNMjYwMTI1MjMwMTEzWhcNMjYwMTI2MjMwMTEzWjAzMTEwLwYDVQQD Eyg5ZWU5NmM3MmM4MTliMTk5YTY1NGZkY2E0NzRjMzI4OTllMTc2NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrF9phX2i2EKcMHilXcG3rd4zJ+5 5O6Rr3jiJQVyEQ5PnJY6HVcNXR/lzGykG08NxYRBQ2J0HM2FKa85F3k2MCtJODKi 7HPQMl5eVTINu+57Ge/NEDLVt6lCtE3vJ2zUU71q2CHIfKFKGR5jb9/SuYsqNv4s aJM7OBKXVxcR1oOunkr9y25jLjEf9eZNMIKH7x2JZyR/XxRJRQwLSNqyPt41iDrx usSYKvfH1JPFXrfnSiPWPM4TTiZP4JVrgEQe65s0VXwVOCrE9wqXAn1mlpZM17DG L03Qlf5nm9B/QF98uukumjJYsxFJJ6C3074M/v0P0xVNkLRHPp2e5Pn3qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7pbHLIGbGZplT9ykdMMomeF2WUMB8GA1UdIwQY MBaAFLoX631fBNJxVfIBeG85D7QIpqrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAt MzBhZTEyNjQ2NGY3LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAtMzBhZTEyNjQ2NGY3 LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLk5PfjS ujuxwJ4qOTAXlQUWVUvqngkSkBxqe9DadNYwSdO9IIshnlEErxn3K8CR+sN3pxqY dWAqHgYEeJrtTljbGk7edkWaDmExWv6P++XbihTOEuaFUpiL+y3pE4NxEVDnrdQF qmcEPXPDlVblHikQlE+cUEpA1xrQ6MqiAKhhnlSdyXvQPFJt8W/cvrNLOTf4dw7l v4PQCL6AMepaTyVou5jiMD48UB8ryrsVaCfLxAgEz8brSPeAmuV4o+DPYCF6oeqV 1o/B0/sxT5bmFloEFgrtDaBKTLWhL3SJzZog0qOAyU4d2omTShfTZ9U43VEVq5NF N0ZmXOu3aQDFIg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:24 2026 by rpki-client