This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json) Hash identifier: MNSGNVyPlr6CKvxdb/zYFPaweYnJjzLclL7Tuq1L0WQ= Subject key identifier: 0D:03:CF:BD:70:F9:D6:FF:CA:48:B8:20:9A:DD:99:64:EB:6C:C1:2F Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e Certificate serial: 019BF8AD6B020715294C2C8ABF46F1484047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 05:01:13 +0000 Manifest this update: Mon 26 Jan 2026 05:01:13 +0000 Manifest next update: Tue 27 Jan 2026 05:01:13 +0000 Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=) 2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: MJfupo5+o5kQ/CnS+GfO7fZ0nV9iIzcmgKvgy5R2FJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6b:02:07:15:29:4c:2c:8a:bf:46:f1:48:40:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e Validity Not Before: Jan 26 05:01:13 2026 GMT Not After : Jan 27 05:01:13 2026 GMT Subject: CN=0d03cfbd70f9d6ffca48b8209add9964eb6cc12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:07:35:45:56:cd:48:86:7b:d6:16:76:f4: a3:66:42:10:e9:1d:5e:30:24:e5:ec:93:fa:0b:41: 02:42:e8:56:fb:9b:12:5f:f6:b8:8c:e2:95:c8:91: b9:be:b4:f0:36:74:8f:c5:a1:7e:35:bf:fd:b1:a9: 81:d0:7d:e7:f8:4b:d2:a9:59:6f:cb:1a:9c:af:62: 29:47:af:c9:54:01:f9:56:a7:2d:54:dc:e6:29:23: 74:99:b4:bd:e7:40:fd:b4:50:ac:42:81:53:42:01: 55:a1:14:5a:81:5b:0d:f6:4b:f9:b1:78:08:bc:5a: dd:05:65:e3:83:27:12:70:0c:7a:43:0f:60:62:c7: 0e:8e:f2:81:92:f7:5d:6d:b8:ed:7c:4c:98:57:fc: 57:1a:a7:1a:e6:e3:54:17:20:89:9e:29:e2:29:3e: 2e:69:06:67:89:f2:78:4c:a2:1d:9d:3e:b7:61:17: 86:9b:14:68:1d:64:7b:8f:c5:f3:24:ac:89:c4:50: 67:25:01:08:81:da:a2:65:77:e8:09:16:92:3a:b5: 64:b9:1a:fe:b9:07:91:b5:82:c1:74:85:0c:9a:0a: 23:7d:86:80:55:ad:88:57:9c:81:bc:90:36:ff:6e: f2:9b:65:8e:93:1d:6d:ca:dd:47:72:99:19:9b:32: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:03:CF:BD:70:F9:D6:FF:CA:48:B8:20:9A:DD:99:64:EB:6C:C1:2F X509v3 Authority Key Identifier: keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ae:1f:64:04:f3:c3:0a:e5:62:73:dd:05:b4:30:43:6d:4c: e1:f7:09:07:e4:3b:e2:a1:9b:fd:94:6f:8d:ed:62:4a:28:26: b4:d3:df:ce:64:b7:09:49:68:57:5a:b0:22:29:de:0d:07:ae: 87:6f:b4:9c:e9:ea:07:86:a0:f3:9d:39:ba:80:e2:f8:86:68: 0e:dd:4a:bb:be:af:b6:1b:ce:a3:09:1a:2a:c1:63:20:67:a6: 97:b4:48:69:ac:37:ed:37:70:4a:b0:34:3c:05:44:23:b3:1a: b6:6c:04:57:87:0c:62:e7:3a:af:f4:a5:0c:53:9e:a5:4a:7e: ca:9f:0e:41:1d:82:06:47:63:57:63:df:3b:4f:4e:1f:d8:7e: c1:c6:9e:c6:a2:e2:a4:23:70:f7:84:1c:95:f1:c9:47:d3:81: 04:b9:f4:b7:a3:3a:bf:89:3c:3e:43:12:8c:d9:ec:8e:22:a2: 21:2c:e9:d5:1f:dc:2d:95:8f:64:bc:84:3d:20:e8:39:9d:74: be:7e:f5:64:8e:e7:1e:fd:b5:a9:53:a4:02:45:0d:34:5a:54: 55:47:85:7f:06:2a:87:53:c0:be:56:2a:e2:1e:6d:26:67:17: 3f:c5:1e:92:f2:9b:af:aa:a8:51:cf:a8:94:c7:08:ff:c6:ac: 8c:91:e4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWsCBxUpTCyKv0bxSEBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4 ZDg3MWUwHhcNMjYwMTI2MDUwMTEzWhcNMjYwMTI3MDUwMTEzWjAzMTEwLwYDVQQD EygwZDAzY2ZiZDcwZjlkNmZmY2E0OGI4MjA5YWRkOTk2NGViNmNjMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0HNUVWzUiGe9YWdvSjZkIQ6R1e MCTl7JP6C0ECQuhW+5sSX/a4jOKVyJG5vrTwNnSPxaF+Nb/9samB0H3n+EvSqVlv yxqcr2IpR6/JVAH5VqctVNzmKSN0mbS950D9tFCsQoFTQgFVoRRagVsN9kv5sXgI vFrdBWXjgycScAx6Qw9gYscOjvKBkvddbbjtfEyYV/xXGqca5uNUFyCJniniKT4u aQZnifJ4TKIdnT63YReGmxRoHWR7j8XzJKyJxFBnJQEIgdqiZXfoCRaSOrVkuRr+ uQeRtYLBdIUMmgojfYaAVa2IV5yBvJA2/27ym2WOkx1tyt1HcpkZmzKMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0Dz71w+db/yki4IJrdmWTrbMEvMB8GA1UdIwQY MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4 LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK4fZATz wwrlYnPdBbQwQ21M4fcJB+Q74qGb/ZRvje1iSigmtNPfzmS3CUloV1qwIineDQeu h2+0nOnqB4ag8505uoDi+IZoDt1Ku76vthvOowkaKsFjIGeml7RIaaw37TdwSrA0 PAVEI7MatmwEV4cMYuc6r/SlDFOepUp+yp8OQR2CBkdjV2PfO09OH9h+wcaexqLi pCNw94QclfHJR9OBBLn0t6M6v4k8PkMSjNnsjiKiISzp1R/cLZWPZLyEPSDoOZ10 vn71ZI7nHv21qVOkAkUNNFpUVUeFfwYqh1PAvlYq4h5tJmcXP8UekvKbr6qoUc+o lMcI/8asjJHk7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:09 2026 by rpki-client