This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json) Hash identifier: C2GN+r6e/Y9x9qPqUEB4Bg0e5VXS1TBwSuVYrS4qsWw= Subject key identifier: A1:A4:7E:EA:49:19:2A:EA:9D:C4:DF:A5:CF:D0:F1:E9:E4:00:6B:C0 Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e Certificate serial: 019BF6BF4977983C542035DB58EDE46ECE68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 20:01:29 +0000 Manifest this update: Sun 25 Jan 2026 20:01:29 +0000 Manifest next update: Mon 26 Jan 2026 20:01:29 +0000 Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=) 2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: 5M6+Poi7dnCB6TDXK2TUXLEeuWpUJm4QFw7G4ljAt+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:49:77:98:3c:54:20:35:db:58:ed:e4:6e:ce:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e Validity Not Before: Jan 25 20:01:29 2026 GMT Not After : Jan 26 20:01:29 2026 GMT Subject: CN=a1a47eea49192aea9dc4dfa5cfd0f1e9e4006bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:17:51:ff:31:83:f7:d0:c5:7d:32:f7:77: 17:ae:a2:5b:a9:d4:4d:c2:10:85:9f:34:6b:d1:eb: de:ee:26:c7:7d:a7:0a:3e:cd:18:d6:64:2d:38:04: c6:5b:16:6d:4a:8f:ba:f3:f4:95:73:bd:af:a6:b0: 97:08:fe:e5:62:dc:5b:34:5d:76:35:ef:93:56:1b: 81:66:db:7b:e9:cf:72:f9:19:5d:2e:eb:47:f6:37: c5:11:c1:32:d7:06:00:98:67:e7:21:96:cb:cb:1a: 1a:07:fd:c3:7c:bf:10:88:e0:b2:b5:89:26:22:39: 48:19:a7:16:aa:b1:e6:b1:5b:c2:18:d5:2a:15:2e: 93:67:0e:13:76:cf:20:f0:8d:b8:60:5d:9f:55:46: 51:47:f4:b3:d0:44:0a:dd:69:52:53:63:1d:54:01: a1:90:aa:bf:0a:ea:fe:17:55:97:25:57:77:ce:5b: 0d:ab:bb:de:7f:33:82:38:25:83:fd:92:52:7b:0a: db:38:ac:18:8b:31:ac:d1:41:b1:f0:9b:b5:73:9b: 0f:c4:8b:1c:02:72:6e:1b:4a:f9:27:93:3d:71:df: 1a:35:c9:4a:1d:b8:ae:75:a5:4f:f5:cb:9b:7b:4a: 95:a3:7b:85:3d:e3:b6:06:0a:26:a2:54:4a:f6:cc: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:7E:EA:49:19:2A:EA:9D:C4:DF:A5:CF:D0:F1:E9:E4:00:6B:C0 X509v3 Authority Key Identifier: keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5c:9e:e4:44:45:2d:f3:9a:14:06:25:51:d2:b7:19:17:67: 11:be:23:a8:e9:40:1f:53:29:f5:a8:66:35:9a:55:ee:a6:de: 92:fd:38:b0:96:7f:8e:f0:95:7d:92:12:a1:d4:b1:e3:6c:67: 45:80:24:c8:a1:6e:63:72:1c:56:cd:b8:3d:b4:e4:03:18:87: 57:3d:23:c9:45:74:28:96:53:60:ec:c3:17:a7:20:28:7b:fb: 51:c0:f5:41:04:53:92:2c:08:9d:ed:00:a6:6f:02:4c:11:9d: 27:13:97:e6:ea:cf:d7:e0:15:c5:0b:04:8a:a9:e5:b1:fc:51: f5:89:8e:a7:ee:b6:74:d0:ac:2b:cc:4d:4f:ec:6b:59:8e:77: d9:6e:7b:00:07:61:72:dd:20:1d:03:b4:1b:13:c3:bf:5b:c4: 11:91:d3:86:eb:6f:49:ae:db:de:f3:64:fe:8d:ff:0f:46:85: cd:58:6c:c1:1d:2c:99:6f:89:1e:7b:65:da:42:c3:c1:fd:2b: d5:f7:44:89:dd:55:c7:a2:8c:20:83:ed:c0:2a:e0:ea:86:c1: a0:ab:51:95:f4:f9:e3:73:18:c2:66:fa:74:cd:24:13:71:3d: 22:ee:dc:5e:04:28:e2:c2:a3:05:02:43:81:d3:ad:0b:96:51: e3:c5:ce:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0l3mDxUIDXbWO3kbs5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4 ZDg3MWUwHhcNMjYwMTI1MjAwMTI5WhcNMjYwMTI2MjAwMTI5WjAzMTEwLwYDVQQD EyhhMWE0N2VlYTQ5MTkyYWVhOWRjNGRmYTVjZmQwZjFlOWU0MDA2YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3UXUf8xg/fQxX0y93cXrqJbqdRN whCFnzRr0eve7ibHfacKPs0Y1mQtOATGWxZtSo+68/SVc72vprCXCP7lYtxbNF12 Ne+TVhuBZtt76c9y+RldLutH9jfFEcEy1wYAmGfnIZbLyxoaB/3DfL8QiOCytYkm IjlIGacWqrHmsVvCGNUqFS6TZw4Tds8g8I24YF2fVUZRR/Sz0EQK3WlSU2MdVAGh kKq/Cur+F1WXJVd3zlsNq7vefzOCOCWD/ZJSewrbOKwYizGs0UGx8Ju1c5sPxIsc AnJuG0r5J5M9cd8aNclKHbiudaVP9cube0qVo3uFPeO2BgomolRK9sw6nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGkfupJGSrqncTfpc/Q8enkAGvAMB8GA1UdIwQY MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4 LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglye5ERF LfOaFAYlUdK3GRdnEb4jqOlAH1Mp9ahmNZpV7qbekv04sJZ/jvCVfZISodSx42xn RYAkyKFuY3IcVs24PbTkAxiHVz0jyUV0KJZTYOzDF6cgKHv7UcD1QQRTkiwIne0A pm8CTBGdJxOX5urP1+AVxQsEiqnlsfxR9YmOp+62dNCsK8xNT+xrWY532W57AAdh ct0gHQO0GxPDv1vEEZHThutvSa7b3vNk/o3/D0aFzVhswR0smW+JHntl2kLDwf0r 1fdEid1Vx6KMIIPtwCrg6obBoKtRlfT543MYwmb6dM0kE3E9Iu7cXgQo4sKjBQJD gdOtC5ZR48XO7A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:05 2026 by rpki-client