This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json) Hash identifier: oJBJ5uqRCSnTNHY9aJ1jZ6jlHkqQHWlI4rsS7IROKLA= Subject key identifier: 61:67:14:44:D4:2C:D1:6A:3A:CF:0E:CA:72:53:01:47:A1:6B:00:8D Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1 Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1 Certificate serial: 019BAE38D2B8E1DBF7F03957661683918BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft Manifest number: 101F Signing time: Sun 11 Jan 2026 18:01:58 +0000 Manifest this update: Sun 11 Jan 2026 18:01:58 +0000 Manifest next update: Mon 12 Jan 2026 18:01:58 +0000 Files and hashes: 1: Ntq657VT6l4Y2gPWI-QPcLNDXIM.roa (hash: Pt8tZkYbxo4DV40Mb0Y1qZZ49X4ObdKzZapAV4hW5og=) 2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: BbZ8C923nFVrVLNWbKr8NSAGPm0EnTZDS//51SVTvPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:d2:b8:e1:db:f7:f0:39:57:66:16:83:91:8b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1 Validity Not Before: Jan 11 18:01:58 2026 GMT Not After : Jan 12 18:01:58 2026 GMT Subject: CN=61671444d42cd16a3acf0eca72530147a16b008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:00:47:31:cc:b4:87:a0:a8:14:ee:4b:14: 6f:8e:27:e7:5b:7a:0b:1e:07:7a:2f:88:ca:b5:e7: 81:80:bf:15:2d:b6:cc:34:26:e0:46:fd:ff:8d:b8: c6:13:83:d4:96:e3:d2:d3:57:94:f8:e9:e9:b8:90: 49:7a:4b:33:0a:b0:c5:2f:58:c7:7a:5d:39:22:15: 91:9a:b2:1d:a4:d9:70:ee:8d:54:12:d8:79:dd:9e: a1:03:45:4f:ff:2c:12:33:4b:66:69:c6:a7:d7:19: a6:f5:c9:c4:99:b7:d4:05:06:08:44:9d:b0:29:37: c6:ed:9a:c7:2b:b2:08:07:e7:30:ba:ec:2f:00:67: e0:6e:f3:7c:2b:24:b0:0a:25:b2:4d:70:f3:78:db: 28:3d:9b:f0:80:cb:04:5f:8a:61:80:4f:6d:1f:00: 5d:aa:7b:22:be:c6:fb:0a:13:35:60:3a:a4:31:fe: ad:98:41:9e:5b:9c:d9:b9:e5:45:95:a7:b0:67:ec: 39:b8:dc:35:ce:67:9d:60:8d:99:e2:54:07:13:f0: d2:db:f0:d0:a6:1a:22:64:be:37:55:34:eb:49:1c: 1d:45:e2:39:6b:6b:85:6b:c1:d1:a9:9d:5f:72:ac: b7:a9:15:5f:77:68:43:02:ec:77:d5:76:71:4f:bd: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:14:44:D4:2C:D1:6A:3A:CF:0E:CA:72:53:01:47:A1:6B:00:8D X509v3 Authority Key Identifier: keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c8:b3:4a:77:e1:85:52:27:66:fa:50:47:ad:de:3c:e0:85: 2f:6b:dd:67:0d:f2:2b:69:f8:57:e7:08:92:7c:14:30:2c:a3: 65:da:22:a4:29:50:fb:cb:df:63:03:fe:83:5f:21:12:f8:7a: 77:f2:47:bb:2f:91:00:d6:fb:66:8c:5e:77:07:0f:00:35:9c: f9:83:f4:16:a1:64:cd:b1:e4:18:f3:5d:47:3c:7a:8b:8a:cb: 97:e3:03:97:9f:9a:7a:9b:4c:2d:0f:e4:1e:3c:76:16:fa:94: f4:9a:5f:86:3f:14:25:c1:26:37:66:2f:47:cf:74:56:56:3c: 27:1c:97:e7:b8:5e:33:e9:09:28:f3:e8:cf:93:ec:ec:bf:9b: cc:ac:f1:2c:cc:76:42:4c:06:4c:a1:89:b1:e8:e2:dd:11:59: 77:af:76:0a:c1:72:c8:97:5c:b1:7f:e5:8a:39:ce:c4:6a:52: 39:74:5d:d5:74:86:74:77:35:9d:2a:ef:8d:bf:0d:8f:c6:f6: 02:13:44:76:66:27:36:0f:41:cf:f6:35:72:f0:69:97:c1:07: 2b:e7:40:3c:9a:b0:68:b4:d7:21:d9:55:27:bb:89:3d:78:00: cf:fe:50:a8:ea:38:3d:68:75:9f:69:f1:f0:66:19:e5:13:ac: f7:c4:0c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuONK44dv38DlXZhaDkYv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTEyYzgwNGE3ZjRhNzRjZTU4Y2M3MWM5OTRmNWE5ZDU2 MTIyYjEwHhcNMjYwMTExMTgwMTU4WhcNMjYwMTEyMTgwMTU4WjAzMTEwLwYDVQQD Eyg2MTY3MTQ0NGQ0MmNkMTZhM2FjZjBlY2E3MjUzMDE0N2ExNmIwMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1YARzHMtIegqBTuSxRvjifnW3oL Hgd6L4jKteeBgL8VLbbMNCbgRv3/jbjGE4PUluPS01eU+OnpuJBJekszCrDFL1jH el05IhWRmrIdpNlw7o1UEth53Z6hA0VP/ywSM0tmacan1xmm9cnEmbfUBQYIRJ2w KTfG7ZrHK7IIB+cwuuwvAGfgbvN8KySwCiWyTXDzeNsoPZvwgMsEX4phgE9tHwBd qnsivsb7ChM1YDqkMf6tmEGeW5zZueVFlaewZ+w5uNw1zmedYI2Z4lQHE/DS2/DQ phoiZL43VTTrSRwdReI5a2uFa8HRqZ1fcqy3qRVfd2hDAux31XZxT73HFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFnFETULNFqOs8OynJTAUehawCNMB8GA1UdIwQY MBaAFLkRLIBKf0p0zljMccmU9anVYSKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMt NWUyYzlkYWI4NDAzLzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMtNWUyYzlkYWI4NDAz LzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcizSnfh hVInZvpQR63ePOCFL2vdZw3yK2n4V+cIknwUMCyjZdoipClQ+8vfYwP+g18hEvh6 d/JHuy+RANb7ZoxedwcPADWc+YP0FqFkzbHkGPNdRzx6i4rLl+MDl5+aeptMLQ/k Hjx2FvqU9Jpfhj8UJcEmN2YvR890VlY8JxyX57heM+kJKPPoz5Ps7L+bzKzxLMx2 QkwGTKGJseji3RFZd692CsFyyJdcsX/lijnOxGpSOXRd1XSGdHc1nSrvjb8Nj8b2 AhNEdmYnNg9Bz/Y1cvBpl8EHK+dAPJqwaLTXIdlVJ7uJPXgAz/5QqOo4PWh1n2nx 8GYZ5ROs98QMEg== -----END CERTIFICATE-----Generated at Mon Jan 12 01:23:57 2026 by rpki-client