This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json) Hash identifier: afiYFW2MuQgOIabsW2wC6HNhS4T9cP6J9xyQj84BE8k= Subject key identifier: 85:14:C5:DE:2B:89:E5:19:83:04:D8:E7:D0:56:99:9F:D7:AD:68:41 Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef Certificate serial: 019BB24BB8D08988DFCE5C7E53729E72CD39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft Manifest number: 10E2 Signing time: Mon 12 Jan 2026 13:01:05 +0000 Manifest this update: Mon 12 Jan 2026 13:01:05 +0000 Manifest next update: Tue 13 Jan 2026 13:01:05 +0000 Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: nV1mipkaaX0graGwrci0E0hgR/IsxbZzm6UDyDcHTEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4b:b8:d0:89:88:df:ce:5c:7e:53:72:9e:72:cd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef Validity Not Before: Jan 12 13:01:05 2026 GMT Not After : Jan 13 13:01:05 2026 GMT Subject: CN=8514c5de2b89e5198304d8e7d056999fd7ad6841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:48:92:cf:68:3f:da:b3:84:29:93:63:a9: f8:9d:85:c6:de:f6:df:23:c2:a1:92:26:6d:56:e0: a8:72:95:07:33:2e:8d:00:06:43:32:ac:19:f9:af: db:13:7f:79:9d:c0:bf:3b:4d:7d:0d:11:8b:8a:eb: 58:93:9a:13:3a:85:0b:ef:e2:4a:59:17:7b:cb:bd: 32:c1:49:61:0b:0c:c0:0f:ed:7c:01:72:ea:04:9f: 28:e6:c3:b6:00:b6:91:1f:a3:df:9f:b5:a4:b9:49: d6:ec:86:f9:61:88:10:7e:01:6a:f6:45:5b:dc:27: 98:0a:92:4b:22:d4:c4:b0:a1:97:a7:c5:7b:c9:ad: b4:eb:7b:14:fd:4c:e5:4d:0a:02:56:36:70:fd:74: 4d:a7:9c:a6:04:11:8e:45:6d:06:d9:6b:97:f7:90: e5:68:4e:b4:16:f0:52:5a:35:53:09:d5:39:c5:e3: 32:63:2f:b6:a8:ae:7c:b0:1a:7b:31:ff:96:08:5e: 47:85:c4:7a:71:8c:d9:66:8a:c5:41:1f:73:5c:9e: 41:54:0d:b6:e1:46:93:c0:ef:6e:49:54:4a:d5:ff: 85:3d:ef:73:38:a8:70:a9:d4:89:90:5e:85:4e:56: 53:f2:6b:6c:f5:04:70:ed:b0:24:4a:c7:a4:fc:7f: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:14:C5:DE:2B:89:E5:19:83:04:D8:E7:D0:56:99:9F:D7:AD:68:41 X509v3 Authority Key Identifier: keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a5:60:39:ba:5b:a2:51:ef:3d:73:3c:70:bd:6c:57:55:19: 83:dd:47:7c:9e:68:47:82:f0:f1:1e:12:c6:55:bb:5c:4f:4a: 6b:c3:c2:be:85:0f:61:48:a0:c9:ac:ad:c3:5e:06:82:28:aa: 30:26:79:65:be:42:23:fe:b7:33:13:18:14:86:33:3c:e5:b2: 1e:e1:d5:52:90:f6:dc:65:fc:cb:d9:74:b8:1b:43:bb:01:cd: d5:af:1b:4f:da:ae:fd:0b:9b:56:c3:6f:d7:b5:09:26:1a:5d: 57:91:c6:a8:df:7c:ce:65:b9:46:15:82:6a:d0:2f:a9:a2:1a: 05:d9:8c:6c:fd:e9:29:d5:0a:32:ca:e9:92:28:d9:8a:aa:39: 93:dd:f5:65:29:29:dd:ea:89:60:e8:13:38:ce:fd:6f:f3:de: 2e:a8:f5:bb:8e:38:eb:18:bf:4f:b8:61:43:b0:63:1d:b6:e2: 6d:ec:dc:ed:7f:bd:37:18:1a:72:ed:7d:c7:03:f5:b9:f7:26: 72:2c:6d:e4:93:01:99:34:4e:66:ec:6c:b0:99:8d:79:3c:64: f7:42:f1:7e:e8:29:20:20:92:22:47:9f:65:61:dc:46:49:88: 7c:75:c2:49:30:d6:b6:a0:10:0e:a0:fc:5e:62:4d:0c:90:ec: fa:d5:b8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyS7jQiYjfzlx+U3Kecs05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5 Y2VlZWYwHhcNMjYwMTEyMTMwMTA1WhcNMjYwMTEzMTMwMTA1WjAzMTEwLwYDVQQD Eyg4NTE0YzVkZTJiODllNTE5ODMwNGQ4ZTdkMDU2OTk5ZmQ3YWQ2ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZhIks9oP9qzhCmTY6n4nYXG3vbf I8KhkiZtVuCocpUHMy6NAAZDMqwZ+a/bE395ncC/O019DRGLiutYk5oTOoUL7+JK WRd7y70ywUlhCwzAD+18AXLqBJ8o5sO2ALaRH6Pfn7WkuUnW7Ib5YYgQfgFq9kVb 3CeYCpJLItTEsKGXp8V7ya2063sU/UzlTQoCVjZw/XRNp5ymBBGORW0G2WuX95Dl aE60FvBSWjVTCdU5xeMyYy+2qK58sBp7Mf+WCF5HhcR6cYzZZorFQR9zXJ5BVA22 4UaTwO9uSVRK1f+FPe9zOKhwqdSJkF6FTlZT8mts9QRw7bAkSsek/H/NLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUUxd4rieUZgwTY59BWmZ/XrWhBMB8GA1UdIwQY MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6VgObpb olHvPXM8cL1sV1UZg91HfJ5oR4Lw8R4SxlW7XE9Ka8PCvoUPYUigyaytw14Ggiiq MCZ5Zb5CI/63MxMYFIYzPOWyHuHVUpD23GX8y9l0uBtDuwHN1a8bT9qu/QubVsNv 17UJJhpdV5HGqN98zmW5RhWCatAvqaIaBdmMbP3pKdUKMsrpkijZiqo5k931ZSkp 3eqJYOgTOM79b/PeLqj1u4446xi/T7hhQ7BjHbbibezc7X+9Nxgacu19xwP1ufcm cixt5JMBmTROZuxssJmNeTxk90LxfugpICCSIkefZWHcRkmIfHXCSTDWtqAQDqD8 XmJNDJDs+tW4CA== -----END CERTIFICATE-----Generated at Mon Jan 12 23:29:46 2026 by rpki-client