This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft File: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft (raw, json) Hash identifier: XsakgptdPDNshdb171nVq3oQdKLIQQg6jf4403WstW0= Subject key identifier: FE:D7:68:26:E6:40:12:BD:EA:06:8F:DE:63:7B:86:D0:A9:81:14:7D Authority key identifier: B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E Certificate issuer: /CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Certificate serial: 019BB026748B513F0E03EBFBD9E4C304C2ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft Manifest number: 17C4 Signing time: Mon 12 Jan 2026 03:01:08 +0000 Manifest this update: Mon 12 Jan 2026 03:01:08 +0000 Manifest next update: Tue 13 Jan 2026 03:01:08 +0000 Files and hashes: 1: Q_pklcKoKOD_nN51CeHDazpdFrU.roa (hash: KJqqca0qhwgoToM/nVHmRLq690y4UQj7F7FRwDzqOxw=) 2: uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl (hash: wVZzP4zmCu64FT5OJqDLIgkxj/boUAn4+GQTS1J2+y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:26:74:8b:51:3f:0e:03:eb:fb:d9:e4:c3:04:c2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b6b49be4d60a072a4ba6ca9793f893b59e4c9e Validity Not Before: Jan 12 03:01:08 2026 GMT Not After : Jan 13 03:01:08 2026 GMT Subject: CN=fed76826e64012bdea068fde637b86d0a981147d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:dc:9b:d3:d5:50:00:11:27:58:18:47:f4: 3f:9c:27:70:ce:fc:e4:9a:9d:be:07:3c:ab:f6:b9: e2:da:94:66:2e:65:a8:d1:d5:f6:8d:6f:0d:d4:cc: cb:91:4d:ee:14:42:0e:61:7c:28:40:0c:94:12:9f: ed:81:f4:15:83:14:dd:82:ff:b2:89:c3:19:3d:c6: d6:07:69:40:2f:c3:ec:03:2c:a3:c4:f0:89:23:f3: ef:9c:d4:8b:ca:ae:25:71:12:1f:dc:04:61:7c:2b: 74:85:92:a5:d9:bf:f0:94:3e:8f:43:a8:43:27:0d: d8:9c:ad:e7:59:01:ac:6e:1d:d9:e1:9b:ea:4e:d0: 76:9d:86:24:bc:14:6a:bb:0f:a8:77:e7:12:c8:31: 6f:74:4f:15:a9:1a:59:a4:8d:41:08:ed:a2:81:25: a9:50:42:b9:e7:a1:60:36:b3:2d:2d:60:83:f6:0f: 89:b0:01:67:0c:5c:cc:15:d6:05:44:58:da:fe:90: 93:f1:4e:3b:ef:65:3a:bb:f0:56:e6:cc:8b:6f:1d: dd:a3:ff:a6:00:b5:7a:01:86:bd:77:06:66:3f:5a: 07:73:8b:34:16:27:73:1c:79:67:24:d0:5d:97:75: 0f:b7:0e:18:e0:42:60:73:31:99:23:2b:03:f7:ea: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D7:68:26:E6:40:12:BD:EA:06:8F:DE:63:7B:86:D0:A9:81:14:7D X509v3 Authority Key Identifier: keyid:B8:B6:B4:9B:E4:D6:0A:07:2A:4B:A6:CA:97:93:F8:93:B5:9E:4C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7fd500-00b8-454e-8733-99b4d4ace693/1/uLa0m-TWCgcqS6bKl5P4k7WeTJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:4d:7f:47:02:9d:e4:3b:aa:f9:83:ac:34:66:cf:b3:ca: ac:00:b7:25:c0:ca:66:b0:4e:95:12:76:c0:c8:48:c7:0f:1e: 13:7b:a5:c7:93:24:39:bf:ae:1e:18:c9:05:6f:23:5e:87:47: bf:8d:9c:35:33:12:8e:0b:44:3b:e1:af:53:f0:44:0e:75:0e: 41:be:a3:b7:b4:86:01:f1:0e:db:57:0f:2f:37:c4:a1:cb:18: 08:28:d1:a2:74:31:74:7f:ed:24:0d:30:43:93:0d:62:d3:15: a8:b9:a4:de:8f:85:09:98:eb:98:da:e9:29:05:d5:b2:2e:f8: d3:3e:8b:8e:04:91:f5:4b:cf:5f:6a:9a:2b:1f:b0:7a:be:de: fd:c3:64:77:18:e0:4b:9b:ec:32:11:4f:b3:ac:dc:77:c7:42: f9:ee:85:c7:cf:cd:af:c2:0b:a1:9d:2c:c9:be:51:02:3a:5c: f3:ec:d9:80:c5:9f:de:96:67:bd:f4:34:c0:0a:cc:6e:f9:19: c9:87:8f:1a:6d:bf:00:62:54:fd:01:43:1e:7f:f6:b5:41:df: ea:b8:56:d2:21:02:a8:a9:f4:b3:37:65:05:6c:3e:dc:72:10: 53:f9:45:c0:e3:6a:43:8f:8d:c0:c1:33:3a:0b:c9:6f:85:50: 76:48:6f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwJnSLUT8OA+v72eTDBMLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjZiNDliZTRkNjBhMDcyYTRiYTZjYTk3OTNmODkzYjU5 ZTRjOWUwHhcNMjYwMTEyMDMwMTA4WhcNMjYwMTEzMDMwMTA4WjAzMTEwLwYDVQQD EyhmZWQ3NjgyNmU2NDAxMmJkZWEwNjhmZGU2MzdiODZkMGE5ODExNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/cm9PVUAARJ1gYR/Q/nCdwzvzk mp2+Bzyr9rni2pRmLmWo0dX2jW8N1MzLkU3uFEIOYXwoQAyUEp/tgfQVgxTdgv+y icMZPcbWB2lAL8PsAyyjxPCJI/PvnNSLyq4lcRIf3ARhfCt0hZKl2b/wlD6PQ6hD Jw3YnK3nWQGsbh3Z4ZvqTtB2nYYkvBRquw+od+cSyDFvdE8VqRpZpI1BCO2igSWp UEK556FgNrMtLWCD9g+JsAFnDFzMFdYFRFja/pCT8U4772U6u/BW5syLbx3do/+m ALV6AYa9dwZmP1oHc4s0FidzHHlnJNBdl3UPtw4Y4EJgczGZIysD9+p8lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7XaCbmQBK96gaP3mN7htCpgRR9MB8GA1UdIwQY MBaAFLi2tJvk1goHKkumypeT+JO1nkyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMt OTliNGQ0YWNlNjkzLzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83ZmQ1MDAtMDBiOC00NTRlLTg3MzMtOTliNGQ0YWNlNjkz LzEvdUxhMG0tVFdDZ2NxUzZiS2w1UDRrN1dlVEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOxNf0cC neQ7qvmDrDRmz7PKrAC3JcDKZrBOlRJ2wMhIxw8eE3ulx5MkOb+uHhjJBW8jXodH v42cNTMSjgtEO+GvU/BEDnUOQb6jt7SGAfEO21cPLzfEocsYCCjRonQxdH/tJA0w Q5MNYtMVqLmk3o+FCZjrmNrpKQXVsi740z6LjgSR9UvPX2qaKx+wer7e/cNkdxjg S5vsMhFPs6zcd8dC+e6Fx8/Nr8ILoZ0syb5RAjpc8+zZgMWf3pZnvfQ0wArMbvkZ yYePGm2/AGJU/QFDHn/2tUHf6rhW0iECqKn0szdlBWw+3HIQU/lFwONqQ4+NwMEz OgvJb4VQdkhvZg== -----END CERTIFICATE-----Generated at Mon Jan 12 06:37:35 2026 by rpki-client