This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json) Hash identifier: 95eJPQ1xXgp2S/HUDnNO+BylDpsx5WwGe6vBIeHNUrg= Subject key identifier: E2:E7:4E:CE:70:EC:81:74:13:C0:3E:89:F6:D9:05:09:D3:BA:F0:C2 Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f Certificate serial: 019BB2F08AAD888526B1A5B2AB6FC0DA53DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft Manifest number: 07A3 Signing time: Mon 12 Jan 2026 16:01:07 +0000 Manifest this update: Mon 12 Jan 2026 16:01:07 +0000 Manifest next update: Tue 13 Jan 2026 16:01:07 +0000 Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: 31Zlo59n0pQUGKNq+STIz9q9otfDGbMMxkM7Ut92/ZM=) 2: w6o_mFdaC1iE9HreLWZZW7CeetE.roa (hash: ULCFerhBb+X2OLMdFVdyDjPTSfhj+p+sqvjNiKXZOJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f0:8a:ad:88:85:26:b1:a5:b2:ab:6f:c0:da:53:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f Validity Not Before: Jan 12 16:01:07 2026 GMT Not After : Jan 13 16:01:07 2026 GMT Subject: CN=e2e74ece70ec817413c03e89f6d90509d3baf0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dd:79:45:e2:04:6b:f2:dd:95:58:f0:47:2d: 6d:4e:0c:a6:9c:3a:8e:25:27:a9:a6:23:0f:f4:39: 5b:c8:10:fc:57:af:df:1b:c7:f1:63:2c:59:8b:8a: 93:6d:f5:6a:77:1d:3c:d0:1a:56:db:6e:ce:91:a8: 42:d7:88:cd:01:93:9b:62:68:84:a1:da:da:0c:7f: db:8f:fe:14:c9:d7:4a:af:8c:cf:02:27:66:0b:3e: ea:a7:5d:96:e9:ff:8c:c9:70:4e:8b:0c:ac:00:75: f0:79:ad:c0:0c:17:c0:a0:ad:4e:ed:4f:5f:e6:c1: cf:55:44:ff:76:4b:f5:2a:a3:6a:8a:d0:65:f4:3b: 81:49:78:5c:b8:cc:5e:4d:be:4e:81:a7:c4:72:5f: 95:2d:12:ea:50:64:5c:c4:79:2a:43:f8:8e:54:70: 0c:cd:d4:41:3a:2a:ab:4e:4d:eb:fc:8d:43:e4:5b: c9:b1:d2:fd:8f:6e:63:89:a1:a4:97:10:fa:36:62: ef:79:90:0e:d2:ba:d4:45:95:f2:ea:7e:c8:87:f7: e2:66:9f:55:e7:0b:35:ec:59:3d:3f:cc:a5:11:a1: 69:6f:f8:01:df:28:c5:6d:87:b9:c6:1d:52:61:c2: 19:c5:b1:93:44:94:79:f2:cf:cd:21:84:38:15:f4: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E7:4E:CE:70:EC:81:74:13:C0:3E:89:F6:D9:05:09:D3:BA:F0:C2 X509v3 Authority Key Identifier: keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:18:d5:01:aa:2b:b6:f2:80:88:1f:ae:31:60:a6:50:ee: b0:dc:cc:f8:67:be:cb:07:02:0d:01:0c:69:06:cf:ac:c7:87: 04:cc:d0:a0:13:85:07:3f:7a:53:b9:ce:d8:49:b4:b2:d3:2e: 47:b3:ed:30:71:7c:a4:ff:0f:f6:bb:6f:96:6b:03:b9:aa:a5: 69:0b:c8:e2:73:00:e2:8c:14:00:bc:f7:2f:4f:94:0a:67:39: 41:34:fb:10:9d:93:69:86:d2:33:be:f5:c2:63:0c:ff:4a:87: 00:11:f7:88:77:9d:52:38:66:48:e5:85:36:02:95:70:d7:5b: 17:8c:8c:bd:7d:f1:d4:1d:c9:79:99:83:15:8d:f1:fc:f4:25: ed:af:59:4e:5b:39:07:99:c6:3f:2b:8d:53:4e:1a:06:ed:9b: 25:41:3d:0d:cd:0a:6e:5d:1f:7b:c2:c0:8b:b7:b5:0c:7d:73: 33:81:81:f1:ae:45:c0:55:23:b0:81:32:ca:bd:48:f1:5b:b1: 2b:89:ab:6a:93:6a:db:ae:1d:05:09:cb:1c:b2:f0:14:f7:12: 94:a6:cf:69:4f:fb:ad:d7:ec:86:e7:90:16:97:2f:9f:f9:66: bb:67:6f:2e:bb:a0:2b:5b:01:2e:40:e0:b2:63:b8:e3:82:b8: 85:22:8e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuy8IqtiIUmsaWyq2/A2lPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGQxY2JhYTkwMGM5ZGFiZDJhMWY3NjgxOThhMWU1NWJj ZmI1MGYwHhcNMjYwMTEyMTYwMTA3WhcNMjYwMTEzMTYwMTA3WjAzMTEwLwYDVQQD EyhlMmU3NGVjZTcwZWM4MTc0MTNjMDNlODlmNmQ5MDUwOWQzYmFmMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t15ReIEa/LdlVjwRy1tTgymnDqO JSeppiMP9DlbyBD8V6/fG8fxYyxZi4qTbfVqdx080BpW227OkahC14jNAZObYmiE odraDH/bj/4UyddKr4zPAidmCz7qp12W6f+MyXBOiwysAHXwea3ADBfAoK1O7U9f 5sHPVUT/dkv1KqNqitBl9DuBSXhcuMxeTb5OgafEcl+VLRLqUGRcxHkqQ/iOVHAM zdRBOiqrTk3r/I1D5FvJsdL9j25jiaGklxD6NmLveZAO0rrURZXy6n7Ih/fiZp9V 5ws17Fk9P8ylEaFpb/gB3yjFbYe5xh1SYcIZxbGTRJR58s/NIYQ4FfSTsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLnTs5w7IF0E8A+ifbZBQnTuvDCMB8GA1UdIwQY MBaAFP1NHLqpAMnavSofdoGYoeVbz7UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2Et ZGI3NjkwZTQ1NzY1LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84OTAzY2EtZmI2Ny00ZWU3LWEyM2EtZGI3NjkwZTQ1NzY1 LzEvX1UwY3Vxa0F5ZHE5S2g5MmdaaWg1VnZQdFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx4Y1QGq K7bygIgfrjFgplDusNzM+Ge+ywcCDQEMaQbPrMeHBMzQoBOFBz96U7nO2Em0stMu R7PtMHF8pP8P9rtvlmsDuaqlaQvI4nMA4owUALz3L0+UCmc5QTT7EJ2TaYbSM771 wmMM/0qHABH3iHedUjhmSOWFNgKVcNdbF4yMvX3x1B3JeZmDFY3x/PQl7a9ZTls5 B5nGPyuNU04aBu2bJUE9Dc0Kbl0fe8LAi7e1DH1zM4GB8a5FwFUjsIEyyr1I8Vux K4mrapNq264dBQnLHLLwFPcSlKbPaU/7rdfshueQFpcvn/lmu2dvLrugK1sBLkDg smO444K4hSKOBQ== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:15 2026 by rpki-client