This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json) Hash identifier: ab8cgiFZuMK4xC0YA09itTyhShgmjwL7AW9Lte7JAwE= Subject key identifier: C5:AB:B6:F8:E1:3D:49:C0:35:C8:E3:78:30:50:D7:36:40:3A:DF:DD Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019BAEDD08EE011CA1DE30D2EDA0ABA864AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft Manifest number: 0DB9 Signing time: Sun 11 Jan 2026 21:01:19 +0000 Manifest this update: Sun 11 Jan 2026 21:01:19 +0000 Manifest next update: Mon 12 Jan 2026 21:01:19 +0000 Files and hashes: 1: 8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa (hash: /+kE4h00r/rNQF2qkF3Rbnzzg5WTJLtCWIFfPXld1Uc=) 2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: gnP1ScZhLapBfS46eFPTjX/G1T5mtChNTlbsT0pIvfs=) 3: VtaKLbc1bmC0OT-Q3JTgdIZyayc.roa (hash: UBrKjUxBC5vtYfpevFvOXwmeammg36EmC9n/o1kbyUg=) 4: sOyLous1lcVglNsttXQzSfJQQoY.roa (hash: HK4au5F4Xcxrx2YlmpZX3D2cv+tRYiiQColDX6MpT7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:08:ee:01:1c:a1:de:30:d2:ed:a0:ab:a8:64:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Jan 11 21:01:19 2026 GMT Not After : Jan 12 21:01:19 2026 GMT Subject: CN=c5abb6f8e13d49c035c8e3783050d736403adfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:62:b8:3f:98:b8:81:d9:90:b2:de:bd:dc: 09:eb:30:65:26:9e:aa:4f:c0:aa:c0:0a:bf:ad:17: 76:4b:57:87:4a:bf:20:b7:0c:61:e4:a7:b6:e2:76: 0f:01:c6:9f:65:9a:02:df:49:c1:2f:5b:b8:2e:8e: 6f:fb:60:74:c1:fa:b2:68:40:50:1c:36:13:20:ef: c5:30:27:07:95:ba:41:a5:0a:ad:60:b8:0a:89:2a: a8:1b:8d:54:6b:1a:a8:fb:82:6b:d4:06:45:99:ae: 43:7e:0e:2d:ea:2a:6a:e8:cc:0f:40:95:57:82:d9: b9:42:33:e4:91:8f:dc:be:76:bb:d5:df:b1:03:12: 0e:db:f9:25:1e:d6:1b:f4:92:07:c9:b7:22:eb:10: 7b:36:6a:59:a3:a8:cd:03:88:27:ad:24:3f:46:29: 36:15:a5:fd:b0:6b:13:c0:38:ff:56:5a:90:ae:b8: 0c:2a:2e:2e:78:04:ea:ac:50:7b:ef:88:5c:6c:1f: 96:94:76:66:93:ab:8f:d6:eb:1c:d0:3e:c2:b5:18: 1c:93:72:9c:57:c0:61:5e:bc:c0:bc:5b:25:d4:e2: 0d:2c:2f:eb:85:3a:fb:58:2e:74:d7:1f:90:bf:da: 9e:b8:80:58:d1:6e:14:1a:25:8c:f5:ff:23:67:cc: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AB:B6:F8:E1:3D:49:C0:35:C8:E3:78:30:50:D7:36:40:3A:DF:DD X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:86:b0:d0:cb:50:0e:53:3e:2b:ec:f2:52:fd:6e:97:1d: c9:a0:54:8a:3d:6a:ee:8a:31:9d:03:84:d8:08:59:c2:b0:93: 97:23:6d:0b:bd:d7:d4:f6:a7:15:26:f3:b3:67:e8:ef:bc:56: 0c:95:06:e7:4e:3f:93:e3:59:b9:50:ad:7e:de:da:8c:40:9a: 70:8d:ef:27:b1:03:ab:f8:03:ce:36:54:d1:33:da:9b:70:23: 7d:31:bd:e0:b7:d7:f1:7d:04:16:19:f9:0e:36:a5:f2:5d:58: 2e:d4:fe:32:c4:76:23:54:f9:28:a4:99:f4:20:ad:e9:ea:71: 87:4f:bb:98:f0:f6:cf:aa:eb:10:7f:a5:03:3a:af:bd:06:71: 76:92:43:42:a1:1f:e1:be:8e:99:4a:d1:e3:ec:db:a8:c5:a6: e6:d3:e1:12:22:4a:6e:64:f1:ca:29:00:80:1a:ce:4e:94:0d: 24:36:df:7f:33:d0:ed:7d:88:b8:f4:a4:7d:79:4a:96:8d:ec: 92:9a:dd:b2:10:fc:f1:2f:ad:f9:50:c2:d2:e1:63:df:9e:b2: 5c:f3:1a:2d:99:b6:5f:52:91:6c:63:14:80:27:7f:92:9e:6b: 78:f0:62:42:9c:78:8e:4f:95:d7:a0:32:07:1a:2d:55:15:aa: b7:92:21:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3QjuARyh3jDS7aCrqGSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjYwMTExMjEwMTE5WhcNMjYwMTEyMjEwMTE5WjAzMTEwLwYDVQQD EyhjNWFiYjZmOGUxM2Q0OWMwMzVjOGUzNzgzMDUwZDczNjQwM2FkZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiZiuD+YuIHZkLLevdwJ6zBlJp6q T8CqwAq/rRd2S1eHSr8gtwxh5Ke24nYPAcafZZoC30nBL1u4Lo5v+2B0wfqyaEBQ HDYTIO/FMCcHlbpBpQqtYLgKiSqoG41Uaxqo+4Jr1AZFma5Dfg4t6ipq6MwPQJVX gtm5QjPkkY/cvna71d+xAxIO2/klHtYb9JIHybci6xB7NmpZo6jNA4gnrSQ/Rik2 FaX9sGsTwDj/VlqQrrgMKi4ueATqrFB774hcbB+WlHZmk6uP1usc0D7CtRgck3Kc V8BhXrzAvFsl1OINLC/rhTr7WC501x+Qv9qeuIBY0W4UGiWM9f8jZ8y3+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWrtvjhPUnANcjjeDBQ1zZAOt/dMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/aGsNDL UA5TPivs8lL9bpcdyaBUij1q7ooxnQOE2AhZwrCTlyNtC73X1PanFSbzs2fo77xW DJUG504/k+NZuVCtft7ajECacI3vJ7EDq/gDzjZU0TPam3AjfTG94LfX8X0EFhn5 Djal8l1YLtT+MsR2I1T5KKSZ9CCt6epxh0+7mPD2z6rrEH+lAzqvvQZxdpJDQqEf 4b6OmUrR4+zbqMWm5tPhEiJKbmTxyikAgBrOTpQNJDbffzPQ7X2IuPSkfXlKlo3s kprdshD88S+t+VDC0uFj356yXPMaLZm2X1KRbGMUgCd/kp5rePBiQpx4jk+V16Ay BxotVRWqt5IhfQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:56:50 2026 by rpki-client