This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json) Hash identifier: 7K47nvgA61TntfPkOSmdjoSuHvXMz+4Ry80cL9q8bgE= Subject key identifier: B7:EE:EA:CF:1D:77:88:83:F7:94:41:71:E3:A7:29:D0:B8:99:05:B0 Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Certificate serial: 019BB1DDD95F9009C59108034EE6C3BA1EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 11:01:04 +0000 Manifest this update: Mon 12 Jan 2026 11:01:04 +0000 Manifest next update: Tue 13 Jan 2026 11:01:04 +0000 Files and hashes: 1: m1puyXsqifJhZhUWL-_6YnwL1mI.roa (hash: fIIYEWkHjVVTWq75uZEvzmf8hXUsvrfxvNJcwhLVfwI=) 2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: Jbkn+tOLfmO/zFwlwnVVZL5XKGIdfPK7wOeUp4bt6B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:dd:d9:5f:90:09:c5:91:08:03:4e:e6:c3:ba:1e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Validity Not Before: Jan 12 11:01:04 2026 GMT Not After : Jan 13 11:01:04 2026 GMT Subject: CN=b7eeeacf1d778883f7944171e3a729d0b89905b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:ca:f5:29:bb:a2:43:ac:f1:4d:7b:1d:59: ec:39:01:f9:e1:32:57:7d:bb:9c:fe:60:af:f1:20: 88:22:f7:b6:8e:21:55:b6:cd:b8:97:b4:ff:41:18: ef:38:67:96:ef:8e:29:f9:e2:16:b1:5a:a6:ec:6c: 76:7c:18:8d:15:d3:03:b9:f6:55:c6:2a:82:18:b8: ea:31:ff:79:f0:fe:a6:b5:0e:20:6f:e8:c5:c8:64: 62:1e:e5:38:77:e7:dd:ad:02:ea:a6:a6:68:51:b8: 56:cb:7e:73:29:c0:3d:35:c0:46:d7:d4:a0:10:46: 09:bc:8d:2d:f5:d4:a6:a2:cd:70:2c:74:f4:a1:10: 8c:30:34:73:c8:fc:7a:e9:94:24:9c:99:a9:d6:b5: b5:4d:52:c6:90:8e:c9:83:48:7f:81:ae:19:cc:0f: 1b:ef:ce:c5:4e:c3:9e:0c:9b:4c:3b:e4:dc:b2:0c: 9c:23:00:2d:6f:4c:63:68:88:98:3d:70:cd:ed:73: ba:39:51:9d:87:69:39:3f:6d:05:c1:0c:f0:43:58: 16:56:8f:df:52:98:10:ac:76:d6:fc:d6:0a:6f:1a: 30:12:38:f8:4a:57:ec:6b:79:53:cc:71:6f:47:ff: 49:66:de:1e:47:b9:ff:68:bd:e1:3f:dd:a7:c8:e9: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:EA:CF:1D:77:88:83:F7:94:41:71:E3:A7:29:D0:B8:99:05:B0 X509v3 Authority Key Identifier: keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a7:77:55:5d:f9:86:e2:12:17:fb:61:f0:4a:de:ac:f7:a3: a6:6e:f0:10:b8:0c:bd:5a:fc:17:3f:e6:4b:8a:43:a8:7b:94: 67:e8:a6:4e:df:60:93:bb:6e:2b:2a:e6:8b:75:f1:4d:8d:16: 83:32:ff:5e:82:8c:a1:97:7d:83:5e:0d:e1:2f:05:ac:64:25: 96:40:13:db:bd:b3:d9:6d:93:4d:c6:22:da:55:04:5e:4f:80: 2c:77:a6:45:75:b7:70:fe:ff:f1:87:c7:10:da:95:4a:1a:73: c3:dd:52:75:a9:71:94:30:85:56:28:b7:e5:46:7a:82:8c:6c: fe:ba:05:d8:69:a0:c1:3f:66:51:56:80:97:20:d0:13:70:34: 50:e8:62:5d:77:78:3d:d3:4e:e3:22:3a:0f:fb:6f:0b:3e:0c: 58:f4:9f:4b:dc:79:60:bf:92:96:52:fc:17:bb:e3:19:c8:b5: 83:04:50:17:55:8c:93:11:0e:80:80:ef:2c:9a:90:9d:a4:e6: 67:e8:15:1e:cd:99:13:88:61:fe:8d:a1:12:d8:54:77:56:9d: 95:7e:56:46:7c:65:40:e1:3f:b7:7d:15:f2:99:ab:3a:67:71: 6e:8e:a7:d6:f6:f6:7e:98:dc:3e:f1:64:52:fc:63:85:77:3b: 2e:9c:fd:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZux3dlfkAnFkQgDTubDuh7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjdmMjRkZTNhOWU1MmM5NGM2Y2E2ODAzMTI0NDFkZDlj MDg4MDQwHhcNMjYwMTEyMTEwMTA0WhcNMjYwMTEzMTEwMTA0WjAzMTEwLwYDVQQD EyhiN2VlZWFjZjFkNzc4ODgzZjc5NDQxNzFlM2E3MjlkMGI4OTkwNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdXK9Sm7okOs8U17HVnsOQH54TJX fbuc/mCv8SCIIve2jiFVts24l7T/QRjvOGeW744p+eIWsVqm7Gx2fBiNFdMDufZV xiqCGLjqMf958P6mtQ4gb+jFyGRiHuU4d+fdrQLqpqZoUbhWy35zKcA9NcBG19Sg EEYJvI0t9dSmos1wLHT0oRCMMDRzyPx66ZQknJmp1rW1TVLGkI7Jg0h/ga4ZzA8b 787FTsOeDJtMO+TcsgycIwAtb0xjaIiYPXDN7XO6OVGdh2k5P20FwQzwQ1gWVo/f UpgQrHbW/NYKbxowEjj4Slfsa3lTzHFvR/9JZt4eR7n/aL3hP92nyOm0gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfu6s8dd4iD95RBceOnKdC4mQWwMB8GA1UdIwQY MBaAFLj38k3jqeUslMbKaAMSRB3ZwIgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYt ODNmMTU2YzdlZjkyLzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYtODNmMTU2YzdlZjky LzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6d3VV35 huISF/th8ErerPejpm7wELgMvVr8Fz/mS4pDqHuUZ+imTt9gk7tuKyrmi3XxTY0W gzL/XoKMoZd9g14N4S8FrGQllkAT272z2W2TTcYi2lUEXk+ALHemRXW3cP7/8YfH ENqVShpzw91SdalxlDCFVii35UZ6goxs/roF2GmgwT9mUVaAlyDQE3A0UOhiXXd4 PdNO4yI6D/tvCz4MWPSfS9x5YL+SllL8F7vjGci1gwRQF1WMkxEOgIDvLJqQnaTm Z+gVHs2ZE4hh/o2hEthUd1adlX5WRnxlQOE/t30V8pmrOmdxbo6n1vb2fpjcPvFk UvxjhXc7Lpz9sw== -----END CERTIFICATE-----Generated at Mon Jan 12 14:02:20 2026 by rpki-client