This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json) Hash identifier: bYgFtmRbwdnyWCrb6y1tIMRxE4gBbwZP46LkcDs6xvA= Subject key identifier: 23:DA:BC:3B:06:73:3E:4D:4C:C7:1A:77:6E:F4:A9:D4:B8:37:FB:CB Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Certificate serial: 019BB3CC3E3DE5580F50131B6BA090F3A6E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft Manifest number: 17C8 Signing time: Mon 12 Jan 2026 20:01:05 +0000 Manifest this update: Mon 12 Jan 2026 20:01:05 +0000 Manifest next update: Tue 13 Jan 2026 20:01:05 +0000 Files and hashes: 1: m1puyXsqifJhZhUWL-_6YnwL1mI.roa (hash: fIIYEWkHjVVTWq75uZEvzmf8hXUsvrfxvNJcwhLVfwI=) 2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: xzhcLSYruV1gW46pAaXuXWGkVPGFziL5xu2U+xmQUwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:cc:3e:3d:e5:58:0f:50:13:1b:6b:a0:90:f3:a6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804 Validity Not Before: Jan 12 20:01:05 2026 GMT Not After : Jan 13 20:01:05 2026 GMT Subject: CN=23dabc3b06733e4d4cc71a776ef4a9d4b837fbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:4c:5c:92:31:28:84:46:df:0a:3c:29:33: ea:42:df:8a:b6:c2:55:aa:6b:e5:fe:40:36:83:06: 81:52:b8:a6:e4:79:e4:ed:d8:c4:a4:9c:7b:10:f7: d5:11:9a:da:92:67:b8:e3:b7:3e:ab:d2:54:7a:2a: 5a:49:90:98:78:7d:00:8f:a2:0a:7d:c3:0e:b3:c4: 58:eb:c9:e4:89:c7:e1:9a:dc:9d:d7:ae:01:8f:08: 87:6e:bc:27:9c:78:6a:64:92:f2:8a:8d:91:8c:45: 33:d7:13:66:0e:c9:9d:f5:24:2c:15:9d:8c:15:46: f9:72:03:3e:8c:89:6e:85:c1:5b:10:1f:d2:c7:e4: 0f:b5:30:c5:64:b5:9c:d2:f9:a9:5a:f9:0b:d4:fe: c5:46:55:01:11:08:bc:47:91:b3:5f:d4:18:52:17: 2a:b6:d2:48:ad:73:a7:25:ce:e5:6c:d0:20:f1:30: fe:f8:60:d7:19:51:4d:1e:c5:d4:86:e0:a0:ff:a9: b2:91:2c:6f:d7:86:49:7c:09:03:4b:56:f3:2a:2c: 1a:fc:29:e8:b8:d2:26:f8:72:c0:a9:88:a5:af:9b: 67:31:e3:06:0d:8e:5c:de:0a:cc:bd:76:7d:0d:0e: fc:4c:22:6d:19:27:5d:a7:aa:40:7f:d5:49:0a:83: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:BC:3B:06:73:3E:4D:4C:C7:1A:77:6E:F4:A9:D4:B8:37:FB:CB X509v3 Authority Key Identifier: keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8a:4d:f0:cf:53:62:5e:c5:37:98:57:97:5e:82:ea:48:ee: ab:d3:5e:3b:8d:00:23:5d:60:bb:94:75:17:46:f0:fc:21:3c: da:92:06:49:b8:a4:cf:bb:06:bf:dd:a2:4b:9f:21:f6:ce:7f: 21:4c:de:4d:76:ca:27:2b:e2:6d:38:c1:63:5f:6c:cc:cf:6a: 8f:3f:5f:49:ae:a5:7f:98:d4:99:bc:b3:b5:77:16:29:cf:0f: e4:87:e2:0e:ae:24:c2:e7:ef:fc:60:3b:8e:09:0f:39:f2:a5: 5b:cb:bf:55:a4:6a:c8:89:fb:44:d2:eb:a4:16:94:95:19:60: 7e:20:01:04:b9:f8:55:db:92:fa:57:8f:17:80:8a:8f:03:47: 21:64:91:cb:60:92:03:3f:97:da:fe:f9:6b:8f:cb:85:cb:b8: e9:31:7a:37:29:95:3c:77:d4:cc:f6:32:b0:c0:1c:b2:95:6c: aa:46:3e:6b:23:9d:94:dd:79:33:bc:3a:ec:28:90:5a:87:77: 0d:e8:9a:34:07:e8:44:f5:c8:a4:75:5c:f2:97:21:2f:7f:90: 2b:d3:60:cd:96:0b:9f:5e:40:56:90:57:8b:ca:c0:ef:b8:d6: 2f:6d:7f:2b:89:21:b8:ba:a7:75:37:9e:50:b5:a0:b8:d4:5d: 70:dc:09:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzzD495VgPUBMba6CQ86bpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjdmMjRkZTNhOWU1MmM5NGM2Y2E2ODAzMTI0NDFkZDlj MDg4MDQwHhcNMjYwMTEyMjAwMTA1WhcNMjYwMTEzMjAwMTA1WjAzMTEwLwYDVQQD EygyM2RhYmMzYjA2NzMzZTRkNGNjNzFhNzc2ZWY0YTlkNGI4MzdmYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJJMXJIxKIRG3wo8KTPqQt+KtsJV qmvl/kA2gwaBUrim5Hnk7djEpJx7EPfVEZrakme447c+q9JUeipaSZCYeH0Aj6IK fcMOs8RY68nkicfhmtyd164BjwiHbrwnnHhqZJLyio2RjEUz1xNmDsmd9SQsFZ2M FUb5cgM+jIluhcFbEB/Sx+QPtTDFZLWc0vmpWvkL1P7FRlUBEQi8R5GzX9QYUhcq ttJIrXOnJc7lbNAg8TD++GDXGVFNHsXUhuCg/6mykSxv14ZJfAkDS1bzKiwa/Cno uNIm+HLAqYilr5tnMeMGDY5c3grMvXZ9DQ78TCJtGSddp6pAf9VJCoMtkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPavDsGcz5NTMcad270qdS4N/vLMB8GA1UdIwQY MBaAFLj38k3jqeUslMbKaAMSRB3ZwIgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYt ODNmMTU2YzdlZjkyLzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xMGVhOTgtNzhiZi00ODk3LTk3NTYtODNmMTU2YzdlZjky LzEvdVBmeVRlT3A1U3lVeHNwb0F4SkVIZG5BaUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4pN8M9T Yl7FN5hXl16C6kjuq9NeO40AI11gu5R1F0bw/CE82pIGSbikz7sGv92iS58h9s5/ IUzeTXbKJyvibTjBY19szM9qjz9fSa6lf5jUmbyztXcWKc8P5IfiDq4kwufv/GA7 jgkPOfKlW8u/VaRqyIn7RNLrpBaUlRlgfiABBLn4VduS+lePF4CKjwNHIWSRy2CS Az+X2v75a4/Lhcu46TF6NymVPHfUzPYysMAcspVsqkY+ayOdlN15M7w67CiQWod3 DeiaNAfoRPXIpHVc8pchL3+QK9NgzZYLn15AVpBXi8rA77jWL21/K4khuLqndTee ULWguNRdcNwJvg== -----END CERTIFICATE-----Generated at Tue Jan 13 03:38:59 2026 by rpki-client