This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json) Hash identifier: fLWOs7B8i6EjNr2pOfdrQgiZtDhFuL2nD1kWD9qDKzw= Subject key identifier: 00:EE:D7:FE:2F:CA:3E:DB:56:16:F6:BA:40:05:CE:71:61:72:0A:AD Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Certificate serial: 019B793769E2C39DFE015DC6185C81D254C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft Manifest number: 08AF Signing time: Thu 01 Jan 2026 11:00:33 +0000 Manifest this update: Thu 01 Jan 2026 11:00:33 +0000 Manifest next update: Fri 02 Jan 2026 11:00:33 +0000 Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=) 2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: eD0abJFnP2FlHhdpFyelISHhJDvJXU0xI5+aE51EoJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:69:e2:c3:9d:fe:01:5d:c6:18:5c:81:d2:54:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Validity Not Before: Jan 1 11:00:33 2026 GMT Not After : Jan 2 11:00:33 2026 GMT Subject: CN=00eed7fe2fca3edb5616f6ba4005ce7161720aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dc:98:a6:8a:2d:7e:00:3e:a1:49:24:f9:b2: 3b:d7:70:10:b2:10:c8:22:82:d7:91:6e:72:33:bf: 7a:c5:4e:d1:6c:55:55:56:c8:22:94:fb:33:e6:10: 5d:29:fa:63:0b:fa:d9:d0:0a:af:48:88:17:4b:c7: 3a:8c:6a:ad:b2:b4:5c:20:ed:ad:94:2a:d3:bc:97: 36:ea:4a:8a:9c:06:d6:08:6b:36:ee:4b:22:28:62: 2c:d3:38:06:06:3f:d6:50:e5:9b:74:02:3c:71:41: 99:94:76:8b:53:6e:12:61:e3:cd:c4:6b:63:bb:92: fc:ec:b9:3d:de:2a:6c:68:85:ec:4c:42:99:db:77: 69:0c:bc:9e:0a:d2:36:ee:0c:81:f2:1c:76:8f:97: 06:ad:85:e0:0a:d6:63:d3:34:8f:80:98:25:6a:34: 5d:b8:55:2d:4b:86:00:f6:4e:68:2d:0a:d9:c8:53: e9:56:fa:d3:20:89:b3:36:d8:46:d4:bd:f9:d2:15: 4d:22:73:b5:df:c3:b1:0a:62:37:20:3d:d2:2d:2c: 6e:2b:8c:23:10:ce:61:6a:68:73:10:0f:eb:04:13: 17:e5:e0:24:d9:34:4e:f9:8e:a1:1f:f5:2a:40:37: 4a:75:b6:67:e8:93:61:3b:fe:95:82:9f:2f:f3:2e: f0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:D7:FE:2F:CA:3E:DB:56:16:F6:BA:40:05:CE:71:61:72:0A:AD X509v3 Authority Key Identifier: keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:cb:e6:fd:86:41:b1:89:1a:a8:d9:a3:0d:df:38:e0:1e: 6e:d6:08:00:d3:e3:29:f7:9e:34:b8:44:90:77:74:c0:06:8c: 34:71:3c:ec:ef:bc:ef:3a:21:48:7a:fd:15:cc:3d:31:b1:44: ed:ce:cd:82:49:c6:ea:e2:16:20:b3:04:fb:a7:bb:2f:da:71: 94:27:8e:e2:61:91:57:ec:bc:b5:09:f9:3e:a5:2a:82:57:99: e1:da:cd:80:89:cb:6a:44:8f:81:58:fd:7d:da:73:bb:6e:b4: bd:9b:5a:5b:b8:eb:cc:bd:b7:03:88:cc:40:5c:c2:ea:8c:66: 2e:66:5f:76:de:eb:f7:5a:8e:91:8d:2d:bb:88:20:44:61:8d: d3:9f:75:77:a1:b7:68:3e:e5:bb:97:a1:f2:dd:12:05:93:b5: 96:1b:16:61:33:26:45:f1:98:ac:e8:4a:d1:9f:df:5a:21:92: bb:2b:73:22:a6:9c:2d:2e:da:43:ed:70:d2:21:80:64:cf:14: c1:cd:e7:36:75:1b:fd:de:56:60:7a:77:5e:c5:35:f8:82:ee: 2b:c4:8f:0b:ed:d1:c2:f7:f9:6c:9f:67:7c:5f:21:5f:d2:5a: 9b:23:25:92:0b:11:9f:a9:a2:58:a2:e9:30:7c:ef:41:67:5f: 42:35:a9:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N2niw53+AV3GGFyB0lTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1 NTQzZjYwHhcNMjYwMTAxMTEwMDMzWhcNMjYwMTAyMTEwMDMzWjAzMTEwLwYDVQQD EygwMGVlZDdmZTJmY2EzZWRiNTYxNmY2YmE0MDA1Y2U3MTYxNzIwYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dyYpootfgA+oUkk+bI713AQshDI IoLXkW5yM796xU7RbFVVVsgilPsz5hBdKfpjC/rZ0AqvSIgXS8c6jGqtsrRcIO2t lCrTvJc26kqKnAbWCGs27ksiKGIs0zgGBj/WUOWbdAI8cUGZlHaLU24SYePNxGtj u5L87Lk93ipsaIXsTEKZ23dpDLyeCtI27gyB8hx2j5cGrYXgCtZj0zSPgJglajRd uFUtS4YA9k5oLQrZyFPpVvrTIImzNthG1L350hVNInO138OxCmI3ID3SLSxuK4wj EM5hamhzEA/rBBMX5eAk2TRO+Y6hH/UqQDdKdbZn6JNhO/6Vgp8v8y7wGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADu1/4vyj7bVhb2ukAFznFhcgqtMB8GA1UdIwQY MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1 LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJHL5v2G QbGJGqjZow3fOOAebtYIANPjKfeeNLhEkHd0wAaMNHE87O+87zohSHr9Fcw9MbFE 7c7NgknG6uIWILME+6e7L9pxlCeO4mGRV+y8tQn5PqUqgleZ4drNgInLakSPgVj9 fdpzu260vZtaW7jrzL23A4jMQFzC6oxmLmZfdt7r91qOkY0tu4ggRGGN0591d6G3 aD7lu5eh8t0SBZO1lhsWYTMmRfGYrOhK0Z/fWiGSuytzIqacLS7aQ+1w0iGAZM8U wc3nNnUb/d5WYHp3XsU1+ILuK8SPC+3Rwvf5bJ9nfF8hX9JamyMlkgsRn6miWKLp MHzvQWdfQjWp2Q== -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:03 2026 by rpki-client