This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft File: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft (raw, json) Hash identifier: qN17NCVKOtEUnPAHRH6IbJE+ykYxf6+R6zEg2KHp1rk= Subject key identifier: AB:D4:22:88:60:46:9E:17:56:CD:14:C3:9C:1E:66:08:17:51:58:4D Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Certificate serial: 019B9F32DD6A3877D2321B1EAD17CFB3F9F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft Manifest number: 14FE Signing time: Thu 08 Jan 2026 20:01:09 +0000 Manifest this update: Thu 08 Jan 2026 20:01:09 +0000 Manifest next update: Fri 09 Jan 2026 20:01:09 +0000 Files and hashes: 1: 2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl (hash: 075RZLFgSKjz+XSfCxKxxeXabY7ReBybKd7++cmW7PM=) 2: wqVFEVjqEKEx9wlcMLA5-tVt-do.roa (hash: 26IFOLWA08mHoLUA2G9c2LdLUfKfMB5SGvlKCRZq35g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:32:dd:6a:38:77:d2:32:1b:1e:ad:17:cf:b3:f9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9 Validity Not Before: Jan 8 20:01:09 2026 GMT Not After : Jan 9 20:01:09 2026 GMT Subject: CN=abd4228860469e1756cd14c39c1e66081751584d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:cf:91:e6:4d:92:d4:1f:ab:44:17:df:47: 39:50:5d:8f:74:f8:fd:de:5b:ff:65:a5:5a:54:57: d8:0f:e1:15:54:a8:e5:ac:e6:ec:db:71:a8:30:a4: b0:b8:c9:4e:74:d2:16:1f:5a:4b:1b:69:87:91:44: 5d:8d:72:7b:bc:fa:4e:24:e4:dd:44:ac:f3:49:af: 67:56:71:57:f9:77:fb:9b:c0:b6:d2:23:3d:57:e0: ca:5b:a0:db:a0:36:2c:27:2e:3e:66:57:20:2f:f1: 25:f8:a1:76:93:94:08:d4:fd:db:e0:39:0c:81:38: d9:d5:90:dc:e5:4c:dd:bf:ab:1f:cf:62:a0:d9:a8: 1c:9f:24:50:76:b2:3f:00:c6:50:9e:91:32:3a:10: fe:7a:48:7e:8c:b6:9f:63:29:e7:4d:e4:49:53:2f: a1:1c:45:e8:68:ed:d7:69:5c:d3:e7:1c:05:9d:63: 8e:58:b2:99:8b:1c:88:1e:0c:7f:51:4f:4e:44:38: 2f:cc:79:17:b5:86:2c:ef:80:99:b3:6d:70:56:96: d9:f1:50:1c:6a:2b:6d:a5:c4:6b:d1:48:37:24:31: dd:36:b7:21:5b:6a:7b:19:30:ef:cd:fb:96:1f:7a: 4a:71:7f:a2:a1:5e:02:1d:cd:2f:bd:13:c0:44:5f: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:22:88:60:46:9E:17:56:CD:14:C3:9C:1E:66:08:17:51:58:4D X509v3 Authority Key Identifier: keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:89:28:c3:b0:5e:c7:77:6a:a4:bb:49:40:d2:14:d7:72:e1: 6e:54:d6:85:66:38:c9:98:1e:ca:0f:cf:ab:b9:d6:88:2e:89: 71:3b:57:6f:6b:33:2e:be:fc:55:30:ff:0f:a1:04:c5:83:54: 2a:0e:a3:a7:03:34:14:dc:9d:b4:6e:c1:1f:11:a3:45:47:4a: 3b:a9:ec:ca:4c:f0:8f:77:7e:09:44:de:2e:b4:aa:be:a3:4a: 97:36:e9:55:39:97:aa:e3:28:2f:b4:48:dd:bf:2d:38:07:38: e1:ab:07:5d:09:47:1c:19:70:cd:fc:1d:94:6d:ca:b4:18:35: cf:5f:a8:9b:d0:4b:6c:37:03:89:8d:02:94:c3:ce:dd:d7:65: 38:68:f9:57:9d:ce:90:3f:dc:3c:65:d6:82:be:c7:68:1c:1e: 49:84:fc:17:d1:d9:33:8b:99:80:2a:be:ff:9d:8e:5a:d5:e7: 21:2d:b3:10:27:1a:ba:b5:fd:77:93:d7:c2:63:d1:d0:47:a6: cc:89:20:70:be:ff:31:30:0c:02:f9:af:2d:9a:a4:ae:d7:fc: 08:dd:03:e5:ad:8b:2e:b5:3d:59:a1:99:4a:d7:b7:bb:27:cf: 57:92:ad:a4:80:be:29:b8:4f:6a:4b:2c:08:36:51:f6:4b:9f: 2c:1a:af:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufMt1qOHfSMhserRfPs/nyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4 ZjE4ZjkwHhcNMjYwMTA4MjAwMTA5WhcNMjYwMTA5MjAwMTA5WjAzMTEwLwYDVQQD EyhhYmQ0MjI4ODYwNDY5ZTE3NTZjZDE0YzM5YzFlNjYwODE3NTE1ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDPkeZNktQfq0QX30c5UF2PdPj9 3lv/ZaVaVFfYD+EVVKjlrObs23GoMKSwuMlOdNIWH1pLG2mHkURdjXJ7vPpOJOTd RKzzSa9nVnFX+Xf7m8C20iM9V+DKW6DboDYsJy4+ZlcgL/El+KF2k5QI1P3b4DkM gTjZ1ZDc5Uzdv6sfz2Kg2agcnyRQdrI/AMZQnpEyOhD+ekh+jLafYynnTeRJUy+h HEXoaO3XaVzT5xwFnWOOWLKZixyIHgx/UU9ORDgvzHkXtYYs74CZs21wVpbZ8VAc aittpcRr0Ug3JDHdNrchW2p7GTDvzfuWH3pKcX+ioV4CHc0vvRPARF8fIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvUIohgRp4XVs0Uw5weZggXUVhNMB8GA1UdIwQY MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt OTVkNTk0NjVlOWE4LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4 LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYkow7Be x3dqpLtJQNIU13LhblTWhWY4yZgeyg/Pq7nWiC6JcTtXb2szLr78VTD/D6EExYNU Kg6jpwM0FNydtG7BHxGjRUdKO6nsykzwj3d+CUTeLrSqvqNKlzbpVTmXquMoL7RI 3b8tOAc44asHXQlHHBlwzfwdlG3KtBg1z1+om9BLbDcDiY0ClMPO3ddlOGj5V53O kD/cPGXWgr7HaBweSYT8F9HZM4uZgCq+/52OWtXnIS2zECcaurX9d5PXwmPR0Eem zIkgcL7/MTAMAvmvLZqkrtf8CN0D5a2LLrU9WaGZSte3uyfPV5KtpIC+KbhPakss CDZR9kufLBqvoA== -----END CERTIFICATE-----Generated at Thu Jan 8 23:57:03 2026 by rpki-client