This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json) Hash identifier: MJyl1S2UR7iZb0lbt0iGYJSyqDKWuW4nCUTYX1LVGPs= Subject key identifier: 9B:C8:CF:BE:D0:5C:F6:79:03:C3:49:8C:6D:D4:81:79:6A:B2:04:44 Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Certificate serial: 019B78CA5FB56008C61F14E0B00C045A2A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 09:01:27 +0000 Manifest this update: Thu 01 Jan 2026 09:01:27 +0000 Manifest next update: Fri 02 Jan 2026 09:01:27 +0000 Files and hashes: 1: MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa (hash: Xy1rAGnYMcCxQ06ADYspJII1dddHSOxsylQH095rx5c=) 2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: E/Z02U2ozB6PMVcHNAQ6TRQUHubrg20SXRr6S8gwUK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:5f:b5:60:08:c6:1f:14:e0:b0:0c:04:5a:2a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845 Validity Not Before: Jan 1 09:01:27 2026 GMT Not After : Jan 2 09:01:27 2026 GMT Subject: CN=9bc8cfbed05cf67903c3498c6dd481796ab20444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:67:f8:61:18:51:c1:82:05:dc:b7:2b:f6: b0:c5:ea:d6:7d:ff:a0:ed:11:51:bd:17:08:7a:e6: c5:e4:60:16:fc:f5:02:3a:da:b3:be:fd:1e:28:11: 7d:72:ea:ca:0a:8b:17:7b:3c:e4:3e:46:88:67:03: 5f:e4:29:b1:5c:7e:71:b0:66:19:bf:98:33:f4:31: 70:5c:ee:52:bf:f6:52:0c:c7:90:04:c4:80:64:8d: e1:e3:0f:a1:4a:c5:7c:b8:fc:14:db:73:65:66:11: f9:ca:31:ca:73:6a:39:09:8f:44:d9:4b:ce:d4:90: 12:ee:f8:45:bc:91:b3:95:fa:2a:f6:3c:01:fa:e2: c5:34:46:e6:24:a8:41:f2:45:6c:0f:09:8e:b2:71: eb:65:29:ff:b2:2c:31:e7:b2:bd:6a:7c:3e:95:d5: 6e:64:5d:a4:d6:78:e6:68:e2:54:ef:fe:94:f3:ab: d3:1e:c1:9b:b4:eb:e8:bf:a1:d0:de:a5:40:54:0d: 39:3d:09:93:3e:ce:57:81:18:59:92:a5:c9:da:77: c7:be:ce:2e:93:3a:93:ad:1e:e7:67:29:1a:03:fc: d1:72:19:f9:60:a8:a4:a7:7f:c6:b4:7e:22:e1:ec: 3c:57:10:bb:32:64:1a:76:c6:87:b5:d3:69:9f:d4: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:CF:BE:D0:5C:F6:79:03:C3:49:8C:6D:D4:81:79:6A:B2:04:44 X509v3 Authority Key Identifier: keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8c:8b:31:0d:72:60:8d:bf:d8:3a:7d:13:ae:28:42:13:68: 54:24:87:de:1d:bb:83:df:50:b9:3c:86:60:49:3a:4f:6f:33: db:86:8f:e9:46:42:cd:0c:30:85:9b:ca:ce:f2:82:eb:7f:6f: 30:c6:9e:5e:4e:80:c6:df:32:4e:20:f7:08:66:de:2f:2a:e8: 92:da:f0:67:2e:c7:a9:ec:ea:25:48:5e:8c:22:e3:ac:a3:49: 9b:5c:82:ac:ea:8b:cf:8b:53:7d:dc:f4:cd:18:1b:d1:10:64: 33:d9:4a:86:6b:55:7c:e0:f8:ef:a9:97:e9:5e:de:df:56:7f: 24:46:51:bd:b7:4d:7f:0d:39:fc:0e:a8:de:7e:49:13:96:45: 2b:d8:04:96:53:2a:13:4f:06:fe:58:d7:f8:ea:a4:d0:c6:16: 28:7e:20:a7:99:7c:3d:94:9a:65:03:e4:dc:11:4c:05:ad:ca: e9:63:7c:ea:ea:2c:0b:2d:73:49:ac:d6:20:67:de:8f:0c:f3: 4a:99:60:b6:54:1c:1d:33:fc:0d:ee:1c:26:21:49:f2:97:fb: 8f:8f:ca:6c:a6:bc:80:28:55:96:77:e6:0f:29:a9:e1:ad:fc: ff:23:b4:74:47:6e:b2:40:ba:88:55:94:bf:62:c9:14:7f:ed: 66:2b:4d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yl+1YAjGHxTgsAwEWiohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMDJhMzNmNWVjNjY4MDU5MWMwOTdmZGI0YWJhMGUwMjhm NDA4NDUwHhcNMjYwMTAxMDkwMTI3WhcNMjYwMTAyMDkwMTI3WjAzMTEwLwYDVQQD Eyg5YmM4Y2ZiZWQwNWNmNjc5MDNjMzQ5OGM2ZGQ0ODE3OTZhYjIwNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxNn+GEYUcGCBdy3K/awxerWff+g 7RFRvRcIeubF5GAW/PUCOtqzvv0eKBF9curKCosXezzkPkaIZwNf5CmxXH5xsGYZ v5gz9DFwXO5Sv/ZSDMeQBMSAZI3h4w+hSsV8uPwU23NlZhH5yjHKc2o5CY9E2UvO 1JAS7vhFvJGzlfoq9jwB+uLFNEbmJKhB8kVsDwmOsnHrZSn/siwx57K9anw+ldVu ZF2k1njmaOJU7/6U86vTHsGbtOvov6HQ3qVAVA05PQmTPs5XgRhZkqXJ2nfHvs4u kzqTrR7nZykaA/zRchn5YKikp3/GtH4i4ew8VxC7MmQadsaHtdNpn9TQZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvIz77QXPZ5A8NJjG3UgXlqsgREMB8GA1UdIwQY MBaAFFACoz9exmgFkcCX/bSroOAo9AhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMt ZWRlMWU0YmI2MTFlLzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2IxZWMtMjA4Zi00ZDYyLTljYmMtZWRlMWU0YmI2MTFl LzEvVUFLalAxN0dhQVdSd0pmOXRLdWc0Q2owQ0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIyLMQ1y YI2/2Dp9E64oQhNoVCSH3h27g99QuTyGYEk6T28z24aP6UZCzQwwhZvKzvKC639v MMaeXk6Axt8yTiD3CGbeLyroktrwZy7HqezqJUhejCLjrKNJm1yCrOqLz4tTfdz0 zRgb0RBkM9lKhmtVfOD476mX6V7e31Z/JEZRvbdNfw05/A6o3n5JE5ZFK9gEllMq E08G/ljX+Oqk0MYWKH4gp5l8PZSaZQPk3BFMBa3K6WN86uosCy1zSazWIGfejwzz SplgtlQcHTP8De4cJiFJ8pf7j4/KbKa8gChVlnfmDymp4a38/yO0dEduskC6iFWU v2LJFH/tZitNGw== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:39 2026 by rpki-client