This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json) Hash identifier: O6n4R0X0s/Hw++xeznMlCgIKxexfZ/osJqNhdOLLA1E= Subject key identifier: C4:99:FB:ED:A0:47:37:7B:9D:A1:3A:FB:D1:34:34:5C:50:32:31:3E Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf Certificate serial: 019B81CD0AD3C406961393060493A3AB7973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft Manifest number: 17AD Signing time: Sat 03 Jan 2026 03:00:56 +0000 Manifest this update: Sat 03 Jan 2026 03:00:56 +0000 Manifest next update: Sun 04 Jan 2026 03:00:56 +0000 Files and hashes: 1: 3z59xcVVHmOYTcMl6K7dwHoQcvw.roa (hash: sZKm/hLxXKVHvVjWgAeq8rY/zQIbmF5W3TZbsODWWdY=) 2: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: p3Lasynk9J1idT/u770EtXr6/S1tf+uLRSzOMKWCNq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:cd:0a:d3:c4:06:96:13:93:06:04:93:a3:ab:79:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf Validity Not Before: Jan 3 03:00:56 2026 GMT Not After : Jan 4 03:00:56 2026 GMT Subject: CN=c499fbeda047377b9da13afbd134345c5032313e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:fe:c3:7f:59:78:0e:ac:c3:c1:ca:b6:ce: c1:60:d0:58:33:3d:9d:f9:93:7f:89:08:24:16:16: a3:c5:6e:60:53:94:b0:5d:c8:9b:9d:79:76:c8:2a: 5d:f4:f3:1f:ad:9c:40:1e:b1:30:b5:c3:16:fa:24: d8:e6:03:8b:d0:2c:cb:c9:e2:02:18:95:4a:d4:40: bc:84:05:9f:62:27:6a:a4:b5:9a:91:b3:b2:bf:79: 7e:5f:37:cf:86:a5:90:8c:2d:97:6a:4c:e5:83:69: 8b:5d:6d:20:7d:27:21:9e:e6:62:ac:ae:46:cc:f5: 91:af:e6:ec:a3:f3:c2:b7:c2:88:02:d4:e3:b5:3a: 74:a3:f8:7d:4d:93:d8:e1:b3:57:07:f8:ff:49:97: b3:0a:23:e5:20:bd:ab:40:52:7f:ca:22:fb:89:0e: 40:56:94:92:0b:da:e6:d2:5f:d4:f4:ba:c8:2e:dc: bb:c9:10:f7:69:c0:e5:24:94:21:72:85:7e:9b:37: 62:4b:58:af:58:c7:5b:90:00:45:63:3f:49:68:2d: f6:0e:5a:94:fd:b1:47:48:5a:d3:0d:e1:e8:72:2d: 40:20:17:3d:6b:17:3e:91:6c:62:21:66:9c:f4:bb: f8:f8:44:b9:8a:25:d6:3a:43:51:97:6d:db:e4:ff: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:FB:ED:A0:47:37:7B:9D:A1:3A:FB:D1:34:34:5C:50:32:31:3E X509v3 Authority Key Identifier: keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ca:15:cd:80:b4:82:3e:33:af:87:96:d3:cd:53:ab:5d:c8: de:d5:5f:aa:5e:61:8d:90:d8:cd:3c:ef:80:7d:9d:ed:cf:6a: ce:ed:a9:a4:d5:bf:6d:7f:d1:74:8d:ac:ca:8a:a4:ac:35:ce: db:5c:d2:95:a4:e9:fc:a3:92:8f:04:be:fd:d9:d0:12:0b:60: 78:c7:af:d2:05:69:3a:de:08:2c:a1:f0:bb:f0:6f:b0:64:9e: 8b:63:52:90:5d:76:e2:91:bf:79:9a:e2:7c:0c:5f:94:92:44: f5:08:72:72:a0:1e:84:e4:33:aa:4c:58:e1:23:4c:ea:15:db: e4:02:b1:5e:bc:7b:e7:60:0a:bf:b5:f2:62:16:fe:09:b1:c7: df:9d:e6:16:9d:4c:0f:db:ed:75:1e:02:fe:8a:c1:1f:cd:d7: 49:74:68:ce:11:8f:fb:c5:7c:27:6b:92:63:36:77:49:83:11: 91:ff:2a:86:6b:b2:72:47:8a:91:3b:b8:f9:79:ab:14:be:18: 7e:3d:8d:7f:1c:3a:cb:0a:ab:c6:ca:55:1a:7b:8b:59:87:e6: b0:13:48:f7:f8:71:94:a5:e3:13:b3:93:71:3a:0e:4b:cc:58: 99:8e:1f:75:69:4f:26:8b:0f:7c:0e:46:fd:09:06:99:22:10: 9e:33:33:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBzQrTxAaWE5MGBJOjq3lzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl Y2VkZGYwHhcNMjYwMTAzMDMwMDU2WhcNMjYwMTA0MDMwMDU2WjAzMTEwLwYDVQQD EyhjNDk5ZmJlZGEwNDczNzdiOWRhMTNhZmJkMTM0MzQ1YzUwMzIzMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJr+w39ZeA6sw8HKts7BYNBYMz2d +ZN/iQgkFhajxW5gU5SwXcibnXl2yCpd9PMfrZxAHrEwtcMW+iTY5gOL0CzLyeIC GJVK1EC8hAWfYidqpLWakbOyv3l+XzfPhqWQjC2Xakzlg2mLXW0gfSchnuZirK5G zPWRr+bso/PCt8KIAtTjtTp0o/h9TZPY4bNXB/j/SZezCiPlIL2rQFJ/yiL7iQ5A VpSSC9rm0l/U9LrILty7yRD3acDlJJQhcoV+mzdiS1ivWMdbkABFYz9JaC32DlqU /bFHSFrTDeHoci1AIBc9axc+kWxiIWac9Lv4+ES5iiXWOkNRl23b5P+9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSZ++2gRzd7naE6+9E0NFxQMjE+MB8GA1UdIwQY MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3 LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8oVzYC0 gj4zr4eW081Tq13I3tVfql5hjZDYzTzvgH2d7c9qzu2ppNW/bX/RdI2syoqkrDXO 21zSlaTp/KOSjwS+/dnQEgtgeMev0gVpOt4ILKHwu/BvsGSei2NSkF124pG/eZri fAxflJJE9QhycqAehOQzqkxY4SNM6hXb5AKxXrx752AKv7XyYhb+CbHH353mFp1M D9vtdR4C/orBH83XSXRozhGP+8V8J2uSYzZ3SYMRkf8qhmuyckeKkTu4+XmrFL4Y fj2Nfxw6ywqrxspVGnuLWYfmsBNI9/hxlKXjE7OTcToOS8xYmY4fdWlPJosPfA5G /QkGmSIQnjMzeA== -----END CERTIFICATE-----Generated at Sat Jan 3 06:30:48 2026 by rpki-client