This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json) Hash identifier: UmVc0/Ue1ue7Mdd2N4LzFATldvz0PUA88GkTiE5wYbI= Subject key identifier: 43:36:55:90:F8:24:B3:04:9E:75:D6:C6:E0:97:33:81:7A:BE:48:64 Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9 Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9 Certificate serial: 019BADCAB953C95B41D4807D5FE9A8DD14C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft Manifest number: 0CE3 Signing time: Sun 11 Jan 2026 16:01:42 +0000 Manifest this update: Sun 11 Jan 2026 16:01:42 +0000 Manifest next update: Mon 12 Jan 2026 16:01:42 +0000 Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: GQ6YqLCl9zLu60n9n39KD/YqpJHeJ82QUTB0LNtFkts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:ca:b9:53:c9:5b:41:d4:80:7d:5f:e9:a8:dd:14:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9 Validity Not Before: Jan 11 16:01:42 2026 GMT Not After : Jan 12 16:01:42 2026 GMT Subject: CN=43365590f824b3049e75d6c6e09733817abe4864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:29:81:4d:97:42:26:55:e7:09:e6:01:69: 70:e0:ab:ef:7a:e7:dd:45:5a:6d:a0:55:9b:9f:d4: e4:bf:13:51:05:76:a3:dc:9f:92:94:17:d6:db:a6: 14:6a:7f:c1:04:8d:27:cd:2a:d7:8c:ec:01:c7:e8: 14:3d:6a:4a:39:48:89:63:2f:b9:31:46:a0:7e:cc: 19:e4:f5:f4:d3:23:c5:94:d2:55:eb:82:48:3f:43: 4d:9a:8a:6b:2a:62:e1:bf:a3:04:4e:a1:49:1b:96: 3a:28:03:4b:25:f9:70:5b:46:5e:34:a1:d7:64:9e: bc:a2:8b:a4:e6:27:67:aa:34:9d:97:8e:f4:6f:bc: ff:12:ef:20:a0:a7:32:25:63:70:1b:07:6c:1c:7a: ad:2c:48:85:d1:24:59:6c:ed:76:56:66:e7:df:79: 07:0d:dd:37:5d:b5:5a:82:5d:8a:44:86:4f:00:9e: ae:49:15:67:1e:e3:6b:d7:4d:49:50:62:a0:67:7f: f2:15:3d:39:43:e9:3e:8c:50:4d:06:a4:fe:8e:b2: cc:ab:37:6d:1d:87:fb:38:1b:c6:08:c4:df:b9:77: 2c:c9:72:63:31:23:53:07:8b:0a:8d:0c:4d:78:79: 7f:a5:4a:2c:09:dd:06:0c:0b:13:41:7f:6c:b4:c0: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:55:90:F8:24:B3:04:9E:75:D6:C6:E0:97:33:81:7A:BE:48:64 X509v3 Authority Key Identifier: keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a1:c9:2e:73:22:a7:be:10:bf:f2:9d:ec:c7:9b:87:85:1c: 68:16:57:e6:cb:b1:69:20:9f:2b:dc:c5:21:d2:ce:05:5d:17: b2:7f:7b:39:ae:31:85:ae:b6:d2:be:d5:90:6d:4b:f8:cf:c0: c8:88:b3:ee:5b:52:5c:59:97:bb:17:0d:18:ba:86:78:29:de: 21:5f:d2:bd:54:7e:d5:48:2d:3d:0b:23:a5:a7:a4:3f:cd:40: 99:3e:22:ce:bb:89:6b:ad:ea:6e:5b:9a:be:c0:46:81:ce:ec: 61:36:a3:3f:01:16:f5:03:df:3c:4f:ef:d1:65:7a:1d:5c:43: 04:74:dc:77:8e:60:03:96:97:f9:e2:26:ee:c8:e8:a7:f9:01: 22:37:52:e7:7d:06:b2:8d:97:2d:1a:9a:d5:0c:8e:fc:cc:c9: 7a:5f:5a:12:f9:7d:2a:5d:4a:ea:8f:87:cd:a5:8c:d1:cc:31: 1b:90:ee:cc:16:ac:56:5e:76:cb:25:de:9e:37:b2:8d:d9:9f: cf:52:2f:7a:98:d9:40:7b:b3:db:fd:69:a0:33:49:cb:39:bf: 10:06:30:eb:0f:1f:70:e0:bd:73:10:63:45:bf:f5:88:ca:1e: 54:57:82:95:c6:25:f1:65:7c:85:c8:de:54:19:56:47:29:cd: ae:76:77:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutyrlTyVtB1IB9X+mo3RTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ODZiM2NiMTNmZDIxNjdkODlkMTIxODVlOTM1MDZkZDQ1 YzlhZjkwHhcNMjYwMTExMTYwMTQyWhcNMjYwMTEyMTYwMTQyWjAzMTEwLwYDVQQD Eyg0MzM2NTU5MGY4MjRiMzA0OWU3NWQ2YzZlMDk3MzM4MTdhYmU0ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kwpgU2XQiZV5wnmAWlw4Kvveufd RVptoFWbn9TkvxNRBXaj3J+SlBfW26YUan/BBI0nzSrXjOwBx+gUPWpKOUiJYy+5 MUagfswZ5PX00yPFlNJV64JIP0NNmoprKmLhv6METqFJG5Y6KANLJflwW0ZeNKHX ZJ68oouk5idnqjSdl470b7z/Eu8goKcyJWNwGwdsHHqtLEiF0SRZbO12Vmbn33kH Dd03XbVagl2KRIZPAJ6uSRVnHuNr101JUGKgZ3/yFT05Q+k+jFBNBqT+jrLMqzdt HYf7OBvGCMTfuXcsyXJjMSNTB4sKjQxNeHl/pUosCd0GDAsTQX9stMD15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM2VZD4JLMEnnXWxuCXM4F6vkhkMB8GA1UdIwQY MBaAFLiGs8sT/SFn2J0SGF6TUG3UXJr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80MmFjM2MtYzU4My00YjgyLWJjYjct MDQ3Mzk0MDJlMjdiLzEvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80MmFjM2MtYzU4My00YjgyLWJjYjctMDQ3Mzk0MDJlMjdi LzEvdUlhenl4UDlJV2ZZblJJWVhwTlFiZFJjbXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqHJLnMi p74Qv/Kd7Mebh4UcaBZX5suxaSCfK9zFIdLOBV0Xsn97Oa4xha620r7VkG1L+M/A yIiz7ltSXFmXuxcNGLqGeCneIV/SvVR+1UgtPQsjpaekP81AmT4izruJa63qblua vsBGgc7sYTajPwEW9QPfPE/v0WV6HVxDBHTcd45gA5aX+eIm7sjop/kBIjdS530G so2XLRqa1QyO/MzJel9aEvl9Kl1K6o+HzaWM0cwxG5DuzBasVl52yyXenjeyjdmf z1IvepjZQHuz2/1poDNJyzm/EAYw6w8fcOC9cxBjRb/1iMoeVFeClcYl8WV8hcje VBlWRynNrnZ3lg== -----END CERTIFICATE-----Generated at Sun Jan 11 22:32:12 2026 by rpki-client