This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json) Hash identifier: CzOQ4nHnFlo9xnwJ9XBZkNqhboKq5Vh3tcyIjg797WY= Subject key identifier: 6F:06:C8:CF:2A:7D:25:65:62:50:34:93:21:37:88:AB:BC:AD:F3:4D Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Certificate serial: 019BB65FAB1246116CB245045187CCA64F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft Manifest number: 1478 Signing time: Tue 13 Jan 2026 08:01:21 +0000 Manifest this update: Tue 13 Jan 2026 08:01:21 +0000 Manifest next update: Wed 14 Jan 2026 08:01:21 +0000 Files and hashes: 1: kGHJ-8rZWO54aj3tYcGMYD_2TqQ.roa (hash: cYqFt+Ygq2GVWtReyVY63qsFOpbAunakWaQ4n67Z65Y=) 2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: pSFEoZYsklilppS8/0tynZ2lv5zYwkkCW2WEf8p3xeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:5f:ab:12:46:11:6c:b2:45:04:51:87:cc:a6:4f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f Validity Not Before: Jan 13 08:01:21 2026 GMT Not After : Jan 14 08:01:21 2026 GMT Subject: CN=6f06c8cf2a7d256562503493213788abbcadf34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:d8:6c:c0:9f:c1:14:d3:b2:33:39:63:1e: 59:1c:0b:60:6b:6c:e0:35:0d:48:6d:0c:f6:b5:a0: 59:87:2f:d9:77:29:c2:c3:49:12:88:87:7d:d7:d9: 91:d1:d8:a1:57:a7:f7:8d:de:d4:7b:a3:1f:a4:b3: cf:56:64:e6:a9:9a:6c:f9:be:da:44:ab:c6:28:55: b1:2a:04:5e:d3:64:5f:71:f4:d3:6d:b7:a6:7e:cb: f6:df:3f:df:a9:85:dd:62:9f:da:eb:b4:d2:3b:b9: 9b:57:b3:56:f9:d0:0f:d5:d8:3b:24:d3:96:4c:58: 6c:9c:57:c7:53:bb:60:c6:4f:61:eb:bd:22:28:36: eb:29:de:4d:62:1f:39:49:ce:73:ca:df:e0:64:34: c4:36:08:09:da:96:73:f1:1f:88:c8:f5:7b:f1:ab: 18:ac:3b:56:78:e0:fc:e3:5a:72:c6:3c:95:15:bf: 51:cd:11:15:bd:ad:69:cc:d0:99:15:4f:52:67:46: e4:53:40:1b:0f:b4:ea:fd:ce:ab:4d:4e:c4:ec:bd: fa:84:e3:fd:cd:1b:74:68:ba:28:11:bc:22:b6:4e: 61:40:5d:5c:be:97:dc:14:89:d4:76:26:c0:15:76: b6:a7:eb:7f:47:40:b7:ea:e5:2a:c0:08:17:cf:1d: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:06:C8:CF:2A:7D:25:65:62:50:34:93:21:37:88:AB:BC:AD:F3:4D X509v3 Authority Key Identifier: keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:46:c5:94:06:21:2a:35:13:84:83:33:9e:78:80:69:19:69: 64:30:d2:73:d8:e3:2c:e1:db:e9:b5:c1:8a:92:30:b9:5a:b6: 2c:36:e0:7c:94:3b:67:f3:26:af:18:62:c4:1d:32:f8:0d:58: e0:60:e7:9f:1e:f7:7b:a2:ee:f2:0b:cc:a3:03:22:ca:76:18: 5f:bb:21:d1:09:0d:09:50:27:6d:61:67:d6:1f:0e:10:f3:41: f8:37:8b:5a:52:a9:24:87:0c:9a:a9:f1:89:08:95:cc:86:41: 45:cb:b5:94:34:77:5e:3b:8f:fe:20:10:aa:fb:dc:0d:f7:8a: 6d:a0:96:01:ba:8c:cc:ca:7b:9c:c8:b3:b6:10:fd:7f:00:aa: 2d:2f:e0:d4:74:a9:57:4e:a8:23:54:7a:2c:df:a7:ed:83:4a: f6:0d:82:02:52:95:87:d5:e0:64:e5:d1:81:2d:0e:85:81:c8: 6f:36:dd:71:d7:ff:5a:bf:11:17:76:82:42:e5:b8:57:17:c8: c0:d9:3e:06:b2:46:81:c8:aa:86:03:63:b6:14:1e:d8:ff:91: 97:82:91:db:98:16:1b:37:d8:7c:a7:86:4e:a2:f8:4f:67:3d: 54:cd:14:8c:27:5d:df:c7:ea:50:fd:59:a8:5a:3a:d3:a1:63: 22:2f:3f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2X6sSRhFsskUEUYfMpk8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzhmMjNkMGM0OGM2MmUxOGUyOGY1NjBjYzkxNTk4OTNk NGU0MmYwHhcNMjYwMTEzMDgwMTIxWhcNMjYwMTE0MDgwMTIxWjAzMTEwLwYDVQQD Eyg2ZjA2YzhjZjJhN2QyNTY1NjI1MDM0OTMyMTM3ODhhYmJjYWRmMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc3YbMCfwRTTsjM5Yx5ZHAtga2zg NQ1IbQz2taBZhy/ZdynCw0kSiId919mR0dihV6f3jd7Ue6MfpLPPVmTmqZps+b7a RKvGKFWxKgRe02RfcfTTbbemfsv23z/fqYXdYp/a67TSO7mbV7NW+dAP1dg7JNOW TFhsnFfHU7tgxk9h670iKDbrKd5NYh85Sc5zyt/gZDTENggJ2pZz8R+IyPV78asY rDtWeOD841pyxjyVFb9RzREVva1pzNCZFU9SZ0bkU0AbD7Tq/c6rTU7E7L36hOP9 zRt0aLooEbwitk5hQF1cvpfcFInUdibAFXa2p+t/R0C36uUqwAgXzx0JFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8GyM8qfSVlYlA0kyE3iKu8rfNNMB8GA1UdIwQY MBaAFLjI8j0MSMYuGOKPVgzJFZiT1OQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEt NDI0ODFhNjIxMjNjLzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEtNDI0ODFhNjIxMjNj LzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUbFlAYh KjUThIMznniAaRlpZDDSc9jjLOHb6bXBipIwuVq2LDbgfJQ7Z/MmrxhixB0y+A1Y 4GDnnx73e6Lu8gvMowMiynYYX7sh0QkNCVAnbWFn1h8OEPNB+DeLWlKpJIcMmqnx iQiVzIZBRcu1lDR3XjuP/iAQqvvcDfeKbaCWAbqMzMp7nMizthD9fwCqLS/g1HSp V06oI1R6LN+n7YNK9g2CAlKVh9XgZOXRgS0OhYHIbzbdcdf/Wr8RF3aCQuW4VxfI wNk+BrJGgciqhgNjthQe2P+Rl4KR25gWGzfYfKeGTqL4T2c9VM0UjCdd38fqUP1Z qFo606FjIi8/NA== -----END CERTIFICATE-----Generated at Tue Jan 13 13:16:28 2026 by rpki-client