This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json) Hash identifier: /WtpNbu5guYSt03rT0XXg177QjN9e/7aXhSy6CyoLgw= Subject key identifier: 71:9D:91:59:5C:D2:F4:87:FD:ED:CC:B0:48:F0:79:81:4F:01:4A:83 Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Certificate serial: 019B9C69121F9CD94CAEE9B055A7A62BCFAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft Manifest number: 14FE Signing time: Thu 08 Jan 2026 07:01:30 +0000 Manifest this update: Thu 08 Jan 2026 07:01:30 +0000 Manifest next update: Fri 09 Jan 2026 07:01:30 +0000 Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: qK5U63XyjjtjU2dZHth/OCkMzP6bOCQnV7Q7SZLMUMY=) 2: lqa3yfi-IJTce6zbolyaur2GC34.roa (hash: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:69:12:1f:9c:d9:4c:ae:e9:b0:55:a7:a6:2b:cf:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65 Validity Not Before: Jan 8 07:01:30 2026 GMT Not After : Jan 9 07:01:30 2026 GMT Subject: CN=719d91595cd2f487fdedccb048f079814f014a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:43:33:77:1c:d0:9e:9f:0d:0b:de:d1:b7: 24:97:60:6f:88:37:eb:53:1d:f6:61:41:f3:16:fd: 83:26:45:aa:1e:3f:8a:10:ec:8e:84:02:7e:11:9a: 07:fc:7b:d4:5d:35:5a:27:5d:c0:eb:ca:f1:8d:43: 75:1e:ed:5c:75:27:57:1f:11:48:36:42:b5:d6:a1: de:ed:32:69:46:6b:03:7c:06:a7:55:01:81:01:1d: d6:cc:b4:0b:a7:87:ce:dd:7a:66:b8:94:88:94:49: 5e:91:71:cc:51:73:03:a8:62:fc:7f:b0:7c:5d:11: 35:e4:95:00:0f:8f:ff:70:a6:67:cb:b6:3a:d9:0a: 01:f4:83:67:e5:52:fe:db:f0:15:22:73:8b:df:78: f2:77:a4:ca:8e:06:5f:72:0c:dc:d3:2e:2f:ec:cd: a3:23:c0:aa:98:5d:2d:eb:bb:5c:80:37:1d:d5:7d: 0e:2c:ae:1f:c3:89:82:1f:4b:fd:08:b5:bc:fb:40: b8:54:ca:5d:d4:4c:ce:84:73:dc:54:29:11:ea:da: 32:6a:c0:26:38:9e:cc:79:50:36:04:e9:a7:f2:61: f4:c5:8e:80:3c:81:39:f1:7a:7b:6f:53:06:cd:43: 35:52:38:51:88:6a:ef:e1:70:3d:b2:32:cc:42:55: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:91:59:5C:D2:F4:87:FD:ED:CC:B0:48:F0:79:81:4F:01:4A:83 X509v3 Authority Key Identifier: keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cb:03:3f:a5:52:0a:04:cc:fb:d5:ff:0b:3a:d9:ee:9c:24: 7b:64:e3:ff:9d:3e:f6:dd:66:00:f7:d7:66:2b:0f:0a:8d:ff: 8f:2a:21:a0:34:c5:ee:0e:b2:85:9d:24:bc:ce:0c:85:04:90: 5c:2f:7a:f7:11:be:8f:b7:33:0c:a7:02:ef:62:62:3a:cb:63: df:34:dd:f8:4f:2f:91:ee:81:8f:a9:37:0c:7a:b1:0b:c2:97: b7:8c:58:4e:58:64:79:15:5a:5d:6b:12:86:74:06:f8:6a:f9: f2:af:ef:07:b2:8e:5c:7a:48:fc:08:20:3b:cb:7e:4d:50:3f: 5b:0a:b5:4f:8a:17:00:58:dd:a7:0e:37:f6:dd:1a:93:74:53: 94:4a:2c:f7:12:a0:1c:6e:e7:b3:e2:70:17:79:a8:a5:70:e5: 6f:16:c3:dc:f7:9c:9a:29:32:1e:09:29:1c:7a:e0:c6:f6:38: 87:e6:58:09:79:22:94:a3:58:3d:6f:23:c9:fc:b9:68:ed:09: d8:5c:2d:3b:4c:1e:c4:c9:38:8a:a7:f3:5f:f7:02:56:7a:3a: 0b:26:33:e9:9c:7d:b4:cd:c2:90:eb:30:af:1a:9c:d7:2f:e2: 82:ba:c4:7c:ed:5a:e5:25:2f:12:f6:6a:0d:a4:37:2f:2c:68: ac:cb:e1:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucaRIfnNlMrumwVaemK8+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZGE5OWY5MzUxOGUyOWE5NDViMDdmNjBhMThlZjg2ZTli MzllNjUwHhcNMjYwMTA4MDcwMTMwWhcNMjYwMTA5MDcwMTMwWjAzMTEwLwYDVQQD Eyg3MTlkOTE1OTVjZDJmNDg3ZmRlZGNjYjA0OGYwNzk4MTRmMDE0YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0JDM3cc0J6fDQve0bckl2BviDfr Ux32YUHzFv2DJkWqHj+KEOyOhAJ+EZoH/HvUXTVaJ13A68rxjUN1Hu1cdSdXHxFI NkK11qHe7TJpRmsDfAanVQGBAR3WzLQLp4fO3XpmuJSIlElekXHMUXMDqGL8f7B8 XRE15JUAD4//cKZny7Y62QoB9INn5VL+2/AVInOL33jyd6TKjgZfcgzc0y4v7M2j I8CqmF0t67tcgDcd1X0OLK4fw4mCH0v9CLW8+0C4VMpd1EzOhHPcVCkR6toyasAm OJ7MeVA2BOmn8mH0xY6APIE58Xp7b1MGzUM1UjhRiGrv4XA9sjLMQlV8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGdkVlc0vSH/e3MsEjweYFPAUqDMB8GA1UdIwQY MBaAFFPamfk1GOKalFsH9goY74bps55lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODkt OWYzMDJjMjBhZTcwLzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81ODM1NDMtZTMzMS00NTkyLThkODktOWYzMDJjMjBhZTcw LzEvVTlxWi1UVVk0cHFVV3dmMkNoanZodW16bm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMsDP6VS CgTM+9X/CzrZ7pwke2Tj/50+9t1mAPfXZisPCo3/jyohoDTF7g6yhZ0kvM4MhQSQ XC969xG+j7czDKcC72JiOstj3zTd+E8vke6Bj6k3DHqxC8KXt4xYTlhkeRVaXWsS hnQG+Gr58q/vB7KOXHpI/AggO8t+TVA/Wwq1T4oXAFjdpw439t0ak3RTlEos9xKg HG7ns+JwF3mopXDlbxbD3PecmikyHgkpHHrgxvY4h+ZYCXkilKNYPW8jyfy5aO0J 2FwtO0wexMk4iqfzX/cCVno6CyYz6Zx9tM3CkOswrxqc1y/igrrEfO1a5SUvEvZq DaQ3LyxorMvh3Q== -----END CERTIFICATE-----Generated at Thu Jan 8 11:29:32 2026 by rpki-client