This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft File: UC_eWr0nGEuqmtq3za-8w6VEGus.mft (raw, json) Hash identifier: L1422dK/2Efl8DUE2Tcafc0dgSGVeNdKnVSstfwOyRI= Subject key identifier: 5C:0F:7B:DC:5E:C0:39:81:47:17:0A:07:3D:0A:F7:A7:2E:60:01:52 Authority key identifier: 50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB Certificate issuer: /CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb Certificate serial: 019B8B06AE3616349792C74DBAF9D132B359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft Manifest number: 14E9 Signing time: Sun 04 Jan 2026 22:00:29 +0000 Manifest this update: Sun 04 Jan 2026 22:00:29 +0000 Manifest next update: Mon 05 Jan 2026 22:00:29 +0000 Files and hashes: 1: UC_eWr0nGEuqmtq3za-8w6VEGus.crl (hash: VJtmzaqLV/vEzfBTTm+L83ZjTFKZ+yBRP87Iyp+VTAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:06:ae:36:16:34:97:92:c7:4d:ba:f9:d1:32:b3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=502fde5abd27184baa9adab7cdafbcc3a5441aeb Validity Not Before: Jan 4 22:00:29 2026 GMT Not After : Jan 5 22:00:29 2026 GMT Subject: CN=5c0f7bdc5ec0398147170a073d0af7a72e600152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:2f:86:df:6c:d0:58:f8:1a:50:3a:d9:7e: 55:d7:00:78:ae:b2:7d:ea:27:2b:bd:fc:42:70:d0: e4:84:18:a5:da:7c:b7:60:9b:8e:eb:7b:72:b7:70: e3:0f:ef:44:e9:0e:dc:e7:5c:00:77:52:36:32:da: c6:ba:3a:e2:ea:82:2f:48:d9:4c:42:73:6f:c3:2e: d6:5d:a7:59:2f:ca:89:2c:80:b3:70:29:a7:63:36: be:ba:d1:eb:80:dc:ad:d3:d5:39:57:ba:ed:70:36: bb:d1:b7:f6:ec:c9:54:0f:3f:9f:5f:26:eb:bf:25: 75:84:c3:5a:28:d0:20:ba:39:42:a0:1f:83:4f:59: 83:09:27:ca:46:71:c9:dc:67:84:0a:14:bb:e2:5b: cf:59:b7:e7:44:d2:fb:8b:2a:6a:da:32:44:13:90: 4c:02:b6:14:44:6d:9b:8b:d6:80:43:ff:c7:5f:05: b4:73:99:20:77:a9:70:e8:fe:56:1b:b6:8d:b9:bf: 58:d5:8a:04:d8:73:ca:2b:b1:ed:a5:f7:47:91:23: 60:a3:e5:c3:ae:c3:c6:69:0e:48:a0:2e:7b:d7:b9: 6b:8a:2e:57:c9:75:24:21:be:07:d0:8a:0c:6e:28: 5f:7f:1a:ba:61:25:04:04:b0:74:96:8a:95:80:2b: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:7B:DC:5E:C0:39:81:47:17:0A:07:3D:0A:F7:A7:2E:60:01:52 X509v3 Authority Key Identifier: keyid:50:2F:DE:5A:BD:27:18:4B:AA:9A:DA:B7:CD:AF:BC:C3:A5:44:1A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UC_eWr0nGEuqmtq3za-8w6VEGus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8152ae-51bd-4106-bf59-713fd8e91fa9/1/UC_eWr0nGEuqmtq3za-8w6VEGus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:db:00:80:d3:60:e6:5b:47:88:8a:f5:74:3f:d9:ce:7d: ac:3b:ed:eb:4d:4f:70:f4:86:b2:5a:d6:68:71:69:48:06:ea: 23:3e:51:15:aa:2b:c2:5a:d0:33:6e:44:cc:a1:08:3b:cf:83: 2d:ec:a0:62:80:14:e1:15:9f:4b:9c:4e:eb:d9:fd:30:de:75: 4f:8f:c9:73:4a:c0:0e:d3:ce:31:02:b7:a2:9a:fa:b2:4d:eb: 27:19:dc:53:e5:91:37:c5:c4:b1:1b:cf:1d:ff:22:00:3f:de: a4:59:f6:9f:11:95:6c:d5:91:b9:b0:07:e3:a6:a3:99:44:38: bf:02:be:8b:93:c5:06:6f:e3:82:ac:28:4d:81:d2:3a:d5:d8: 71:fe:88:70:a9:df:34:6f:ac:43:38:1e:e6:bf:d5:24:b8:48: 9f:c5:01:65:9f:74:fe:16:92:69:21:0c:3e:87:d7:69:39:ba: 37:4c:61:34:7c:82:61:17:cd:f0:38:2c:c7:02:27:24:d1:8c: d1:30:e4:0e:a8:0e:12:e3:3b:0c:03:b0:36:72:0d:ef:82:ca: fc:4b:58:96:8d:b5:b4:c4:ac:cd:37:19:02:31:6e:f1:26:38: 14:fb:75:2d:72:7e:7f:7d:31:10:0e:85:42:49:b0:20:2f:a9: 67:40:49:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuLBq42FjSXksdNuvnRMrNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMmZkZTVhYmQyNzE4NGJhYTlhZGFiN2NkYWZiY2MzYTU0 NDFhZWIwHhcNMjYwMTA0MjIwMDI5WhcNMjYwMTA1MjIwMDI5WjAzMTEwLwYDVQQD Eyg1YzBmN2JkYzVlYzAzOTgxNDcxNzBhMDczZDBhZjdhNzJlNjAwMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pcvht9s0Fj4GlA62X5V1wB4rrJ9 6icrvfxCcNDkhBil2ny3YJuO63tyt3DjD+9E6Q7c51wAd1I2MtrGujri6oIvSNlM QnNvwy7WXadZL8qJLICzcCmnYza+utHrgNyt09U5V7rtcDa70bf27MlUDz+fXybr vyV1hMNaKNAgujlCoB+DT1mDCSfKRnHJ3GeEChS74lvPWbfnRNL7iypq2jJEE5BM ArYURG2bi9aAQ//HXwW0c5kgd6lw6P5WG7aNub9Y1YoE2HPKK7HtpfdHkSNgo+XD rsPGaQ5IoC5717lrii5XyXUkIb4H0IoMbihffxq6YSUEBLB0loqVgCvunwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwPe9xewDmBRxcKBz0K96cuYAFSMB8GA1UdIwQY MBaAFFAv3lq9JxhLqprat82vvMOlRBrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTkt NzEzZmQ4ZTkxZmE5LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84MTUyYWUtNTFiZC00MTA2LWJmNTktNzEzZmQ4ZTkxZmE5 LzEvVUNfZVdyMG5HRXVxbXRxM3phLTh3NlZFR3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzLbAIDT YOZbR4iK9XQ/2c59rDvt601PcPSGslrWaHFpSAbqIz5RFaorwlrQM25EzKEIO8+D LeygYoAU4RWfS5xO69n9MN51T4/Jc0rADtPOMQK3opr6sk3rJxncU+WRN8XEsRvP Hf8iAD/epFn2nxGVbNWRubAH46ajmUQ4vwK+i5PFBm/jgqwoTYHSOtXYcf6IcKnf NG+sQzge5r/VJLhIn8UBZZ90/haSaSEMPofXaTm6N0xhNHyCYRfN8DgsxwInJNGM 0TDkDqgOEuM7DAOwNnIN74LK/EtYlo21tMSszTcZAjFu8SY4FPt1LXJ+f30xEA6F QkmwIC+pZ0BJeQ== -----END CERTIFICATE-----Generated at Mon Jan 5 01:47:24 2026 by rpki-client