This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json) Hash identifier: zS8MUZGKZZsFRKXuQ3p+wixxc9X6lY2//NUZ06dPcUc= Subject key identifier: 9C:85:CF:E3:D1:99:33:94:58:C8:59:AC:23:9C:63:3F:65:10:4C:6F Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Certificate serial: 019BB43B23CD70E261A33DE447972DDD3D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft Manifest number: 17C7 Signing time: Mon 12 Jan 2026 22:02:13 +0000 Manifest this update: Mon 12 Jan 2026 22:02:13 +0000 Manifest next update: Tue 13 Jan 2026 22:02:13 +0000 Files and hashes: 1: 5IDTAUNYBa9GaRCcF0vtCC18VIA.roa (hash: QzvywvqILM8YjAB+vkAqO5QMbphjJfyMQHKh8+KGuQA=) 2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: 7XM3OwjKRiduxVTDvHtuylCzy5Xdb2AmpBk+ai4O8f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:3b:23:cd:70:e2:61:a3:3d:e4:47:97:2d:dd:3d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Validity Not Before: Jan 12 22:02:13 2026 GMT Not After : Jan 13 22:02:13 2026 GMT Subject: CN=9c85cfe3d199339458c859ac239c633f65104c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:2c:c1:49:44:fd:a4:92:17:e9:d5:46:ff: 78:d4:c8:f7:2f:6c:05:a2:0c:0a:16:fe:6b:f0:b9: 91:ce:b9:ee:9e:a7:9e:32:6e:40:16:44:91:b1:e5: 40:7f:bc:77:50:9c:6f:e3:70:17:06:95:1b:53:f4: 38:42:bc:88:34:59:1c:2a:15:a0:19:f2:2f:4a:f9: ec:49:ed:23:5b:3b:ba:df:f1:35:4d:c0:95:b0:a9: 0b:a7:3d:bb:06:24:1e:a4:e8:79:e5:db:53:fd:c2: e9:13:a4:f9:92:84:e3:09:76:7e:e1:e5:9a:91:29: 7f:94:0a:e9:a0:54:14:39:da:b4:92:55:4b:09:65: 1f:07:56:c6:ab:4e:40:09:a4:3e:a4:c2:46:24:4c: 0c:b1:75:da:88:12:30:e7:04:50:a6:c2:02:ca:e9: 1f:7b:54:8f:44:6d:05:fb:74:da:09:2a:2f:fa:e9: 57:2c:24:05:35:3c:14:23:e0:5c:77:ff:ec:35:17: f2:c9:c7:80:6a:9f:7f:53:d0:f2:73:d8:4b:53:ab: b6:b3:8c:bf:29:5e:bd:77:43:7f:15:04:ce:df:4e: 79:6f:91:fa:de:b2:fc:ef:73:78:d2:69:c3:c0:4e: 52:a4:e1:d4:b6:52:36:de:bc:84:99:31:6d:0b:b0: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:CF:E3:D1:99:33:94:58:C8:59:AC:23:9C:63:3F:65:10:4C:6F X509v3 Authority Key Identifier: keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:19:d2:fa:71:c7:ac:a3:48:69:28:47:77:fb:08:49:bf:eb: 1c:2d:fc:85:ed:da:a6:a7:3f:9b:03:e4:8b:4c:41:d8:28:eb: 47:40:60:75:57:f0:94:26:01:47:d7:36:81:a6:a2:44:9e:b3: d4:cf:3b:b6:24:fe:43:78:b7:48:a6:7a:62:b0:39:f6:aa:7c: 85:ab:44:67:91:af:22:ab:fb:e6:c4:3a:31:2f:91:35:1b:9f: ac:a0:e2:c2:f7:d1:12:02:cd:f8:77:dc:29:95:95:20:2b:9b: ee:82:cf:30:79:20:60:4f:75:2c:ff:49:fa:13:f9:7b:1e:32: 4f:78:48:4a:26:21:de:cc:af:86:6d:01:1a:7d:94:20:3f:21: d6:d1:d3:18:eb:52:72:0b:18:00:24:9d:cf:cd:1f:2f:ea:05: ea:56:c0:21:7f:5c:06:5f:01:15:29:b6:33:93:6d:2c:36:2f: b1:2b:37:03:8d:42:4c:3f:a4:39:0d:69:9b:8c:50:d8:db:b0: 2c:c4:de:c6:30:01:5a:37:83:ed:e6:f3:0d:c2:9b:71:a3:e6: 8f:0f:14:e6:0b:7d:ce:b0:e4:8c:61:2f:44:ce:a6:a8:24:d0: a5:77:7d:90:5e:ea:ad:42:6d:a2:6d:d7:ac:af:f5:f9:be:e2: 62:9d:96:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0OyPNcOJhoz3kR5ct3T2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5 ZDhlNDgwHhcNMjYwMTEyMjIwMjEzWhcNMjYwMTEzMjIwMjEzWjAzMTEwLwYDVQQD Eyg5Yzg1Y2ZlM2QxOTkzMzk0NThjODU5YWMyMzljNjMzZjY1MTA0YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTQswUlE/aSSF+nVRv941Mj3L2wF ogwKFv5r8LmRzrnunqeeMm5AFkSRseVAf7x3UJxv43AXBpUbU/Q4QryINFkcKhWg GfIvSvnsSe0jWzu63/E1TcCVsKkLpz27BiQepOh55dtT/cLpE6T5koTjCXZ+4eWa kSl/lArpoFQUOdq0klVLCWUfB1bGq05ACaQ+pMJGJEwMsXXaiBIw5wRQpsICyukf e1SPRG0F+3TaCSov+ulXLCQFNTwUI+Bcd//sNRfyyceAap9/U9Dyc9hLU6u2s4y/ KV69d0N/FQTO3055b5H63rL873N40mnDwE5SpOHUtlI23ryEmTFtC7BX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyFz+PRmTOUWMhZrCOcYz9lEExvMB8GA1UdIwQY MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt MGExMzRiNjUzNWM0LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0 LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBnS+nHH rKNIaShHd/sISb/rHC38he3apqc/mwPki0xB2CjrR0BgdVfwlCYBR9c2gaaiRJ6z 1M87tiT+Q3i3SKZ6YrA59qp8hatEZ5GvIqv75sQ6MS+RNRufrKDiwvfREgLN+Hfc KZWVICub7oLPMHkgYE91LP9J+hP5ex4yT3hISiYh3syvhm0BGn2UID8h1tHTGOtS cgsYACSdz80fL+oF6lbAIX9cBl8BFSm2M5NtLDYvsSs3A41CTD+kOQ1pm4xQ2Nuw LMTexjABWjeD7ebzDcKbcaPmjw8U5gt9zrDkjGEvRM6mqCTQpXd9kF7qrUJtom3X rK/1+b7iYp2Wnw== -----END CERTIFICATE-----Generated at Tue Jan 13 04:56:51 2026 by rpki-client