This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft File: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json) Hash identifier: 4G+MvJc6/QuG+U6LjnckC22i/Ln41L+qB4gSDBWFl0U= Subject key identifier: 61:35:6A:49:D9:A4:A8:40:60:0F:38:3F:92:86:82:DE:C6:69:E0:32 Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F Certificate issuer: /CN=b814345affd1506af9af32ec0d77399b7664aa3f Certificate serial: 019B7F02E23A62680AE11C8BDEE4CC6337C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft Manifest number: 0976 Signing time: Fri 02 Jan 2026 14:00:53 +0000 Manifest this update: Fri 02 Jan 2026 14:00:53 +0000 Manifest next update: Sat 03 Jan 2026 14:00:53 +0000 Files and hashes: 1: 86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa (hash: /zwRSRtTHoD1Z/LaEwVytkEcz+iBaapPIdZRoSCcCHI=) 2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: Y55tPiRx3hXaGN9qzv42I3BbmiDled6o/s6qff+Ouno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:02:e2:3a:62:68:0a:e1:1c:8b:de:e4:cc:63:37:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f Validity Not Before: Jan 2 14:00:53 2026 GMT Not After : Jan 3 14:00:53 2026 GMT Subject: CN=61356a49d9a4a840600f383f928682dec669e032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:05:a2:c0:88:d9:22:db:bf:fe:7f:e7:29: 06:13:82:85:5a:ad:dc:73:82:95:7f:42:1f:4d:f9: 27:d5:6c:66:26:2e:f0:15:21:29:c3:f8:56:84:6a: b1:12:57:7c:09:23:43:8a:dc:0c:55:6a:3d:32:03: b6:59:6a:e4:ed:ce:03:8b:7e:5b:75:b7:9a:62:75: 88:68:b4:40:24:b4:2a:c7:a7:99:00:37:a3:a0:37: 9a:4e:5f:9f:c7:86:6a:7c:2b:7c:f9:5e:f6:06:35: 04:52:db:35:2b:49:5e:71:4d:43:16:58:87:cb:db: b9:5c:b6:62:a4:cc:3c:bb:c7:38:fd:e7:23:49:8e: 20:62:be:e1:2b:36:f5:e3:d2:69:3f:ae:cc:87:7c: 2f:bd:47:fe:eb:7e:6b:dd:82:1d:d8:44:fc:23:f8: 45:25:ea:6b:31:a4:7b:c1:c2:11:92:cc:d2:d0:06: 67:5d:11:c5:b2:19:21:d6:ec:ee:bf:a9:fc:48:87: 45:5c:1c:13:bd:66:06:dc:ab:c8:68:f3:00:56:6c: 8e:4a:a6:4e:e1:fe:7e:41:f9:f6:50:aa:7c:a6:b9: 6a:53:f1:ec:82:43:3d:18:9a:7d:e5:97:f8:61:48: f6:64:1c:40:9e:c9:f9:d5:f5:ac:91:b5:ca:fe:a1: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:35:6A:49:D9:A4:A8:40:60:0F:38:3F:92:86:82:DE:C6:69:E0:32 X509v3 Authority Key Identifier: keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d6:e7:46:26:a3:2e:cf:34:20:95:a2:95:d5:42:1e:95:a2: be:ef:d6:16:3d:0b:15:db:77:4e:dd:6c:7b:c0:57:eb:38:38: f8:40:3a:7a:ed:e9:01:c1:63:e2:61:fb:7c:6a:55:96:cd:7b: 20:25:60:82:f1:f6:14:72:2f:be:74:cf:b4:8c:f7:d3:0e:bb: e2:0e:35:fa:92:6a:5f:40:b6:54:78:f1:24:e0:d6:e3:b3:7c: 17:d1:ce:a6:15:45:67:4b:35:e6:2e:95:2a:52:97:ef:ac:38: f9:bd:9b:ea:94:20:49:c2:75:d0:1e:e8:ed:33:c2:de:fe:9d: 7d:f1:d4:56:b7:14:b2:f1:84:c9:03:1b:9d:07:f5:98:7a:73: f0:f4:2e:a0:92:32:7e:f9:cd:b5:2c:ec:e4:65:3b:cf:b1:b1: e3:a5:b2:b2:24:ef:fa:dc:4a:f1:f5:a1:de:a2:67:37:10:94: 51:44:bf:22:3a:53:ac:59:89:c6:16:9e:31:e5:a6:b9:f2:42: 25:1a:33:64:3e:0e:76:3e:a9:0f:8f:3f:d3:b8:de:89:db:e3: 68:97:21:a0:6a:b7:db:40:76:8d:f5:4c:9c:12:1d:74:e8:de: 3c:78:75:d7:2a:79:23:e9:bf:69:cb:1a:6c:4d:b5:fe:dd:29: 8b:a5:3a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/AuI6YmgK4RyL3uTMYzfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTQzNDVhZmZkMTUwNmFmOWFmMzJlYzBkNzczOTliNzY2 NGFhM2YwHhcNMjYwMTAyMTQwMDUzWhcNMjYwMTAzMTQwMDUzWjAzMTEwLwYDVQQD Eyg2MTM1NmE0OWQ5YTRhODQwNjAwZjM4M2Y5Mjg2ODJkZWM2NjllMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEwFosCI2SLbv/5/5ykGE4KFWq3c c4KVf0IfTfkn1WxmJi7wFSEpw/hWhGqxEld8CSNDitwMVWo9MgO2WWrk7c4Di35b dbeaYnWIaLRAJLQqx6eZADejoDeaTl+fx4ZqfCt8+V72BjUEUts1K0lecU1DFliH y9u5XLZipMw8u8c4/ecjSY4gYr7hKzb149JpP67Mh3wvvUf+635r3YId2ET8I/hF JeprMaR7wcIRkszS0AZnXRHFshkh1uzuv6n8SIdFXBwTvWYG3KvIaPMAVmyOSqZO 4f5+Qfn2UKp8prlqU/HsgkM9GJp95Zf4YUj2ZBxAnsn51fWskbXK/qHkOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGE1aknZpKhAYA84P5KGgt7GaeAyMB8GA1UdIwQY MBaAFLgUNFr/0VBq+a8y7A13OZt2ZKo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUt OWRlNzUyNWJhNzEyLzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUtOWRlNzUyNWJhNzEy LzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtbnRiaj Ls80IJWildVCHpWivu/WFj0LFdt3Tt1se8BX6zg4+EA6eu3pAcFj4mH7fGpVls17 ICVggvH2FHIvvnTPtIz30w674g41+pJqX0C2VHjxJODW47N8F9HOphVFZ0s15i6V KlKX76w4+b2b6pQgScJ10B7o7TPC3v6dffHUVrcUsvGEyQMbnQf1mHpz8PQuoJIy fvnNtSzs5GU7z7Gx46WysiTv+txK8fWh3qJnNxCUUUS/IjpTrFmJxhaeMeWmufJC JRozZD4Odj6pD48/07jeidvjaJchoGq320B2jfVMnBIddOjePHh11yp5I+m/acsa bE21/t0pi6U6cw== -----END CERTIFICATE-----Generated at Fri Jan 2 18:29:12 2026 by rpki-client