This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: tWrXA/pQQSGbN2aGTCbCri+yV8qHKzhvMBzp2OaFFDs= Subject key identifier: 2E:ED:BB:25:65:81:83:3F:1C:2A:BB:E5:09:49:48:74:06:42:79:3C Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B9441CB95862A557C09CDB432079D7C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0931 Signing time: Tue 06 Jan 2026 17:01:38 +0000 Manifest this update: Tue 06 Jan 2026 17:01:38 +0000 Manifest next update: Wed 07 Jan 2026 17:01:38 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: EesNGVYf1HJixD8poTXjcyXnmtX/Bp2xnO36xBs4U74=) 8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:41:cb:95:86:2a:55:7c:09:cd:b4:32:07:9d:7c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 6 17:01:38 2026 GMT Not After : Jan 7 17:01:38 2026 GMT Subject: CN=2eedbb256581833f1c2abbe5094948740642793c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:9d:ce:75:0c:ab:a9:82:7c:5e:39:62:2c: 40:d9:a3:1b:2a:23:54:0e:16:84:d8:5b:17:d3:15: 77:0f:2a:29:66:c0:52:da:d4:63:c7:c2:90:af:94: 33:f7:1f:52:23:26:00:c0:4f:a7:37:29:04:97:48: 35:2c:9a:fd:f6:e3:47:47:8f:cb:22:e0:88:a7:27: 7e:7d:0c:3d:0f:28:b6:08:46:6e:36:76:ac:71:6b: 3f:63:e3:92:34:6c:ed:bc:1b:4e:34:b5:d5:c9:60: 5b:76:54:a1:bf:47:2c:32:f6:6c:b7:4d:ba:46:6e: cf:10:d4:74:f5:b0:99:97:01:a7:c3:57:34:8b:3d: 1f:2b:21:ca:f7:0d:4f:5f:d0:2e:d5:71:aa:b0:ad: 7e:e1:16:62:13:a2:ba:7a:b4:cd:2c:54:8a:d5:77: fb:6a:fe:d0:d8:31:e3:a6:8f:fb:89:49:3d:71:08: 4f:c0:06:72:ae:5a:a7:80:26:f3:e4:12:62:5b:25: 7e:14:fa:03:fc:cd:48:8f:15:9f:61:69:56:2a:f2: 59:29:b7:6c:fa:1f:65:71:0f:19:ed:59:35:9f:c3: bd:2c:6c:9a:e4:17:82:2a:d3:d6:fb:16:ce:49:b5: 37:37:ce:3e:be:24:be:a4:e4:22:ca:b5:b9:08:db: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:ED:BB:25:65:81:83:3F:1C:2A:BB:E5:09:49:48:74:06:42:79:3C X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:66:26:fd:0a:6d:98:de:bb:c1:e0:af:9b:e1:bb:86:eb:63: c6:4b:d7:9f:e7:4f:93:88:94:42:7b:f9:ee:89:80:db:80:97: 83:d5:cf:a1:2e:3f:ed:da:6b:b6:93:a3:5e:58:1c:83:f0:f4: 41:9f:43:58:a1:de:14:86:0f:d9:bb:35:87:65:66:c0:e3:ce: 6d:aa:4d:77:6a:29:36:fa:a8:e7:33:d4:35:23:f8:70:6f:79: 11:6f:11:ba:f7:ff:cc:b7:77:c0:7e:0d:24:3f:99:0f:7c:3b: a6:4e:65:f3:51:8b:ab:65:1c:d9:96:67:c5:11:ca:c0:7b:07: 8f:ed:ab:91:96:04:63:67:4c:af:47:a9:5c:c8:f5:50:4c:21: 9e:76:ee:6c:5f:f5:be:3e:30:96:ad:e2:25:22:4d:c2:08:cf: 53:30:c1:73:9e:54:87:d8:dc:88:fd:67:42:e8:2c:3c:68:1a: d3:ae:bc:65:fc:d4:96:98:30:e9:41:1d:f4:ed:87:6d:57:03: 23:df:7f:a8:ee:e8:ca:4a:4f:f6:2c:ef:5e:3c:c4:6c:15:bb: 22:ed:c8:fc:34:89:b6:0c:04:06:06:0c:50:02:16:c3:8e:9b: d3:53:8e:2a:68:5c:e6:70:96:67:c0:14:73:b3:f9:3e:ee:e6: 5c:3d:92:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuUQcuVhipVfAnNtDIHnXxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTA2MTcwMTM4WhcNMjYwMTA3MTcwMTM4WjAzMTEwLwYDVQQD EygyZWVkYmIyNTY1ODE4MzNmMWMyYWJiZTUwOTQ5NDg3NDA2NDI3OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sKdznUMq6mCfF45YixA2aMbKiNU DhaE2FsX0xV3DyopZsBS2tRjx8KQr5Qz9x9SIyYAwE+nNykEl0g1LJr99uNHR4/L IuCIpyd+fQw9Dyi2CEZuNnascWs/Y+OSNGztvBtONLXVyWBbdlShv0csMvZst026 Rm7PENR09bCZlwGnw1c0iz0fKyHK9w1PX9Au1XGqsK1+4RZiE6K6erTNLFSK1Xf7 av7Q2DHjpo/7iUk9cQhPwAZyrlqngCbz5BJiWyV+FPoD/M1IjxWfYWlWKvJZKbds +h9lcQ8Z7Vk1n8O9LGya5BeCKtPW+xbOSbU3N84+viS+pOQiyrW5CNtSPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7tuyVlgYM/HCq75QlJSHQGQnk8MB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGYm/Qpt mN67weCvm+G7hutjxkvXn+dPk4iUQnv57omA24CXg9XPoS4/7dprtpOjXlgcg/D0 QZ9DWKHeFIYP2bs1h2VmwOPObapNd2opNvqo5zPUNSP4cG95EW8Ruvf/zLd3wH4N JD+ZD3w7pk5l81GLq2Uc2ZZnxRHKwHsHj+2rkZYEY2dMr0epXMj1UEwhnnbubF/1 vj4wlq3iJSJNwgjPUzDBc55Uh9jciP1nQugsPGga0668ZfzUlpgw6UEd9O2HbVcD I99/qO7oykpP9izvXjzEbBW7Iu3I/DSJtgwEBgYMUAIWw46b01OOKmhc5nCWZ8AU c7P5Pu7mXD2SKQ== -----END CERTIFICATE-----Generated at Tue Jan 6 20:31:15 2026 by rpki-client