This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json) Hash identifier: VxKT9r3vg5nkHihqW0HBCV6FRUX1j2tY4L4tR/QmejI= Subject key identifier: 6A:6F:5F:C9:5A:B5:2E:A5:0E:E6:0C:A2:02:08:72:79:DA:22:F7:A7 Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Certificate serial: 019B796E9D279D2CA90EA33016C95D6C22F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft Manifest number: 0EAE Signing time: Thu 01 Jan 2026 12:00:50 +0000 Manifest this update: Thu 01 Jan 2026 12:00:50 +0000 Manifest next update: Fri 02 Jan 2026 12:00:50 +0000 Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=) 2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: mp927JjS6kLtWrS12JCpBYaOdnK8vBWEFHSRneKkGEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:9d:27:9d:2c:a9:0e:a3:30:16:c9:5d:6c:22:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Validity Not Before: Jan 1 12:00:50 2026 GMT Not After : Jan 2 12:00:50 2026 GMT Subject: CN=6a6f5fc95ab52ea50ee60ca202087279da22f7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:f4:c5:4d:5f:19:d3:b0:65:8b:e5:65:f0: 5d:ed:73:f6:a7:f2:06:3b:ca:89:c4:cd:78:0f:c5: 66:3c:98:c9:28:d6:2a:8e:30:a3:d0:80:2c:39:8d: 33:29:de:ec:50:2c:93:b4:be:81:03:3a:a6:6f:a8: 9f:da:d2:eb:1d:3b:45:58:06:2f:13:eb:3c:39:db: 6b:f8:3d:01:81:14:64:f5:64:af:48:49:cf:53:ae: b4:c6:4a:24:b8:28:da:55:88:31:8f:01:6c:37:28: 7b:55:35:40:61:f1:e8:18:a1:ea:38:69:22:a4:8e: 46:fd:f0:12:e9:af:90:05:c0:12:5e:29:1c:df:9e: cf:36:de:d2:f1:45:36:a5:98:3d:8a:92:e9:dd:8f: 51:73:1a:89:6c:21:01:48:7b:3d:6f:24:02:af:5b: 89:9c:6b:b7:69:ef:96:31:f9:1a:59:d2:51:e4:4b: bf:46:7f:5e:92:55:d5:7c:06:15:52:db:c3:b1:7f: 6f:09:6f:ce:87:61:d1:8b:c7:69:95:79:20:26:04: 97:86:03:41:ea:62:81:03:7d:da:bd:b0:5f:51:e6: c4:76:96:0c:f6:e0:87:d0:55:27:ff:2c:29:5e:2a: 0e:5b:24:3c:fd:be:3d:d4:a9:4d:98:81:fa:83:a0: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:5F:C9:5A:B5:2E:A5:0E:E6:0C:A2:02:08:72:79:DA:22:F7:A7 X509v3 Authority Key Identifier: keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:99:3e:42:d6:4e:b2:3a:19:e0:d3:9d:84:b2:2f:e5:e5: 1a:4b:2f:29:16:c0:d4:e7:66:67:c0:35:1e:f8:88:51:25:19: c3:df:a1:e6:b1:b1:6d:53:0e:09:d7:36:fb:e4:e9:ef:f0:71: 3b:18:26:44:c9:f4:b9:2f:75:04:62:6f:0e:ad:7e:8c:2b:2f: 94:ae:a2:36:2f:3d:6c:bf:5d:c1:ca:be:1b:f7:80:c6:f9:95: 1b:63:79:0d:63:40:7d:17:04:02:2a:ab:c0:37:4a:d0:4c:62: fc:e0:ba:60:f8:bc:9a:6f:d3:25:5a:f4:aa:04:ed:db:2b:db: 83:c9:e0:ba:2e:88:a6:c0:e9:47:95:ae:9b:2f:cb:58:39:bd: cc:16:77:b2:60:2f:79:a3:f4:e2:44:6b:7c:a1:4b:94:d7:67: 76:bf:66:f4:ab:7c:ce:42:36:02:01:08:5b:22:bc:26:f0:7f: 9e:c4:3f:59:0a:a4:d8:03:bd:61:db:9d:b4:8f:ae:ac:b1:2b: 1f:d1:9c:45:b9:e8:7d:ab:a5:d4:70:a8:b4:a2:df:52:54:d6: f8:0f:eb:0a:38:29:62:02:0e:04:59:d9:58:50:52:8a:fd:57: c7:ff:ee:38:08:3d:a0:3c:b9:50:a7:7c:72:9e:6a:04:65:12: 80:2c:c5:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bp0nnSypDqMwFsldbCL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm YmYyNTQwHhcNMjYwMTAxMTIwMDUwWhcNMjYwMTAyMTIwMDUwWjAzMTEwLwYDVQQD Eyg2YTZmNWZjOTVhYjUyZWE1MGVlNjBjYTIwMjA4NzI3OWRhMjJmN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxn0xU1fGdOwZYvlZfBd7XP2p/IG O8qJxM14D8VmPJjJKNYqjjCj0IAsOY0zKd7sUCyTtL6BAzqmb6if2tLrHTtFWAYv E+s8Odtr+D0BgRRk9WSvSEnPU660xkokuCjaVYgxjwFsNyh7VTVAYfHoGKHqOGki pI5G/fAS6a+QBcASXikc357PNt7S8UU2pZg9ipLp3Y9RcxqJbCEBSHs9byQCr1uJ nGu3ae+WMfkaWdJR5Eu/Rn9eklXVfAYVUtvDsX9vCW/Oh2HRi8dplXkgJgSXhgNB 6mKBA33avbBfUebEdpYM9uCH0FUn/ywpXioOWyQ8/b491KlNmIH6g6C+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpvX8latS6lDuYMogIIcnnaIvenMB8GA1UdIwQY MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGuZPkLW TrI6GeDTnYSyL+XlGksvKRbA1OdmZ8A1HviIUSUZw9+h5rGxbVMOCdc2++Tp7/Bx OxgmRMn0uS91BGJvDq1+jCsvlK6iNi89bL9dwcq+G/eAxvmVG2N5DWNAfRcEAiqr wDdK0Exi/OC6YPi8mm/TJVr0qgTt2yvbg8ngui6IpsDpR5Wumy/LWDm9zBZ3smAv eaP04kRrfKFLlNdndr9m9Kt8zkI2AgEIWyK8JvB/nsQ/WQqk2AO9YdudtI+urLEr H9GcRbnofaul1HCotKLfUlTW+A/rCjgpYgIOBFnZWFBSiv1Xx//uOAg9oDy5UKd8 cp5qBGUSgCzFYA== -----END CERTIFICATE-----Generated at Thu Jan 1 21:23:29 2026 by rpki-client