This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json) Hash identifier: oy/3McC9kjeWLHhTcH0bEtekt0s+poIBc5mJMXfQhec= Subject key identifier: EA:73:A6:C9:84:0D:7F:1F:5A:EA:BC:4E:7C:98:C1:EA:04:29:40:00 Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Certificate serial: 019BAD5CB6100C2D82BAB5A9CC1AE7BB6A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft Manifest number: 0EC9 Signing time: Sun 11 Jan 2026 14:01:32 +0000 Manifest this update: Sun 11 Jan 2026 14:01:32 +0000 Manifest next update: Mon 12 Jan 2026 14:01:32 +0000 Files and hashes: 1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=) 2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: m0kDxApcj0/N97N8E8Ot4Qy7An13J53uzbt5qzh6QaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:b6:10:0c:2d:82:ba:b5:a9:cc:1a:e7:bb:6a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254 Validity Not Before: Jan 11 14:01:32 2026 GMT Not After : Jan 12 14:01:32 2026 GMT Subject: CN=ea73a6c9840d7f1f5aeabc4e7c98c1ea04294000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:15:ff:d1:07:f4:e3:15:56:b9:cb:23:61:9f: 34:52:c8:b2:72:e0:30:57:b1:97:59:ab:90:2c:76: cf:cb:fe:df:99:14:d4:78:fe:03:1b:94:c4:e4:0d: 00:a9:aa:49:36:dd:a0:5e:19:06:d5:73:c5:3b:c5: e5:06:27:f8:95:4a:f7:df:38:07:41:09:d8:43:86: 4d:05:1b:16:81:46:d3:05:69:6e:93:28:42:71:d6: 36:0c:cb:17:8f:f1:f2:cb:0f:88:98:bb:73:1d:58: ae:28:3d:71:12:d7:38:4a:5a:a2:e6:19:d5:15:86: 13:42:53:87:0d:8a:09:c7:e1:ac:f5:33:99:0a:7a: bd:db:24:d4:17:38:08:91:2e:ce:49:59:fa:68:75: 69:e5:64:7b:5f:cd:7e:3b:cc:52:09:a6:d1:9b:2b: c6:0e:f8:d8:62:dd:41:fe:ee:3b:4a:7f:e2:a0:d8: 63:ad:a2:77:17:7c:25:fa:7a:41:c5:2a:3b:7a:40: 6b:f0:ae:8b:bd:08:86:dd:65:b4:5e:24:6a:44:c5: 3e:5a:26:57:a7:8b:8b:72:64:1d:b9:01:37:9c:52: 77:e1:e6:33:03:da:e5:74:92:79:c6:3f:e7:fd:23: 8a:5a:1d:ce:7b:ec:77:f0:44:68:45:a2:92:b8:99: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:A6:C9:84:0D:7F:1F:5A:EA:BC:4E:7C:98:C1:EA:04:29:40:00 X509v3 Authority Key Identifier: keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:eb:bf:3e:51:c4:5e:29:2b:cc:6a:6d:38:17:19:2f:2a:09: 62:30:d7:d7:03:07:28:cd:a6:e9:ab:6f:91:4c:a6:c9:ee:a1: c8:ed:0a:7f:17:b5:97:5b:10:c1:94:4d:8d:8d:39:18:64:5c: 20:ae:29:17:a1:ac:07:20:ab:c9:5d:6a:e3:79:a0:70:2f:cf: 1e:c3:ec:0f:4d:3c:be:ee:3c:52:a3:46:18:5d:ff:9a:32:df: de:ab:4e:a8:87:3f:59:bc:8b:96:80:2d:57:cd:1b:b9:2b:37: f9:90:d6:63:2b:c8:6e:da:e6:f3:cd:42:40:83:f9:48:c6:c6: 92:a1:84:fc:a2:08:f7:33:35:14:0c:4d:7a:56:e7:e0:ab:58: 71:0b:7b:d6:58:26:5c:f0:b1:0f:fd:27:38:09:40:31:f2:e6: a0:68:ae:ed:d3:9a:56:d1:bb:3a:84:dc:46:16:8f:81:11:1a: e2:60:55:ac:04:60:48:93:27:21:7c:da:d1:a7:86:eb:bf:f4: c2:6b:03:00:93:38:74:ba:e1:e2:f1:f6:dd:c8:d5:75:d4:51: d5:14:cf:47:af:e7:d9:8c:2b:02:02:aa:a1:2b:8f:b9:2c:35: 2a:83:20:a1:99:a8:dc:13:15:db:e1:50:cf:3f:0d:2c:71:ca: 7b:07:3e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXLYQDC2CurWpzBrnu2o+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYWE5OWViOGMxYjE4YjFhYTdkNDI0NWNlNDgxZmI4ODhm YmYyNTQwHhcNMjYwMTExMTQwMTMyWhcNMjYwMTEyMTQwMTMyWjAzMTEwLwYDVQQD EyhlYTczYTZjOTg0MGQ3ZjFmNWFlYWJjNGU3Yzk4YzFlYTA0Mjk0MDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xX/0Qf04xVWucsjYZ80UsiycuAw V7GXWauQLHbPy/7fmRTUeP4DG5TE5A0AqapJNt2gXhkG1XPFO8XlBif4lUr33zgH QQnYQ4ZNBRsWgUbTBWlukyhCcdY2DMsXj/Hyyw+ImLtzHViuKD1xEtc4Slqi5hnV FYYTQlOHDYoJx+Gs9TOZCnq92yTUFzgIkS7OSVn6aHVp5WR7X81+O8xSCabRmyvG DvjYYt1B/u47Sn/ioNhjraJ3F3wl+npBxSo7ekBr8K6LvQiG3WW0XiRqRMU+WiZX p4uLcmQduQE3nFJ34eYzA9rldJJ5xj/n/SOKWh3Oe+x38ERoRaKSuJn6dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpzpsmEDX8fWuq8TnyYweoEKUAAMB8GA1UdIwQY MBaAFFCqmeuMGxixqn1CRc5IH7iI+/JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAt MWNmNmZkOWY4MGZhLzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wODg2NzctODBiZS00MTMwLWIzNjAtMWNmNmZkOWY4MGZh LzEvVUtxWjY0d2JHTEdxZlVKRnprZ2Z1SWo3OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+u/PlHE XikrzGptOBcZLyoJYjDX1wMHKM2m6atvkUymye6hyO0Kfxe1l1sQwZRNjY05GGRc IK4pF6GsByCryV1q43mgcC/PHsPsD008vu48UqNGGF3/mjLf3qtOqIc/WbyLloAt V80buSs3+ZDWYyvIbtrm881CQIP5SMbGkqGE/KII9zM1FAxNelbn4KtYcQt71lgm XPCxD/0nOAlAMfLmoGiu7dOaVtG7OoTcRhaPgREa4mBVrARgSJMnIXza0aeG67/0 wmsDAJM4dLrh4vH23cjVddRR1RTPR6/n2YwrAgKqoSuPuSw1KoMgoZmo3BMV2+FQ zz8NLHHKewc+hw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:20:32 2026 by rpki-client