This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft File: UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json) Hash identifier: t0br2I08Y/COkvImi5Vi4viSYyLMECpqo+8ykSMOb2M= Subject key identifier: FF:16:5B:9A:7D:2D:BF:C7:8C:82:33:93:49:0A:A1:99:49:8F:96:51 Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2 Certificate issuer: /CN=5205f586d8263bb06d64050f8f484c14e803c4b2 Certificate serial: 019B7C389C7F4890ABBA2A597E09D0A54CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft Manifest number: 0DE7 Signing time: Fri 02 Jan 2026 01:00:43 +0000 Manifest this update: Fri 02 Jan 2026 01:00:43 +0000 Manifest next update: Sat 03 Jan 2026 01:00:43 +0000 Files and hashes: 1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: NDDv1OyIG9vKEWab2XwL3KpLcIPJgq0Hh+yz5sq2x2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:38:9c:7f:48:90:ab:ba:2a:59:7e:09:d0:a5:4c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2 Validity Not Before: Jan 2 01:00:43 2026 GMT Not After : Jan 3 01:00:43 2026 GMT Subject: CN=ff165b9a7d2dbfc78c823393490aa199498f9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:6e:4f:bd:98:de:c5:b4:eb:d1:bc:66:da: 5e:9a:93:64:72:5f:12:06:d1:26:1b:bb:b4:21:ac: 69:1b:30:4d:37:27:f7:ed:ba:ee:10:c4:9c:b7:e1: 84:b7:c1:69:61:e9:94:e6:93:29:08:ba:bb:2a:34: c8:74:32:4f:9a:30:7f:6b:e2:24:60:74:8b:40:1f: ee:fa:3a:1a:c1:64:7e:02:5a:b2:da:ad:d2:93:2c: fb:a2:e2:f4:9d:09:96:e1:93:b4:68:1b:8b:41:ba: ae:84:fa:98:a6:ac:c8:9f:e7:76:4c:3c:5f:5d:5e: 2c:e4:5d:cc:90:9a:39:18:65:26:dc:bb:be:65:f2: d4:c5:04:66:ae:21:2a:9e:16:b2:d1:1c:07:58:65: a3:48:fd:39:23:92:a7:14:d3:c8:5c:48:5c:f7:de: e8:35:1a:b2:70:37:76:c6:c1:a3:24:ae:d2:72:2a: dd:e1:60:9a:ac:ad:53:7c:1c:4a:9c:8d:a8:1f:af: ce:a1:40:9f:69:14:2c:a5:78:19:ba:5f:ef:22:5d: ae:07:31:5f:76:f6:0a:c2:d1:f9:21:8f:22:c5:75: 78:aa:69:53:fa:b3:7e:df:7d:96:90:76:70:1c:31: ae:fc:a1:32:f1:7f:d3:74:73:30:d6:49:e2:a5:a7: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:16:5B:9A:7D:2D:BF:C7:8C:82:33:93:49:0A:A1:99:49:8F:96:51 X509v3 Authority Key Identifier: keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1b:b1:4a:f8:8d:fb:3b:31:07:38:08:69:21:73:8f:7e:a5: 23:8c:ab:f3:42:83:4b:45:45:07:e9:54:8c:3c:ea:18:a5:1c: 5e:26:02:79:52:ae:6e:93:a6:65:23:e3:b9:db:7c:60:c1:59: 01:29:f7:8a:4f:2a:ee:61:68:a3:09:61:2f:e3:46:08:db:19: 35:66:54:de:01:cb:83:db:ce:8e:db:b2:cb:20:34:37:d1:0d: 39:a8:1d:b2:99:c2:09:8c:c7:48:08:e2:2e:4e:02:c5:35:62: df:09:1c:01:91:23:9f:54:e5:ce:39:63:4c:37:b4:09:eb:d1: 5f:cb:04:0e:31:65:12:46:ef:21:3a:f5:ae:20:3c:b6:67:d3: 10:55:5b:34:e6:4b:2b:b3:9b:ee:b6:61:bd:fd:18:84:b6:ef: 31:c1:00:56:f2:7a:cd:67:af:e3:c0:7c:44:7b:a3:f5:de:90: 53:a0:67:f0:9e:5c:f6:e0:6b:5e:4a:44:87:99:1c:f3:d1:6e: 4d:71:59:05:af:32:e4:2d:b0:20:4d:af:b7:a7:8d:9b:73:d3: 39:d8:32:3b:93:5a:9a:19:66:33:66:3d:09:69:4a:2e:7a:76: f8:35:1c:90:73:57:1c:0b:d3:e8:18:65:dd:26:ac:5b:b3:60: fc:22:bc:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8OJx/SJCruipZfgnQpUytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDVmNTg2ZDgyNjNiYjA2ZDY0MDUwZjhmNDg0YzE0ZTgw M2M0YjIwHhcNMjYwMTAyMDEwMDQzWhcNMjYwMTAzMDEwMDQzWjAzMTEwLwYDVQQD EyhmZjE2NWI5YTdkMmRiZmM3OGM4MjMzOTM0OTBhYTE5OTQ5OGY5NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm9uT72Y3sW069G8ZtpempNkcl8S BtEmG7u0IaxpGzBNNyf37bruEMSct+GEt8FpYemU5pMpCLq7KjTIdDJPmjB/a+Ik YHSLQB/u+joawWR+Alqy2q3Skyz7ouL0nQmW4ZO0aBuLQbquhPqYpqzIn+d2TDxf XV4s5F3MkJo5GGUm3Lu+ZfLUxQRmriEqnhay0RwHWGWjSP05I5KnFNPIXEhc997o NRqycDd2xsGjJK7Scird4WCarK1TfBxKnI2oH6/OoUCfaRQspXgZul/vIl2uBzFf dvYKwtH5IY8ixXV4qmlT+rN+332WkHZwHDGu/KEy8X/TdHMw1knipacRiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8WW5p9Lb/HjIIzk0kKoZlJj5ZRMB8GA1UdIwQY MBaAFFIF9YbYJjuwbWQFD49ITBToA8SyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMt MGYyNTczZWNhMmU0LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMtMGYyNTczZWNhMmU0 LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBuxSviN +zsxBzgIaSFzj36lI4yr80KDS0VFB+lUjDzqGKUcXiYCeVKubpOmZSPjudt8YMFZ ASn3ik8q7mFoowlhL+NGCNsZNWZU3gHLg9vOjtuyyyA0N9ENOagdspnCCYzHSAji Lk4CxTVi3wkcAZEjn1TlzjljTDe0CevRX8sEDjFlEkbvITr1riA8tmfTEFVbNOZL K7Ob7rZhvf0YhLbvMcEAVvJ6zWev48B8RHuj9d6QU6Bn8J5c9uBrXkpEh5kc89Fu TXFZBa8y5C2wIE2vt6eNm3PTOdgyO5NamhlmM2Y9CWlKLnp2+DUckHNXHAvT6Bhl 3SasW7Ng/CK8fQ== -----END CERTIFICATE-----Generated at Fri Jan 2 11:31:03 2026 by rpki-client