This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json) Hash identifier: k/iHiHZHdblbs2MfbwypCmNWfnaasXtgqoT8flFszXA= Subject key identifier: DB:1F:E9:C6:62:08:96:FC:07:27:E5:0F:1A:04:82:21:0D:E3:E7:DE Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0 Certificate serial: 019BA1594E1B4CD829E0AC9DCBF9550DF4DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft Manifest number: 02F0 Signing time: Fri 09 Jan 2026 06:02:22 +0000 Manifest this update: Fri 09 Jan 2026 06:02:22 +0000 Manifest next update: Sat 10 Jan 2026 06:02:22 +0000 Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=) 2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=) 3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: q1kbUZ6yuGUA7gMLaUMF+rPclxsbcPlpddZCt/eZNXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:59:4e:1b:4c:d8:29:e0:ac:9d:cb:f9:55:0d:f4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0 Validity Not Before: Jan 9 06:02:22 2026 GMT Not After : Jan 10 06:02:22 2026 GMT Subject: CN=db1fe9c6620896fc0727e50f1a0482210de3e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:97:56:cb:c6:98:29:e3:d9:43:c2:14:ec: 48:10:ef:39:b9:13:77:d2:6f:59:9e:92:d8:bb:6a: 06:3a:8d:f2:7d:56:f3:bb:6c:1b:38:7f:b4:5c:bc: f2:5e:27:1a:56:fb:ca:36:13:6f:24:48:90:b1:e7: 9c:21:44:6e:ed:9f:68:41:ac:ce:30:16:89:cb:7a: 3e:e1:77:fc:bd:68:6d:6d:8d:b0:06:34:84:4f:4f: b0:6d:e1:6f:62:43:18:9c:b4:dc:24:85:39:c6:6f: e4:8f:b9:10:6c:fd:8e:54:76:8d:49:d0:b0:43:87: 0d:09:2f:93:2c:20:e3:ad:77:e4:d4:7d:a2:6b:96: bd:26:d1:b5:ec:56:f2:fd:81:c0:28:41:43:97:a7: 9a:e1:6b:90:48:40:9d:ae:0d:70:ab:55:91:cd:06: b2:e6:88:22:56:ea:d1:53:36:55:23:56:43:32:10: 21:ab:31:f1:c5:d2:86:3c:b2:2f:3f:26:af:79:c4: 48:10:df:d8:49:2a:f1:7e:96:f5:04:2c:f0:ff:0b: f0:fe:13:ac:c0:44:e9:7a:70:1c:10:af:18:a5:75: db:ef:db:f1:f6:50:91:6e:ce:72:af:dd:2a:67:ed: 14:22:02:e2:38:88:e0:3d:f9:02:1d:da:90:76:31: 07:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:E9:C6:62:08:96:FC:07:27:E5:0F:1A:04:82:21:0D:E3:E7:DE X509v3 Authority Key Identifier: keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:eb:69:6f:cd:27:a5:cd:7e:5a:22:c4:fc:7d:a8:6c:a3: 08:5e:07:99:28:99:8c:44:92:37:d9:90:7f:38:63:37:e5:62: 28:ff:5c:8e:e1:0a:84:92:ca:c0:df:9b:15:13:dc:69:f2:a7: 71:fc:bf:1a:68:64:08:84:e3:1b:de:f3:19:b0:94:c9:1d:31: 58:77:3c:08:9d:90:04:07:d4:a2:d4:0a:86:fa:16:fd:82:10: 97:44:9a:9e:6d:82:24:72:1d:27:a0:04:92:f0:ae:fa:4d:df: a2:29:a0:1e:fe:fa:6c:42:67:b7:54:c0:66:d5:eb:eb:2a:32: 61:78:28:6c:1a:1b:be:71:45:fb:8a:4b:5b:fc:4d:b8:c4:8a: dc:68:58:b8:7e:ed:e1:2c:04:e2:82:49:1e:1a:ce:cd:6f:77: b8:70:4f:39:fc:5c:b2:4b:1c:b3:24:10:8a:f6:79:4a:fe:05: a8:5b:e4:3a:48:29:ce:b5:e1:b3:3f:8d:76:19:5d:31:8e:b8: 20:71:c9:57:65:7d:8c:d1:94:85:e7:02:2a:3d:31:44:52:96: d4:6e:2b:7e:74:8b:63:28:75:a4:5e:60:b3:1a:08:e5:75:99: 25:09:d1:c1:8d:0a:0e:24:2e:3c:57:10:31:a5:80:af:84:0f: 37:5f:15:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWU4bTNgp4Kydy/lVDfTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1 Yjg4ZTAwHhcNMjYwMTA5MDYwMjIyWhcNMjYwMTEwMDYwMjIyWjAzMTEwLwYDVQQD EyhkYjFmZTljNjYyMDg5NmZjMDcyN2U1MGYxYTA0ODIyMTBkZTNlN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1eXVsvGmCnj2UPCFOxIEO85uRN3 0m9ZnpLYu2oGOo3yfVbzu2wbOH+0XLzyXicaVvvKNhNvJEiQseecIURu7Z9oQazO MBaJy3o+4Xf8vWhtbY2wBjSET0+wbeFvYkMYnLTcJIU5xm/kj7kQbP2OVHaNSdCw Q4cNCS+TLCDjrXfk1H2ia5a9JtG17Fby/YHAKEFDl6ea4WuQSECdrg1wq1WRzQay 5ogiVurRUzZVI1ZDMhAhqzHxxdKGPLIvPyavecRIEN/YSSrxfpb1BCzw/wvw/hOs wETpenAcEK8YpXXb79vx9lCRbs5yr90qZ+0UIgLiOIjgPfkCHdqQdjEH+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsf6cZiCJb8ByflDxoEgiEN4+feMB8GA1UdIwQY MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC07raW/N J6XNfloixPx9qGyjCF4HmSiZjESSN9mQfzhjN+ViKP9cjuEKhJLKwN+bFRPcafKn cfy/GmhkCITjG97zGbCUyR0xWHc8CJ2QBAfUotQKhvoW/YIQl0Sanm2CJHIdJ6AE kvCu+k3foimgHv76bEJnt1TAZtXr6yoyYXgobBobvnFF+4pLW/xNuMSK3GhYuH7t 4SwE4oJJHhrOzW93uHBPOfxcskscsyQQivZ5Sv4FqFvkOkgpzrXhsz+NdhldMY64 IHHJV2V9jNGUhecCKj0xRFKW1G4rfnSLYyh1pF5gsxoI5XWZJQnRwY0KDiQuPFcQ MaWAr4QPN18VFg== -----END CERTIFICATE-----Generated at Fri Jan 9 07:56:27 2026 by rpki-client