This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json) Hash identifier: bcniti33UKp21Wnj2hgy5c7MzrqdmD32ZGPnAIOG0Bo= Subject key identifier: A8:A9:24:81:69:01:F9:4F:79:86:D3:4D:5B:15:D6:35:1C:C5:1A:02 Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Certificate serial: 019B8FF6EAE423D048D38E27CAD2D769D65C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft Manifest number: 17B3 Signing time: Mon 05 Jan 2026 21:01:22 +0000 Manifest this update: Mon 05 Jan 2026 21:01:22 +0000 Manifest next update: Tue 06 Jan 2026 21:01:22 +0000 Files and hashes: 1: Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa (hash: 4hWI2h6BtzzSvfeBxBlJw/0l98yMAAcnhfVquWWrJ/8=) 2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: nN33XbYFD5BHh53S/jtsQkfPTuFlwxiyTvwShJ6KSnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:f6:ea:e4:23:d0:48:d3:8e:27:ca:d2:d7:69:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48 Validity Not Before: Jan 5 21:01:22 2026 GMT Not After : Jan 6 21:01:22 2026 GMT Subject: CN=a8a924816901f94f7986d34d5b15d6351cc51a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ce:36:ad:da:39:de:b2:b2:40:53:21:d7:61: 4d:1f:a0:4b:6b:1f:66:1c:7d:ce:a8:9e:b5:71:01: 2a:62:37:f7:cd:39:93:aa:0a:7c:cb:4c:03:3e:0e: f0:e7:0c:15:e2:ee:6d:9f:a3:bd:2f:06:a4:49:d0: 57:bd:d1:29:f4:3f:a2:40:d3:98:35:ed:12:a4:9f: 04:10:8e:ab:ca:08:f8:64:50:af:0d:dc:c9:04:96: fc:a2:c8:fd:fa:09:3f:ea:2d:c4:84:c0:03:c0:41: e1:1a:cf:c8:85:1c:74:a8:4c:85:6b:7f:64:8b:b5: c5:50:15:1f:fe:07:2b:87:02:3f:43:c8:d7:4d:b2: 7d:55:bd:49:5f:15:55:42:9f:9d:41:41:84:b8:4f: 29:54:2a:b3:47:4c:63:ac:1a:1e:d9:20:35:6b:0a: ee:2d:8a:f7:68:fc:2e:0d:a6:72:96:3f:6f:c7:28: 0c:ba:2d:ae:68:01:4f:8c:93:e6:59:dc:a9:55:79: 23:da:7e:61:45:ec:a8:30:67:fd:48:53:ce:46:24: f0:5a:e9:e7:7c:e5:f0:12:61:32:74:ed:14:16:3b: a1:cd:3a:5e:e6:8b:59:58:e1:7e:7e:df:7e:0a:f3: 45:90:75:74:b3:51:32:35:de:fc:3a:6e:43:bc:95: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:24:81:69:01:F9:4F:79:86:D3:4D:5B:15:D6:35:1C:C5:1A:02 X509v3 Authority Key Identifier: keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:ed:02:23:ad:b7:d2:6a:63:d0:be:e6:ac:67:e2:a7:11: d1:26:c2:ba:ed:11:b7:9f:53:45:d2:08:90:50:14:46:f6:69: ac:89:b8:49:0c:d4:c5:74:44:86:21:38:17:82:a8:ac:54:84: 48:fd:6a:6e:51:20:58:36:3e:9e:24:b5:04:27:67:1c:b9:ec: bf:eb:dc:63:ae:d4:1d:4d:9e:2f:bc:89:cb:1a:73:d6:1c:08: 6f:94:87:18:eb:b2:d2:2b:33:1e:c2:fe:e6:19:1a:13:38:97: 3b:3d:95:72:05:e0:a9:0a:f3:da:3a:69:90:73:a4:30:65:70: 0b:46:5c:91:d4:21:27:57:ec:00:f7:2c:c5:dc:4b:f7:14:03: 96:0c:26:0e:3f:52:c0:60:75:d9:9c:9e:1a:81:9c:aa:69:47: 69:5a:62:0f:77:63:3c:9c:9b:66:fb:d7:31:3f:5e:e7:e4:82: 0a:c4:b6:f7:98:72:c7:0f:d2:b2:2e:03:09:36:86:53:11:74: 46:fd:58:50:01:85:43:49:99:9d:96:08:52:7b:1e:1e:32:a3: 3b:54:90:f9:9a:4d:11:06:9f:be:68:9d:9c:e9:d2:f0:4c:32: 72:ed:1f:7d:ed:f5:d3:51:11:de:35:1a:05:44:0c:50:12:6d: 88:16:c3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuP9urkI9BI044nytLXadZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWJhMmE1NmEwYzMwZmRhZjU5MzRhZjg3NjVjMWZmZDEz NTdhNDgwHhcNMjYwMTA1MjEwMTIyWhcNMjYwMTA2MjEwMTIyWjAzMTEwLwYDVQQD EyhhOGE5MjQ4MTY5MDFmOTRmNzk4NmQzNGQ1YjE1ZDYzNTFjYzUxYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3842rdo53rKyQFMh12FNH6BLax9m HH3OqJ61cQEqYjf3zTmTqgp8y0wDPg7w5wwV4u5tn6O9LwakSdBXvdEp9D+iQNOY Ne0SpJ8EEI6rygj4ZFCvDdzJBJb8osj9+gk/6i3EhMADwEHhGs/IhRx0qEyFa39k i7XFUBUf/gcrhwI/Q8jXTbJ9Vb1JXxVVQp+dQUGEuE8pVCqzR0xjrBoe2SA1awru LYr3aPwuDaZylj9vxygMui2uaAFPjJPmWdypVXkj2n5hReyoMGf9SFPORiTwWunn fOXwEmEydO0UFjuhzTpe5otZWOF+ft9+CvNFkHV0s1EyNd78Om5DvJVGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKipJIFpAflPeYbTTVsV1jUcxRoCMB8GA1UdIwQY MBaAFLqroqVqDDD9r1k0r4dlwf/RNXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDkt MDI0ODY4ZmZkMzE1LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xOTU0YTYtZGEyMy00OTUyLTljMDktMDI0ODY4ZmZkMzE1 LzEvdXF1aXBXb01NUDJ2V1RTdmgyWEJfOUUxZWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbDtAiOt t9JqY9C+5qxn4qcR0SbCuu0Rt59TRdIIkFAURvZprIm4SQzUxXREhiE4F4KorFSE SP1qblEgWDY+niS1BCdnHLnsv+vcY67UHU2eL7yJyxpz1hwIb5SHGOuy0iszHsL+ 5hkaEziXOz2VcgXgqQrz2jppkHOkMGVwC0ZckdQhJ1fsAPcsxdxL9xQDlgwmDj9S wGB12ZyeGoGcqmlHaVpiD3djPJybZvvXMT9e5+SCCsS295hyxw/Ssi4DCTaGUxF0 Rv1YUAGFQ0mZnZYIUnseHjKjO1SQ+ZpNEQafvmidnOnS8Ewycu0ffe3101ER3jUa BUQMUBJtiBbDSA== -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:47 2026 by rpki-client