This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json) Hash identifier: 03sNQN4Fqqaa0Cgyl5jkd9eYS3iIA59SFT5//zbKcxI= Subject key identifier: 19:EC:B1:0C:91:25:6D:1F:DB:A3:5D:FD:59:E0:CF:47:1B:4A:8F:45 Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8 Certificate serial: 019BE9032230A2CFEC50C7614BA584C62B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft Manifest number: 12E0 Signing time: Fri 23 Jan 2026 04:00:55 +0000 Manifest this update: Fri 23 Jan 2026 04:00:55 +0000 Manifest next update: Sat 24 Jan 2026 04:00:55 +0000 Files and hashes: 1: E-486E0-raIhh0cU7uEvlJrtVq8.roa (hash: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs=) 2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: uF/iNO33Ib6XZf0XUHZQdsxPUhBChI+7aSSdfmAMl6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:03:22:30:a2:cf:ec:50:c7:61:4b:a5:84:c6:2b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8 Validity Not Before: Jan 23 04:00:55 2026 GMT Not After : Jan 24 04:00:55 2026 GMT Subject: CN=19ecb10c91256d1fdba35dfd59e0cf471b4a8f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:8f:f5:41:0d:10:29:08:88:e2:db:89:67: 56:4d:c3:b3:75:f8:c8:4f:e9:34:3b:c2:cc:c5:02: ae:eb:79:0b:cd:04:45:9f:e6:37:c3:a4:ed:e9:b3: cf:09:04:66:b1:b2:aa:0a:4d:5d:11:e6:be:f5:ae: df:59:ec:6e:79:92:d1:4d:cb:a8:01:4a:16:e7:88: 13:d0:36:25:13:c9:c1:76:b0:3d:e7:11:46:77:02: 81:31:a2:8f:1c:bf:e4:0d:29:a9:c0:b6:b5:a3:c4: e5:3e:9f:4b:dc:99:2e:16:b8:b6:e0:d7:1d:8c:c2: 3c:c4:86:5e:5e:11:e7:8d:45:2b:e6:da:8f:87:41: 6e:b8:f4:94:19:c0:43:59:9a:d5:15:a8:01:04:54: 28:d3:18:d5:4b:44:ab:81:aa:f4:5e:d8:e4:8f:59: 11:b3:50:a2:86:41:37:1c:db:74:76:d5:45:43:91: 80:da:cc:6e:da:99:8b:52:85:9c:db:4c:6b:63:63: 18:4b:66:e9:8b:02:68:21:8c:e6:a2:a3:9f:05:49: f9:e6:31:51:f5:d8:3f:bf:74:c0:cb:53:81:fd:ee: 30:07:d8:5a:89:a5:c9:93:76:24:fd:e9:0d:62:51: e2:8f:9c:d0:47:73:2e:77:bd:fc:d3:d9:da:f6:89: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:B1:0C:91:25:6D:1F:DB:A3:5D:FD:59:E0:CF:47:1B:4A:8F:45 X509v3 Authority Key Identifier: keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:30:75:3c:64:5b:2d:6e:57:98:3b:42:8a:44:d1:39:83:e1: 3f:0b:e7:cf:ac:48:62:79:c7:7f:bc:c8:f1:e2:62:d8:4e:77: 0a:3c:b1:c6:71:b2:29:4d:94:3d:73:7a:95:4a:bd:82:04:c8: 78:46:da:c3:43:94:97:6c:0c:03:07:e1:13:2e:cc:03:ec:fd: 82:0c:fc:b5:bc:b9:7f:9e:3c:6f:9a:e3:e3:6f:df:aa:4b:14: 0b:6d:67:9e:67:61:0c:a7:3e:ea:4a:a8:46:f0:16:ad:f0:4d: 80:82:06:eb:e5:9b:ee:f5:aa:55:2b:f0:bb:1d:8f:7e:5a:41: 4a:14:46:db:9f:3c:16:a3:66:4a:3e:70:95:62:13:6e:f6:12: 90:0f:35:3e:b2:e2:d6:0b:a8:ed:01:d4:26:ab:5a:7c:2c:36: ae:09:dd:40:85:fc:e0:85:29:1c:78:06:7d:31:69:f8:72:64: 1e:42:4e:a7:ba:ad:08:98:c8:e6:9d:21:21:0e:23:82:c5:db: c4:a2:d3:07:26:b5:60:8f:65:df:9d:40:a8:30:b8:79:4b:76: c0:63:36:1f:c2:fd:47:bf:61:fd:07:60:94:1d:b0:db:0f:36: 57:5d:33:25:a0:04:85:04:66:56:3d:2a:0e:91:77:06:b7:99: db:47:51:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvpAyIwos/sUMdhS6WExitNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4 OTczYjgwHhcNMjYwMTIzMDQwMDU1WhcNMjYwMTI0MDQwMDU1WjAzMTEwLwYDVQQD EygxOWVjYjEwYzkxMjU2ZDFmZGJhMzVkZmQ1OWUwY2Y0NzFiNGE4ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2mP9UENECkIiOLbiWdWTcOzdfjI T+k0O8LMxQKu63kLzQRFn+Y3w6Tt6bPPCQRmsbKqCk1dEea+9a7fWexueZLRTcuo AUoW54gT0DYlE8nBdrA95xFGdwKBMaKPHL/kDSmpwLa1o8TlPp9L3JkuFri24Ncd jMI8xIZeXhHnjUUr5tqPh0FuuPSUGcBDWZrVFagBBFQo0xjVS0Srgar0Xtjkj1kR s1CihkE3HNt0dtVFQ5GA2sxu2pmLUoWc20xrY2MYS2bpiwJoIYzmoqOfBUn55jFR 9dg/v3TAy1OB/e4wB9haiaXJk3Yk/ekNYlHij5zQR3Mud73809na9olzsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnssQyRJW0f26Nd/Vngz0cbSo9FMB8GA1UdIwQY MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5 LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzB1PGRb LW5XmDtCikTROYPhPwvnz6xIYnnHf7zI8eJi2E53CjyxxnGyKU2UPXN6lUq9ggTI eEbaw0OUl2wMAwfhEy7MA+z9ggz8tby5f548b5rj42/fqksUC21nnmdhDKc+6kqo RvAWrfBNgIIG6+Wb7vWqVSvwux2PflpBShRG2588FqNmSj5wlWITbvYSkA81PrLi 1guo7QHUJqtafCw2rgndQIX84IUpHHgGfTFp+HJkHkJOp7qtCJjI5p0hIQ4jgsXb xKLTBya1YI9l351AqDC4eUt2wGM2H8L9R79h/QdglB2w2w82V10zJaAEhQRmVj0q DpF3BreZ20dRbA== -----END CERTIFICATE-----Generated at Fri Jan 23 12:52:34 2026 by rpki-client