This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json) Hash identifier: YbgDNPlUWCKLvWd7SkZF7UZDElQ4ILEhUkeGj45/1z8= Subject key identifier: CB:E3:71:5C:9A:D5:B5:EF:03:ED:FE:A7:B9:16:EC:A1:2C:61:AA:3A Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019BFB09E9AA3DF2604316EE0858300B5A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 16:01:29 +0000 Manifest this update: Mon 26 Jan 2026 16:01:29 +0000 Manifest next update: Tue 27 Jan 2026 16:01:29 +0000 Files and hashes: 1: 0Td6CpG-ym_-K5b4WeUNjXePjUc.roa (hash: 8r4ggp6PxqO1ZrZZe1PjZkrnXadGZdj4c8IAkyVPoI8=) 2: UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa (hash: 1nK47WRZwAvKB9ouMkN1V/iLxMpccr6CTRWd93nbh9I=) 3: VI02z2FHl_uy1YfJADZkMaattiI.roa (hash: iGaV6V98vbELrIXxsPeIiB2rSTsDaubi3a7rszzR+rI=) 4: kq1xYxFloxajo4ocaHFVoXWbLDY.roa (hash: 5lt2etlP+aPgpUw9DddCPVJWXAZYWqwLCkqKVkNEao4=) 5: rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa (hash: YKlhZLI+VkzsmAVmF0CZzBKBT9NCGEV+DX5m19LqsF4=) 6: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: qfvrUYy5FqTHpOpzhdRDTbtziblLZ/kvqrJ0U0Pe+KA=) 7: xywtwPVtKI2c3GfGQ6zEtHEmcuk.roa (hash: rjSOo1Wse8hlTDW23Au03BF12xwjNXnRbuXo4liko2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:e9:aa:3d:f2:60:43:16:ee:08:58:30:0b:5a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Jan 26 16:01:29 2026 GMT Not After : Jan 27 16:01:29 2026 GMT Subject: CN=cbe3715c9ad5b5ef03edfea7b916eca12c61aa3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:95:f8:05:d2:81:a8:58:08:39:1a:33:61: 07:93:bd:68:06:b5:a3:37:8f:02:05:2d:86:d7:ef: ed:fe:f7:a2:83:bf:f4:b0:b8:4a:7d:6b:16:12:71: 5a:06:55:f9:bb:c1:4c:1b:61:01:69:fe:52:fc:7c: 2c:29:0a:54:da:6b:3b:db:41:bd:fa:37:47:a8:05: 8c:9e:de:9c:69:42:a6:8c:1a:44:0c:14:6d:51:9b: 70:83:48:dd:36:24:23:a5:f3:f0:37:dc:ef:30:77: d4:d2:22:02:e6:b4:29:67:77:1e:75:5e:ca:ff:a6: 52:e2:61:c2:e5:e7:93:89:d6:3a:49:3a:77:07:ca: 10:fc:2c:ee:40:3f:87:3e:f9:4b:6c:63:b9:7f:2c: 74:8c:4a:3e:fd:ad:c6:b0:cd:8c:20:a2:5a:86:a5: ea:18:e7:d1:96:9d:9f:0e:55:44:cf:81:2e:c5:38: 58:3a:1e:5f:06:7b:69:d5:55:31:86:5f:5c:96:6f: 22:f9:89:d7:d5:f5:24:70:25:51:32:df:0f:2f:99: 58:5c:ca:41:18:ee:5e:77:9c:72:45:7e:ba:11:a9: 4d:d6:e1:b3:b3:dc:fd:d4:11:7f:00:48:11:e0:2d: 45:da:7c:38:ea:1a:c1:5e:2d:a3:b7:39:37:4a:d8: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:71:5C:9A:D5:B5:EF:03:ED:FE:A7:B9:16:EC:A1:2C:61:AA:3A X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:42:23:0d:fe:d4:fc:18:c5:33:fe:31:c6:54:87:08:0f:ad: 96:6d:40:d2:97:5a:3d:0d:2a:54:8f:7f:8c:b7:a7:e7:8d:22: be:e9:6c:2d:f0:44:38:cc:f4:ae:bf:94:01:1d:0b:b5:cf:c6: 69:c9:2c:1e:52:b9:d3:70:75:30:ec:c1:b9:9c:18:1e:89:57: e6:78:64:4e:e4:64:bf:91:45:d1:c9:5b:52:02:f2:c9:4d:f2: c0:03:33:14:42:ae:91:03:57:6e:89:66:82:a6:68:85:c1:15: 2c:41:5e:78:b5:ff:64:77:a9:a3:2e:4c:a7:0d:8f:fd:e2:5f: e9:be:13:5e:fc:58:71:8c:d0:81:99:ac:df:15:24:e2:bf:06: 63:e6:9c:1a:64:2c:d6:cb:56:ae:6d:df:3e:99:47:0e:be:9e: e6:81:e7:25:9c:fa:69:c2:15:e1:00:57:b6:c8:03:6e:7d:c6: 01:ab:18:33:57:d1:dd:63:ad:34:66:a0:07:2b:3a:5b:6c:3b: aa:6b:70:2d:6f:22:a4:59:51:5a:ad:5f:c5:5b:09:e1:57:ed: 3f:ff:b1:d4:28:7e:88:92:68:df:e8:69:1a:54:ae:e7:a6:b7: 90:1b:07:1c:14:48:76:b2:53:55:f8:d1:9a:6d:d9:fe:0d:71: 5d:13:f9:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CemqPfJgQxbuCFgwC1pqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjYwMTI2MTYwMTI5WhcNMjYwMTI3MTYwMTI5WjAzMTEwLwYDVQQD EyhjYmUzNzE1YzlhZDViNWVmMDNlZGZlYTdiOTE2ZWNhMTJjNjFhYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKiV+AXSgahYCDkaM2EHk71oBrWj N48CBS2G1+/t/veig7/0sLhKfWsWEnFaBlX5u8FMG2EBaf5S/HwsKQpU2ms720G9 +jdHqAWMnt6caUKmjBpEDBRtUZtwg0jdNiQjpfPwN9zvMHfU0iIC5rQpZ3cedV7K /6ZS4mHC5eeTidY6STp3B8oQ/CzuQD+HPvlLbGO5fyx0jEo+/a3GsM2MIKJahqXq GOfRlp2fDlVEz4EuxThYOh5fBntp1VUxhl9clm8i+YnX1fUkcCVRMt8PL5lYXMpB GO5ed5xyRX66EalN1uGzs9z91BF/AEgR4C1F2nw46hrBXi2jtzk3SthVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvjcVya1bXvA+3+p7kW7KEsYao6MB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0IjDf7U /BjFM/4xxlSHCA+tlm1A0pdaPQ0qVI9/jLen540ivulsLfBEOMz0rr+UAR0Ltc/G acksHlK503B1MOzBuZwYHolX5nhkTuRkv5FF0clbUgLyyU3ywAMzFEKukQNXbolm gqZohcEVLEFeeLX/ZHepoy5Mpw2P/eJf6b4TXvxYcYzQgZms3xUk4r8GY+acGmQs 1stWrm3fPplHDr6e5oHnJZz6acIV4QBXtsgDbn3GAasYM1fR3WOtNGagBys6W2w7 qmtwLW8ipFlRWq1fxVsJ4VftP/+x1Ch+iJJo3+hpGlSu56a3kBsHHBRIdrJTVfjR mm3Z/g1xXRP5mg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:40 2026 by rpki-client