This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft File: uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json) Hash identifier: aC2G/cDJq9l0G1OXIiOvoWb8PXBQzaZ16J7kGFaPn0k= Subject key identifier: 42:37:C0:99:DA:6D:2E:FB:16:91:35:9E:E3:77:38:A9:4D:00:94:C2 Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 Certificate issuer: /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243 Certificate serial: 019BFE0A8A2A9623714041C4AE1A97E485BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft Manifest number: 04 Signing time: Tue 27 Jan 2026 06:01:02 +0000 Manifest this update: Tue 27 Jan 2026 06:01:02 +0000 Manifest next update: Wed 28 Jan 2026 06:01:02 +0000 Files and hashes: 1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=) 2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: egPBBPMIPVK0X4YPv9CX9WmNIpYJMxoIHO4C+M2pv2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:8a:2a:96:23:71:40:41:c4:ae:1a:97:e4:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243 Validity Not Before: Jan 27 06:01:02 2026 GMT Not After : Jan 28 06:01:02 2026 GMT Subject: CN=4237c099da6d2efb1691359ee37738a94d0094c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:7b:3e:35:13:e4:cb:0c:ca:01:79:9b:2b: c1:31:c6:63:3a:d5:12:3f:a7:9e:2f:7b:27:2b:ad: b3:f9:13:d0:7b:56:4e:76:42:b3:35:c0:34:10:81: ac:ad:46:ca:f1:61:da:52:05:c0:b9:54:d2:2a:98: 54:7b:4e:d5:d3:b8:b7:59:ae:bd:f5:75:de:3e:8c: 71:dc:ee:29:2e:fa:e9:1e:2d:cf:e0:0a:c7:c2:43: fb:3f:02:7b:ac:3b:77:de:b5:6d:e1:53:b2:6f:26: ae:97:94:29:a0:1a:24:6a:ce:dc:50:dc:4d:50:c7: 6d:88:28:a5:0c:37:0a:25:5e:98:e7:5b:90:ee:28: 35:e4:10:75:23:27:91:52:56:95:60:24:72:00:3d: 20:88:06:86:0a:eb:25:3a:f0:59:2f:ae:47:92:2f: bc:9a:62:32:97:51:33:5c:ee:c7:cd:51:34:b5:b4: 23:37:25:eb:af:3d:24:a7:40:58:bb:e1:b3:3f:59: db:ed:0e:0f:56:c4:c4:dd:7f:c6:98:3f:78:6a:08: d7:c6:85:55:f9:7f:ad:8e:64:83:e2:65:d4:83:84: 9b:7c:cb:22:76:5b:20:20:19:10:85:bc:26:cd:31: 53:f0:28:68:17:92:6d:6a:dd:6b:e6:b3:4b:4b:6b: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:C0:99:DA:6D:2E:FB:16:91:35:9E:E3:77:38:A9:4D:00:94:C2 X509v3 Authority Key Identifier: keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f7:a2:67:bc:f5:7d:6b:7c:01:84:37:52:b5:ed:25:f2:10: 74:35:ff:b5:b8:a8:ef:47:b6:b7:48:17:09:8a:df:d6:7a:63: f5:51:c1:49:5a:af:5d:1a:23:bd:a9:38:4c:ec:89:6d:68:72: e5:b9:76:dd:96:62:95:6b:14:98:db:e4:a7:6f:21:7a:57:2a: 62:49:16:88:32:ed:9c:3a:11:05:02:b2:ec:5a:1e:4c:9b:a9: 7d:de:19:40:2b:64:bb:34:5d:49:71:2d:82:d3:e0:8b:5d:df: d1:79:a2:c8:33:51:b3:27:0f:b1:8c:bd:f0:02:57:dc:64:bd: 51:d3:a4:21:de:61:df:33:af:60:4c:45:68:99:38:7e:11:92: c1:db:79:90:58:17:9e:fc:d8:36:c7:33:b6:29:2c:ab:0b:1f: 21:a9:a0:e9:30:ed:33:c9:dc:6b:63:d9:72:ca:c3:f1:35:24: 45:f4:0a:c2:34:56:9b:f0:99:5c:33:92:63:15:37:c3:76:cb: 2e:0a:1d:2a:8d:4a:50:f8:0d:fb:8f:99:80:02:d7:ba:92:bb: 8d:78:80:ea:52:a3:fe:82:a6:14:c5:07:3b:04:7f:98:dd:ac: 0a:e1:5c:2a:2e:d0:5e:56:3a:dc:c7:fd:8b:94:aa:44:25:e0: 0c:60:53:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CooqliNxQEHErhqX5IW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MjJkZTZjNWQ5ZWMwODZkOWQyMDFhYjZkYTU2YmQzY2Zl ZmYyNDMwHhcNMjYwMTI3MDYwMTAyWhcNMjYwMTI4MDYwMTAyWjAzMTEwLwYDVQQD Eyg0MjM3YzA5OWRhNmQyZWZiMTY5MTM1OWVlMzc3MzhhOTRkMDA5NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWp7PjUT5MsMygF5myvBMcZjOtUS P6eeL3snK62z+RPQe1ZOdkKzNcA0EIGsrUbK8WHaUgXAuVTSKphUe07V07i3Wa69 9XXePoxx3O4pLvrpHi3P4ArHwkP7PwJ7rDt33rVt4VOybyaul5QpoBokas7cUNxN UMdtiCilDDcKJV6Y51uQ7ig15BB1IyeRUlaVYCRyAD0giAaGCuslOvBZL65Hki+8 mmIyl1EzXO7HzVE0tbQjNyXrrz0kp0BYu+GzP1nb7Q4PVsTE3X/GmD94agjXxoVV +X+tjmSD4mXUg4SbfMsidlsgIBkQhbwmzTFT8ChoF5Jtat1r5rNLS2tQawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI3wJnabS77FpE1nuN3OKlNAJTCMB8GA1UdIwQY MBaAFLgi3mxdnsCG2dIBq22la9PP7/JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMt YWYzOGJmNzA2ZjM3LzEvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMtYWYzOGJmNzA2ZjM3 LzEvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfeiZ7z1 fWt8AYQ3UrXtJfIQdDX/tbio70e2t0gXCYrf1npj9VHBSVqvXRojvak4TOyJbWhy 5bl23ZZilWsUmNvkp28helcqYkkWiDLtnDoRBQKy7FoeTJupfd4ZQCtkuzRdSXEt gtPgi13f0XmiyDNRsycPsYy98AJX3GS9UdOkId5h3zOvYExFaJk4fhGSwdt5kFgX nvzYNscztiksqwsfIamg6TDtM8nca2PZcsrD8TUkRfQKwjRWm/CZXDOSYxU3w3bL LgodKo1KUPgN+4+ZgALXupK7jXiA6lKj/oKmFMUHOwR/mN2sCuFcKi7QXlY63Mf9 i5SqRCXgDGBTcQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:25:52 2026 by rpki-client