This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft File: uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json) Hash identifier: GUXXdcPdFFQMNR3H8wRCB+UEyEOw5jyXeKs6lmFQ4KY= Subject key identifier: 98:B7:D7:9A:06:90:4B:E7:B5:AD:1D:A3:72:CD:E2:04:E9:96:60:32 Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Certificate serial: 019BDFFFB28B675D023E59355BDBBB05B323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft Manifest number: 078F Signing time: Wed 21 Jan 2026 10:00:34 +0000 Manifest this update: Wed 21 Jan 2026 10:00:34 +0000 Manifest next update: Thu 22 Jan 2026 10:00:34 +0000 Files and hashes: 1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=) 2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=) 3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=) 4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=) 5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: ldkSFsCc2VTlZso6nUGp2zAe4Dl2rqNBli6GdkkS/S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:ff:b2:8b:67:5d:02:3e:59:35:5b:db:bb:05:b3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Validity Not Before: Jan 21 10:00:34 2026 GMT Not After : Jan 22 10:00:34 2026 GMT Subject: CN=98b7d79a06904be7b5ad1da372cde204e9966032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:a4:59:fd:60:e8:c2:de:eb:c4:73:73:89: 01:74:41:71:8b:29:ce:79:01:f4:44:84:b1:b5:06: b3:27:b5:30:e6:44:6c:65:c9:ed:b6:66:09:09:fa: 54:c7:65:f0:36:aa:d4:76:31:20:96:19:9a:95:12: e3:df:41:0f:c0:c7:ba:cd:8d:a8:56:57:3c:c8:d3: 23:e1:25:70:12:38:da:92:20:80:0b:60:76:71:cc: 7d:1f:83:fb:e5:b3:77:d6:c7:b6:d1:b6:f2:35:2e: 30:0a:b5:0f:b0:cf:59:5c:6a:68:82:6c:f3:48:0c: 49:98:07:51:b8:05:0c:cf:96:03:e9:56:ab:ef:66: 67:b9:a4:86:6b:74:f3:5e:5b:6d:5b:9f:2d:83:bb: 09:6f:bf:d4:36:aa:22:27:f5:94:66:14:57:dd:4c: 3e:f3:40:27:3a:02:e2:5c:52:62:c3:11:33:3c:e2: 29:95:f6:3e:a4:26:67:18:89:2e:b3:b4:1d:a8:95: f4:c5:91:28:fa:39:81:cf:06:05:53:d7:ca:59:86: d1:ba:82:33:cc:50:ba:89:50:ae:c0:97:03:d0:5d: 85:85:59:51:8a:92:23:e3:fe:39:65:28:d8:58:a3: b0:6e:f1:00:37:0f:a3:87:b8:27:82:22:3a:c3:cd: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:D7:9A:06:90:4B:E7:B5:AD:1D:A3:72:CD:E2:04:E9:96:60:32 X509v3 Authority Key Identifier: keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:09:80:60:68:ce:6e:b5:8b:e1:ce:7e:0d:4f:32:ee:1d:43: 03:55:0c:fe:92:ba:a8:57:67:50:95:47:73:a8:ae:dc:22:f2: 65:dc:1f:69:81:52:01:26:45:df:66:c3:8c:d8:1e:c9:56:50: f4:f3:53:d3:31:f5:89:0c:1f:b3:05:75:9a:1f:70:e1:7b:f4: d3:f8:fb:79:b9:0c:17:fd:09:d1:ed:eb:b2:32:93:78:75:f5: ca:58:06:52:be:fa:57:ab:b1:2f:e9:bb:41:23:05:83:f0:4b: 0e:f1:ac:11:4f:cf:7f:3f:bc:30:68:f3:8d:38:22:08:60:37: 24:6f:12:6b:6a:27:45:aa:66:00:93:5c:0f:ba:e1:d0:25:da: bb:91:0a:9d:d8:1d:88:91:93:30:59:5b:78:46:ae:d9:7c:5b: 7e:86:89:64:a5:14:6f:71:52:15:59:19:5c:c2:ac:a3:2c:67: 95:86:83:68:d3:e5:e9:a3:ed:5f:1f:65:57:2a:33:b8:69:30: 16:ed:d6:75:00:1c:f0:ed:07:86:43:ae:41:2c:ed:5f:bb:bf: 1a:9a:db:dc:9e:be:bc:10:09:c4:07:6a:5e:21:85:82:e1:fe: d5:bb:e6:b3:b6:d0:be:60:b3:20:7b:52:8b:cd:cb:09:d3:b0: cc:e9:89:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvf/7KLZ10CPlk1W9u7BbMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjNiMDdhM2MwYWM5ZTMzM2Y1MmU4YjVkNDFhNzY4YTNk MzkwMjUwHhcNMjYwMTIxMTAwMDM0WhcNMjYwMTIyMTAwMDM0WjAzMTEwLwYDVQQD Eyg5OGI3ZDc5YTA2OTA0YmU3YjVhZDFkYTM3MmNkZTIwNGU5OTY2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQWkWf1g6MLe68Rzc4kBdEFxiynO eQH0RISxtQazJ7Uw5kRsZcnttmYJCfpUx2XwNqrUdjEglhmalRLj30EPwMe6zY2o Vlc8yNMj4SVwEjjakiCAC2B2ccx9H4P75bN31se20bbyNS4wCrUPsM9ZXGpogmzz SAxJmAdRuAUMz5YD6Var72ZnuaSGa3TzXlttW58tg7sJb7/UNqoiJ/WUZhRX3Uw+ 80AnOgLiXFJiwxEzPOIplfY+pCZnGIkus7QdqJX0xZEo+jmBzwYFU9fKWYbRuoIz zFC6iVCuwJcD0F2FhVlRipIj4/45ZSjYWKOwbvEANw+jh7gngiI6w83jBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi315oGkEvnta0do3LN4gTplmAyMB8GA1UdIwQY MBaAFLojsHo8CsnjM/Uui11Bp2ij05AlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEt ODA2OWM0Njc3MWNjLzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEtODA2OWM0Njc3MWNj LzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwmAYGjO brWL4c5+DU8y7h1DA1UM/pK6qFdnUJVHc6iu3CLyZdwfaYFSASZF32bDjNgeyVZQ 9PNT0zH1iQwfswV1mh9w4Xv00/j7ebkMF/0J0e3rsjKTeHX1ylgGUr76V6uxL+m7 QSMFg/BLDvGsEU/Pfz+8MGjzjTgiCGA3JG8Sa2onRapmAJNcD7rh0CXau5EKndgd iJGTMFlbeEau2XxbfoaJZKUUb3FSFVkZXMKsoyxnlYaDaNPl6aPtXx9lVyozuGkw Fu3WdQAc8O0HhkOuQSztX7u/Gprb3J6+vBAJxAdqXiGFguH+1bvms7bQvmCzIHtS i83LCdOwzOmJVQ== -----END CERTIFICATE-----Generated at Wed Jan 21 15:09:58 2026 by rpki-client