This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft File: uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json) Hash identifier: Mv6jaCNdTbR7KG92mZQI/1PPiqJbCp8JnwoXf1/HmEs= Subject key identifier: 32:A7:C5:08:A0:9E:E0:FE:59:9F:E1:77:7E:E4:54:16:1B:CE:AE:E7 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019BFA9C2A0CE2C07113683F164E472CCA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft Manifest number: 0F1F Signing time: Mon 26 Jan 2026 14:01:36 +0000 Manifest this update: Mon 26 Jan 2026 14:01:36 +0000 Manifest next update: Tue 27 Jan 2026 14:01:36 +0000 Files and hashes: 1: 9C4UVhetymj_o9_0fthWslxme_k.roa (hash: eyldnpoei6ydFrc8FHeRLIEUORDlSxUUouGHL///KPo=) 2: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (hash: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc=) 3: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (hash: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA=) 4: DKgccFMMgkvXxZPzFyE3jSvly6U.roa (hash: wKYRpl41eTA9ujV+fUMhtA8JIP0ecSyGtcqw+jTJ19I=) 5: cujgOoD9oOnPnWNHQ2oaYF56LYE.roa (hash: NshN4mSKtv5QhJOcEymdQSgMRdJApXgkLCaqG2CcUaU=) 6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: dOW+4aArLc0GG7pvFh7qeQhhvT+YTOOQ4UEB9qyCoT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:2a:0c:e2:c0:71:13:68:3f:16:4e:47:2c:ca:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Jan 26 14:01:36 2026 GMT Not After : Jan 27 14:01:36 2026 GMT Subject: CN=32a7c508a09ee0fe599fe1777ee454161bceaee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:38:eb:65:1c:ab:88:f5:3b:59:7a:5b:d6: fd:6a:b4:be:9d:ed:39:74:c8:90:ae:25:95:45:12: 22:29:78:18:8b:d5:e1:7a:aa:26:77:9e:6a:e9:53: 36:bc:72:d9:d9:3a:d8:c1:7c:07:16:46:d9:4b:ea: 7e:11:b7:3c:99:c1:99:49:fe:93:f3:f6:03:04:80: 3c:71:2c:43:cc:29:33:5d:e3:c7:cd:02:b8:51:01: bd:df:55:aa:92:e7:89:0a:09:e4:d5:4d:dc:5b:6f: e5:f4:07:ef:07:30:22:62:57:ef:2f:f1:77:ac:6f: 62:ec:69:0b:8e:33:65:51:01:49:df:0a:bb:87:b8: a0:4a:1f:22:49:65:e2:3a:c4:1d:8b:75:3b:91:42: 2c:fa:56:06:64:16:0e:64:b6:57:2c:b7:14:46:76: a5:e9:d7:4a:64:79:68:3e:fa:28:2d:68:b0:be:f3: 1d:26:1e:61:be:9a:86:a4:75:49:bc:0a:d3:a2:33: 80:56:34:f1:78:17:ef:06:2b:d2:ab:d5:6e:b1:a8: 0d:73:3d:d4:49:67:0b:11:be:9c:f7:0c:01:69:05: 58:47:90:d7:da:13:51:ad:d9:ca:95:d3:15:25:1c: ab:b1:78:ae:5c:5b:9b:76:05:95:96:29:57:cb:c3: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A7:C5:08:A0:9E:E0:FE:59:9F:E1:77:7E:E4:54:16:1B:CE:AE:E7 X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:d1:15:0b:68:f9:a6:8e:20:5e:88:45:10:78:60:8d:b4: e9:9a:40:7c:e5:0d:a1:17:ba:f2:3f:8b:94:d6:37:06:28:ba: c0:e7:02:c7:6d:00:a7:3d:41:48:60:bb:93:23:93:29:3b:5e: 97:29:88:d8:db:4e:1a:48:5d:0e:45:fb:ee:56:7c:4e:6a:58: d2:c6:2c:63:df:02:9d:ae:20:d8:ff:98:c6:0e:d2:63:0a:9c: c2:29:04:88:92:4b:3a:1b:e6:c0:b8:fb:a1:a1:9a:84:91:06: 67:ce:95:93:af:17:8f:97:48:7d:bc:10:ef:3a:6b:e3:63:05: 44:38:ad:24:c4:52:7f:8a:f2:86:ea:6c:94:f6:fd:86:bf:5c: 4d:5f:fc:f7:03:f4:01:45:4e:9c:fb:c0:80:8f:69:37:20:48: f2:f9:54:2b:1c:8d:a3:ac:3c:29:4f:3c:22:ba:7d:b5:73:65: a3:27:29:23:7f:dc:2b:51:df:cf:88:05:f1:76:70:45:24:0b: 91:7d:57:38:08:2a:52:44:24:09:0b:dd:f4:0f:d0:26:dc:83: 38:35:16:01:af:c9:bb:2c:14:e5:34:2d:55:5f:df:57:2d:b7: 90:74:93:ad:8d:f5:0d:83:d0:67:83:b5:e7:f6:18:00:37:2a: c5:6b:90:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nCoM4sBxE2g/Fk5HLMoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjYwMTI2MTQwMTM2WhcNMjYwMTI3MTQwMTM2WjAzMTEwLwYDVQQD EygzMmE3YzUwOGEwOWVlMGZlNTk5ZmUxNzc3ZWU0NTQxNjFiY2VhZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIo462Ucq4j1O1l6W9b9arS+ne05 dMiQriWVRRIiKXgYi9Xheqomd55q6VM2vHLZ2TrYwXwHFkbZS+p+Ebc8mcGZSf6T 8/YDBIA8cSxDzCkzXePHzQK4UQG931WqkueJCgnk1U3cW2/l9AfvBzAiYlfvL/F3 rG9i7GkLjjNlUQFJ3wq7h7igSh8iSWXiOsQdi3U7kUIs+lYGZBYOZLZXLLcURnal 6ddKZHloPvooLWiwvvMdJh5hvpqGpHVJvArTojOAVjTxeBfvBivSq9VusagNcz3U SWcLEb6c9wwBaQVYR5DX2hNRrdnKldMVJRyrsXiuXFubdgWVlilXy8MPYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKnxQignuD+WZ/hd37kVBYbzq7nMB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBDRFQto +aaOIF6IRRB4YI206ZpAfOUNoRe68j+LlNY3Bii6wOcCx20Apz1BSGC7kyOTKTte lymI2NtOGkhdDkX77lZ8TmpY0sYsY98Cna4g2P+Yxg7SYwqcwikEiJJLOhvmwLj7 oaGahJEGZ86Vk68Xj5dIfbwQ7zpr42MFRDitJMRSf4ryhupslPb9hr9cTV/89wP0 AUVOnPvAgI9pNyBI8vlUKxyNo6w8KU88Irp9tXNloycpI3/cK1Hfz4gF8XZwRSQL kX1XOAgqUkQkCQvd9A/QJtyDODUWAa/JuywU5TQtVV/fVy23kHSTrY31DYPQZ4O1 5/YYADcqxWuQGA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:34 2026 by rpki-client