This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json) Hash identifier: vl+WQHa5O8cCfQPJvmJTcPV1kxseGCJAw6TNbp/80Us= Subject key identifier: 7D:C8:FA:3A:9F:B8:11:1E:B4:76:47:F5:FA:3B:8B:4A:61:3D:C4:9E Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Certificate serial: 019BFC89B989BD80C2B28AB69F316E5D1AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 23:00:42 +0000 Manifest this update: Mon 26 Jan 2026 23:00:42 +0000 Manifest next update: Tue 27 Jan 2026 23:00:42 +0000 Files and hashes: 1: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (hash: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE=) 2: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: zg0DXMM3BabLE2fMvzt+AIS41VkDQ+OINcybbnOtP4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:b9:89:bd:80:c2:b2:8a:b6:9f:31:6e:5d:1a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c Validity Not Before: Jan 26 23:00:42 2026 GMT Not After : Jan 27 23:00:42 2026 GMT Subject: CN=7dc8fa3a9fb8111eb47647f5fa3b8b4a613dc49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:24:8a:9f:c3:18:a2:da:5e:64:98:bc:61: 72:bd:77:66:fe:23:7a:e1:41:97:e2:25:63:2f:30: 30:7f:3f:69:f5:47:64:82:09:8a:67:14:d2:f8:56: 09:2d:5f:9e:42:7e:66:84:25:23:a3:89:1e:22:6b: b2:de:5c:2e:fd:c6:16:62:11:da:8b:cd:b9:79:b6: b0:95:4c:4d:a0:64:37:6f:f3:78:80:86:68:54:e8: 21:20:e5:bf:7d:04:e8:24:db:49:73:80:24:bb:bc: 6a:b5:32:e7:19:13:64:96:72:86:2f:57:a8:7c:49: 09:c7:2d:d6:4e:84:23:f0:08:9a:1b:11:a5:22:e5: fa:05:cc:62:2b:57:7c:54:b8:02:ef:4e:83:65:56: 89:48:00:ca:95:35:92:6b:c9:96:e5:47:8f:e6:26: 8e:23:86:21:e2:65:c6:c5:03:8d:5c:46:33:6f:ff: 79:7c:6a:6f:c7:c0:a1:18:f2:bf:87:e9:f0:1b:22: 54:c3:60:59:f1:12:ce:33:fe:9f:28:b6:b8:f3:25: 87:5c:f1:d9:97:d5:0e:5f:53:4b:18:a8:c2:47:e3: be:32:2a:52:49:c3:e4:11:a9:cf:2d:e0:aa:b4:3c: e6:1a:e8:b7:d1:2b:51:93:ed:2a:03:51:86:27:0e: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C8:FA:3A:9F:B8:11:1E:B4:76:47:F5:FA:3B:8B:4A:61:3D:C4:9E X509v3 Authority Key Identifier: keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:44:69:83:91:b5:1e:40:24:d4:b7:f4:b2:8f:fb:8a:99:54: df:b8:c3:7e:a3:48:39:e5:9a:1c:60:26:14:ce:a2:57:70:f7: 6c:f7:65:17:09:bb:24:ef:1d:f6:cc:0a:85:6b:f8:43:1f:ed: c6:33:b6:f1:ee:a9:13:9f:64:db:e7:fd:8e:6f:97:19:a9:dc: a8:39:61:03:d4:81:15:6d:18:da:29:5d:02:d5:2e:82:1e:19: 44:d2:5f:89:02:a0:f2:b8:de:4d:03:bb:e4:b8:70:7c:18:77: 2e:68:df:33:d8:6f:81:a6:55:84:7c:06:32:af:58:c5:ac:3f: be:42:89:75:e9:83:31:e0:39:f9:a1:cf:93:d9:0a:a7:f8:08: e8:c6:9d:00:10:7f:ad:04:27:bb:f1:f6:fa:e7:85:b3:73:1c: 05:80:ce:96:b1:d8:16:5a:43:54:c1:90:ba:cb:c1:05:44:63: d4:c2:fc:99:0b:87:18:9e:46:5d:df:43:c3:1d:66:ac:3b:b6: c4:a5:8e:eb:83:10:92:84:9d:a4:2a:5d:40:34:0b:3b:f1:18: af:bd:89:d5:4e:28:bc:8e:94:9a:db:52:49:3a:f7:3e:f2:6f: ea:06:d4:eb:31:70:4d:6f:d3:2e:59:e9:3d:c0:3f:0c:20:25: 42:94:da:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ibmJvYDCsoq2nzFuXRruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk ZmEwNWMwHhcNMjYwMTI2MjMwMDQyWhcNMjYwMTI3MjMwMDQyWjAzMTEwLwYDVQQD Eyg3ZGM4ZmEzYTlmYjgxMTFlYjQ3NjQ3ZjVmYTNiOGI0YTYxM2RjNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrAkip/DGKLaXmSYvGFyvXdm/iN6 4UGX4iVjLzAwfz9p9UdkggmKZxTS+FYJLV+eQn5mhCUjo4keImuy3lwu/cYWYhHa i825ebawlUxNoGQ3b/N4gIZoVOghIOW/fQToJNtJc4Aku7xqtTLnGRNklnKGL1eo fEkJxy3WToQj8AiaGxGlIuX6BcxiK1d8VLgC706DZVaJSADKlTWSa8mW5UeP5iaO I4Yh4mXGxQONXEYzb/95fGpvx8ChGPK/h+nwGyJUw2BZ8RLOM/6fKLa48yWHXPHZ l9UOX1NLGKjCR+O+MipSScPkEanPLeCqtDzmGui30StRk+0qA1GGJw72UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3I+jqfuBEetHZH9fo7i0phPcSeMB8GA1UdIwQY MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkRpg5G1 HkAk1Lf0so/7iplU37jDfqNIOeWaHGAmFM6iV3D3bPdlFwm7JO8d9swKhWv4Qx/t xjO28e6pE59k2+f9jm+XGancqDlhA9SBFW0Y2ildAtUugh4ZRNJfiQKg8rjeTQO7 5LhwfBh3LmjfM9hvgaZVhHwGMq9Yxaw/vkKJdemDMeA5+aHPk9kKp/gI6MadABB/ rQQnu/H2+ueFs3McBYDOlrHYFlpDVMGQusvBBURj1ML8mQuHGJ5GXd9Dwx1mrDu2 xKWO64MQkoSdpCpdQDQLO/EYr72J1U4ovI6UmttSSTr3PvJv6gbU6zFwTW/TLlnp PcA/DCAlQpTa+w== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:53 2026 by rpki-client