This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft File: UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json) Hash identifier: wRy7+rE01GoFoGMyoob0fzRyTRoQBba9h4989aMLw48= Subject key identifier: 45:8B:C9:1D:65:9B:7E:E1:E2:F6:60:BC:4B:FE:14:CF:46:D7:B5:F6 Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Certificate serial: 019C33787E5C46898D195D8D76D8F2450C4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft Manifest number: 0E5C Signing time: Fri 06 Feb 2026 15:01:00 +0000 Manifest this update: Fri 06 Feb 2026 15:01:00 +0000 Manifest next update: Sat 07 Feb 2026 15:01:00 +0000 Files and hashes: 1: KYZm_9MuL_c9ERWs0Td3tSLq0RM.roa (hash: fei8OCGwkyhg3dv3nNRDFJMFMNR03cAB020hgr7s0HQ=) 2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: m7xB6IOCMQxgRdZSSKmNELFZXW8ThVRJayRs9hwpX/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:78:7e:5c:46:89:8d:19:5d:8d:76:d8:f2:45:0c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f Validity Not Before: Feb 6 15:01:00 2026 GMT Not After : Feb 7 15:01:00 2026 GMT Subject: CN=458bc91d659b7ee1e2f660bc4bfe14cf46d7b5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:84:c8:32:7e:f6:50:5a:57:43:bc:cd:bd: 90:f5:ad:c3:72:4e:52:01:6c:b6:e1:1f:f0:b9:bc: 4a:e2:1c:3d:28:df:44:16:2f:16:db:45:06:c9:99: e7:14:a0:15:a8:81:ab:95:bf:65:e7:71:ab:1e:09: 0c:f2:42:ec:51:78:cf:23:9c:f1:38:82:3c:6f:42: e8:52:b5:9c:c3:f1:07:fd:eb:d8:d7:ae:3c:26:79: c2:b9:f0:1c:26:e0:b6:88:2a:fa:9f:62:07:6d:48: 4b:15:f3:63:61:3e:a5:2a:4b:c5:ae:36:87:db:6e: 6a:47:30:0c:5c:4a:80:76:9f:86:b9:2f:57:11:d8: 57:c9:08:b5:80:5a:b0:b0:de:d5:2d:bb:e3:1d:32: 43:54:8f:32:96:02:ec:90:1c:5a:d6:b9:7a:49:59: 93:dd:14:e7:3b:a9:69:3f:a1:71:82:ec:5f:d7:c9: fd:bb:d6:36:9f:25:c9:bf:65:da:d6:b8:ae:29:a7: a5:6b:90:69:51:6d:d8:d2:76:55:b0:3d:25:ef:0e: cc:38:6f:65:a0:8d:66:83:d0:52:b7:33:22:92:29: 7f:f8:e5:95:bb:c8:e9:f2:ea:9b:ad:92:71:c7:4f: 74:4b:b4:ec:c4:94:fb:7e:91:24:82:99:69:68:df: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8B:C9:1D:65:9B:7E:E1:E2:F6:60:BC:4B:FE:14:CF:46:D7:B5:F6 X509v3 Authority Key Identifier: keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:73:f4:fc:5c:6c:0b:31:d0:7a:c1:ba:93:e5:a8:e6:ea:47: 16:21:c8:9b:26:24:33:c3:7f:77:33:86:7d:d3:91:8e:cf:af: 29:38:bf:f8:f4:2b:32:29:91:35:9f:90:28:cc:f0:d7:61:55: bc:5a:29:cd:51:34:e3:70:44:f9:87:84:34:80:c4:6f:45:87: 34:7e:81:dd:c3:4c:cd:c8:02:08:a9:ae:11:9f:02:a4:92:5e: 54:51:78:4c:fa:c8:84:ba:13:2c:03:0b:e0:32:6b:4f:67:23: d1:cb:77:fd:19:32:96:19:fa:0e:a5:18:de:3f:25:96:5f:6e: c8:7d:bc:b5:68:53:8e:01:59:6e:35:1b:e7:de:c1:1e:ad:f7: 42:69:cc:eb:75:d7:9e:f5:ac:0f:17:0f:88:79:f5:a5:a5:73: c1:37:35:f5:20:90:5a:2c:98:4d:c8:b8:8b:52:02:cb:23:80: 54:b3:49:22:80:c7:ca:02:a7:23:d9:5a:81:59:48:f8:8c:c0: 61:73:bd:96:2b:50:66:cd:bc:d2:42:9a:70:c1:e9:2a:10:db: ea:be:25:f7:5e:0c:83:bf:4d:41:c2:43:e1:5f:5a:a5:3e:f6: d2:87:6f:0b:61:ed:f4:e9:80:1b:48:be:7e:95:ca:fa:cf:58: 4f:a0:3b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwzeH5cRomNGV2NdtjyRQxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNWNkNjFhOWY2ZGU5ZGFjYzBkM2M5MjE3MDZkZjdkNTBh ZmJkNmYwHhcNMjYwMjA2MTUwMTAwWhcNMjYwMjA3MTUwMTAwWjAzMTEwLwYDVQQD Eyg0NThiYzkxZDY1OWI3ZWUxZTJmNjYwYmM0YmZlMTRjZjQ2ZDdiNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkyEyDJ+9lBaV0O8zb2Q9a3Dck5S AWy24R/wubxK4hw9KN9EFi8W20UGyZnnFKAVqIGrlb9l53GrHgkM8kLsUXjPI5zx OII8b0LoUrWcw/EH/evY1648JnnCufAcJuC2iCr6n2IHbUhLFfNjYT6lKkvFrjaH 225qRzAMXEqAdp+GuS9XEdhXyQi1gFqwsN7VLbvjHTJDVI8ylgLskBxa1rl6SVmT 3RTnO6lpP6Fxguxf18n9u9Y2nyXJv2Xa1riuKaela5BpUW3Y0nZVsD0l7w7MOG9l oI1mg9BStzMikil/+OWVu8jp8uqbrZJxx090S7TsxJT7fpEkgplpaN9NbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWLyR1lm37h4vZgvEv+FM9G17X2MB8GA1UdIwQY MBaAFFBc1hqfbenazA08khcG331Qr71vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMt ZTAxMjM3YjVmYzEwLzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hMzczNWEtZWNjYy00MWQ3LWI3MjMtZTAxMjM3YjVmYzEw LzEvVUZ6V0dwOXQ2ZHJNRFR5U0Z3YmZmVkN2dlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHP0/Fxs CzHQesG6k+Wo5upHFiHImyYkM8N/dzOGfdORjs+vKTi/+PQrMimRNZ+QKMzw12FV vFopzVE043BE+YeENIDEb0WHNH6B3cNMzcgCCKmuEZ8CpJJeVFF4TPrIhLoTLAML 4DJrT2cj0ct3/Rkylhn6DqUY3j8lll9uyH28tWhTjgFZbjUb597BHq33QmnM63XX nvWsDxcPiHn1paVzwTc19SCQWiyYTci4i1ICyyOAVLNJIoDHygKnI9lagVlI+IzA YXO9litQZs280kKacMHpKhDb6r4l914Mg79NQcJD4V9apT720odvC2Ht9OmAG0i+ fpXK+s9YT6A7ZA== -----END CERTIFICATE-----Generated at Fri Feb 6 21:21:05 2026 by rpki-client