This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: ZPQY0+gEmYfLBjn7HAp82QbXef/Q7gieRci4Scc8wnQ= Subject key identifier: 61:52:66:39:10:81:44:25:9F:78:20:A8:BD:1C:81:82:B5:B1:A0:48 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019BF8E3EA28351A8799F007397FA1A59406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 1067 Signing time: Mon 26 Jan 2026 06:00:44 +0000 Manifest this update: Mon 26 Jan 2026 06:00:44 +0000 Manifest next update: Tue 27 Jan 2026 06:00:44 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: vV4gyniuquDrFxrJQ64UCLHrDntafBrGwD+T6mBk0BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:ea:28:35:1a:87:99:f0:07:39:7f:a1:a5:94:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 26 06:00:44 2026 GMT Not After : Jan 27 06:00:44 2026 GMT Subject: CN=61526639108144259f7820a8bd1c8182b5b1a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:d5:d7:57:1f:57:2d:46:be:a0:c3:eb:ee: b2:52:7b:18:62:17:fb:51:65:50:e0:e7:95:00:3f: ac:9f:4b:83:fe:2c:cf:c8:8b:1d:72:53:7c:74:7e: 06:13:6a:8a:42:71:56:3c:cb:b8:db:ff:25:71:1a: c9:5d:47:2f:f7:9f:a7:43:56:b4:82:98:ce:f6:62: 18:05:6e:60:fd:3e:b7:1e:0a:d1:78:31:bc:50:3d: 5d:d0:9c:5b:e8:89:53:3f:65:c8:5a:2c:95:aa:01: 20:5c:ed:eb:73:a4:f5:05:87:69:8a:dc:7c:85:e3: fe:6f:d4:8b:3e:7e:c3:5a:54:39:51:e4:a7:42:cc: 16:32:98:d5:19:29:bb:09:f5:7a:7c:2f:a4:5a:52: 6b:ee:35:84:78:27:29:87:a4:5b:1f:fb:24:15:c6: 22:d5:c7:ad:a2:f2:e8:52:18:ab:da:f5:3c:ef:e5: e8:aa:b6:c1:19:5a:6c:34:82:71:2b:87:ef:7c:86: 5d:7a:d5:04:f4:62:3b:9a:1e:18:de:90:05:ca:b0: c2:7a:3f:28:2a:b9:4f:f6:f9:2e:61:eb:5b:11:44: c9:15:47:5e:bc:bd:cc:55:28:3e:37:fe:c4:08:3c: a0:e7:d1:57:21:b4:26:f1:b9:e4:23:84:d3:ad:40: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:66:39:10:81:44:25:9F:78:20:A8:BD:1C:81:82:B5:B1:A0:48 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d4:fb:34:f5:99:16:fa:d3:db:a6:f1:83:77:2d:7c:34:95: 7e:89:46:74:5e:36:b5:67:6b:a8:6c:8f:15:a3:90:dd:47:27: d4:46:0e:e1:f6:b0:9d:d7:c1:ff:a7:b6:8f:46:1c:56:44:48: c1:60:84:1c:95:c4:5f:ce:b4:ba:95:d7:c1:a9:50:87:d7:85: 75:8c:60:2f:d5:d7:8b:ad:28:21:08:e0:d8:18:be:9c:56:c0: 37:3d:e5:4b:5b:6f:67:4f:20:56:e9:47:73:21:24:13:80:76: 5d:ed:4a:af:fb:db:5b:89:d5:03:1c:3f:84:87:54:34:85:13: d5:14:c8:de:bb:87:b6:ca:36:12:76:cb:80:6e:b3:06:60:1c: 4b:0e:27:48:3d:cc:43:25:0d:27:e7:0d:ec:b8:ee:e1:cd:2b: cc:c6:93:b7:4b:e5:94:8c:8d:10:9f:18:34:07:8f:1c:66:ac: 07:fe:05:2b:31:45:9c:59:c1:1b:0a:8a:88:7c:29:19:e4:5a: 6e:30:0a:25:19:1c:19:a4:c7:fb:85:51:f3:ce:e2:62:b1:73: 55:a0:6c:20:ed:5a:68:07:45:fe:13:b4:52:07:0d:fb:09:58: 51:47:ac:9a:43:62:8e:c0:41:58:6f:aa:c4:5e:02:48:14:bd: ae:e6:43:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv44+ooNRqHmfAHOX+hpZQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTI2MDYwMDQ0WhcNMjYwMTI3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg2MTUyNjYzOTEwODE0NDI1OWY3ODIwYThiZDFjODE4MmI1YjFhMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE/V11cfVy1GvqDD6+6yUnsYYhf7 UWVQ4OeVAD+sn0uD/izPyIsdclN8dH4GE2qKQnFWPMu42/8lcRrJXUcv95+nQ1a0 gpjO9mIYBW5g/T63HgrReDG8UD1d0Jxb6IlTP2XIWiyVqgEgXO3rc6T1BYdpitx8 heP+b9SLPn7DWlQ5UeSnQswWMpjVGSm7CfV6fC+kWlJr7jWEeCcph6RbH/skFcYi 1cetovLoUhir2vU87+XoqrbBGVpsNIJxK4fvfIZdetUE9GI7mh4Y3pAFyrDCej8o KrlP9vkuYetbEUTJFUdevL3MVSg+N/7ECDyg59FXIbQm8bnkI4TTrUD/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFSZjkQgUQln3ggqL0cgYK1saBIMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNT7NPWZ FvrT26bxg3ctfDSVfolGdF42tWdrqGyPFaOQ3Ucn1EYO4fawndfB/6e2j0YcVkRI wWCEHJXEX860upXXwalQh9eFdYxgL9XXi60oIQjg2Bi+nFbANz3lS1tvZ08gVulH cyEkE4B2Xe1Kr/vbW4nVAxw/hIdUNIUT1RTI3ruHtso2EnbLgG6zBmAcSw4nSD3M QyUNJ+cN7Lju4c0rzMaTt0vllIyNEJ8YNAePHGasB/4FKzFFnFnBGwqKiHwpGeRa bjAKJRkcGaTH+4VR887iYrFzVaBsIO1aaAdF/hO0UgcN+wlYUUesmkNijsBBWG+q xF4CSBS9ruZDSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:52 2026 by rpki-client