This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json) Hash identifier: lQFeVlbmfbAuXC+/1z+2Z2Z7pbpJrtd0+7zB+Fi5eL4= Subject key identifier: 16:02:8A:8E:47:96:4C:09:1E:2C:D1:97:84:AF:2C:32:23:3F:E6:D2 Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f Certificate serial: 019BACB7CFCD1973E1370CBFA66F36B30FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft Manifest number: 17CB Signing time: Sun 11 Jan 2026 11:01:25 +0000 Manifest this update: Sun 11 Jan 2026 11:01:25 +0000 Manifest next update: Mon 12 Jan 2026 11:01:25 +0000 Files and hashes: 1: J2ePeeL-Vnk70QACx3LfiT8XrbE.roa (hash: z2t3api1uCbkFONQl/y9ACJzqCIvyFtQi+W3FXkf6vI=) 2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: MPbsLDiKzSjFvfJMw3wfMLn80tW87+hbfgG3WiYra+A=) 3: WK05YePVGxSCv79B0TteFVaq850.roa (hash: 7rkUo5wVVBbfcYbpJlI0gu7ML8kJLZ10lGjYdqs1Wuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:b7:cf:cd:19:73:e1:37:0c:bf:a6:6f:36:b3:0f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f Validity Not Before: Jan 11 11:01:25 2026 GMT Not After : Jan 12 11:01:25 2026 GMT Subject: CN=16028a8e47964c091e2cd19784af2c32233fe6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:34:86:11:6e:fe:2d:a0:e6:2d:17:62:82: f3:15:4c:5e:61:94:aa:ce:f8:32:35:56:a6:da:2b: bc:ff:3e:9c:c9:9b:a6:61:8c:2e:b8:72:8d:78:02: 66:46:67:0b:ae:fb:78:62:da:58:a8:65:19:55:69: f5:05:5c:35:fc:92:83:8b:61:98:71:45:f3:a5:4b: e4:3d:21:94:0b:e3:94:6b:aa:64:ba:5f:73:c1:8a: 44:aa:ef:86:20:57:d9:2b:f7:cb:79:1e:f9:cf:bf: 3d:6f:c7:1c:b2:f7:71:4f:93:37:ca:3b:ad:2c:48: 62:73:dd:30:3f:67:06:51:11:a6:ed:bd:06:9d:0e: a6:bf:9a:dc:3c:f4:28:6c:ff:b7:8a:a8:30:90:18: 70:29:d6:24:94:a8:55:8c:b5:f3:c8:2f:61:3e:e7: 92:e2:71:f2:11:6f:1c:f5:01:92:84:37:37:21:f7: be:f1:45:28:be:b7:0f:f4:76:22:b1:68:6b:8c:df: 84:5b:ea:a8:b6:6c:7a:a1:86:ba:1e:0a:72:a6:11: ea:38:2e:8c:b0:5b:00:3d:4f:9c:d9:00:4b:91:86: 03:de:6f:41:3c:1f:31:49:27:e1:50:ab:ad:98:49: 81:02:5f:4e:51:c3:4f:68:ed:a3:6d:aa:df:6e:75: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:8A:8E:47:96:4C:09:1E:2C:D1:97:84:AF:2C:32:23:3F:E6:D2 X509v3 Authority Key Identifier: keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a5:f1:bc:1d:09:77:3d:2c:fa:a6:13:fc:d0:90:80:b8:17: 71:3e:17:30:6d:40:4b:3e:ed:d3:f4:94:f5:01:1d:73:ec:16: ff:f2:0a:36:af:3e:e1:85:fe:92:51:5c:c8:81:fa:68:00:9b: 1b:43:dc:1a:7b:f0:bb:5a:6e:ec:72:34:39:54:a6:10:b1:da: c3:95:f4:94:77:9c:47:f8:8c:dc:23:85:f0:fb:e9:12:d3:72: 62:98:f0:83:9c:94:af:e2:28:6a:0f:58:d9:29:a0:ef:45:b7: d9:3b:f0:04:c8:ac:54:24:25:96:f9:d1:60:47:c9:a7:37:6b: 82:7a:93:59:c8:36:e9:00:13:58:9b:85:df:6b:ef:ba:87:c7: f8:47:f0:ff:2e:38:67:74:b8:4f:06:2d:26:4f:43:00:4b:1e: 6f:86:3d:90:c9:ba:3b:86:1d:c4:53:6f:ed:0b:03:6b:5e:41: 4c:a8:48:78:c2:a4:a0:d9:30:7d:26:04:d4:5b:e5:32:6d:85: fa:98:97:c0:8d:ed:01:0f:38:3f:df:3a:76:97:80:18:c4:be: ed:68:d1:50:be:50:a3:64:b2:14:80:3b:83:e4:1a:41:1d:41: 60:db:98:d3:81:70:e9:aa:82:73:55:08:d2:8c:b4:28:0e:68: 3b:11:2a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZust8/NGXPhNwy/pm82sw/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4 YWU4MGYwHhcNMjYwMTExMTEwMTI1WhcNMjYwMTEyMTEwMTI1WjAzMTEwLwYDVQQD EygxNjAyOGE4ZTQ3OTY0YzA5MWUyY2QxOTc4NGFmMmMzMjIzM2ZlNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mk0hhFu/i2g5i0XYoLzFUxeYZSq zvgyNVam2iu8/z6cyZumYYwuuHKNeAJmRmcLrvt4YtpYqGUZVWn1BVw1/JKDi2GY cUXzpUvkPSGUC+OUa6pkul9zwYpEqu+GIFfZK/fLeR75z789b8ccsvdxT5M3yjut LEhic90wP2cGURGm7b0GnQ6mv5rcPPQobP+3iqgwkBhwKdYklKhVjLXzyC9hPueS 4nHyEW8c9QGShDc3Ife+8UUovrcP9HYisWhrjN+EW+qotmx6oYa6HgpyphHqOC6M sFsAPU+c2QBLkYYD3m9BPB8xSSfhUKutmEmBAl9OUcNPaO2jbarfbnWLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYCio5HlkwJHizRl4SvLDIjP+bSMB8GA1UdIwQY MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqXxvB0J dz0s+qYT/NCQgLgXcT4XMG1ASz7t0/SU9QEdc+wW//IKNq8+4YX+klFcyIH6aACb G0PcGnvwu1pu7HI0OVSmELHaw5X0lHecR/iM3COF8PvpEtNyYpjwg5yUr+Ioag9Y 2Smg70W32TvwBMisVCQllvnRYEfJpzdrgnqTWcg26QATWJuF32vvuofH+Efw/y44 Z3S4TwYtJk9DAEseb4Y9kMm6O4YdxFNv7QsDa15BTKhIeMKkoNkwfSYE1FvlMm2F +piXwI3tAQ84P986dpeAGMS+7WjRUL5Qo2SyFIA7g+QaQR1BYNuY04Fw6aqCc1UI 0oy0KA5oOxEqPg== -----END CERTIFICATE-----Generated at Sun Jan 11 20:04:40 2026 by rpki-client