This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json) Hash identifier: O0kPA7ZbwqThC5s1DF4+pJKKiB64ZbJMXcp9/JN+v88= Subject key identifier: 20:58:47:E3:01:CF:90:2C:E1:6E:D7:E4:6A:E7:14:20:30:1B:3F:BB Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Certificate serial: 019BDF25370384E52CCF2B1215611C41F9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft Manifest number: 17DE Signing time: Wed 21 Jan 2026 06:01:56 +0000 Manifest this update: Wed 21 Jan 2026 06:01:56 +0000 Manifest next update: Thu 22 Jan 2026 06:01:56 +0000 Files and hashes: 1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=) 2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=) 3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=) 4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=) 5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: MEqSjrDu+FRTeJxPLEEAGNrK8HlgwuCbOWx6f9v7JjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:25:37:03:84:e5:2c:cf:2b:12:15:61:1c:41:f9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Validity Not Before: Jan 21 06:01:56 2026 GMT Not After : Jan 22 06:01:56 2026 GMT Subject: CN=205847e301cf902ce16ed7e46ae71420301b3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:a2:f0:c3:d3:a9:a0:80:96:9c:b0:3c:d6: 20:80:5f:4c:50:39:9b:0c:2c:28:3d:49:36:53:d6: 61:12:c1:e6:90:71:a0:ac:75:b8:df:3a:e4:71:89: 87:aa:27:59:41:b1:47:86:70:43:2f:a9:ee:98:93: 91:65:86:39:26:9d:4d:94:69:ab:0e:d6:07:03:8d: e0:1b:1d:5e:32:a3:f9:37:3d:fe:17:b1:7b:e6:8d: 60:74:5d:14:2f:48:e9:85:ec:fb:f4:94:0d:71:ce: 72:6f:d7:7a:a3:4a:bc:ca:d1:98:a1:6f:cf:0d:da: 16:8b:41:c0:21:16:79:60:12:fa:fb:64:90:9f:c9: 74:bb:b8:44:13:12:0a:76:00:bb:bd:64:9f:cb:9a: 68:87:8d:16:1b:ce:da:36:d1:bf:d8:8f:60:9a:b6: 5a:c7:c7:08:2e:91:0a:cc:c3:1a:23:15:e4:91:2f: 47:c8:68:01:24:e2:11:89:fe:60:3f:3a:cc:55:61: 53:da:70:6d:cc:36:be:9d:8a:1c:dd:54:e7:92:23: 03:0e:6a:66:a9:ad:1a:06:2c:8e:8c:79:cd:20:89: 1d:8f:58:87:0c:2e:15:73:cc:c7:f3:5e:af:c9:17: a7:61:cd:54:17:d9:40:45:b1:d9:84:4d:f2:e3:03: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:58:47:E3:01:CF:90:2C:E1:6E:D7:E4:6A:E7:14:20:30:1B:3F:BB X509v3 Authority Key Identifier: keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:18:74:62:83:42:00:e3:e9:9a:c2:42:b8:bd:4e:77:f4:8d: 08:ed:f0:39:71:2b:07:ef:28:e0:3e:bf:b2:59:32:3b:6c:03: 7c:bf:de:32:ee:2c:8c:ef:61:49:8e:78:3e:38:fc:d1:76:87: 02:89:4b:6e:a8:8c:da:46:af:47:ec:5e:09:51:4f:ab:6c:15: 51:f9:2a:c4:24:73:86:1c:fd:b4:da:a9:ff:96:e9:f4:5a:72: 4b:44:16:80:f1:19:c9:4c:1a:78:b2:58:5e:87:09:fc:18:b6: a1:d4:f4:1c:07:85:0b:13:17:b6:f2:0d:5c:b3:40:1d:32:0c: ae:31:8d:a7:54:bf:2c:28:30:39:44:35:9c:7a:7d:66:ca:80: ff:c6:69:b5:83:97:4c:d0:06:d1:0f:25:41:b0:2a:70:ef:a9: 05:4a:ae:90:d8:21:ff:38:b3:f8:a8:77:d6:23:d2:af:87:70: ed:9e:b1:d1:e7:c6:d7:88:44:44:db:9a:62:9a:47:ee:81:cb: bf:5d:e3:dd:e5:45:60:a5:6f:3e:b1:ad:85:b6:f5:af:73:7c: 79:bd:48:06:61:a4:3f:67:d2:93:36:ad:ab:88:ce:60:35:3b: af:b0:76:1f:72:18:41:8f:14:fe:23:86:2c:7c:5c:19:91:1f: 5d:b2:19:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJTcDhOUszysSFWEcQfnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5 YjZhNmQwHhcNMjYwMTIxMDYwMTU2WhcNMjYwMTIyMDYwMTU2WjAzMTEwLwYDVQQD EygyMDU4NDdlMzAxY2Y5MDJjZTE2ZWQ3ZTQ2YWU3MTQyMDMwMWIzZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu6i8MPTqaCAlpywPNYggF9MUDmb DCwoPUk2U9ZhEsHmkHGgrHW43zrkcYmHqidZQbFHhnBDL6numJORZYY5Jp1NlGmr DtYHA43gGx1eMqP5Nz3+F7F75o1gdF0UL0jphez79JQNcc5yb9d6o0q8ytGYoW/P DdoWi0HAIRZ5YBL6+2SQn8l0u7hEExIKdgC7vWSfy5poh40WG87aNtG/2I9gmrZa x8cILpEKzMMaIxXkkS9HyGgBJOIRif5gPzrMVWFT2nBtzDa+nYoc3VTnkiMDDmpm qa0aBiyOjHnNIIkdj1iHDC4Vc8zH816vyRenYc1UF9lARbHZhE3y4wPvFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBYR+MBz5As4W7X5GrnFCAwGz+7MB8GA1UdIwQY MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4 LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBh0YoNC AOPpmsJCuL1Od/SNCO3wOXErB+8o4D6/slkyO2wDfL/eMu4sjO9hSY54Pjj80XaH AolLbqiM2kavR+xeCVFPq2wVUfkqxCRzhhz9tNqp/5bp9FpyS0QWgPEZyUwaeLJY XocJ/Bi2odT0HAeFCxMXtvINXLNAHTIMrjGNp1S/LCgwOUQ1nHp9ZsqA/8ZptYOX TNAG0Q8lQbAqcO+pBUqukNgh/ziz+Kh31iPSr4dw7Z6x0efG14hERNuaYppH7oHL v13j3eVFYKVvPrGthbb1r3N8eb1IBmGkP2fSkzatq4jOYDU7r7B2H3IYQY8U/iOG LHxcGZEfXbIZvw== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:56 2026 by rpki-client