This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json) Hash identifier: +ocMGrVnEyX+cx/SrlIW6dY7E60IuKxyJ2GqYMh4qSs= Subject key identifier: E9:FB:8E:61:CF:AA:AE:27:24:CD:E3:46:80:ED:32:EE:B6:43:C5:53 Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Certificate serial: 019BFCF7B2FF95A50D753F48F4CA9E5F9332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft Manifest number: 104C Signing time: Tue 27 Jan 2026 01:00:50 +0000 Manifest this update: Tue 27 Jan 2026 01:00:50 +0000 Manifest next update: Wed 28 Jan 2026 01:00:50 +0000 Files and hashes: 1: GTNj1uopxhcFHlYEIMNdLURp3bo.roa (hash: sNXrtC73S3XHslCegvtHnqUIQVTOhSUYsSYlbuOfH4o=) 2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: 4EwNBuQAYUDZUgYJzSsYXr6iLRpFDvt9S9qGT88ph7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:b2:ff:95:a5:0d:75:3f:48:f4:ca:9e:5f:93:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5 Validity Not Before: Jan 27 01:00:50 2026 GMT Not After : Jan 28 01:00:50 2026 GMT Subject: CN=e9fb8e61cfaaae2724cde34680ed32eeb643c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:00:9e:2b:1d:57:17:c3:59:41:77:13:33: d0:d8:80:c7:d5:e6:47:26:a1:59:f9:5c:a4:f4:8e: 43:24:13:49:d7:08:34:8b:8e:0b:0c:f5:0a:bc:14: 05:68:4e:8b:f9:d7:cb:d3:99:04:90:1e:e8:f9:19: 05:67:24:85:56:5a:dc:0f:07:dc:5d:2b:9b:79:2a: 73:60:8d:41:12:4e:a5:89:31:21:27:52:b8:30:4e: 0d:52:58:15:04:8b:0c:4e:1f:6b:d2:62:3e:d5:1b: db:54:58:33:e5:48:cf:f3:3e:53:a0:eb:19:bc:eb: 7b:f6:05:1a:cb:4f:7a:70:82:e5:c8:67:cf:d6:66: c2:c5:52:54:7a:bc:85:e7:14:08:4b:76:64:e9:ad: 9f:fa:d9:04:a3:01:b9:af:fb:dd:35:b3:e8:82:14: 35:e9:00:d9:79:5f:73:95:52:19:69:0c:6e:66:cf: b0:3d:7a:63:af:96:95:7f:56:f9:3f:be:69:95:52: 85:16:e0:40:d7:49:76:2f:a1:75:7b:95:b1:b6:ce: 2e:63:2d:1e:a2:f6:ac:cb:66:38:aa:bd:e7:4d:6a: 0d:df:8b:9d:89:c1:2b:f9:4c:02:e5:e6:75:ce:66: 4f:2f:07:a5:09:14:54:ac:f5:3b:92:12:ec:a4:33: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:8E:61:CF:AA:AE:27:24:CD:E3:46:80:ED:32:EE:B6:43:C5:53 X509v3 Authority Key Identifier: keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2a:45:9d:5c:2c:54:78:08:9b:fc:a4:b3:05:db:36:d3:d4: cd:f3:1c:9d:65:79:e6:e9:9e:48:20:8e:44:cd:45:a7:31:98: 73:62:fc:c9:40:39:04:ab:9e:82:d8:3a:8a:dd:aa:78:70:19: e0:a2:7a:a4:10:f9:09:94:5c:7d:a7:e5:e5:e9:34:02:75:07: 5a:9b:a3:89:ba:f8:0e:15:10:67:b9:0e:c1:1d:63:2b:3e:6d: 2e:e3:98:95:46:fb:82:6d:4f:68:1d:73:47:76:fc:83:31:4c: 4b:c9:6f:85:0b:8a:95:58:1a:8e:3a:b9:42:41:01:f3:a5:4d: 75:d1:d0:33:4e:64:4a:eb:6c:9a:d2:3f:c2:f6:b3:78:bd:9a: bf:19:d5:db:b7:7b:56:5b:b8:53:eb:4b:b3:69:64:89:0c:3a: b8:b8:bc:79:05:8e:93:4a:22:83:6a:61:c8:85:9c:2b:f3:8a: 1d:04:37:97:97:28:c9:9f:c1:ad:be:aa:91:5c:fd:b6:15:c8: bc:41:4e:39:29:3d:9e:ef:84:57:0f:5c:fd:0f:db:9e:05:d2: ac:23:3d:41:50:cf:03:6c:95:ef:e7:d2:43:73:4e:80:21:1c: 52:f1:ed:8e:5b:db:6e:81:7c:80:19:b6:d7:f7:70:65:29:00: 36:ce:d2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv897L/laUNdT9I9MqeX5MyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyOTM0MzIzNTU4MWNmNDEwNDE5MGRhN2EwY2ExNzRiOWMw ZDBiZDUwHhcNMjYwMTI3MDEwMDUwWhcNMjYwMTI4MDEwMDUwWjAzMTEwLwYDVQQD EyhlOWZiOGU2MWNmYWFhZTI3MjRjZGUzNDY4MGVkMzJlZWI2NDNjNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+AAnisdVxfDWUF3EzPQ2IDH1eZH JqFZ+Vyk9I5DJBNJ1wg0i44LDPUKvBQFaE6L+dfL05kEkB7o+RkFZySFVlrcDwfc XSubeSpzYI1BEk6liTEhJ1K4ME4NUlgVBIsMTh9r0mI+1RvbVFgz5UjP8z5ToOsZ vOt79gUay096cILlyGfP1mbCxVJUeryF5xQIS3Zk6a2f+tkEowG5r/vdNbPoghQ1 6QDZeV9zlVIZaQxuZs+wPXpjr5aVf1b5P75plVKFFuBA10l2L6F1e5Wxts4uYy0e ovasy2Y4qr3nTWoN34udicEr+UwC5eZ1zmZPLwelCRRUrPU7khLspDO68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn7jmHPqq4nJM3jRoDtMu62Q8VTMB8GA1UdIwQY MBaAFFKTQyNVgc9BBBkNp6DKF0ucDQvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2Qt ZmNjMjIwNjQ0NTU4LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmJmOGQtMmM0My00MjlkLWI1Y2QtZmNjMjIwNjQ0NTU4 LzEvVXBOREkxV0J6MEVFR1Eybm9Nb1hTNXdOQzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlypFnVws VHgIm/ykswXbNtPUzfMcnWV55umeSCCORM1FpzGYc2L8yUA5BKuegtg6it2qeHAZ 4KJ6pBD5CZRcfafl5ek0AnUHWpujibr4DhUQZ7kOwR1jKz5tLuOYlUb7gm1PaB1z R3b8gzFMS8lvhQuKlVgajjq5QkEB86VNddHQM05kSutsmtI/wvazeL2avxnV27d7 Vlu4U+tLs2lkiQw6uLi8eQWOk0oig2phyIWcK/OKHQQ3l5coyZ/Brb6qkVz9thXI vEFOOSk9nu+EVw9c/Q/bngXSrCM9QVDPA2yV7+fSQ3NOgCEcUvHtjlvbboF8gBm2 1/dwZSkANs7SUw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:57 2026 by rpki-client