This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json) Hash identifier: K2nnhogEDhDKgqm8qNzlR+vEvzbVYSj9xJDrBIUm9HY= Subject key identifier: 12:2B:EE:DA:5D:5B:88:49:47:C0:24:3A:8B:8F:06:96:2C:F5:DB:A2 Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Certificate serial: 019B7F16931B1E8FA8B043E901C92A3AA9D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 14:22:24 +0000 Manifest this update: Fri 02 Jan 2026 14:22:24 +0000 Manifest next update: Sat 03 Jan 2026 14:22:24 +0000 Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=) 2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: hbwBzB5QsHEJOzMEUkjOyuutWjHOdWlBOc4yU6KR3wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:93:1b:1e:8f:a8:b0:43:e9:01:c9:2a:3a:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Validity Not Before: Jan 2 14:22:24 2026 GMT Not After : Jan 3 14:22:24 2026 GMT Subject: CN=122beeda5d5b884947c0243a8b8f06962cf5dba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1e:40:c2:6d:2f:92:b8:9a:ed:18:f0:c5:c2: f3:01:20:cf:4e:3a:a7:c1:13:e9:e5:a0:37:ac:b7: 23:b7:b8:8a:80:e7:6c:ac:c8:2d:f2:b7:83:40:cf: 20:13:67:d3:ed:b5:1a:32:bc:0e:04:fc:bb:44:85: 3b:bb:3a:0e:00:d7:e0:4d:bb:2a:69:2e:26:a9:42: 4f:9c:78:72:5a:fb:e7:19:d7:e5:ec:5a:77:ec:ea: f6:63:63:1f:35:b2:05:82:81:53:db:d1:2d:42:72: 8f:3c:6f:c9:5f:14:a3:45:26:aa:9e:7d:61:49:e6: b4:b8:93:88:2f:11:03:4f:aa:14:ca:5c:85:d7:28: c8:ff:f3:f2:f5:6d:81:23:fa:f0:52:b2:ec:ba:a9: 10:11:6a:62:82:31:84:c9:ac:b3:7d:e7:2c:b0:eb: 09:06:3e:f1:67:83:09:d8:92:59:b3:cb:50:fc:a3: 8a:0e:9b:fd:03:ea:66:d0:a3:c1:1f:de:ea:92:b7: a7:ad:6e:1a:23:1a:ab:7d:26:fc:8f:d8:f4:b2:4b: 94:4c:cd:00:a3:69:6a:38:2c:5e:6e:07:e2:06:3a: 9e:6a:e2:13:68:e3:9c:3a:2e:12:12:50:4f:fd:df: eb:e9:e1:3c:12:85:aa:ec:ea:f8:93:0d:30:59:96: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:EE:DA:5D:5B:88:49:47:C0:24:3A:8B:8F:06:96:2C:F5:DB:A2 X509v3 Authority Key Identifier: keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ac:1c:11:97:db:cc:7e:66:24:39:07:86:e0:ba:e5:9a:22: 12:66:78:d1:86:6b:11:2f:8c:d9:af:5f:be:8a:c1:f2:df:e9: 20:bd:5b:b9:7c:37:dd:29:57:49:33:de:ac:22:75:e1:b2:d1: b7:c6:8f:61:fa:aa:c4:9b:68:fd:08:26:cb:05:fe:16:e7:d9: 5d:37:d4:88:f0:f2:e5:d5:6c:9d:a9:30:6c:f0:79:e8:a1:60: e3:d2:d9:ea:40:68:63:e2:fc:e7:63:e5:46:d0:b7:cb:4b:88: 93:93:17:73:2b:cb:57:d0:c2:ce:f0:6a:e4:9c:bc:bf:32:12: c5:8f:2d:0f:14:b6:40:77:90:d4:f8:43:88:28:35:c9:7a:81: 4c:ca:a1:13:47:b4:ba:f5:36:5b:6f:ed:15:b0:e7:03:69:2d: 4a:dd:bd:8c:33:6e:01:b0:87:4a:ce:92:81:78:64:a2:b3:ff: 3a:5b:69:77:f6:76:b4:35:e4:33:2f:5f:6e:24:87:a3:5f:25: 18:8d:99:2d:ec:9b:f2:c7:04:3c:aa:67:09:bd:e2:4b:9e:ac: 90:76:88:f6:ec:cb:78:40:7d:b6:28:49:9c:68:86:f5:0a:df: a5:5e:a1:88:a0:50:d1:78:13:a3:4e:8a:60:ba:34:6e:21:11: 8a:49:41:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/FpMbHo+osEPpAckqOqnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk YTlkNDMwHhcNMjYwMTAyMTQyMjI0WhcNMjYwMTAzMTQyMjI0WjAzMTEwLwYDVQQD EygxMjJiZWVkYTVkNWI4ODQ5NDdjMDI0M2E4YjhmMDY5NjJjZjVkYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB5Awm0vkria7RjwxcLzASDPTjqn wRPp5aA3rLcjt7iKgOdsrMgt8reDQM8gE2fT7bUaMrwOBPy7RIU7uzoOANfgTbsq aS4mqUJPnHhyWvvnGdfl7Fp37Or2Y2MfNbIFgoFT29EtQnKPPG/JXxSjRSaqnn1h Sea0uJOILxEDT6oUylyF1yjI//Py9W2BI/rwUrLsuqkQEWpigjGEyayzfecssOsJ Bj7xZ4MJ2JJZs8tQ/KOKDpv9A+pm0KPBH97qkrenrW4aIxqrfSb8j9j0skuUTM0A o2lqOCxebgfiBjqeauITaOOcOi4SElBP/d/r6eE8EoWq7Or4kw0wWZbVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIr7tpdW4hJR8AkOouPBpYs9duiMB8GA1UdIwQY MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKwcEZfb zH5mJDkHhuC65ZoiEmZ40YZrES+M2a9fvorB8t/pIL1buXw33SlXSTPerCJ14bLR t8aPYfqqxJto/QgmywX+FufZXTfUiPDy5dVsnakwbPB56KFg49LZ6kBoY+L852Pl RtC3y0uIk5MXcyvLV9DCzvBq5Jy8vzISxY8tDxS2QHeQ1PhDiCg1yXqBTMqhE0e0 uvU2W2/tFbDnA2ktSt29jDNuAbCHSs6SgXhkorP/Oltpd/Z2tDXkMy9fbiSHo18l GI2ZLeyb8scEPKpnCb3iS56skHaI9uzLeEB9tihJnGiG9QrfpV6hiKBQ0XgTo06K YLo0biERiklBiw== -----END CERTIFICATE-----Generated at Fri Jan 2 17:01:34 2026 by rpki-client