This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json) Hash identifier: fN+hwYDHy8bgcfpAgoxni66jFLuU5dfm26ZqMQrmI+s= Subject key identifier: E6:2D:1B:1E:B4:42:09:A8:6C:BE:20:5A:4A:B5:3C:F8:A3:3E:79:5A Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762 Certificate serial: 019BFA2DE6AB08BAC2A5F0436F2AD1A1DED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 12:01:10 +0000 Manifest this update: Mon 26 Jan 2026 12:01:10 +0000 Manifest next update: Tue 27 Jan 2026 12:01:10 +0000 Files and hashes: 1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: OSN+b6RcWhH94V6/m7XPOWnf1ZXQJT6KraPXaCmeY3A=) 2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=) 3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=) 4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:e6:ab:08:ba:c2:a5:f0:43:6f:2a:d1:a1:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509df728d1b46634054972d2945fda58073b5762 Validity Not Before: Jan 26 12:01:10 2026 GMT Not After : Jan 27 12:01:10 2026 GMT Subject: CN=e62d1b1eb44209a86cbe205a4ab53cf8a33e795a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:dc:b6:86:f1:69:6b:00:ae:92:cf:e4:7d: 82:4a:47:ea:40:07:26:ec:ac:a5:b9:b7:ca:c0:93: 54:0a:fe:21:1e:6b:a7:0c:d0:92:66:2e:67:7c:4f: f5:75:f6:90:8e:07:42:86:97:9a:4b:36:b3:c9:9d: ba:6b:85:bf:3e:c8:80:6c:3c:3f:0d:51:87:b0:92: 45:4d:c6:dc:d5:3f:ee:37:39:29:63:0c:77:83:22: 5f:c6:4f:6b:9d:4a:e7:41:7b:3e:32:1c:a2:47:1b: 10:64:1c:fa:ec:c8:93:7f:38:aa:c0:43:fc:65:fc: c2:02:59:51:14:f7:ef:92:36:25:87:dd:6c:c8:f9: dc:54:a5:30:f3:f5:61:ce:78:5d:db:e1:b8:b7:da: f1:7a:1c:09:64:32:79:9c:88:56:28:de:f1:15:63: a8:12:da:f5:2c:85:74:e1:c3:45:3e:6e:ef:33:45: 00:03:2f:85:39:f1:ec:92:c8:20:6f:6d:1b:5d:a6: bb:7f:e8:1b:80:aa:72:70:81:3f:09:eb:3b:73:73: ee:d5:8d:db:23:32:31:90:4c:3a:e8:fb:d0:c4:88: 88:11:f5:d2:5a:78:13:be:0d:e5:1d:27:4e:48:fc: 52:de:cc:08:1e:17:7d:5d:d7:30:30:8a:ad:fc:85: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2D:1B:1E:B4:42:09:A8:6C:BE:20:5A:4A:B5:3C:F8:A3:3E:79:5A X509v3 Authority Key Identifier: keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:55:39:fb:60:02:a3:f4:1d:e9:b2:34:d5:30:de:33:f1:68: a2:66:e0:b0:24:a4:18:f2:bf:a8:9c:b2:79:b0:cc:a7:f5:62: 9e:36:37:50:01:c5:aa:3a:9f:1e:be:b2:07:c5:5b:3b:02:6c: bb:8e:89:f2:99:75:d5:88:d1:09:e2:fe:e8:f5:df:dd:54:8d: d9:97:94:2c:0c:3f:a0:2f:2d:6c:72:a6:f7:47:82:a0:99:c1: 4b:8c:38:41:fa:a7:3e:54:b1:87:62:e5:f9:45:9b:39:eb:54: 0b:ec:8c:8e:30:87:d5:3a:36:e3:46:19:e7:fb:ba:8f:bf:fa: 56:c8:ce:10:a0:31:f4:5c:98:f1:83:56:ba:a0:89:a5:32:a9: d5:9c:ef:b6:08:30:44:f0:c2:e1:04:21:c5:2d:85:1a:e6:e7: 25:6a:24:c7:7a:23:2d:4a:a0:b5:73:8e:a6:d8:a8:af:40:e3: d7:47:0a:99:70:3c:ca:80:8c:4b:a1:e9:1e:64:a1:60:49:03: f7:fc:11:8d:b8:ae:41:43:e5:ea:28:c4:93:09:20:61:8a:74: ec:c2:51:ef:8e:65:0a:09:21:32:5d:83:cb:37:79:45:1a:62: 1c:6f:e2:9a:94:68:99:e7:93:e2:42:fa:2f:89:49:a4:7b:b3: 01:f6:a4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LearCLrCpfBDbyrRod7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz YjU3NjIwHhcNMjYwMTI2MTIwMTEwWhcNMjYwMTI3MTIwMTEwWjAzMTEwLwYDVQQD EyhlNjJkMWIxZWI0NDIwOWE4NmNiZTIwNWE0YWI1M2NmOGEzM2U3OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqefctobxaWsArpLP5H2CSkfqQAcm 7KylubfKwJNUCv4hHmunDNCSZi5nfE/1dfaQjgdChpeaSzazyZ26a4W/PsiAbDw/ DVGHsJJFTcbc1T/uNzkpYwx3gyJfxk9rnUrnQXs+MhyiRxsQZBz67MiTfziqwEP8 ZfzCAllRFPfvkjYlh91syPncVKUw8/Vhznhd2+G4t9rxehwJZDJ5nIhWKN7xFWOo Etr1LIV04cNFPm7vM0UAAy+FOfHsksggb20bXaa7f+gbgKpycIE/Ces7c3Pu1Y3b IzIxkEw66PvQxIiIEfXSWngTvg3lHSdOSPxS3swIHhd9XdcwMIqt/IUzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYtGx60QgmobL4gWkq1PPijPnlaMB8GA1UdIwQY MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0 LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1U5+2AC o/Qd6bI01TDeM/FoombgsCSkGPK/qJyyebDMp/VinjY3UAHFqjqfHr6yB8VbOwJs u46J8pl11YjRCeL+6PXf3VSN2ZeULAw/oC8tbHKm90eCoJnBS4w4QfqnPlSxh2Ll +UWbOetUC+yMjjCH1To240YZ5/u6j7/6VsjOEKAx9FyY8YNWuqCJpTKp1Zzvtggw RPDC4QQhxS2FGubnJWokx3ojLUqgtXOOptior0Dj10cKmXA8yoCMS6HpHmShYEkD 9/wRjbiuQUPl6ijEkwkgYYp07MJR745lCgkhMl2Dyzd5RRpiHG/impRomeeT4kL6 L4lJpHuzAfakZw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:48 2026 by rpki-client