This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json) Hash identifier: 3NT1Zee3IHNfWM1mr27agOtTrPSM7JvXRucw+wH1wHk= Subject key identifier: 2A:14:2F:10:EA:93:7B:DF:B3:9E:DB:FE:6A:95:A2:C4:9E:F7:95:8C Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706 Certificate serial: 019BDE117F7594C7EE205FCA59479C5B573F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft Manifest number: 17DD Signing time: Wed 21 Jan 2026 01:00:47 +0000 Manifest this update: Wed 21 Jan 2026 01:00:47 +0000 Manifest next update: Thu 22 Jan 2026 01:00:47 +0000 Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: rD9egLqXtSmgxK0MnJlt8sOqee3mkv339FDWuTvsG7k=) 2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:11:7f:75:94:c7:ee:20:5f:ca:59:47:9c:5b:57:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706 Validity Not Before: Jan 21 01:00:47 2026 GMT Not After : Jan 22 01:00:47 2026 GMT Subject: CN=2a142f10ea937bdfb39edbfe6a95a2c49ef7958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:5d:8d:08:d2:1d:49:53:06:42:a0:2a:7e: e4:92:94:c5:3b:ef:3e:69:65:f6:d0:50:c9:28:d5: 59:19:06:ab:69:47:84:99:a0:1f:e8:5a:a1:0e:10: 87:40:da:d0:91:dd:f9:69:f0:a4:9f:56:79:a8:18: a0:e7:86:c9:d7:a5:c1:0d:78:fb:17:cd:e6:3f:c2: 26:59:89:52:13:da:f2:f4:bf:d8:65:aa:fd:33:49: 8b:c3:14:f9:dd:7e:8a:df:d2:06:7c:56:d7:31:68: a9:9b:bc:39:8d:03:2d:87:95:fd:c9:b7:fb:41:3f: e0:30:8a:1c:1f:76:15:81:f8:8c:90:71:bf:a5:ef: 27:66:64:37:f2:59:6d:28:9b:77:f7:a7:20:c1:ae: cd:30:9e:bd:3b:a6:a8:d9:7f:17:c0:66:a7:99:fd: 85:34:ed:2f:67:4d:ab:2b:88:ca:b6:78:ba:42:94: 0d:52:fd:96:29:b5:51:93:22:cf:c1:fb:ca:c9:30: 5c:bb:a1:20:e4:2b:6a:5e:22:f8:7e:54:51:69:6a: 78:64:d8:dc:b6:de:08:cf:86:71:5b:23:f7:8e:9a: 27:db:87:2d:e0:67:f2:63:c5:f7:f1:4f:4f:39:be: 49:03:48:80:2f:06:11:26:60:09:f5:18:22:a4:a1: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:2F:10:EA:93:7B:DF:B3:9E:DB:FE:6A:95:A2:C4:9E:F7:95:8C X509v3 Authority Key Identifier: keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fe:4d:37:5d:59:6f:65:4b:f8:69:08:b7:70:0a:6c:8e:30: a6:84:52:1c:ce:9d:ce:c2:93:30:6b:2a:5f:91:b0:c6:e7:a6: 9e:b3:17:93:09:63:32:3c:16:50:30:15:86:b6:6e:9c:8b:d4: 57:9b:7c:a8:57:06:f6:49:69:fe:b2:50:2e:89:76:06:4c:72: db:1c:0a:ce:a4:82:3d:74:04:c5:14:36:e2:2b:76:04:1b:bf: 34:d7:7c:91:8c:33:1b:b5:70:e1:21:51:e7:50:1c:06:32:15: 27:a6:89:58:18:06:5d:8c:ee:9b:83:3b:56:26:3f:45:a5:1b: 36:18:17:29:0d:0c:4e:2b:e7:79:56:e1:85:7d:09:d5:ca:a8: ad:fa:c2:0d:c3:80:95:c9:54:2f:10:c9:fc:98:27:71:3a:03: 37:3e:51:13:e5:28:31:88:ca:42:f7:98:09:73:72:5a:63:3d: a1:d8:69:89:fc:03:9f:73:34:73:e0:38:81:a9:e4:67:07:83: 1d:32:7d:d2:e9:40:9d:16:63:0a:26:7a:e5:f3:7a:73:5c:6a: e6:69:ec:f8:9e:97:23:99:0c:92:79:a1:be:96:0b:40:91:81: ef:0a:33:3d:95:49:f7:fe:8a:9b:29:ef:dd:38:fd:c8:a0:d7: a5:2f:84:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEX91lMfuIF/KWUecW1c/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0 Nzk3MDYwHhcNMjYwMTIxMDEwMDQ3WhcNMjYwMTIyMDEwMDQ3WjAzMTEwLwYDVQQD EygyYTE0MmYxMGVhOTM3YmRmYjM5ZWRiZmU2YTk1YTJjNDllZjc5NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoZdjQjSHUlTBkKgKn7kkpTFO+8+ aWX20FDJKNVZGQaraUeEmaAf6FqhDhCHQNrQkd35afCkn1Z5qBig54bJ16XBDXj7 F83mP8ImWYlSE9ry9L/YZar9M0mLwxT53X6K39IGfFbXMWipm7w5jQMth5X9ybf7 QT/gMIocH3YVgfiMkHG/pe8nZmQ38lltKJt396cgwa7NMJ69O6ao2X8XwGanmf2F NO0vZ02rK4jKtni6QpQNUv2WKbVRkyLPwfvKyTBcu6Eg5CtqXiL4flRRaWp4ZNjc tt4Iz4ZxWyP3jpon24ct4GfyY8X38U9POb5JA0iALwYRJmAJ9RgipKGSUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoULxDqk3vfs57b/mqVosSe95WMMB8GA1UdIwQY MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt OGVkODQzM2QzOGM0LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0 LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf5NN11Z b2VL+GkIt3AKbI4wpoRSHM6dzsKTMGsqX5GwxuemnrMXkwljMjwWUDAVhrZunIvU V5t8qFcG9klp/rJQLol2Bkxy2xwKzqSCPXQExRQ24it2BBu/NNd8kYwzG7Vw4SFR 51AcBjIVJ6aJWBgGXYzum4M7ViY/RaUbNhgXKQ0MTivneVbhhX0J1cqorfrCDcOA lclULxDJ/JgncToDNz5RE+UoMYjKQveYCXNyWmM9odhpifwDn3M0c+A4gankZweD HTJ90ulAnRZjCiZ65fN6c1xq5mns+J6XI5kMknmhvpYLQJGB7wozPZVJ9/6Kmynv 3Tj9yKDXpS+E7g== -----END CERTIFICATE-----Generated at Wed Jan 21 10:52:12 2026 by rpki-client