This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json) Hash identifier: 2o1VQcbzvFmjwoa8UvQQUqo6U39Rd7JBHukPXI+1w50= Subject key identifier: 32:23:20:1E:6E:87:BE:6C:89:90:6B:54:BE:CC:76:3D:4E:F6:2F:8F Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Certificate serial: 019BFA2D952208D6B4682FEF7262A633A033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft Manifest number: 08F2 Signing time: Mon 26 Jan 2026 12:00:49 +0000 Manifest this update: Mon 26 Jan 2026 12:00:49 +0000 Manifest next update: Tue 27 Jan 2026 12:00:49 +0000 Files and hashes: 1: fvEGDe7L4eyfYeTloDB8NGfq6kE.roa (hash: +BFNfplEGW/w3LiEtyddTsqn+tuxzUHtBZCu52T2rMw=) 2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: 7P+quIhiMywZydT3xwLCf/YpK0d0IVYOWme35M1MbzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:95:22:08:d6:b4:68:2f:ef:72:62:a6:33:a0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6 Validity Not Before: Jan 26 12:00:49 2026 GMT Not After : Jan 27 12:00:49 2026 GMT Subject: CN=3223201e6e87be6c89906b54becc763d4ef62f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:de:e5:7c:80:e7:00:0f:c0:a8:dd:82:db: 28:e7:83:57:eb:a7:45:91:9d:79:97:9b:61:80:e0: 07:9d:4b:84:95:1b:03:64:c7:b6:d0:95:c6:2d:15: c2:01:29:17:bb:2d:a7:a0:87:80:ac:ab:72:40:a7: be:89:72:4c:89:cf:1c:0f:cb:fe:cb:77:98:59:24: c8:a4:b7:cb:14:9f:af:9e:1e:cc:1b:01:f0:b5:bf: b7:85:03:32:41:04:8a:37:2f:ea:cb:dd:f0:db:13: 25:7a:1e:c4:ad:b9:4b:1b:95:31:2b:2e:65:c6:29: 49:58:29:8f:c7:d2:0d:54:96:fe:6a:47:75:ea:b3: 03:17:73:f6:4a:22:10:89:1b:76:f7:d5:bb:b7:f3: 12:d1:27:44:07:16:41:28:be:cd:3a:9b:52:9d:b9: bd:c3:a0:e0:82:36:17:16:da:ce:2a:91:34:7c:39: ac:ff:38:b7:5d:78:3f:96:af:58:dd:51:5c:51:0f: cb:aa:62:dc:76:dc:df:e8:67:de:e0:21:b3:17:d9: f3:67:1c:29:19:b0:ac:1f:4d:21:48:b5:48:ea:f0: 40:83:9d:8d:bf:fe:22:70:24:3b:27:c7:a3:57:26: c9:93:be:26:ce:4c:a8:6c:a6:8b:15:f4:b8:b7:a5: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:23:20:1E:6E:87:BE:6C:89:90:6B:54:BE:CC:76:3D:4E:F6:2F:8F X509v3 Authority Key Identifier: keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3e:6f:77:57:d3:b8:38:39:7c:d6:44:0a:b8:40:76:2d:16: 3c:47:da:d4:6a:8d:03:c0:5c:1c:f3:7f:ea:12:1f:14:b5:ee: 06:d0:7e:73:2c:17:fd:bd:d0:b6:32:73:c7:68:6b:4d:74:a5: 2b:78:ea:41:ff:a8:d0:c1:e9:dd:93:49:6b:e8:e8:a2:23:00: 79:5c:40:7a:4c:81:f7:06:41:fb:01:f2:51:a5:ff:36:9e:f0: bd:eb:25:11:60:53:36:25:77:01:55:22:5b:78:e6:e1:07:1f: 74:fd:43:20:a7:1e:81:8c:a7:e4:24:14:1d:d7:d7:42:29:6c: 2b:d0:97:28:4d:64:cd:6e:27:cd:1e:e9:51:ab:e1:b4:56:92: e2:90:90:c8:6f:27:ee:40:ce:81:a0:c5:dc:7f:3e:bb:0c:6e: 9c:c3:8c:24:4a:a0:76:20:ae:8b:b6:33:7f:ae:d8:a7:d1:7e: 63:60:60:45:4f:62:e0:21:4c:c4:50:80:c9:f5:12:1a:ff:00: 34:41:1f:3c:99:23:bd:25:12:ab:80:66:12:f2:a6:27:36:14: 51:3b:61:f9:0d:0e:20:2c:3f:b9:02:c0:35:09:a4:ca:95:47: d9:05:4f:02:c6:a9:5f:1a:56:b6:24:8e:6e:98:8d:88:c1:a9: 1b:51:49:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZUiCNa0aC/vcmKmM6AzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGEwZDFkODBmZjFlZWNkMzY1OTA3NGE0OTdiZmJlOGM1 NTQzZjYwHhcNMjYwMTI2MTIwMDQ5WhcNMjYwMTI3MTIwMDQ5WjAzMTEwLwYDVQQD EygzMjIzMjAxZTZlODdiZTZjODk5MDZiNTRiZWNjNzYzZDRlZjYyZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHe5XyA5wAPwKjdgtso54NX66dF kZ15l5thgOAHnUuElRsDZMe20JXGLRXCASkXuy2noIeArKtyQKe+iXJMic8cD8v+ y3eYWSTIpLfLFJ+vnh7MGwHwtb+3hQMyQQSKNy/qy93w2xMleh7ErblLG5UxKy5l xilJWCmPx9INVJb+akd16rMDF3P2SiIQiRt299W7t/MS0SdEBxZBKL7NOptSnbm9 w6DggjYXFtrOKpE0fDms/zi3XXg/lq9Y3VFcUQ/LqmLcdtzf6Gfe4CGzF9nzZxwp GbCsH00hSLVI6vBAg52Nv/4icCQ7J8ejVybJk74mzkyobKaLFfS4t6UGmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIjIB5uh75siZBrVL7Mdj1O9i+PMB8GA1UdIwQY MBaAFLpKDR2A/x7s02WQdKSXv76MVUP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgt Y2M4ZWM2ZjNkODc1LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iNWZhM2UtYTIxOC00YTkxLWJmODgtY2M4ZWM2ZjNkODc1 LzEvdWtvTkhZRF9IdXpUWlpCMHBKZV92b3hWUV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD5vd1fT uDg5fNZECrhAdi0WPEfa1GqNA8BcHPN/6hIfFLXuBtB+cywX/b3QtjJzx2hrTXSl K3jqQf+o0MHp3ZNJa+jooiMAeVxAekyB9wZB+wHyUaX/Np7wveslEWBTNiV3AVUi W3jm4QcfdP1DIKcegYyn5CQUHdfXQilsK9CXKE1kzW4nzR7pUavhtFaS4pCQyG8n 7kDOgaDF3H8+uwxunMOMJEqgdiCui7Yzf67Yp9F+Y2BgRU9i4CFMxFCAyfUSGv8A NEEfPJkjvSUSq4BmEvKmJzYUUTth+Q0OICw/uQLANQmkypVH2QVPAsapXxpWtiSO bpiNiMGpG1FJOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:32 2026 by rpki-client