This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft File: U4DNitL4ThTptbZCOJN7bUIH4iE.mft (raw, json) Hash identifier: BfKG7aAhoGtJiK9psPEqHUR9ZFXlrrkmzEJ/DKDe5IA= Subject key identifier: 2F:F4:8D:C6:76:EB:B6:63:C9:8E:DE:65:25:4E:E7:CB:56:EC:73:91 Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Certificate serial: 019BF9F6D3B6E03FF3D72E1ACFFBEC2D4F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft Manifest number: 097F Signing time: Mon 26 Jan 2026 11:01:01 +0000 Manifest this update: Mon 26 Jan 2026 11:01:01 +0000 Manifest next update: Tue 27 Jan 2026 11:01:01 +0000 Files and hashes: 1: 3gqZ21ZiXWY8Si7snLEpMyMD74g.roa (hash: X/t/+w5YUcvfs+3nGPGjtJ/Fhg4+BcTTk+/zNwVCFHo=) 2: U4DNitL4ThTptbZCOJN7bUIH4iE.crl (hash: PT8smPdLbzTCn8Gwk81Udkn06+DyIng8Wu1HyMRnebE=) 3: wlQ0t9w-oLkcGuhWCMs9Bpc2jac.roa (hash: 3f94DHQ4ocfCNVkT9++XQcXx0yPrdObfv5lQ1Z9Etr8=) 4: x0JWlbPq7LDeu4Dm0_N7oeK38ow.roa (hash: tbOy3beQewSvz0vDOcHNb1UEiU3Vzot4Nk2R+I8UvvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:d3:b6:e0:3f:f3:d7:2e:1a:cf:fb:ec:2d:4f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221 Validity Not Before: Jan 26 11:01:01 2026 GMT Not After : Jan 27 11:01:01 2026 GMT Subject: CN=2ff48dc676ebb663c98ede65254ee7cb56ec7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:38:19:52:37:7f:e6:29:51:d9:8c:fa:90: c8:5c:39:ce:a1:08:bd:b6:b4:ea:33:93:53:54:ea: 0b:a5:48:43:88:84:57:1e:38:19:d4:c5:31:c4:e4: 25:2d:84:0b:8b:4c:1f:92:e0:38:c3:44:fe:be:f3: 53:76:4d:d5:72:c5:ab:76:62:86:ad:3e:01:15:a7: a4:e5:91:17:52:e7:1f:f2:2a:06:b3:68:63:6b:d5: 25:f9:32:e7:38:a4:58:00:54:4a:45:9f:01:31:1f: ae:35:9b:f7:b3:77:95:d5:86:4b:1b:8d:0c:9b:b1: dc:20:22:f0:f9:43:50:ca:b5:c9:41:5a:5d:3c:bd: d2:3c:18:2d:60:de:af:2e:8e:a4:f0:76:6a:f3:ba: 55:e2:3d:7d:14:9e:28:e8:f7:b9:7d:74:be:be:f9: 9f:88:c3:21:68:cd:36:13:72:f8:0a:8f:b1:25:f2: d2:04:a9:8f:59:2a:32:3a:88:88:ff:c4:8d:96:ff: cd:98:dc:8b:cc:ac:88:d6:83:98:a6:57:3a:a9:e9: 3c:fb:7d:67:bb:de:4f:05:11:44:fd:05:b5:19:e1: ff:1a:b3:7e:3a:1a:17:a4:df:72:98:4b:b5:de:ff: 29:83:04:36:11:c0:19:65:22:5b:db:6b:3c:4b:68: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:8D:C6:76:EB:B6:63:C9:8E:DE:65:25:4E:E7:CB:56:EC:73:91 X509v3 Authority Key Identifier: keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f7:d9:44:f3:5f:c3:e2:87:b5:9a:58:ad:58:7d:33:32:f8: 3c:85:92:a3:db:6d:da:3d:a2:4f:5f:24:ec:b3:7c:ec:23:d2: 55:85:8e:2e:82:db:5a:0e:02:9f:63:c6:8d:eb:1d:06:6e:f5: ed:d9:05:d2:1b:1c:6e:65:45:ed:1e:22:4d:f5:ad:24:8a:a5: 81:38:8d:0d:98:7b:d9:4b:b7:44:ff:7c:05:57:b0:00:bf:f2: e5:bd:c5:40:b0:4b:82:ec:f7:09:4e:15:26:5d:02:0c:55:9c: ec:f2:7f:fa:9a:7d:16:15:cb:06:22:85:cb:c9:65:cf:35:74: be:57:4e:5f:19:29:31:34:d6:98:06:66:ed:98:02:da:90:51: b0:b0:58:45:fa:3e:85:d5:89:4a:62:ce:71:1b:21:16:10:bf: 12:38:98:68:51:e0:2e:a0:d8:bf:65:6d:0b:9c:2f:1f:68:30: 70:72:5c:a0:e1:a8:41:aa:38:f0:e0:ed:a3:b7:96:69:8d:18: 71:f5:d0:ac:d6:d9:ba:01:8c:78:dc:9e:15:1e:02:0c:c9:66: 85:a6:f6:4b:d6:11:84:a3:f1:a3:70:26:12:fb:58:bf:4d:62: 16:e6:ea:49:ea:f2:a0:f3:32:35:5d:cd:b7:c8:02:b2:47:41: ed:ca:99:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59tO24D/z1y4az/vsLU9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzODBjZDhhZDJmODRlMTRlOWI1YjY0MjM4OTM3YjZkNDIw N2UyMjEwHhcNMjYwMTI2MTEwMTAxWhcNMjYwMTI3MTEwMTAxWjAzMTEwLwYDVQQD EygyZmY0OGRjNjc2ZWJiNjYzYzk4ZWRlNjUyNTRlZTdjYjU2ZWM3MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsA4GVI3f+YpUdmM+pDIXDnOoQi9 trTqM5NTVOoLpUhDiIRXHjgZ1MUxxOQlLYQLi0wfkuA4w0T+vvNTdk3VcsWrdmKG rT4BFaek5ZEXUucf8ioGs2hja9Ul+TLnOKRYAFRKRZ8BMR+uNZv3s3eV1YZLG40M m7HcICLw+UNQyrXJQVpdPL3SPBgtYN6vLo6k8HZq87pV4j19FJ4o6Pe5fXS+vvmf iMMhaM02E3L4Co+xJfLSBKmPWSoyOoiI/8SNlv/NmNyLzKyI1oOYplc6qek8+31n u95PBRFE/QW1GeH/GrN+OhoXpN9ymEu13v8pgwQ2EcAZZSJb22s8S2itOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/0jcZ267ZjyY7eZSVO58tW7HORMB8GA1UdIwQY MBaAFFOAzYrS+E4U6bW2QjiTe21CB+IhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQt NWUzNmQxYjA4MjVlLzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yZmNjOTItYzk2Ny00YTY1LWE0MzQtNWUzNmQxYjA4MjVl LzEvVTRETml0TDRUaFRwdGJaQ09KTjdiVUlINGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvfZRPNf w+KHtZpYrVh9MzL4PIWSo9tt2j2iT18k7LN87CPSVYWOLoLbWg4Cn2PGjesdBm71 7dkF0hscbmVF7R4iTfWtJIqlgTiNDZh72Uu3RP98BVewAL/y5b3FQLBLguz3CU4V Jl0CDFWc7PJ/+pp9FhXLBiKFy8llzzV0vldOXxkpMTTWmAZm7ZgC2pBRsLBYRfo+ hdWJSmLOcRshFhC/EjiYaFHgLqDYv2VtC5wvH2gwcHJcoOGoQao48ODto7eWaY0Y cfXQrNbZugGMeNyeFR4CDMlmhab2S9YRhKPxo3AmEvtYv01iFubqSeryoPMyNV3N t8gCskdB7cqZ0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:18 2026 by rpki-client