This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft File: UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json) Hash identifier: cOvp4i8veskdfnf8wkM4Y7lFGVK6YJiGOgJkVVFxMtg= Subject key identifier: 91:54:F3:95:B0:F5:08:F6:41:3A:7C:70:4D:0E:46:A9:2E:99:52:00 Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF Certificate issuer: /CN=509570045118fedb6fcf61b59420c873b71587bf Certificate serial: 019BAF13A5CE69412397F145F57DE9380AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 22:00:58 +0000 Manifest this update: Sun 11 Jan 2026 22:00:58 +0000 Manifest next update: Mon 12 Jan 2026 22:00:58 +0000 Files and hashes: 1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: g7WEVN6gL64sOJsSzqknfGhlO+x5rdnjN8qyVK69FgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:a5:ce:69:41:23:97:f1:45:f5:7d:e9:38:0a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf Validity Not Before: Jan 11 22:00:58 2026 GMT Not After : Jan 12 22:00:58 2026 GMT Subject: CN=9154f395b0f508f6413a7c704d0e46a92e995200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:2d:27:6a:aa:eb:1d:bc:71:4e:e8:87:c2: 3a:ce:b4:db:e8:22:33:53:93:b5:89:b1:f0:5e:cf: a8:33:24:ac:63:1e:28:ba:65:67:06:55:74:d4:be: bd:cc:b0:f0:ac:73:85:3b:91:52:c4:f3:ae:51:8e: 06:6b:09:8b:26:e7:bf:7a:fb:6e:4a:28:7a:83:d8: fd:f5:8a:b3:7c:41:59:f2:21:fe:99:b7:56:6b:2f: 6f:37:17:22:18:a1:0e:90:46:5b:d5:48:04:05:53: 9e:0f:73:77:8b:47:f4:0f:32:20:23:04:6f:52:ea: 93:c7:d3:08:2a:66:21:37:2c:f0:76:41:54:15:99: fa:60:90:b3:b4:27:5a:28:b5:1f:fe:3b:60:e7:ab: f5:01:ba:a6:f5:c4:e7:25:66:fa:bf:1a:ba:ba:90: 0f:f1:29:c4:d2:1f:12:9f:79:c9:be:2e:48:8f:86: 4a:73:e1:f1:c8:7c:f8:26:ae:99:b6:56:0e:4d:22: 1a:48:6d:10:a4:b4:b1:4d:da:4d:00:e9:26:34:94: f1:e6:6e:c6:9c:20:d4:19:9d:70:11:25:d1:62:f9: 24:2d:dd:c5:78:5e:41:7a:f8:70:74:ce:7f:26:2a: 5a:2a:57:f8:2a:0d:23:33:32:4d:d5:cd:8c:2b:98: f9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:F3:95:B0:F5:08:F6:41:3A:7C:70:4D:0E:46:A9:2E:99:52:00 X509v3 Authority Key Identifier: keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:77:e4:34:14:3f:65:91:d3:f4:0e:a3:23:bf:57:af:1e:31: a1:c7:7e:53:f4:5a:a7:75:b7:10:79:e2:70:a5:a5:5d:5b:d9: d5:67:38:4e:ce:65:c0:02:61:c6:cb:0e:47:19:a7:da:2c:01: bf:b9:41:fe:24:d7:93:58:9b:1b:37:74:d0:5c:6f:3e:be:8a: 13:62:a0:a1:15:d3:b6:4c:cb:a6:0d:b8:d0:a5:60:02:a7:99: b7:5b:a8:f1:02:38:79:3a:ab:4a:d1:45:df:b1:0e:40:fc:ec: e7:fc:c7:da:cf:67:b8:4c:55:e5:40:f7:ce:29:62:25:f2:47: 20:21:37:df:91:ef:67:c8:fd:9f:de:a9:bc:c4:49:0b:8b:0a: bc:d1:32:84:14:7c:73:a9:94:a1:56:37:56:9e:4a:e0:5c:19: 6b:1e:ea:aa:94:f7:74:ed:6c:09:80:8f:eb:bf:e2:51:2b:d8: 45:e1:77:ab:cc:6a:13:ed:59:3f:53:11:fb:50:59:bc:57:59: 6c:00:5d:43:7c:3e:5a:77:ef:14:19:29:05:f4:5b:5d:57:15: 38:16:52:d0:10:68:38:87:80:a3:21:06:ad:53:0b:17:2c:5a: 85:9b:a3:4c:3b:32:1d:3c:c6:66:b2:72:43:69:94:f5:55:3e: 53:07:22:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE6XOaUEjl/FF9X3pOAr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTU3MDA0NTExOGZlZGI2ZmNmNjFiNTk0MjBjODczYjcx NTg3YmYwHhcNMjYwMTExMjIwMDU4WhcNMjYwMTEyMjIwMDU4WjAzMTEwLwYDVQQD Eyg5MTU0ZjM5NWIwZjUwOGY2NDEzYTdjNzA0ZDBlNDZhOTJlOTk1MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3wtJ2qq6x28cU7oh8I6zrTb6CIz U5O1ibHwXs+oMySsYx4oumVnBlV01L69zLDwrHOFO5FSxPOuUY4GawmLJue/evtu Sih6g9j99YqzfEFZ8iH+mbdWay9vNxciGKEOkEZb1UgEBVOeD3N3i0f0DzIgIwRv UuqTx9MIKmYhNyzwdkFUFZn6YJCztCdaKLUf/jtg56v1Abqm9cTnJWb6vxq6upAP 8SnE0h8Sn3nJvi5Ij4ZKc+HxyHz4Jq6ZtlYOTSIaSG0QpLSxTdpNAOkmNJTx5m7G nCDUGZ1wESXRYvkkLd3FeF5BevhwdM5/JipaKlf4Kg0jMzJN1c2MK5j5MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFU85Ww9Qj2QTp8cE0ORqkumVIAMB8GA1UdIwQY MBaAFFCVcARRGP7bb89htZQgyHO3FYe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpWd0JGRVlfdHR2ejJHMWxDREljN2NWaDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yY2JhNzQtMmQ2YS00ZWIxLWE5NzMt MGIzNjAyNzRhNGE1LzEvVUpWd0JGRVlfdHR2ejJHMWxDREljN2NWaDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yY2JhNzQtMmQ2YS00ZWIxLWE5NzMtMGIzNjAyNzRhNGE1 LzEvVUpWd0JGRVlfdHR2ejJHMWxDREljN2NWaDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHfkNBQ/ ZZHT9A6jI79Xrx4xocd+U/Rap3W3EHnicKWlXVvZ1Wc4Ts5lwAJhxssORxmn2iwB v7lB/iTXk1ibGzd00FxvPr6KE2KgoRXTtkzLpg240KVgAqeZt1uo8QI4eTqrStFF 37EOQPzs5/zH2s9nuExV5UD3ziliJfJHICE335HvZ8j9n96pvMRJC4sKvNEyhBR8 c6mUoVY3Vp5K4FwZax7qqpT3dO1sCYCP67/iUSvYReF3q8xqE+1ZP1MR+1BZvFdZ bABdQ3w+WnfvFBkpBfRbXVcVOBZS0BBoOIeAoyEGrVMLFyxahZujTDsyHTzGZrJy Q2mU9VU+UwciPw== -----END CERTIFICATE-----Generated at Mon Jan 12 00:33:59 2026 by rpki-client