This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft File: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json) Hash identifier: 9h8rmNLQp+jeVruD5uwcqEUoBvK0MLGXng3clJCOvrQ= Subject key identifier: FA:38:B8:93:BF:DF:51:2D:F3:43:28:AB:B7:1B:6D:B1:68:7F:24:33 Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04 Certificate issuer: /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104 Certificate serial: 019BD38E9D30A17A8056D8F66AA0292C4936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft Manifest number: 17D3 Signing time: Mon 19 Jan 2026 00:01:37 +0000 Manifest this update: Mon 19 Jan 2026 00:01:37 +0000 Manifest next update: Tue 20 Jan 2026 00:01:37 +0000 Files and hashes: 1: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: W2DvTeblNUC9tFSbwa/9cWG/RoxtWAKGy3ISfqMbZiQ=) 2: tszARLbMXBEIxwdiymgQ3NHG6Wg.roa (hash: jAFxokkoCog3haWB8r0ULaLqiqrv63FYz7hJiW/N96w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d3:8e:9d:30:a1:7a:80:56:d8:f6:6a:a0:29:2c:49:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104 Validity Not Before: Jan 19 00:01:37 2026 GMT Not After : Jan 20 00:01:37 2026 GMT Subject: CN=fa38b893bfdf512df34328abb71b6db1687f2433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:bc:8d:62:be:70:dd:9d:b0:30:5d:12:bd: 8f:0f:e2:30:71:c0:d2:89:19:b4:1c:df:8b:45:32: f6:ef:b6:ce:c7:a4:8d:77:b6:5c:d2:3f:51:f0:b0: d7:ed:9f:9a:7f:e0:bc:28:04:3c:0c:76:71:fd:ad: b5:0c:8a:13:95:61:d4:46:61:ba:ad:df:01:4f:f5: 1e:ca:b0:98:b1:12:67:bb:91:c2:da:9d:d5:0d:d0: c3:68:65:33:ce:59:af:e1:ef:69:3f:3c:a3:c9:0f: 16:3b:04:d0:8c:55:2a:71:95:54:54:b2:c4:61:b6: b8:39:f6:15:99:22:48:02:20:4d:73:06:3e:f5:b0: c7:be:93:b7:6f:d3:73:da:8e:42:9d:f5:69:50:af: 25:dc:e5:41:95:a3:ce:a9:35:b4:c9:4e:a7:a7:af: d7:b4:0e:a7:d3:02:fa:9d:57:d4:33:e5:fd:ed:1f: bc:27:ca:f1:fd:06:3b:e0:91:cf:91:83:39:c0:47: 9a:73:e4:42:34:ad:c6:84:6d:e3:ec:90:44:ad:79: f8:4d:d9:55:4d:c2:0f:7a:d8:fa:76:ea:04:e3:e8: 90:69:cf:14:8b:3e:0c:30:ab:61:a7:6c:f9:9c:e2: 71:67:4f:6a:98:8d:98:35:7a:1a:b4:59:95:77:a6: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:B8:93:BF:DF:51:2D:F3:43:28:AB:B7:1B:6D:B1:68:7F:24:33 X509v3 Authority Key Identifier: keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:17:2c:0d:37:de:1c:b3:c1:70:8f:1b:7c:0c:81:bb:4c:30: d4:d3:68:12:fc:ff:57:ed:6f:6f:12:a0:5c:3d:55:e4:01:e7: ce:2d:63:5c:ed:44:e2:4c:88:db:00:02:86:1d:1b:15:99:19: e2:b9:70:14:02:88:af:4a:07:c8:ff:ec:cf:06:93:86:a4:17: 01:82:f2:c1:9c:f5:b0:67:b1:ae:81:09:ec:57:be:3e:ee:5b: a2:b5:25:5a:c5:cd:73:5d:14:30:7a:13:47:39:67:d9:03:d9: 76:dd:62:2b:bd:af:e4:7e:08:30:cd:70:9b:c5:1d:29:81:01: 43:08:85:85:03:29:0b:5a:08:5c:6f:95:e8:24:8b:36:87:cb: 8a:12:66:b7:4c:db:ef:05:d5:db:1a:65:63:8b:8e:27:15:76: b1:53:a4:6f:0c:98:56:4e:ba:08:8f:21:c4:38:c9:86:cb:df: 3f:c9:d0:fd:fe:e4:0b:a2:5b:e5:3e:fd:ed:bf:7d:ff:f4:4f: cc:0a:21:17:69:db:78:e6:86:b8:34:fd:44:f4:b1:46:73:48: 0f:fe:03:05:c5:fe:68:11:e9:1f:bf:78:ed:92:6a:c9:5e:5b: 1e:e3:fa:8b:f5:fe:95:ba:5c:e0:47:3d:e5:68:8c:26:97:20: da:3a:d6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvTjp0woXqAVtj2aqApLEk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyODliNmE4YmZhYWM1YzhjMDlhNDhjMDQyODE5ZGZjNWVh NDUxMDQwHhcNMjYwMTE5MDAwMTM3WhcNMjYwMTIwMDAwMTM3WjAzMTEwLwYDVQQD EyhmYTM4Yjg5M2JmZGY1MTJkZjM0MzI4YWJiNzFiNmRiMTY4N2YyNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHy8jWK+cN2dsDBdEr2PD+IwccDS iRm0HN+LRTL277bOx6SNd7Zc0j9R8LDX7Z+af+C8KAQ8DHZx/a21DIoTlWHURmG6 rd8BT/UeyrCYsRJnu5HC2p3VDdDDaGUzzlmv4e9pPzyjyQ8WOwTQjFUqcZVUVLLE Yba4OfYVmSJIAiBNcwY+9bDHvpO3b9Nz2o5CnfVpUK8l3OVBlaPOqTW0yU6np6/X tA6n0wL6nVfUM+X97R+8J8rx/QY74JHPkYM5wEeac+RCNK3GhG3j7JBErXn4TdlV TcIPetj6duoE4+iQac8Uiz4MMKthp2z5nOJxZ09qmI2YNXoatFmVd6aRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo4uJO/31Et80Moq7cbbbFofyQzMB8GA1UdIwQY MBaAFFKJtqi/qsXIwJpIwEKBnfxepFEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMt YjJkYTk3N2U0MDdkLzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMtYjJkYTk3N2U0MDdk LzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhcsDTfe HLPBcI8bfAyBu0ww1NNoEvz/V+1vbxKgXD1V5AHnzi1jXO1E4kyI2wAChh0bFZkZ 4rlwFAKIr0oHyP/szwaThqQXAYLywZz1sGexroEJ7Fe+Pu5borUlWsXNc10UMHoT Rzln2QPZdt1iK72v5H4IMM1wm8UdKYEBQwiFhQMpC1oIXG+V6CSLNofLihJmt0zb 7wXV2xplY4uOJxV2sVOkbwyYVk66CI8hxDjJhsvfP8nQ/f7kC6Jb5T797b99//RP zAohF2nbeOaGuDT9RPSxRnNID/4DBcX+aBHpH7947ZJqyV5bHuP6i/X+lbpc4Ec9 5WiMJpcg2jrWFw== -----END CERTIFICATE-----Generated at Mon Jan 19 06:37:47 2026 by rpki-client