This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json) Hash identifier: 448ir6radI4/8/zRGc0LpNx5k10naYL699rSccgzE3o= Subject key identifier: DB:03:27:16:CF:D3:37:01:93:9F:AB:3C:10:53:9A:E6:B1:D6:05:FF Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Certificate serial: 019BFD65EE57E7164788E3024E086331D675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft Manifest number: 17FE Signing time: Tue 27 Jan 2026 03:01:14 +0000 Manifest this update: Tue 27 Jan 2026 03:01:14 +0000 Manifest next update: Wed 28 Jan 2026 03:01:14 +0000 Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: dWpoJsUlxxTw2t0obd3vWUraH6dtqomrIX2fhGMSphU=) 2: 9L-IlJy1MALfVsDOjOGM0zg9wIs.roa (hash: 25Zaxi4I4wwSZ07o8zwt446xfOQvwC6RY9wELrAw/sQ=) 3: lJu2Ar4sGLPORXpgczklcY8qF_E.roa (hash: JhRPmgHPgILgAzd5XOTBcsJ31hAepEsimX60PARvpIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:ee:57:e7:16:47:88:e3:02:4e:08:63:31:d6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Validity Not Before: Jan 27 03:01:14 2026 GMT Not After : Jan 28 03:01:14 2026 GMT Subject: CN=db032716cfd33701939fab3c10539ae6b1d605ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:4b:78:91:63:bd:84:c2:df:d7:f2:85:01: ab:0d:ee:50:01:5e:5c:dd:7b:98:36:80:6c:37:a6: 07:cc:0e:15:db:34:29:60:99:d5:d2:c9:3a:7a:ae: dd:de:69:42:5f:04:47:1c:ad:a5:19:09:0b:12:69: ff:5e:cb:67:5a:68:c0:f3:82:61:f6:b9:a3:3b:ec: 52:e9:14:6e:49:eb:0f:eb:2d:5c:2b:bd:86:8b:22: 93:1c:7c:bb:43:e7:5e:ef:68:0d:d8:da:d5:35:fb: 71:c6:7d:df:41:0d:e2:17:29:95:02:28:40:52:d7: f0:48:e0:ef:ff:62:38:d5:fc:8c:1d:f5:cf:45:ba: 94:24:61:99:11:40:3a:a3:a2:3f:58:ac:58:5f:2b: 59:89:3d:6a:eb:01:ad:dd:d3:aa:e8:db:9b:13:e2: a2:9f:37:bf:a7:c8:b9:37:92:41:60:80:c6:77:e4: ba:71:0b:a6:fd:77:49:38:ef:56:ef:25:c1:dd:56: c5:6e:a0:54:ef:7f:fa:e1:26:a7:d2:1b:cc:b9:41: bb:73:c3:60:01:97:d3:f7:5d:20:d0:7e:63:62:71: 4d:af:4d:86:ba:5e:74:96:78:07:3c:37:9a:66:ba: 55:d1:88:17:14:7c:87:2c:77:b1:11:58:83:e0:c8: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:03:27:16:CF:D3:37:01:93:9F:AB:3C:10:53:9A:E6:B1:D6:05:FF X509v3 Authority Key Identifier: keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:62:1b:8c:3b:c9:ae:ef:0f:26:7c:7b:d5:c0:85:ec:30:a1: 02:84:4d:8c:98:2d:fa:d2:6d:16:a5:1e:33:ab:ec:84:29:8d: 4e:dc:27:63:02:1c:9a:e7:95:72:86:17:69:dd:a7:1d:d9:11: 97:67:b5:1c:b8:5e:3c:aa:a2:4b:1b:29:df:23:09:bd:c1:fd: 2d:50:cc:33:09:d5:c1:bf:4e:13:cf:84:9d:b9:57:46:79:3f: 6d:5c:6e:2f:87:b8:a9:b4:8c:a9:89:c4:51:f2:8c:9c:22:0e: b5:6b:f4:4c:7a:87:b6:10:2a:8f:c0:79:a4:e9:4b:fd:07:7e: e3:30:2c:98:9e:8e:01:8d:47:ea:e9:32:ec:3d:6a:fd:14:d2: e8:9a:d9:64:bb:30:f3:e0:ce:02:8b:07:d0:60:db:1a:c4:c0: f1:70:39:44:a1:e7:c0:46:e3:28:3a:0d:2c:2c:6f:c1:91:28: 52:72:ab:99:f6:17:6e:48:50:48:45:1e:0c:e7:60:e7:f6:81: eb:8f:f4:b9:1d:f7:14:ee:85:06:6c:73:33:f7:d3:8f:8d:54: 66:1d:63:50:45:0b:6e:c8:d1:e8:80:d5:fc:7c:88:b7:94:9f: 80:f3:2b:ff:ba:49:95:ef:d8:f7:32:3f:04:39:26:0a:f1:e3: 0b:57:8d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Ze5X5xZHiOMCTghjMdZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh ZDY4NjMwHhcNMjYwMTI3MDMwMTE0WhcNMjYwMTI4MDMwMTE0WjAzMTEwLwYDVQQD EyhkYjAzMjcxNmNmZDMzNzAxOTM5ZmFiM2MxMDUzOWFlNmIxZDYwNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhLeJFjvYTC39fyhQGrDe5QAV5c 3XuYNoBsN6YHzA4V2zQpYJnV0sk6eq7d3mlCXwRHHK2lGQkLEmn/XstnWmjA84Jh 9rmjO+xS6RRuSesP6y1cK72GiyKTHHy7Q+de72gN2NrVNftxxn3fQQ3iFymVAihA UtfwSODv/2I41fyMHfXPRbqUJGGZEUA6o6I/WKxYXytZiT1q6wGt3dOq6NubE+Ki nze/p8i5N5JBYIDGd+S6cQum/XdJOO9W7yXB3VbFbqBU73/64San0hvMuUG7c8Ng AZfT910g0H5jYnFNr02Gul50lngHPDeaZrpV0YgXFHyHLHexEViD4MgF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsDJxbP0zcBk5+rPBBTmuax1gX/MB8GA1UdIwQY MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2IbjDvJ ru8PJnx71cCF7DChAoRNjJgt+tJtFqUeM6vshCmNTtwnYwIcmueVcoYXad2nHdkR l2e1HLhePKqiSxsp3yMJvcH9LVDMMwnVwb9OE8+EnblXRnk/bVxuL4e4qbSMqYnE UfKMnCIOtWv0THqHthAqj8B5pOlL/Qd+4zAsmJ6OAY1H6uky7D1q/RTS6JrZZLsw 8+DOAosH0GDbGsTA8XA5RKHnwEbjKDoNLCxvwZEoUnKrmfYXbkhQSEUeDOdg5/aB 64/0uR33FO6FBmxzM/fTj41UZh1jUEULbsjR6IDV/HyIt5SfgPMr/7pJle/Y9zI/ BDkmCvHjC1eNfQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:41 2026 by rpki-client