This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json) Hash identifier: B5AjwsljPeF+0vfm/kS8rwaIBqZXJ2djpSNpLgokyhU= Subject key identifier: 7F:C7:A8:4D:EF:B3:06:DE:B7:73:F7:97:4E:87:E9:CD:BF:1F:B7:20 Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1 Certificate serial: 019BFCC14A6091BCFD109DFFC19163416A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft Manifest number: 0FF7 Signing time: Tue 27 Jan 2026 00:01:24 +0000 Manifest this update: Tue 27 Jan 2026 00:01:24 +0000 Manifest next update: Wed 28 Jan 2026 00:01:24 +0000 Files and hashes: 1: KLsDN9QMzfxMvUSuh7NfomxLa3w.roa (hash: 4IvAbXAU0XecGx56bdqz6414molY8HrQxbFV1Syz69M=) 2: rKe-qU86sx7z_-wI2lykyZb70MI.roa (hash: VQ9NSMubDnrlXOxOJ6bt8ANdIsUd6R8dQJQbwjAypQo=) 3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: 25vBXyE44dG8vot2Gm+2D/aBJITGxCrlH8w1GqjElMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:4a:60:91:bc:fd:10:9d:ff:c1:91:63:41:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1 Validity Not Before: Jan 27 00:01:24 2026 GMT Not After : Jan 28 00:01:24 2026 GMT Subject: CN=7fc7a84defb306deb773f7974e87e9cdbf1fb720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:73:08:ae:ad:7b:11:0d:25:84:ee:bc:19: a3:ea:bb:2a:a6:03:53:18:dc:ec:4e:35:6b:51:6b: 70:49:f8:c1:d8:6c:c8:ff:c4:f3:12:f2:1b:d2:14: ae:eb:23:85:c2:82:d6:dc:3b:2e:46:90:39:09:c1: 3e:ba:82:16:62:c5:bc:6a:d9:4c:9b:40:05:d1:aa: ee:92:70:13:7d:f3:f6:a8:26:33:0a:74:ab:87:6d: 9e:dc:c0:ec:b4:78:bb:da:3b:81:56:10:d6:a2:44: ed:a6:39:cd:d2:6b:61:c8:a6:b9:43:3c:98:e5:95: 09:0d:48:5e:65:94:33:e6:82:fb:f7:e6:69:39:52: 29:0a:9b:84:72:02:f9:19:a4:d9:f6:70:ad:4a:ca: 03:fb:76:76:51:25:9b:aa:c7:a5:a3:9a:d9:73:a4: 2c:e8:d2:17:95:e0:79:d6:e5:35:17:bc:f6:34:eb: fd:3b:74:3a:c2:a2:04:2c:53:99:82:7a:07:8f:dd: 85:86:2f:20:cb:f9:69:57:8c:ea:9f:1b:4e:19:d4: 3f:83:12:b2:a1:0c:09:3e:44:db:27:38:e6:09:a8: d7:11:52:c3:a2:2a:fe:ac:4c:1b:87:28:9e:ab:c0: aa:82:3a:14:e5:7c:81:f8:94:fb:34:28:18:c1:cd: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:A8:4D:EF:B3:06:DE:B7:73:F7:97:4E:87:E9:CD:BF:1F:B7:20 X509v3 Authority Key Identifier: keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1d:4c:2a:dc:b3:48:29:47:69:8d:18:56:8c:8c:51:9a:57: a7:58:59:29:de:fa:65:7a:6a:6e:15:c1:41:84:e1:f7:a2:ff: 5b:f8:aa:af:2b:93:50:28:22:75:e8:f8:07:1d:ae:90:97:9b: eb:ac:41:cf:4f:ca:28:68:20:9b:ec:eb:b9:3c:42:01:81:82: e0:ee:4e:47:bf:72:0e:d0:62:ea:47:80:9e:f1:3f:0c:ba:85: 3b:5b:4c:a7:53:fd:ae:af:03:87:a6:2a:35:8c:ee:93:80:da: ad:d4:58:41:9e:7a:38:24:d4:e8:9e:2d:06:da:1c:c8:1b:6c: b7:35:fa:29:91:19:7b:16:2b:59:31:6a:47:6a:02:3d:0e:ca: 3b:85:2d:f7:9d:c8:5f:f3:33:06:fc:68:8b:e8:15:8d:35:e0: 3e:cd:af:ce:ad:86:70:85:97:bb:8f:90:26:69:11:a5:05:70: bd:cc:d5:37:87:d1:51:54:08:6d:96:eb:4d:0d:60:27:3f:d2: bc:1a:7f:d3:04:e1:a7:80:dd:8e:4e:96:d6:51:fe:4b:85:ed: db:bb:1c:e2:a1:78:2c:74:83:7e:5c:9f:1f:f7:12:34:f1:3b: 32:f8:25:03:5e:81:e0:02:20:01:d9:3f:e9:ca:40:93:61:eb: 97:f8:3e:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wUpgkbz9EJ3/wZFjQWpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTIxM2RmOTczMjk1NTZkNjA4YjE1MGYwM2M0ZWU3NWZi ZDk4YzEwHhcNMjYwMTI3MDAwMTI0WhcNMjYwMTI4MDAwMTI0WjAzMTEwLwYDVQQD Eyg3ZmM3YTg0ZGVmYjMwNmRlYjc3M2Y3OTc0ZTg3ZTljZGJmMWZiNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBzCK6texENJYTuvBmj6rsqpgNT GNzsTjVrUWtwSfjB2GzI/8TzEvIb0hSu6yOFwoLW3DsuRpA5CcE+uoIWYsW8atlM m0AF0aruknATffP2qCYzCnSrh22e3MDstHi72juBVhDWokTtpjnN0mthyKa5QzyY 5ZUJDUheZZQz5oL79+ZpOVIpCpuEcgL5GaTZ9nCtSsoD+3Z2USWbqselo5rZc6Qs 6NIXleB51uU1F7z2NOv9O3Q6wqIELFOZgnoHj92Fhi8gy/lpV4zqnxtOGdQ/gxKy oQwJPkTbJzjmCajXEVLDoir+rEwbhyieq8CqgjoU5XyB+JT7NCgYwc0fQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/HqE3vswbet3P3l06H6c2/H7cgMB8GA1UdIwQY MBaAFLhSE9+XMpVW1gixUPA8TudfvZjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTkt MWZiMWU5Yzg2YjUzLzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZDgwOTgtN2ZlMC00MjJmLTkyZTktMWZiMWU5Yzg2YjUz LzEvdUZJVDM1Y3lsVmJXQ0xGUThEeE81MS05bU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlh1MKtyz SClHaY0YVoyMUZpXp1hZKd76ZXpqbhXBQYTh96L/W/iqryuTUCgidej4Bx2ukJeb 66xBz0/KKGggm+zruTxCAYGC4O5OR79yDtBi6keAnvE/DLqFO1tMp1P9rq8Dh6Yq NYzuk4DardRYQZ56OCTU6J4tBtocyBtstzX6KZEZexYrWTFqR2oCPQ7KO4Ut953I X/MzBvxoi+gVjTXgPs2vzq2GcIWXu4+QJmkRpQVwvczVN4fRUVQIbZbrTQ1gJz/S vBp/0wThp4Ddjk6W1lH+S4Xt27sc4qF4LHSDflyfH/cSNPE7MvglA16B4AIgAdk/ 6cpAk2Hrl/g+mg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:46:33 2026 by rpki-client