This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft File: UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json) Hash identifier: 6H9u2p9CF19BU4c9J5NWv3TlXfeweHDc93W1pdhB6sE= Subject key identifier: 67:AC:DA:B6:65:D3:9A:A6:47:45:B3:1C:99:C6:2D:4B:8C:94:4D:D4 Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98 Certificate issuer: /CN=521aa024758d8d104e1179c55039816636afe298 Certificate serial: 019C1A9569365533EA306121BF3B048A70C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft Manifest number: 17FA Signing time: Sun 01 Feb 2026 19:02:05 +0000 Manifest this update: Sun 01 Feb 2026 19:02:05 +0000 Manifest next update: Mon 02 Feb 2026 19:02:05 +0000 Files and hashes: 1: AEJIsDrd-VO6hWNQVrQjeNSN6Ag.roa (hash: 8FBS9Nlb+Rowhs3MjT22J5QkyFI/YJdlfJfTWvJU2Dk=) 2: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: y/7sdeRXLchsHYMxOs+86IUSZeUGUGWEFryAbq2k1v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:95:69:36:55:33:ea:30:61:21:bf:3b:04:8a:70:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521aa024758d8d104e1179c55039816636afe298 Validity Not Before: Feb 1 19:02:05 2026 GMT Not After : Feb 2 19:02:05 2026 GMT Subject: CN=67acdab665d39aa64745b31c99c62d4b8c944dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:27:ad:07:9d:76:89:9f:35:18:b1:da:4b: 1f:0e:21:36:8d:8d:34:d5:ba:2c:bc:94:69:de:d0: 30:80:13:b3:da:04:40:6e:1d:b4:68:8f:01:9e:5e: 79:e5:aa:58:0a:10:e6:b8:95:98:c3:b0:fa:4b:57: be:67:c0:a9:8a:50:a4:40:cf:97:33:75:82:dd:6a: fd:92:3d:14:de:a5:00:6c:3d:c6:55:35:2b:d5:44: 6e:3a:ee:24:de:70:61:50:8a:88:34:47:f3:6f:48: b5:4f:1f:17:f2:a8:8c:59:01:ae:14:d7:9b:d6:fc: f3:cd:f8:d0:ac:77:f5:24:d6:54:50:4a:48:23:60: e3:0a:ef:5b:3b:a0:6a:22:49:63:32:c5:0d:7b:08: dc:f3:50:b4:99:b4:60:1d:b2:2d:78:6e:d6:83:41: 2e:e4:13:56:0b:4a:06:cf:08:d0:66:1a:4d:14:9f: 5c:68:39:1d:28:23:3e:8a:1a:af:d7:fd:d4:bb:50: c9:92:2a:f2:a8:02:25:bb:14:d6:fd:8c:0f:63:33: 42:77:f0:69:99:7d:f7:d2:8e:8c:0e:a6:c4:07:c9: 48:ee:b7:77:bc:0c:2e:3c:09:2c:38:a0:93:87:a4: db:a3:06:79:f9:62:ec:3e:64:0d:d2:95:ec:1f:9d: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AC:DA:B6:65:D3:9A:A6:47:45:B3:1C:99:C6:2D:4B:8C:94:4D:D4 X509v3 Authority Key Identifier: keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:44:bc:ca:9c:03:64:b2:ff:43:9f:e6:eb:04:45:b8:df:dd: 87:ee:f6:07:08:a8:d5:ae:6c:53:cb:b4:71:e6:9a:03:ca:d7: ce:d2:9e:d4:23:62:c1:0b:65:f3:80:13:83:7f:5b:1d:d0:54: 8a:43:a3:1d:a4:fb:3d:ef:5b:49:40:e1:cb:46:dc:d3:10:95: 8d:3e:b2:cb:7d:c1:3a:56:96:c7:89:14:9e:c6:f1:2c:93:df: 47:46:67:c0:c7:d9:e7:6f:11:3d:5f:91:ea:2e:e9:5d:12:db: 9a:39:72:a3:f1:e1:9a:b0:d7:f4:2d:58:f3:38:44:ec:6f:a8: 4a:6a:ba:f3:78:12:53:06:b1:87:86:24:33:0a:61:b7:0e:37: 4d:e6:d0:eb:29:cc:d3:61:87:78:cc:31:23:98:9f:d1:89:f6: 65:09:00:cc:de:16:a3:a1:d8:5c:e9:ff:9c:94:1d:28:43:49: 0c:c2:31:08:a2:f9:28:14:b6:31:53:99:d3:54:e3:bb:2e:46: 0c:61:88:72:b1:70:35:37:9f:89:2b:e8:fa:72:72:3f:06:4e: f5:10:d7:44:1d:1e:39:22:0a:08:6e:28:e9:c9:7a:2e:37:21: c2:76:a8:4a:cb:c1:04:18:39:43:bc:25:38:3b:6d:62:f6:f1: ac:8a:2f:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwalWk2VTPqMGEhvzsEinDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWFhMDI0NzU4ZDhkMTA0ZTExNzljNTUwMzk4MTY2MzZh ZmUyOTgwHhcNMjYwMjAxMTkwMjA1WhcNMjYwMjAyMTkwMjA1WjAzMTEwLwYDVQQD Eyg2N2FjZGFiNjY1ZDM5YWE2NDc0NWIzMWM5OWM2MmQ0YjhjOTQ0ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEsnrQeddomfNRix2ksfDiE2jY00 1bosvJRp3tAwgBOz2gRAbh20aI8Bnl555apYChDmuJWYw7D6S1e+Z8CpilCkQM+X M3WC3Wr9kj0U3qUAbD3GVTUr1URuOu4k3nBhUIqINEfzb0i1Tx8X8qiMWQGuFNeb 1vzzzfjQrHf1JNZUUEpII2DjCu9bO6BqIkljMsUNewjc81C0mbRgHbIteG7Wg0Eu 5BNWC0oGzwjQZhpNFJ9caDkdKCM+ihqv1/3Uu1DJkiryqAIluxTW/YwPYzNCd/Bp mX330o6MDqbEB8lI7rd3vAwuPAksOKCTh6TbowZ5+WLsPmQN0pXsH53AUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGes2rZl05qmR0WzHJnGLUuMlE3UMB8GA1UdIwQY MBaAFFIaoCR1jY0QThF5xVA5gWY2r+KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAt YzEzOGU1YzI3YzJiLzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAtYzEzOGU1YzI3YzJi LzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUS8ypwD ZLL/Q5/m6wRFuN/dh+72Bwio1a5sU8u0ceaaA8rXztKe1CNiwQtl84ATg39bHdBU ikOjHaT7Pe9bSUDhy0bc0xCVjT6yy33BOlaWx4kUnsbxLJPfR0ZnwMfZ528RPV+R 6i7pXRLbmjlyo/HhmrDX9C1Y8zhE7G+oSmq683gSUwaxh4YkMwphtw43TebQ6ynM 02GHeMwxI5if0Yn2ZQkAzN4Wo6HYXOn/nJQdKENJDMIxCKL5KBS2MVOZ01Tjuy5G DGGIcrFwNTefiSvo+nJyPwZO9RDXRB0eOSIKCG4o6cl6LjchwnaoSsvBBBg5Q7wl ODttYvbxrIov2w== -----END CERTIFICATE-----Generated at Mon Feb 2 05:02:41 2026 by rpki-client