This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: AFtkeQQc/l7ViPWyU4N8BnaLtmx0lFuS9DtCP4q2jQs= Subject key identifier: 17:D0:43:04:24:E4:53:BF:5C:16:C4:0E:F7:20:E5:92:25:E4:E1:7D Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019BD5B4211789513092F78AE86D384A9908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1471 Signing time: Mon 19 Jan 2026 10:01:50 +0000 Manifest this update: Mon 19 Jan 2026 10:01:50 +0000 Manifest next update: Tue 20 Jan 2026 10:01:50 +0000 Files and hashes: 1: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 2: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 3: 6STXpyp9qGkZY6wdqAlUte4FX2k.roa (hash: h/xbukG0IeP954/751eJeDYhad1+QRH3XUPVSkfy640=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 7: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 8: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 9: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 10: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 11: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 12: QLLq3_7q5uUt7ipkpQL0iFrZcwE.roa (hash: ix8UNlXwntzVUKkNrdwMiCBgS77GVr+qjV/KIZeeGps=) 13: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: xwjM3LkpLCUeNlS0ps1YflWti24nN2m5LR2869ULXUo=) 14: VxN6JcI_Al-4lvATIRpsV8BDi8o.roa (hash: DRF2TKeetuuj0lnAt0xVtWt2l+8JadQL6Cr7oW/zWzc=) 15: WXitulZE6XZAWLN9EH7AUrKlJFA.roa (hash: WUGgSZ27pj+bCnK3yWkRpPdHgH/Lrga3crrfT495xGI=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: _XErDvpFkzUya7trCS2vLYDjQlo.roa (hash: Yns1NKHmZhWUbTECwAzkHx9Sc1oUfRWEA2tFejiuDu0=) 18: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (hash: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=) 19: dKCh7yZe8FNLO1VuBvygQCSKwoo.roa (hash: vyQvKYy/XVn4iGMkDt97MOyHZ4JXy9RdrZJ5+cuKD4A=) 20: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 21: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 23: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) 24: wsRgR45KaT49poTA_W1Ls5MLbfs.roa (hash: ViM4U6kU9YALqeWbdS/cNkJpeVULZz246+oAFPxJ4Yc=) 25: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:21:17:89:51:30:92:f7:8a:e8:6d:38:4a:99:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 19 10:01:50 2026 GMT Not After : Jan 20 10:01:50 2026 GMT Subject: CN=17d0430424e453bf5c16c40ef720e59225e4e17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:e6:08:c3:6e:97:41:18:ea:f8:0e:02:ac: 8f:7e:e1:77:6d:ac:dd:8b:ab:f6:49:9e:6c:99:f7: 53:52:4b:4f:1a:c5:f6:48:87:2f:f9:08:ca:ce:a7: 09:a2:3e:c0:99:60:9d:fd:b3:06:2b:62:79:74:e7: 71:70:65:6f:31:a2:2f:1d:d3:4c:11:62:39:65:3b: 4e:ac:8c:e2:0f:83:c4:e4:34:69:ae:96:73:70:33: 3a:b3:27:07:27:0b:e6:c9:83:5e:3a:8e:b0:12:86: bf:18:79:65:37:eb:12:1a:62:c9:12:d2:09:60:78: 09:1d:60:c8:f4:60:1c:93:f9:fe:62:d8:b0:be:35: d3:e0:6a:f6:5c:16:ab:67:56:7d:e3:6b:54:e6:e6: fc:18:76:e9:0c:8f:52:86:e9:c9:10:d0:63:03:5e: 2b:40:ae:23:ea:f3:22:d2:66:35:8c:b4:c0:c9:42: 67:e3:a2:20:4d:03:22:b7:76:68:e9:23:b1:06:fd: 25:5e:f3:2d:c1:20:69:df:0e:24:59:eb:33:83:7e: 3b:59:61:b0:04:af:1e:2d:cc:3e:79:3d:55:45:1e: e8:27:b7:95:a9:63:b0:24:43:b4:74:7d:63:81:f7: ef:5f:7f:d2:dc:0e:6e:1b:e7:28:95:f9:9d:b0:83: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:43:04:24:E4:53:BF:5C:16:C4:0E:F7:20:E5:92:25:E4:E1:7D X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:cf:4a:c9:47:6b:31:f6:5d:56:14:1c:9c:48:41:30:a5: 7c:e5:f6:9d:39:a0:e1:a4:08:03:36:aa:df:b7:66:7e:bf:e2: 6e:41:70:08:40:9e:85:32:b9:ad:ee:19:94:e1:b4:b1:16:0c: c3:b1:b0:8b:60:ad:b3:22:cf:d6:b3:ee:d7:9d:92:b8:9f:5f: 09:91:be:00:68:fc:16:e9:f0:45:2e:13:1a:a1:ab:59:ef:c4: af:ba:a7:49:9e:18:84:83:5a:d3:53:a5:3f:9e:01:fc:15:21: 93:e1:10:12:08:87:f4:3f:a6:2f:70:15:b9:0a:55:31:63:44: c2:f4:67:67:6c:d4:0d:43:f1:6f:47:8b:77:0a:62:65:03:80: 50:24:a4:72:d9:f7:26:b7:95:ec:d1:c2:11:50:72:16:03:23: 04:cf:80:4b:f2:68:cb:e9:db:36:a3:6f:65:c1:9b:58:7f:59: 62:ef:a1:a0:e9:14:fd:c2:5e:cb:c6:b6:35:50:54:d6:3b:52: 9a:0e:65:dd:2d:5b:b8:8c:c6:74:e7:68:91:16:5d:40:10:2e: a9:4f:86:4a:40:7a:15:29:87:41:3d:49:c2:ce:e6:6a:56:fb: 4d:4d:80:b4:8b:9a:99:91:39:65:63:78:cb:d3:87:7e:d3:5e: 96:f7:95:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVtCEXiVEwkveK6G04SpkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTE5MTAwMTUwWhcNMjYwMTIwMTAwMTUwWjAzMTEwLwYDVQQD EygxN2QwNDMwNDI0ZTQ1M2JmNWMxNmM0MGVmNzIwZTU5MjI1ZTRlMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxzmCMNul0EY6vgOAqyPfuF3bazd i6v2SZ5smfdTUktPGsX2SIcv+QjKzqcJoj7AmWCd/bMGK2J5dOdxcGVvMaIvHdNM EWI5ZTtOrIziD4PE5DRprpZzcDM6sycHJwvmyYNeOo6wEoa/GHllN+sSGmLJEtIJ YHgJHWDI9GAck/n+YtiwvjXT4Gr2XBarZ1Z942tU5ub8GHbpDI9ShunJENBjA14r QK4j6vMi0mY1jLTAyUJn46IgTQMit3Zo6SOxBv0lXvMtwSBp3w4kWeszg347WWGw BK8eLcw+eT1VRR7oJ7eVqWOwJEO0dH1jgffvX3/S3A5uG+colfmdsIMMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfQQwQk5FO/XBbEDvcg5ZIl5OF9MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofzPSslH azH2XVYUHJxIQTClfOX2nTmg4aQIAzaq37dmfr/ibkFwCECehTK5re4ZlOG0sRYM w7Gwi2CtsyLP1rPu152SuJ9fCZG+AGj8FunwRS4TGqGrWe/Er7qnSZ4YhINa01Ol P54B/BUhk+EQEgiH9D+mL3AVuQpVMWNEwvRnZ2zUDUPxb0eLdwpiZQOAUCSkctn3 JreV7NHCEVByFgMjBM+AS/Joy+nbNqNvZcGbWH9ZYu+hoOkU/cJey8a2NVBU1jtS mg5l3S1buIzGdOdokRZdQBAuqU+GSkB6FSmHQT1Jws7malb7TU2AtIuamZE5ZWN4 y9OHftNelveVGw== -----END CERTIFICATE-----Generated at Mon Jan 19 12:48:36 2026 by rpki-client