This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json) Hash identifier: XQLbJKPEe/1ttkR4GEwjTr3fzBL6PGx9DyBAzvkZNAg= Subject key identifier: D0:A2:C2:AD:68:18:33:98:E7:90:5B:E0:45:1F:9C:8F:70:27:4D:51 Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019BE1EEDAC05FEF10E0BEDBCF6C828EED24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft Manifest number: 0BA5 Signing time: Wed 21 Jan 2026 19:01:25 +0000 Manifest this update: Wed 21 Jan 2026 19:01:25 +0000 Manifest next update: Thu 22 Jan 2026 19:01:25 +0000 Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=) 2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=) 3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: JKhV61QzzhlotYn2n1BDi02JItQWoENpubmgsXuTg1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:ee:da:c0:5f:ef:10:e0:be:db:cf:6c:82:8e:ed:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Jan 21 19:01:25 2026 GMT Not After : Jan 22 19:01:25 2026 GMT Subject: CN=d0a2c2ad68183398e7905be0451f9c8f70274d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:30:61:a5:d6:86:3c:d5:dc:b6:92:05:2c: 42:b6:9c:6a:85:b0:f2:be:06:3c:d2:56:07:45:9c: d6:c7:13:3e:f1:b5:09:b8:cf:8e:0a:28:fb:54:cd: a7:5d:99:78:05:63:ae:1d:e8:1b:44:9b:2c:93:07: cc:63:15:7d:2f:e7:89:f4:92:43:35:07:61:2c:6b: 65:0a:07:bc:9e:a2:f6:d4:3c:45:29:2d:6c:dc:d3: 29:26:66:b3:64:b5:4c:84:48:ad:c6:92:d2:30:8b: da:e9:15:2c:db:38:13:2e:54:b8:92:42:7a:1e:ed: e5:89:e3:a2:f1:d9:e4:1a:45:7a:92:4e:a7:70:82: 92:cc:e4:9d:92:21:bc:97:c2:d4:62:d0:36:8d:26: dd:43:b4:fe:61:14:f4:ef:d1:a7:50:9f:cf:48:3d: 42:13:bb:ab:95:d3:76:69:9c:10:5b:29:17:ba:4d: 61:5a:56:9e:75:c5:b6:71:2c:74:24:e8:f0:21:52: ef:36:82:5e:50:a9:52:ab:74:fb:5e:db:31:a3:c9: e4:29:66:25:5f:f8:f3:88:64:59:43:d0:2c:1e:a0: e7:dc:92:b8:36:ef:3e:1e:99:3e:e4:f8:5a:a4:a9: 94:d4:3c:f8:1d:a1:89:66:e0:1f:6f:6a:09:b0:1c: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A2:C2:AD:68:18:33:98:E7:90:5B:E0:45:1F:9C:8F:70:27:4D:51 X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:34:c8:71:88:0a:3d:dc:80:c5:d7:73:e2:fc:a7:b3:77:cb: 35:c5:43:a6:88:ed:4c:71:85:93:ee:f9:35:6d:26:61:df:4f: 73:db:e6:56:17:20:2a:38:b1:49:0f:cb:00:36:9c:7b:28:3f: d3:8a:97:37:a4:da:12:fe:bd:38:da:9c:02:dd:30:85:e0:7a: 49:8c:59:1d:23:39:73:84:6f:02:51:e5:0a:dc:60:26:45:e7: c6:78:9e:95:bc:49:1e:42:7e:ea:a3:ac:f0:63:1d:d9:78:a0: 42:e2:c1:f9:29:8b:c5:41:26:d1:7a:42:62:b4:46:e0:92:48: b4:5c:b3:02:e0:79:1f:b9:3c:5c:29:28:3a:1c:8b:65:f3:37: c9:48:af:68:ac:18:82:6a:5d:a5:10:a8:b5:19:a6:89:1c:b7: 31:39:f3:06:0f:82:25:d0:3b:0f:6b:aa:a1:bb:1e:39:e5:ad: 90:7d:58:81:5f:c3:a8:cb:cb:df:4d:38:37:71:90:38:5e:88: 64:c8:ce:ca:d6:50:c9:de:6b:18:05:14:38:be:f8:2a:0e:05: f3:1b:f2:3c:81:b4:fd:82:39:f4:c3:be:6d:80:8b:03:fa:39: 55:14:bc:a4:2d:22:d3:a2:89:fe:5a:53:86:4a:c1:29:c7:0e: 90:90:fb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvh7trAX+8Q4L7bz2yCju0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjYwMTIxMTkwMTI1WhcNMjYwMTIyMTkwMTI1WjAzMTEwLwYDVQQD EyhkMGEyYzJhZDY4MTgzMzk4ZTc5MDViZTA0NTFmOWM4ZjcwMjc0ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMwYaXWhjzV3LaSBSxCtpxqhbDy vgY80lYHRZzWxxM+8bUJuM+OCij7VM2nXZl4BWOuHegbRJsskwfMYxV9L+eJ9JJD NQdhLGtlCge8nqL21DxFKS1s3NMpJmazZLVMhEitxpLSMIva6RUs2zgTLlS4kkJ6 Hu3lieOi8dnkGkV6kk6ncIKSzOSdkiG8l8LUYtA2jSbdQ7T+YRT079GnUJ/PSD1C E7urldN2aZwQWykXuk1hWlaedcW2cSx0JOjwIVLvNoJeUKlSq3T7Xtsxo8nkKWYl X/jziGRZQ9AsHqDn3JK4Nu8+Hpk+5PhapKmU1Dz4HaGJZuAfb2oJsBzJ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCiwq1oGDOY55Bb4EUfnI9wJ01RMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTTIcYgK PdyAxddz4vyns3fLNcVDpojtTHGFk+75NW0mYd9Pc9vmVhcgKjixSQ/LADaceyg/ 04qXN6TaEv69ONqcAt0wheB6SYxZHSM5c4RvAlHlCtxgJkXnxnielbxJHkJ+6qOs 8GMd2XigQuLB+SmLxUEm0XpCYrRG4JJItFyzAuB5H7k8XCkoOhyLZfM3yUivaKwY gmpdpRCotRmmiRy3MTnzBg+CJdA7D2uqobseOeWtkH1YgV/DqMvL3004N3GQOF6I ZMjOytZQyd5rGAUUOL74Kg4F8xvyPIG0/YI59MO+bYCLA/o5VRS8pC0i06KJ/lpT hkrBKccOkJD7Yg== -----END CERTIFICATE-----Generated at Wed Jan 21 23:40:12 2026 by rpki-client