This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json) Hash identifier: 3lPKboD6E3FK+kRs60J3fY5qBeyyD9rvbqPyANjiOcM= Subject key identifier: E1:C7:95:6A:3C:71:1D:2E:B2:47:57:BF:7D:41:7F:1A:19:EC:18:06 Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414 Certificate serial: 019BFA64F188C7B223B3073E9D79E673CE0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft Manifest number: F2 Signing time: Mon 26 Jan 2026 13:01:17 +0000 Manifest this update: Mon 26 Jan 2026 13:01:17 +0000 Manifest next update: Tue 27 Jan 2026 13:01:17 +0000 Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: BNSm1+Uo6xeQDl/2NKN1Nk/qP1SoMrvoPy+vivpGTvo=) 2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:f1:88:c7:b2:23:b3:07:3e:9d:79:e6:73:ce:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414 Validity Not Before: Jan 26 13:01:17 2026 GMT Not After : Jan 27 13:01:17 2026 GMT Subject: CN=e1c7956a3c711d2eb24757bf7d417f1a19ec1806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:a3:3d:5d:89:30:09:ef:d4:b9:c2:0d:0c: c6:54:eb:70:f0:32:28:25:2a:65:43:de:d4:f0:f9: 67:29:10:3d:b0:97:8f:00:43:e2:d8:af:99:99:ae: 06:5a:ea:cf:e3:7a:ac:40:be:2a:f0:15:2b:f4:fc: 78:66:e8:52:2e:f3:37:41:53:d8:9d:9d:58:13:d9: 4b:2c:c6:01:b0:4d:55:d7:58:80:28:2d:eb:54:82: 4c:3f:e0:4b:ed:87:07:5f:fd:2e:4e:7a:e9:ed:37: e6:b9:a4:51:78:80:ed:54:7e:2e:b1:ed:32:7b:fb: e0:ba:86:a8:6b:12:65:88:96:c1:72:7b:fa:c1:55: 43:fa:66:68:3e:15:76:62:e2:31:93:43:63:21:81: 13:f7:32:91:96:3d:62:00:e9:39:03:1e:43:be:a5: be:ed:58:ff:0c:68:d7:de:60:d9:bc:48:32:bc:0b: 1f:0f:0d:c8:74:76:06:09:ed:86:2c:12:e9:0d:e4: e8:e7:c6:9d:75:91:f4:cc:2b:ea:2f:b5:48:36:4e: 51:ea:e5:e3:f0:c7:09:ac:b4:78:c6:15:9e:70:76: 76:3d:28:a6:53:c5:a9:93:f2:8f:6b:cd:60:f9:f9: 21:80:74:c0:05:6c:f3:7e:fc:d3:9c:44:04:8d:25: 62:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:95:6A:3C:71:1D:2E:B2:47:57:BF:7D:41:7F:1A:19:EC:18:06 X509v3 Authority Key Identifier: keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3b:55:c6:59:b3:b6:16:4f:5b:e9:72:50:54:25:0e:55:55: b0:9c:7f:84:d6:02:95:56:81:d0:f5:a8:cf:65:64:d2:2e:c2: 7c:35:1a:2c:cb:f7:15:d6:e8:f1:c4:a5:7b:be:ef:c3:97:3b: af:0f:9d:ad:06:61:85:d6:b6:53:10:4d:82:87:13:80:75:20: 48:d4:42:da:3e:c7:9c:91:77:00:00:78:1a:60:5e:07:62:dc: f2:95:f4:af:aa:9f:e9:23:9c:d4:fc:50:cc:4f:9a:c8:52:f0: cb:ad:b6:ec:98:7b:ba:88:43:64:ff:5d:61:24:68:18:dd:7a: be:9f:97:06:56:84:27:fb:c3:50:f1:c1:ee:4e:e7:d4:c2:bb: b0:07:6c:4a:3e:40:4d:2f:b5:25:a9:9d:7a:40:6a:a1:90:8c: 1a:4f:43:06:78:63:73:8f:8c:4f:d7:72:9c:dc:67:ea:ee:6a: cc:78:32:97:43:44:71:60:65:ec:9f:24:07:9f:f5:e2:70:bc: 7e:67:88:46:14:80:82:a5:2b:68:05:00:88:8c:24:1f:0f:ef: 8f:15:58:53:de:a8:0d:bf:82:e3:1f:1c:8d:24:66:b8:cc:13: 3d:34:ef:db:2c:ae:fb:75:43:5f:46:96:33:a4:2c:66:ac:73: fa:1b:94:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZPGIx7Ijswc+nXnmc84KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYjBlNzE1NzE0N2E5MGNlMzc0NjBiNzE5Y2I3NjA2OTRh YjU0MTQwHhcNMjYwMTI2MTMwMTE3WhcNMjYwMTI3MTMwMTE3WjAzMTEwLwYDVQQD EyhlMWM3OTU2YTNjNzExZDJlYjI0NzU3YmY3ZDQxN2YxYTE5ZWMxODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9CjPV2JMAnv1LnCDQzGVOtw8DIo JSplQ97U8PlnKRA9sJePAEPi2K+Zma4GWurP43qsQL4q8BUr9Px4ZuhSLvM3QVPY nZ1YE9lLLMYBsE1V11iAKC3rVIJMP+BL7YcHX/0uTnrp7TfmuaRReIDtVH4use0y e/vguoaoaxJliJbBcnv6wVVD+mZoPhV2YuIxk0NjIYET9zKRlj1iAOk5Ax5DvqW+ 7Vj/DGjX3mDZvEgyvAsfDw3IdHYGCe2GLBLpDeTo58addZH0zCvqL7VINk5R6uXj 8McJrLR4xhWecHZ2PSimU8Wpk/KPa81g+fkhgHTABWzzfvzTnEQEjSVi4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHHlWo8cR0uskdXv31BfxoZ7BgGMB8GA1UdIwQY MBaAFFCw5xVxR6kM43RgtxnLdgaUq1QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYt MTRjOTE5YWQ4NzY4LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYtMTRjOTE5YWQ4NzY4 LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARztVxlmz thZPW+lyUFQlDlVVsJx/hNYClVaB0PWoz2Vk0i7CfDUaLMv3Fdbo8cSle77vw5c7 rw+drQZhhda2UxBNgocTgHUgSNRC2j7HnJF3AAB4GmBeB2Lc8pX0r6qf6SOc1PxQ zE+ayFLwy6227Jh7uohDZP9dYSRoGN16vp+XBlaEJ/vDUPHB7k7n1MK7sAdsSj5A TS+1JamdekBqoZCMGk9DBnhjc4+MT9dynNxn6u5qzHgyl0NEcWBl7J8kB5/14nC8 fmeIRhSAgqUraAUAiIwkHw/vjxVYU96oDb+C4x8cjSRmuMwTPTTv2yyu+3VDX0aW M6QsZqxz+huUrw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:27:13 2026 by rpki-client