This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json) Hash identifier: vGbFmSpB2gOcSlU+WlT3HiiH/bRWPRaQEq/ujgIUI9k= Subject key identifier: 4B:67:17:3C:3F:06:94:09:B0:EF:36:A0:FF:3F:42:B0:32:05:D9:CF Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Certificate serial: 019C01E7AAC4D4789E301A5370AE4C287B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft Manifest number: 03FE Signing time: Wed 28 Jan 2026 00:01:25 +0000 Manifest this update: Wed 28 Jan 2026 00:01:25 +0000 Manifest next update: Thu 29 Jan 2026 00:01:25 +0000 Files and hashes: 1: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (hash: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o=) 2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: MkvL0AucRlblbNAq/Tkg3WJJm5vaGr/svd65PtnCJK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:e7:aa:c4:d4:78:9e:30:1a:53:70:ae:4c:28:7b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f Validity Not Before: Jan 28 00:01:25 2026 GMT Not After : Jan 29 00:01:25 2026 GMT Subject: CN=4b67173c3f069409b0ef36a0ff3f42b03205d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:d0:36:f6:e5:d5:d6:34:97:6b:95:72:c1: 1e:72:91:48:8f:a1:ca:2e:e5:5b:6f:0c:03:1d:f2: 7c:0b:e0:3e:e9:41:59:dc:2c:b7:1c:b1:a4:60:ad: 1d:9b:af:13:45:e7:41:66:b4:d9:8b:10:1b:24:7a: 0d:bc:23:21:58:7b:1f:03:08:75:4c:f5:ab:c4:7a: 10:a4:f6:f4:2b:f2:c4:2c:c9:81:d2:11:cb:3d:5b: a7:68:d5:34:65:0f:bc:6d:78:aa:bd:34:82:0d:d4: 0c:c1:1d:43:e2:41:8c:bb:1c:30:ed:be:97:46:65: 0c:7d:8b:d3:c3:69:e3:0c:1d:2d:c2:a8:25:1e:6f: 39:06:42:33:92:1f:9c:80:68:f6:d6:a2:5e:95:33: e7:b2:9c:9d:ba:80:78:5a:d3:77:b4:12:1e:e2:b9: 1f:6c:77:9f:33:18:49:ea:be:26:f6:60:a7:af:d2: 0b:f5:9f:e5:b4:ed:35:56:5d:63:bd:a2:5c:11:36: 58:74:46:33:bc:99:43:39:49:a3:b0:df:1a:50:d5: 65:09:ba:b1:98:34:bd:e0:07:87:45:e4:c2:ce:27: 2c:72:4b:cf:2b:77:c4:66:1d:1e:a9:e0:60:e5:13: 6f:3f:55:3d:08:94:af:56:63:3b:95:45:a6:6e:a4: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:67:17:3C:3F:06:94:09:B0:EF:36:A0:FF:3F:42:B0:32:05:D9:CF X509v3 Authority Key Identifier: keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a6:07:09:d0:c3:40:7d:70:20:12:da:58:6a:db:10:d4:a0: cf:3d:20:cc:62:25:52:5b:10:10:48:ef:7a:23:26:dd:b2:8c: 1d:21:f0:9a:33:ba:65:90:99:8f:d9:21:a5:17:92:a5:9c:5a: a3:61:81:d8:56:82:ab:6c:c9:9c:c0:65:5a:bc:e8:75:15:af: ea:b0:9c:1d:e6:9d:f9:09:0e:cc:70:3d:bb:ef:18:19:cc:88: 17:a5:70:b0:8d:da:ff:9e:e7:53:53:31:3d:47:bf:42:87:f1: 68:35:b8:63:61:82:5a:96:7e:16:8a:ef:4c:a0:59:70:43:cf: 4d:18:54:9e:02:e8:2f:a3:e3:c2:80:b3:76:72:82:94:f5:8b: d9:5f:fc:eb:85:e7:32:67:75:38:7a:cf:ca:36:02:0a:da:0a: 1e:3c:84:18:d7:ec:34:62:bf:42:da:43:0e:a2:3f:17:66:11: ae:67:cb:a5:4e:9b:76:33:ec:8b:30:d0:32:40:2d:08:ac:80: 97:fd:24:a9:26:16:c1:9d:c1:dc:c6:37:c9:36:15:d3:b8:32: 67:fd:4f:f5:c2:9a:45:71:5a:3f:07:f7:bc:e8:1a:bc:ff:26: 46:3c:57:41:fa:7f:6f:14:5d:57:61:24:68:9d:25:25:ab:f3: 00:62:bb:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwB56rE1HieMBpTcK5MKHuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj ZDFmOGYwHhcNMjYwMTI4MDAwMTI1WhcNMjYwMTI5MDAwMTI1WjAzMTEwLwYDVQQD Eyg0YjY3MTczYzNmMDY5NDA5YjBlZjM2YTBmZjNmNDJiMDMyMDVkOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDjQNvbl1dY0l2uVcsEecpFIj6HK LuVbbwwDHfJ8C+A+6UFZ3Cy3HLGkYK0dm68TRedBZrTZixAbJHoNvCMhWHsfAwh1 TPWrxHoQpPb0K/LELMmB0hHLPVunaNU0ZQ+8bXiqvTSCDdQMwR1D4kGMuxww7b6X RmUMfYvTw2njDB0twqglHm85BkIzkh+cgGj21qJelTPnspyduoB4WtN3tBIe4rkf bHefMxhJ6r4m9mCnr9IL9Z/ltO01Vl1jvaJcETZYdEYzvJlDOUmjsN8aUNVlCbqx mDS94AeHReTCzicsckvPK3fEZh0eqeBg5RNvP1U9CJSvVmM7lUWmbqRaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtnFzw/BpQJsO82oP8/QrAyBdnPMB8GA1UdIwQY MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqYHCdDD QH1wIBLaWGrbENSgzz0gzGIlUlsQEEjveiMm3bKMHSHwmjO6ZZCZj9khpReSpZxa o2GB2FaCq2zJnMBlWrzodRWv6rCcHead+QkOzHA9u+8YGcyIF6VwsI3a/57nU1Mx PUe/QofxaDW4Y2GCWpZ+ForvTKBZcEPPTRhUngLoL6PjwoCzdnKClPWL2V/864Xn Mmd1OHrPyjYCCtoKHjyEGNfsNGK/QtpDDqI/F2YRrmfLpU6bdjPsizDQMkAtCKyA l/0kqSYWwZ3B3MY3yTYV07gyZ/1P9cKaRXFaPwf3vOgavP8mRjxXQfp/bxRdV2Ek aJ0lJavzAGK7WA== -----END CERTIFICATE-----Generated at Wed Jan 28 06:24:01 2026 by rpki-client