This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json) Hash identifier: NTAPi95IrDBl8RY3r+jQgVzKSWuUeZzatZF9+N+N3xo= Subject key identifier: 93:C5:07:A3:99:FB:4C:47:C9:1A:91:69:66:47:BA:F8:AB:DA:C8:13 Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Certificate serial: 019BD08CBFE768CFE0754E8AEF48A20C6D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft Manifest number: 0137 Signing time: Sun 18 Jan 2026 10:00:43 +0000 Manifest this update: Sun 18 Jan 2026 10:00:43 +0000 Manifest next update: Mon 19 Jan 2026 10:00:43 +0000 Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: yG7xNTAbeUwR3L1q6va6NMNfABINnG6JXp7Utk+OHR4=) 2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:8c:bf:e7:68:cf:e0:75:4e:8a:ef:48:a2:0c:6d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779 Validity Not Before: Jan 18 10:00:43 2026 GMT Not After : Jan 19 10:00:43 2026 GMT Subject: CN=93c507a399fb4c47c91a91696647baf8abdac813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:52:21:d1:95:b9:30:d0:f6:6e:a7:0f:9c:11: 70:b3:e6:0d:c4:99:a3:12:54:e6:2e:45:ea:06:1d: be:52:96:f6:36:37:4c:8d:b0:4a:87:e1:e9:88:3f: 7d:6e:69:5d:88:de:96:f0:6b:42:18:00:4d:bb:80: ab:fc:0f:86:8b:f3:c5:c7:27:ab:7a:f2:74:cc:43: ae:ef:7c:e9:46:d0:ae:5b:2b:1d:4e:20:89:10:0e: 04:bb:87:78:65:23:af:1a:31:fe:5b:e7:b1:db:2a: 89:3e:2d:45:86:05:30:95:f2:36:f4:e7:48:6d:06: 50:42:1a:ac:78:02:a6:66:90:a1:d2:07:f2:84:f2: 37:b3:1e:64:92:5e:7e:99:88:a4:92:a4:df:85:e8: 6e:07:c0:8b:ec:41:7b:c6:d7:1b:90:bf:a0:12:a0: b9:57:3c:67:0b:8f:e9:c2:ff:d8:53:b3:71:c1:e2: 6f:9f:03:ec:f8:78:57:0b:9c:fc:d3:59:fe:b0:69: 0d:d8:a4:70:9c:f7:ea:4c:60:52:0c:48:32:b5:dc: 64:ab:2e:3d:9d:23:11:c5:aa:c1:36:a5:34:06:4a: b7:6a:60:eb:af:ec:aa:e4:62:31:27:e1:b0:0e:ad: ac:7c:11:ed:6f:a0:af:dc:b1:4e:ce:c7:2a:7f:35: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:07:A3:99:FB:4C:47:C9:1A:91:69:66:47:BA:F8:AB:DA:C8:13 X509v3 Authority Key Identifier: keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4d:52:21:fc:a6:2a:fd:eb:76:79:d1:85:72:00:fa:2a:a8: 83:29:b6:57:eb:6c:f9:73:8b:b9:27:bb:55:ee:5c:b5:50:87: 3b:da:02:12:dd:1a:3c:7e:02:7b:08:cb:bc:69:eb:2d:40:d5: cc:66:7e:73:19:5d:eb:84:f9:d3:7f:16:39:bd:cb:de:93:0b: 21:86:f0:21:79:fe:34:81:97:ca:1e:3a:7e:d2:ec:e9:fc:ee: f3:a4:41:0f:d5:aa:9d:ab:a8:00:42:2b:a2:51:f0:99:c9:f0: 68:2f:55:62:40:81:94:1f:13:ab:ac:05:a3:d7:cd:55:c2:00: 13:18:bd:3f:b8:41:67:54:6c:9b:dc:be:18:f3:57:3c:b1:84: fd:63:a5:32:15:cd:c7:1b:12:3a:36:4b:4b:d8:39:21:9a:af: 2e:06:d2:99:a0:6d:18:04:00:df:17:5a:66:e7:0c:ae:a8:3c: ce:5b:02:f1:d1:a0:9c:d6:1b:14:cd:b8:c9:8e:d4:67:87:45: 72:19:56:7c:22:70:3d:06:ee:bf:8c:2c:7a:d8:2a:a8:f0:3b: e2:6c:4c:3c:b8:04:57:16:cf:56:cb:14:49:97:db:81:37:7a: f5:e4:c6:b4:eb:c9:45:8e:f1:ec:d2:af:41:59:c8:de:ff:14: 42:79:12:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQjL/naM/gdU6K70iiDG1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNDZlZTQ3NTkyNzA0ODA0NWEyZDY2Y2ZiMWM5MjllZGYx YzU3NzkwHhcNMjYwMTE4MTAwMDQzWhcNMjYwMTE5MTAwMDQzWjAzMTEwLwYDVQQD Eyg5M2M1MDdhMzk5ZmI0YzQ3YzkxYTkxNjk2NjQ3YmFmOGFiZGFjODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VIh0ZW5MND2bqcPnBFws+YNxJmj ElTmLkXqBh2+Upb2NjdMjbBKh+HpiD99bmldiN6W8GtCGABNu4Cr/A+Gi/PFxyer evJ0zEOu73zpRtCuWysdTiCJEA4Eu4d4ZSOvGjH+W+ex2yqJPi1FhgUwlfI29OdI bQZQQhqseAKmZpCh0gfyhPI3sx5kkl5+mYikkqTfhehuB8CL7EF7xtcbkL+gEqC5 VzxnC4/pwv/YU7NxweJvnwPs+HhXC5z801n+sGkN2KRwnPfqTGBSDEgytdxkqy49 nSMRxarBNqU0Bkq3amDrr+yq5GIxJ+GwDq2sfBHtb6Cv3LFOzscqfzVggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPFB6OZ+0xHyRqRaWZHuvir2sgTMB8GA1UdIwQY MBaAFP1G7kdZJwSARaLWbPsckp7fHFd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAt MjFmMTVlYWY1ZWUwLzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAtMjFmMTVlYWY1ZWUw LzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU1SIfym Kv3rdnnRhXIA+iqogym2V+ts+XOLuSe7Ve5ctVCHO9oCEt0aPH4CewjLvGnrLUDV zGZ+cxld64T5038WOb3L3pMLIYbwIXn+NIGXyh46ftLs6fzu86RBD9WqnauoAEIr olHwmcnwaC9VYkCBlB8Tq6wFo9fNVcIAExi9P7hBZ1Rsm9y+GPNXPLGE/WOlMhXN xxsSOjZLS9g5IZqvLgbSmaBtGAQA3xdaZucMrqg8zlsC8dGgnNYbFM24yY7UZ4dF chlWfCJwPQbuv4wsetgqqPA74mxMPLgEVxbPVssUSZfbgTd69eTGtOvJRY7x7NKv QVnI3v8UQnkScg== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:36 2026 by rpki-client