This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft File: uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json) Hash identifier: A04t0BG6rzItp6qeP9rFLlO+MM+BnmIf5UBm2dOV6r8= Subject key identifier: C7:DA:6E:12:AD:C3:56:81:3D:F2:70:75:33:C9:97:C4:1D:C4:B1:1E Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B Certificate issuer: /CN=b846e854187f9332954c60e08c3351afcdf1085b Certificate serial: 019C0BC63194610502A3FB0B17F15B7592F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft Manifest number: 0824 Signing time: Thu 29 Jan 2026 22:01:03 +0000 Manifest this update: Thu 29 Jan 2026 22:01:03 +0000 Manifest next update: Fri 30 Jan 2026 22:01:03 +0000 Files and hashes: 1: LoU6bInR-t2CDpwfpMzLYbLy3pA.roa (hash: 7e0dmQJEvRFv5WAuIm9ehE3YMHYXzzfWjHPD+c3OUhs=) 2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: L1stQvbc/Rv5tDfGwBhnk3RfJPpgu5k1VwsOO4R4Prc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:c6:31:94:61:05:02:a3:fb:0b:17:f1:5b:75:92:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b Validity Not Before: Jan 29 22:01:03 2026 GMT Not After : Jan 30 22:01:03 2026 GMT Subject: CN=c7da6e12adc356813df2707533c997c41dc4b11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:b5:e8:41:24:a1:f7:c2:f6:67:10:8e:e8: e7:97:e6:98:e0:4d:80:81:5c:0d:36:61:9d:27:a2: f5:5a:6d:d5:3e:2e:60:64:9c:f3:d7:50:be:f3:f5: 1d:9c:57:42:b3:17:3c:aa:dd:8f:f0:2f:d7:49:33: cb:1a:0f:9b:9b:5d:fa:b7:33:16:b2:d5:7b:f2:a8: ab:69:45:2f:63:b5:23:9c:8f:ad:b7:19:82:c5:85: 1d:cf:65:7c:0c:3f:60:8b:82:2e:8a:52:88:89:23: 45:82:b5:de:42:f3:d1:9d:c3:21:e4:91:ef:a7:bb: ad:27:c7:f6:cf:ea:9b:e1:40:dc:67:0e:b7:c1:cf: 74:d2:67:c9:0d:13:b5:15:b2:42:fa:fd:50:11:77: 04:76:31:d7:42:b2:bb:2e:d9:03:5b:07:d7:d3:cf: 42:98:6a:2d:52:1a:78:03:54:03:b6:c5:71:a6:e1: af:30:8b:51:de:fe:ab:46:ff:a8:2b:f5:94:67:e3: 90:04:05:ce:d2:2f:cd:33:c1:08:60:4f:31:9e:81: 59:cc:82:7b:a8:03:e8:15:1f:e0:5b:66:70:b6:e8: 1a:60:1e:0a:6f:55:d2:fa:7c:bf:03:11:2d:0a:b7: ce:ac:56:6b:27:d9:4a:28:44:c9:25:87:0b:3a:4d: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DA:6E:12:AD:C3:56:81:3D:F2:70:75:33:C9:97:C4:1D:C4:B1:1E X509v3 Authority Key Identifier: keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a1:df:c4:88:f5:57:47:7e:03:fa:80:11:89:c3:cc:ce:37: 46:e8:a2:58:1c:e6:99:d1:9c:dd:fe:a7:97:08:ec:6a:43:ed: 95:21:f4:ad:62:b8:b1:74:8f:22:3b:01:8a:0a:e9:30:c0:02: f6:b5:8c:48:cf:e2:ab:b1:fa:e4:16:39:50:be:9a:bc:c2:22: 23:9c:93:57:96:e3:59:58:d7:89:2e:c3:2d:f9:e2:42:d9:ad: 3f:46:b4:0f:10:f9:4f:9b:69:ef:0d:27:ef:e1:be:c8:6b:7d: 14:92:4a:7f:06:d1:af:4d:a0:68:32:35:1e:0d:5c:e2:5a:a5: 97:7b:9c:73:2c:a6:ee:1d:46:9b:ee:62:2a:08:46:aa:c8:43: ae:93:d5:9b:b6:3e:8b:c6:3a:32:2b:58:c7:04:c3:a0:c3:7b: ec:49:84:23:31:0b:68:35:2a:b0:6d:ca:b1:e5:54:b7:72:e8: 01:97:f5:ae:e9:5f:88:7f:a4:92:9b:1e:a0:9b:92:8a:6c:a3: ac:93:29:c1:5b:ba:19:56:98:9a:2e:e6:06:44:f6:4d:31:f6: 70:eb:cd:36:63:cc:1e:88:a7:a4:94:9d:ee:ca:68:8d:da:2e: 55:13:b6:20:e1:bb:f3:2c:2b:dc:0a:c0:65:02:2b:70:71:8c: 51:55:6a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwLxjGUYQUCo/sLF/FbdZLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NDZlODU0MTg3ZjkzMzI5NTRjNjBlMDhjMzM1MWFmY2Rm MTA4NWIwHhcNMjYwMTI5MjIwMTAzWhcNMjYwMTMwMjIwMTAzWjAzMTEwLwYDVQQD EyhjN2RhNmUxMmFkYzM1NjgxM2RmMjcwNzUzM2M5OTdjNDFkYzRiMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLm16EEkoffC9mcQjujnl+aY4E2A gVwNNmGdJ6L1Wm3VPi5gZJzz11C+8/UdnFdCsxc8qt2P8C/XSTPLGg+bm136tzMW stV78qiraUUvY7UjnI+ttxmCxYUdz2V8DD9gi4IuilKIiSNFgrXeQvPRncMh5JHv p7utJ8f2z+qb4UDcZw63wc900mfJDRO1FbJC+v1QEXcEdjHXQrK7LtkDWwfX089C mGotUhp4A1QDtsVxpuGvMItR3v6rRv+oK/WUZ+OQBAXO0i/NM8EIYE8xnoFZzIJ7 qAPoFR/gW2ZwtugaYB4Kb1XS+ny/AxEtCrfOrFZrJ9lKKETJJYcLOk3PPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfabhKtw1aBPfJwdTPJl8QdxLEeMB8GA1UdIwQY MBaAFLhG6FQYf5MylUxg4IwzUa/N8QhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMt ZTBlYWIyZjM5NjM3LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMtZTBlYWIyZjM5NjM3 LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaHfxIj1 V0d+A/qAEYnDzM43RuiiWBzmmdGc3f6nlwjsakPtlSH0rWK4sXSPIjsBigrpMMAC 9rWMSM/iq7H65BY5UL6avMIiI5yTV5bjWVjXiS7DLfniQtmtP0a0DxD5T5tp7w0n 7+G+yGt9FJJKfwbRr02gaDI1Hg1c4lqll3uccyym7h1Gm+5iKghGqshDrpPVm7Y+ i8Y6MitYxwTDoMN77EmEIzELaDUqsG3KseVUt3LoAZf1rulfiH+kkpseoJuSimyj rJMpwVu6GVaYmi7mBkT2TTH2cOvNNmPMHoinpJSd7spojdouVRO2IOG78ywr3ArA ZQIrcHGMUVVqzA== -----END CERTIFICATE-----Generated at Fri Jan 30 00:56:17 2026 by rpki-client