This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json) Hash identifier: Oe6hcukB9a5Jfgk5dw9m6GxOcDnCUZSbJeoF7bmGxhQ= Subject key identifier: 8F:1E:FE:07:57:C9:5A:91:9B:70:B1:84:E9:78:74:98:AA:4F:CF:BC Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Certificate serial: 019BFB770B88DD8D4381DB6FCBD89E4B18FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft Manifest number: 0216 Signing time: Mon 26 Jan 2026 18:00:41 +0000 Manifest this update: Mon 26 Jan 2026 18:00:41 +0000 Manifest next update: Tue 27 Jan 2026 18:00:41 +0000 Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: MZ3r3uafkRWdNDNs93iHDgZhAAJzTWMLYmR0laV/XPk=) 2: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (hash: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:0b:88:dd:8d:43:81:db:6f:cb:d8:9e:4b:18:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Validity Not Before: Jan 26 18:00:41 2026 GMT Not After : Jan 27 18:00:41 2026 GMT Subject: CN=8f1efe0757c95a919b70b184e9787498aa4fcfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:9c:18:70:29:eb:88:1f:bb:98:83:b5:f4: 1f:be:a4:c7:c7:92:6b:15:cb:fe:5b:a5:4b:e3:65: 62:48:11:cf:ab:b2:b6:0e:8a:26:f2:55:1f:97:d2: b1:24:80:31:c1:2a:df:cc:46:b9:ce:a2:8c:ff:26: cc:a2:8f:70:d6:a4:15:43:74:b0:44:d8:4c:e6:6e: a3:c3:e9:df:51:8a:cd:91:78:07:60:37:c8:6b:9b: 34:ef:39:4a:55:7a:a8:09:5b:f0:65:0e:e5:d5:f9: ef:c4:e3:e4:de:fc:b5:2c:80:89:71:0f:57:ef:b6: 1c:ce:88:a4:02:92:d6:27:7d:de:0e:dc:47:f2:3d: d9:91:a8:0f:c5:99:82:e2:ee:1e:7e:84:51:d8:00: 14:a3:54:22:83:8a:bf:98:f2:74:84:03:d0:5e:b9: 18:38:73:42:82:55:0e:4f:f1:02:16:30:71:48:bd: 9b:02:ad:1e:b5:eb:54:f0:4d:45:34:8f:24:63:ad: 3c:e6:21:a7:f5:76:5c:63:8e:cd:15:65:83:08:63: 27:6c:fa:65:c8:93:8b:58:6c:e9:85:96:1d:27:66: 23:be:38:26:70:fa:98:13:0e:17:97:4b:c7:df:77: 84:0e:43:5f:b1:72:73:c5:30:1a:6d:ed:44:b8:8a: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:FE:07:57:C9:5A:91:9B:70:B1:84:E9:78:74:98:AA:4F:CF:BC X509v3 Authority Key Identifier: keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ea:91:c2:ac:7c:19:bc:2e:f8:ac:20:f5:ea:66:ea:ff:f4: 75:e8:93:e6:b0:3a:2f:5d:b6:0c:fe:69:df:4c:dd:8b:39:c4: bc:63:f5:2a:69:75:83:b5:9f:03:a8:e5:4b:ae:58:87:83:e3: ce:74:02:63:66:f2:99:c7:9b:04:a4:b7:a5:ec:21:67:c7:d9: ca:44:b2:f3:58:3f:f2:11:b5:e9:a7:60:8c:78:a1:77:1c:09: 63:12:d8:84:71:49:e4:e0:c4:a1:cc:3d:12:43:7c:d3:21:02: fe:25:43:bd:38:b9:f3:7d:95:34:0a:d1:33:51:97:b3:ca:c6: db:0a:76:7b:46:c8:31:0a:b1:85:e2:41:41:c4:9a:5e:f2:3f: 23:e9:65:98:64:25:90:a6:a4:e0:97:12:da:d8:64:65:f5:ba: 17:3e:61:8a:c0:14:b4:ec:3f:55:02:03:0f:82:43:44:f9:41: 6c:5e:23:f2:9c:d0:e3:1c:b6:a2:2b:5c:05:bf:ed:d2:79:97: 64:b9:c8:66:03:e5:26:6e:8e:b2:15:0a:b7:8b:de:ad:09:44: 66:50:03:f1:20:c3:6f:5f:71:72:ff:7e:93:00:38:a4:6f:61: 7b:d4:6d:2f:47:f8:0d:f8:7b:ea:20:8e:5f:21:d8:cc:42:36: 7a:86:ce:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dwuI3Y1Dgdtvy9ieSxj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjRhNjhmNmFmZjdlMDY4MGI2ZjE1NDQzMGNlZTc0YTUw M2I2NjgwHhcNMjYwMTI2MTgwMDQxWhcNMjYwMTI3MTgwMDQxWjAzMTEwLwYDVQQD Eyg4ZjFlZmUwNzU3Yzk1YTkxOWI3MGIxODRlOTc4NzQ5OGFhNGZjZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ecGHAp64gfu5iDtfQfvqTHx5Jr Fcv+W6VL42ViSBHPq7K2Doom8lUfl9KxJIAxwSrfzEa5zqKM/ybMoo9w1qQVQ3Sw RNhM5m6jw+nfUYrNkXgHYDfIa5s07zlKVXqoCVvwZQ7l1fnvxOPk3vy1LICJcQ9X 77YczoikApLWJ33eDtxH8j3ZkagPxZmC4u4efoRR2AAUo1Qig4q/mPJ0hAPQXrkY OHNCglUOT/ECFjBxSL2bAq0etetU8E1FNI8kY6085iGn9XZcY47NFWWDCGMnbPpl yJOLWGzphZYdJ2YjvjgmcPqYEw4Xl0vH33eEDkNfsXJzxTAabe1EuIp2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8e/gdXyVqRm3CxhOl4dJiqT8+8MB8GA1UdIwQY MBaAFFK0po9q/34GgLbxVEMM7nSlA7ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYt MGQyYzJmZTQ5ZmRhLzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYtMGQyYzJmZTQ5ZmRh LzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+qRwqx8 Gbwu+Kwg9epm6v/0deiT5rA6L122DP5p30zdiznEvGP1Kml1g7WfA6jlS65Yh4Pj znQCY2bymcebBKS3pewhZ8fZykSy81g/8hG16adgjHihdxwJYxLYhHFJ5ODEocw9 EkN80yEC/iVDvTi5832VNArRM1GXs8rG2wp2e0bIMQqxheJBQcSaXvI/I+llmGQl kKak4JcS2thkZfW6Fz5hisAUtOw/VQIDD4JDRPlBbF4j8pzQ4xy2oitcBb/t0nmX ZLnIZgPlJm6OshUKt4verQlEZlAD8SDDb19xcv9+kwA4pG9he9RtL0f4Dfh76iCO XyHYzEI2eobO+A== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:32 2026 by rpki-client