This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json) Hash identifier: YDZ8iY2ZK11xVMiJm63cwclWBArcB65Zzjpu+1wckOY= Subject key identifier: 54:B2:50:DF:41:E4:A1:43:62:C3:A7:6B:D4:88:A6:15:B5:E0:DC:C8 Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Certificate serial: 019C1C14961E77AF35079A5EB04E70C7965D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft Manifest number: 01F1 Signing time: Mon 02 Feb 2026 02:00:37 +0000 Manifest this update: Mon 02 Feb 2026 02:00:37 +0000 Manifest next update: Tue 03 Feb 2026 02:00:37 +0000 Files and hashes: 1: ScekwDTTdJN8HY9S_6nj_cBR24k.asa (hash: /A1v9OuxAO1OHNb2OUDpODeKLVKfUE+QygKqJT1Lq8g=) 2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: yGUgSFHp/bo0ayjQphdb/fKDLKX3Ad/FxEJY0zcGa5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:96:1e:77:af:35:07:9a:5e:b0:4e:70:c7:96:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Validity Not Before: Feb 2 02:00:37 2026 GMT Not After : Feb 3 02:00:37 2026 GMT Subject: CN=54b250df41e4a14362c3a76bd488a615b5e0dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:47:53:e5:a7:fe:a8:2d:99:0f:f9:0d:02: 71:c7:6d:a8:9e:c8:03:55:1e:07:44:ce:f8:ba:9b: a5:bf:54:c6:8a:36:2f:a5:16:ed:b7:01:58:a0:92: 02:34:32:c1:cb:d2:f2:9e:f3:d9:66:78:86:6a:17: 2d:41:39:bb:13:03:da:56:56:8d:d5:7a:a5:a4:f5: cf:d9:c0:89:c5:97:58:e7:4f:60:37:51:b1:ff:4f: f0:c0:0f:90:e7:46:1f:3a:57:17:38:a8:f2:6c:e8: 89:0a:87:32:07:23:31:72:b1:e6:66:46:3f:33:14: 4c:21:5a:d2:31:39:ea:c3:7c:5e:3b:f7:8d:96:94: ad:6c:07:27:80:1f:45:2b:d8:73:9c:a4:ad:ca:13: 3e:87:23:e3:a9:cb:04:58:f3:75:6f:a4:82:76:d6: 10:ca:5d:38:f9:06:68:02:d7:57:3d:62:71:ef:34: b1:a4:18:81:04:51:ed:f5:2e:80:57:50:55:0b:c1: c1:cd:95:bc:1c:73:83:f5:84:e7:90:b1:d2:7e:ab: f0:aa:2f:62:b5:54:24:6a:61:ca:77:db:fc:ff:98: 9e:c9:a4:c6:10:56:da:1a:b2:da:5f:0e:f7:3b:4b: bd:2a:8c:d7:85:d1:fa:46:ce:91:a1:ae:e4:6c:39: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:50:DF:41:E4:A1:43:62:C3:A7:6B:D4:88:A6:15:B5:E0:DC:C8 X509v3 Authority Key Identifier: keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:06:63:48:6b:dc:3e:79:09:30:0e:46:bc:67:e0:21:13:37: 8f:42:ce:88:9f:14:6d:eb:78:09:94:eb:34:ad:fe:2e:0d:84: 36:92:e5:9f:b2:dc:1b:c0:8b:90:e2:84:50:03:0f:87:a8:16: ad:88:30:d9:8b:1f:f0:97:c9:78:11:87:49:36:6c:17:cb:cc: 57:c8:0a:96:1e:9c:2e:42:d9:a2:8f:80:5d:ab:63:8a:ef:5e: c1:25:06:68:45:9e:e1:0f:22:33:9a:cd:df:0b:40:c6:00:63: d9:70:5f:64:c1:44:5a:27:1b:8e:e2:d9:73:e4:6f:da:89:f1: 27:ae:6e:3b:57:04:e6:d7:9f:31:ad:4c:be:fb:6e:10:ff:06: 09:29:e3:81:f8:95:bb:cf:1f:af:ea:b0:56:90:99:3f:75:8d: 3d:28:37:da:68:c0:cf:ab:30:d6:a3:03:aa:2f:52:6a:cb:68: bd:69:54:c7:84:e9:a8:09:f4:e1:9e:4b:97:79:73:96:3f:88: 20:94:1b:8e:1e:fb:97:21:92:70:3a:67:89:f7:24:87:d4:54: f1:c5:56:96:60:fd:11:a8:91:6b:59:ff:a0:55:72:f1:30:61: 0f:a5:d2:a6:73:37:8b:01:43:a4:e7:44:c1:5a:77:1d:66:63: 8e:0e:99:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFJYed681B5pesE5wx5ZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2 ZmQyYTMwHhcNMjYwMjAyMDIwMDM3WhcNMjYwMjAzMDIwMDM3WjAzMTEwLwYDVQQD Eyg1NGIyNTBkZjQxZTRhMTQzNjJjM2E3NmJkNDg4YTYxNWI1ZTBkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEhHU+Wn/qgtmQ/5DQJxx22onsgD VR4HRM74upulv1TGijYvpRbttwFYoJICNDLBy9LynvPZZniGahctQTm7EwPaVlaN 1XqlpPXP2cCJxZdY509gN1Gx/0/wwA+Q50YfOlcXOKjybOiJCocyByMxcrHmZkY/ MxRMIVrSMTnqw3xeO/eNlpStbAcngB9FK9hznKStyhM+hyPjqcsEWPN1b6SCdtYQ yl04+QZoAtdXPWJx7zSxpBiBBFHt9S6AV1BVC8HBzZW8HHOD9YTnkLHSfqvwqi9i tVQkamHKd9v8/5ieyaTGEFbaGrLaXw73O0u9KozXhdH6Rs6Roa7kbDmGgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSyUN9B5KFDYsOna9SIphW14NzIMB8GA1UdIwQY MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt YjMzYTFmN2Q5YzI2LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2 LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQZjSGvc PnkJMA5GvGfgIRM3j0LOiJ8Ubet4CZTrNK3+Lg2ENpLln7LcG8CLkOKEUAMPh6gW rYgw2Ysf8JfJeBGHSTZsF8vMV8gKlh6cLkLZoo+AXatjiu9ewSUGaEWe4Q8iM5rN 3wtAxgBj2XBfZMFEWicbjuLZc+Rv2onxJ65uO1cE5tefMa1MvvtuEP8GCSnjgfiV u88fr+qwVpCZP3WNPSg32mjAz6sw1qMDqi9SastovWlUx4TpqAn04Z5Ll3lzlj+I IJQbjh77lyGScDpnifckh9RU8cVWlmD9EaiRa1n/oFVy8TBhD6XSpnM3iwFDpOdE wVp3HWZjjg6Z+Q== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:49 2026 by rpki-client