This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json) Hash identifier: elpfkJj0KKkUzfZqGfUSJXdowiitQcqmPT0TG+t2D7g= Subject key identifier: FD:19:87:2F:0D:75:D6:F2:6C:0E:C8:1F:7C:C3:A0:09:80:72:C6:CC Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Certificate serial: 019BF9F6726F68B60074B740AAF70FF00360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 11:00:36 +0000 Manifest this update: Mon 26 Jan 2026 11:00:36 +0000 Manifest next update: Tue 27 Jan 2026 11:00:36 +0000 Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=) 2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: QDSt/0zkB3VEHX2KaDbHQmEW3PILNY+eKBCsEfEA9Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:72:6f:68:b6:00:74:b7:40:aa:f7:0f:f0:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f Validity Not Before: Jan 26 11:00:36 2026 GMT Not After : Jan 27 11:00:36 2026 GMT Subject: CN=fd19872f0d75d6f26c0ec81f7cc3a0098072c6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:3b:c5:06:40:15:4f:e7:aa:5f:28:c7:73: 28:b2:c9:bf:64:ae:d6:2b:d1:7e:d3:f8:a9:6f:9e: 1f:a8:34:a5:82:99:47:24:09:ee:ac:0b:b6:4f:3d: 16:07:29:16:53:33:5c:8b:ff:ff:e1:46:12:d0:0a: ef:1c:45:b1:bd:dc:df:fc:ec:7d:11:11:63:86:1e: 30:ad:f5:69:d5:96:ff:83:42:4e:51:02:91:84:d4: d7:04:1d:c8:50:d1:9a:d4:ac:89:e9:64:a0:3e:fa: 00:6e:ae:72:9f:83:9f:e8:e2:06:9b:87:61:f5:45: 1c:b0:91:a8:55:2e:88:80:24:2b:62:f1:e4:8a:51: c3:5b:79:d7:fd:b4:ba:d3:1b:6b:a7:c8:7b:4f:9d: 5e:a8:ee:22:1f:7e:f8:34:1b:69:ee:f9:6d:e8:7d: 48:a5:33:d9:ed:44:c6:77:71:0b:a8:d2:48:06:dc: e1:30:7c:2a:58:61:47:de:33:43:9c:0e:7c:fd:74: a5:9f:4f:05:93:13:14:1f:a8:25:5f:db:17:34:ef: 37:d5:44:ac:a0:b5:b3:99:ac:d6:bd:cb:bf:b3:2e: 9b:40:62:9b:05:fc:e1:e1:23:fb:3d:dc:89:fa:45: 0f:1c:92:f8:b6:18:11:a5:2e:27:58:67:4f:5b:01: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:19:87:2F:0D:75:D6:F2:6C:0E:C8:1F:7C:C3:A0:09:80:72:C6:CC X509v3 Authority Key Identifier: keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:93:6b:bf:63:3e:a5:c9:00:7b:24:7d:3c:c3:81:71:25:b4: a7:e7:9f:b0:f4:14:8d:dc:10:26:5f:2e:be:58:a3:7a:4d:f1: 97:79:9e:5e:90:b3:03:5a:16:76:18:e0:56:cb:1e:15:5c:b9: 89:82:9a:b1:39:f2:ec:b1:09:0c:6f:94:d6:b4:4e:f6:06:12: fe:14:1a:09:ed:95:95:f7:99:af:d7:9b:19:da:49:5f:85:0f: 3a:70:10:eb:65:b2:25:f3:cb:21:ac:16:26:22:cf:05:4e:7f: 5a:ca:8b:99:23:81:e6:03:07:86:97:9e:cc:07:24:44:66:70: 61:99:ee:92:90:e9:09:30:f2:d8:a1:8d:11:78:6f:45:c7:2a: bc:64:61:ee:e6:d5:d8:2c:84:6d:d1:2f:1c:bd:dc:ad:93:b7: 88:6e:a4:21:7e:58:6d:29:82:48:99:47:94:b6:20:6c:f8:00: d5:2a:e5:c1:2d:e2:b3:10:a8:fe:89:55:55:c2:97:cb:cc:bb: b2:2d:70:77:68:76:89:73:e1:e1:21:ba:a2:aa:ef:3f:50:aa: 46:2d:9f:31:c9:48:d1:03:6a:4c:2c:6d:b5:57:5d:a2:b6:7e: 1d:45:3f:a7:ba:0c:6a:7c:a7:ca:5f:06:a7:10:7d:32:cf:54: 6b:4f:d4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59nJvaLYAdLdAqvcP8ANgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODcyMzY1MWNhYmNmMDAwOWNmMjgxYTJhNTFjNWI0ZTkw NTYyMmYwHhcNMjYwMTI2MTEwMDM2WhcNMjYwMTI3MTEwMDM2WjAzMTEwLwYDVQQD EyhmZDE5ODcyZjBkNzVkNmYyNmMwZWM4MWY3Y2MzYTAwOTgwNzJjNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lQ7xQZAFU/nql8ox3Mossm/ZK7W K9F+0/ipb54fqDSlgplHJAnurAu2Tz0WBykWUzNci///4UYS0ArvHEWxvdzf/Ox9 ERFjhh4wrfVp1Zb/g0JOUQKRhNTXBB3IUNGa1KyJ6WSgPvoAbq5yn4Of6OIGm4dh 9UUcsJGoVS6IgCQrYvHkilHDW3nX/bS60xtrp8h7T51eqO4iH374NBtp7vlt6H1I pTPZ7UTGd3ELqNJIBtzhMHwqWGFH3jNDnA58/XSln08FkxMUH6glX9sXNO831USs oLWzmazWvcu/sy6bQGKbBfzh4SP7PdyJ+kUPHJL4thgRpS4nWGdPWwHGbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Zhy8NddbybA7IH3zDoAmAcsbMMB8GA1UdIwQY MBaAFLqHI2Ucq88ACc8oGipRxbTpBWIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjct MmU3MGRlZDlkOTRmLzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjctMmU3MGRlZDlkOTRm LzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJNrv2M+ pckAeyR9PMOBcSW0p+efsPQUjdwQJl8uvlijek3xl3meXpCzA1oWdhjgVsseFVy5 iYKasTny7LEJDG+U1rRO9gYS/hQaCe2VlfeZr9ebGdpJX4UPOnAQ62WyJfPLIawW JiLPBU5/WsqLmSOB5gMHhpeezAckRGZwYZnukpDpCTDy2KGNEXhvRccqvGRh7ubV 2CyEbdEvHL3crZO3iG6kIX5YbSmCSJlHlLYgbPgA1SrlwS3isxCo/olVVcKXy8y7 si1wd2h2iXPh4SG6oqrvP1CqRi2fMclI0QNqTCxttVddorZ+HUU/p7oManynyl8G pxB9Ms9Ua0/Uuw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:58 2026 by rpki-client