This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft File: UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json) Hash identifier: v2075NuPIAY4OlOnbTuPbYQ3X0aQqXXVl9imLexg/FA= Subject key identifier: 68:7D:DB:2F:AC:71:15:E3:DA:94:6E:AD:6A:9D:D9:0D:29:1D:90:8E Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72 Certificate issuer: /CN=51e63cf6087311347f314f24e2696c7f6cea6d72 Certificate serial: 019BF2E225773EF168EB750D828929FE6B69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft Manifest number: 91 Signing time: Sun 25 Jan 2026 02:01:05 +0000 Manifest this update: Sun 25 Jan 2026 02:01:05 +0000 Manifest next update: Mon 26 Jan 2026 02:01:05 +0000 Files and hashes: 1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=) 2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: Qrt6AtIvwc85qSXyCXNbwwmAVSPiRkqKuQMwNLlSRwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:25:77:3e:f1:68:eb:75:0d:82:89:29:fe:6b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72 Validity Not Before: Jan 25 02:01:05 2026 GMT Not After : Jan 26 02:01:05 2026 GMT Subject: CN=687ddb2fac7115e3da946ead6a9dd90d291d908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:fe:c1:25:40:76:09:74:d8:24:4f:90:a3: 04:74:13:e6:b4:6b:82:6d:f2:a5:e2:4a:c7:1a:cb: 85:c8:ef:b6:ca:40:8e:69:05:6d:ee:33:5c:86:59: 28:69:b6:5b:f9:f5:2f:30:f2:78:b9:78:6e:8c:7c: 29:7b:53:4e:29:bd:08:36:ab:4c:d5:26:b3:ac:8b: 6e:ac:01:73:0a:0a:0f:aa:d1:43:29:e5:ce:e0:1a: cb:45:b7:b4:dc:99:19:4c:eb:06:c4:ca:4f:e8:2a: 17:a5:0a:1b:08:ea:28:53:ad:c5:3e:a2:45:ae:ec: 9f:a5:b8:d4:8c:20:6b:81:c3:df:1e:65:07:b5:13: e0:08:28:ab:45:07:fa:73:21:20:82:cc:c1:d8:37: e6:95:c2:08:ac:55:16:b8:3b:0f:8b:c5:42:d7:ec: 92:d6:66:72:23:37:8a:63:ab:95:b0:d8:36:f3:32: e4:31:b6:2e:ac:9c:1a:e3:a8:3e:22:3b:47:27:d3: 63:3d:f7:e6:66:21:e2:56:fa:f4:77:df:20:ac:fa: 00:0b:c8:7e:9d:34:2b:16:a9:0a:bf:c2:0d:35:f8: 6f:8b:af:d0:ca:84:ca:9b:de:f4:49:f4:16:b7:87: d0:d5:d9:29:16:98:e0:2a:8b:83:e9:9b:2d:e0:fb: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:DB:2F:AC:71:15:E3:DA:94:6E:AD:6A:9D:D9:0D:29:1D:90:8E X509v3 Authority Key Identifier: keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:01:d6:c3:16:ac:15:39:21:f4:fe:2d:43:14:ce:ac:c4: 88:26:a9:c6:f0:51:5e:5c:6c:e2:94:17:11:05:7a:7c:12:8a: f3:e8:1d:2d:6a:04:0b:07:45:0f:9f:d3:74:26:7d:87:09:4c: eb:dc:ad:d0:3b:46:ec:32:88:98:6c:11:47:51:e3:36:44:dc: 1c:ca:20:90:96:7e:ec:89:f0:8c:4d:ed:88:1a:9b:a8:d5:11: a8:24:1d:a3:3b:38:de:d1:b0:d5:db:ac:a6:06:a6:f3:9e:9e: 9f:d6:59:ce:b9:43:57:ff:b2:d5:7b:13:a6:f4:13:e4:29:25: 57:21:f6:29:fe:87:f3:af:1d:16:06:dd:13:91:61:7b:48:6e: c5:02:1b:5a:c7:23:3d:cc:24:7b:8d:a8:46:d5:21:f4:bb:a0: 59:22:65:8d:9e:3d:95:e6:ef:94:c3:c9:02:f7:e6:dd:c6:b3: b1:fb:3c:2f:58:50:46:2b:b5:15:71:8e:95:6b:22:65:26:66: 35:78:ec:48:11:b6:45:a4:92:aa:8a:cf:a0:2b:69:e7:f4:36: 72:d9:df:07:19:6a:1d:06:42:39:ae:26:7f:74:b8:e8:4e:49: b1:99:ee:70:b3:fc:52:04:e2:73:a2:e4:ff:e0:b4:00:7c:9f: c5:00:29:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4iV3PvFo63UNgokp/mtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTYzY2Y2MDg3MzExMzQ3ZjMxNGYyNGUyNjk2YzdmNmNl YTZkNzIwHhcNMjYwMTI1MDIwMTA1WhcNMjYwMTI2MDIwMTA1WjAzMTEwLwYDVQQD Eyg2ODdkZGIyZmFjNzExNWUzZGE5NDZlYWQ2YTlkZDkwZDI5MWQ5MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D7+wSVAdgl02CRPkKMEdBPmtGuC bfKl4krHGsuFyO+2ykCOaQVt7jNchlkoabZb+fUvMPJ4uXhujHwpe1NOKb0INqtM 1SazrIturAFzCgoPqtFDKeXO4BrLRbe03JkZTOsGxMpP6CoXpQobCOooU63FPqJF ruyfpbjUjCBrgcPfHmUHtRPgCCirRQf6cyEggszB2DfmlcIIrFUWuDsPi8VC1+yS 1mZyIzeKY6uVsNg28zLkMbYurJwa46g+IjtHJ9NjPffmZiHiVvr0d98grPoAC8h+ nTQrFqkKv8INNfhvi6/QyoTKm970SfQWt4fQ1dkpFpjgKouD6Zst4PvvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh92y+scRXj2pRurWqd2Q0pHZCOMB8GA1UdIwQY MBaAFFHmPPYIcxE0fzFPJOJpbH9s6m1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NzM3MDItYjllMy00MDVmLTk2ZTIt YWM2ZGZjOTJmNTg1LzEvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80NzM3MDItYjllMy00MDVmLTk2ZTItYWM2ZGZjOTJmNTg1 LzEvVWVZODlnaHpFVFJfTVU4azRtbHNmMnpxYlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXEB1sMW rBU5IfT+LUMUzqzEiCapxvBRXlxs4pQXEQV6fBKK8+gdLWoECwdFD5/TdCZ9hwlM 69yt0DtG7DKImGwRR1HjNkTcHMogkJZ+7InwjE3tiBqbqNURqCQdozs43tGw1dus pgam856en9ZZzrlDV/+y1XsTpvQT5CklVyH2Kf6H868dFgbdE5Fhe0huxQIbWscj Pcwke42oRtUh9LugWSJljZ49lebvlMPJAvfm3cazsfs8L1hQRiu1FXGOlWsiZSZm NXjsSBG2RaSSqorPoCtp5/Q2ctnfBxlqHQZCOa4mf3S46E5JsZnucLP8UgTic6Lk /+C0AHyfxQApaQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:32:50 2026 by rpki-client