This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json) Hash identifier: u9ukV7ZXnaSVPNwyfraryl5622XYlX8rxVNvL5dQls8= Subject key identifier: 1E:B9:BE:1F:8A:70:8F:C2:49:13:A3:7D:67:EE:EF:70:08:96:93:F6 Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971 Certificate serial: 019BFB778FECB7139705A38CABE969562B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft Manifest number: 038E Signing time: Mon 26 Jan 2026 18:01:15 +0000 Manifest this update: Mon 26 Jan 2026 18:01:15 +0000 Manifest next update: Tue 27 Jan 2026 18:01:15 +0000 Files and hashes: 1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: gZGN8LXV4+VtwCdLoxd6A0+meXjgX5gW0QGp/rPtNdo=) 2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=) 3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=) 4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:8f:ec:b7:13:97:05:a3:8c:ab:e9:69:56:2b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533802e62965d4584e598d59b76a928be5afd971 Validity Not Before: Jan 26 18:01:15 2026 GMT Not After : Jan 27 18:01:15 2026 GMT Subject: CN=1eb9be1f8a708fc24913a37d67eeef70089693f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:44:ae:c9:f0:ac:4f:7e:6b:97:b8:bd:57: 09:3f:a3:76:18:79:14:88:66:4d:dc:1c:e5:79:4d: ab:19:38:bc:ba:9f:02:c3:97:71:d4:63:f5:6b:8e: e9:c4:c6:03:a2:8b:36:41:0c:bf:2f:91:1d:80:d3: ec:8a:82:ff:71:c3:9b:a3:74:5f:e8:e7:69:34:f6: 60:a6:75:cd:43:1c:55:fb:b4:f6:04:6e:0f:1b:0f: 4e:b4:a9:64:93:b2:8f:89:ec:95:8a:e7:aa:e2:85: d0:37:e4:46:3e:39:05:9e:dc:1e:38:c9:4a:d0:e6: a9:b8:56:05:e3:fd:86:c3:e6:f2:7e:f3:77:47:a6: 74:bc:9c:79:48:6d:5e:a6:13:81:d0:91:77:9f:2d: 11:44:a3:49:82:3a:57:dc:a7:bb:48:3c:25:61:ec: 0b:f0:4d:ae:7b:8e:1c:ed:20:90:1f:59:73:2f:aa: b0:f7:5e:df:ce:eb:56:e8:1b:10:87:c6:ec:1a:85: 8d:af:cd:97:48:f9:31:f6:b6:00:3c:f4:3b:15:e0: 4b:a7:57:f0:e1:b1:26:eb:30:f6:72:d6:17:ee:23: 98:58:d9:66:c5:4d:60:9e:10:08:25:a5:66:17:a7: 58:93:6d:1c:2b:26:1c:9d:e0:10:c6:5b:77:31:5f: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:BE:1F:8A:70:8F:C2:49:13:A3:7D:67:EE:EF:70:08:96:93:F6 X509v3 Authority Key Identifier: keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:70:98:34:be:be:69:0e:6e:12:36:87:e0:4f:8b:72:60:2e: 08:92:97:39:7a:0a:ba:cf:7e:b6:68:69:bd:12:7e:97:97:16: e2:0b:23:b6:12:21:5a:8a:dd:83:8a:12:50:0b:a3:e9:bb:ea: cb:da:9f:8f:80:f4:b8:c9:90:d7:7d:36:1e:08:a5:ef:94:2d: 26:87:b0:47:c8:99:75:0d:5c:cc:23:38:b1:aa:7c:c3:c8:4f: 4a:65:56:21:02:46:fb:37:f9:ad:8b:99:a8:57:18:0e:e4:f3: 99:92:17:10:62:5d:4a:cc:47:f9:29:fe:84:e8:25:2f:b7:12: 7a:fe:fc:19:8c:f0:f7:cc:fc:ee:f5:14:e0:25:7d:02:83:79: 79:d8:f9:ff:3f:a5:f5:a6:f9:51:21:ab:d5:f2:a6:c8:2b:37: e2:13:76:7d:45:df:6a:f1:5c:d2:9e:d3:a4:a9:6e:34:b1:e5: 6a:43:c4:cb:1b:7e:65:e2:5d:c7:fc:bd:cc:c0:32:9b:3a:a2: e5:55:c0:3a:bd:a9:ef:9f:af:47:36:fc:51:fa:3c:46:9f:ca: f2:a3:b2:df:55:69:6e:95:9a:11:ad:6d:c5:3b:3f:9a:9b:65: a5:6d:13:9d:44:a4:90:66:80:78:6b:cf:9b:75:57:70:5a:42: 9b:2b:b4:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d4/stxOXBaOMq+lpVisiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzgwMmU2Mjk2NWQ0NTg0ZTU5OGQ1OWI3NmE5MjhiZTVh ZmQ5NzEwHhcNMjYwMTI2MTgwMTE1WhcNMjYwMTI3MTgwMTE1WjAzMTEwLwYDVQQD EygxZWI5YmUxZjhhNzA4ZmMyNDkxM2EzN2Q2N2VlZWY3MDA4OTY5M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6JErsnwrE9+a5e4vVcJP6N2GHkU iGZN3BzleU2rGTi8up8Cw5dx1GP1a47pxMYDoos2QQy/L5EdgNPsioL/ccObo3Rf 6OdpNPZgpnXNQxxV+7T2BG4PGw9OtKlkk7KPieyViueq4oXQN+RGPjkFntweOMlK 0OapuFYF4/2Gw+byfvN3R6Z0vJx5SG1ephOB0JF3ny0RRKNJgjpX3Ke7SDwlYewL 8E2ue44c7SCQH1lzL6qw917fzutW6BsQh8bsGoWNr82XSPkx9rYAPPQ7FeBLp1fw 4bEm6zD2ctYX7iOYWNlmxU1gnhAIJaVmF6dYk20cKyYcneAQxlt3MV8HHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB65vh+KcI/CSROjfWfu73AIlpP2MB8GA1UdIwQY MBaAFFM4AuYpZdRYTlmNWbdqkovlr9lxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt YTIzYzEzMWMwZDM4LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4 LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXCYNL6+ aQ5uEjaH4E+LcmAuCJKXOXoKus9+tmhpvRJ+l5cW4gsjthIhWordg4oSUAuj6bvq y9qfj4D0uMmQ1302Hgil75QtJoewR8iZdQ1czCM4sap8w8hPSmVWIQJG+zf5rYuZ qFcYDuTzmZIXEGJdSsxH+Sn+hOglL7cSev78GYzw98z87vUU4CV9AoN5edj5/z+l 9ab5USGr1fKmyCs34hN2fUXfavFc0p7TpKluNLHlakPEyxt+ZeJdx/y9zMAymzqi 5VXAOr2p75+vRzb8Ufo8Rp/K8qOy31VpbpWaEa1txTs/mptlpW0TnUSkkGaAeGvP m3VXcFpCmyu0dg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:24 2026 by rpki-client