This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json) Hash identifier: Lmbgs2AIDPL7Ix9I2/fBVTTbWZhbyWOXA+ds9fyRrjg= Subject key identifier: 12:7B:4A:1E:91:4C:97:83:ED:55:9D:88:96:C3:7D:CF:A5:D3:22:E2 Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Certificate serial: 019BFCF88BAE0F275AC66BB7CD2C5C0E0486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft Manifest number: 0B20 Signing time: Tue 27 Jan 2026 01:01:45 +0000 Manifest this update: Tue 27 Jan 2026 01:01:45 +0000 Manifest next update: Wed 28 Jan 2026 01:01:45 +0000 Files and hashes: 1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=) 2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: lWYpxGcP4ZuJVN5M+f+L44L6Q9lJmA+InYdAsd3pBV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:8b:ae:0f:27:5a:c6:6b:b7:cd:2c:5c:0e:04:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Validity Not Before: Jan 27 01:01:45 2026 GMT Not After : Jan 28 01:01:45 2026 GMT Subject: CN=127b4a1e914c9783ed559d8896c37dcfa5d322e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:48:12:88:7b:37:97:6a:dc:14:e9:ed:fc: 9b:91:c1:06:b3:58:60:4d:f9:6b:39:34:aa:dc:25: ef:90:c7:2f:e2:39:a6:3e:d3:2f:13:34:38:39:34: ab:56:18:e7:63:a6:18:fb:0b:17:00:db:09:e1:9d: f1:8f:c8:b6:e8:25:e8:5c:47:7d:0e:1e:0d:bf:ef: 17:ce:60:ee:14:19:bf:c1:1b:87:46:e5:fc:45:fc: f6:ff:b1:e4:49:4e:61:6a:83:8d:09:aa:e6:45:eb: ba:4b:f8:b9:d2:28:59:36:ca:a6:39:04:92:c4:4a: 25:43:e1:33:9f:e0:ce:e8:14:5c:27:bf:ae:bf:ff: 14:24:3b:6e:8a:37:3b:f0:d1:06:be:15:e1:7a:ef: 22:36:fa:96:10:d6:56:9b:3d:b7:7d:31:53:1c:11: f3:a1:f2:02:ea:e9:9c:7b:91:62:94:6b:2f:d7:77: 94:ba:d5:6d:ee:fc:d2:18:e7:8b:df:33:92:a1:fa: 51:49:f7:47:dc:f5:c0:39:27:4a:ed:cf:ab:b8:ba: 36:3d:6e:ae:f5:13:0c:43:2b:34:7e:8e:d0:a1:28: 0b:3b:26:bf:06:b3:78:90:61:7b:cf:14:14:a8:74: 41:26:53:f4:07:0c:33:15:fa:88:9e:02:5b:b7:a0: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:4A:1E:91:4C:97:83:ED:55:9D:88:96:C3:7D:CF:A5:D3:22:E2 X509v3 Authority Key Identifier: keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a4:7f:58:2a:88:45:63:c3:72:e0:5a:00:65:20:d1:93:01: 72:49:3c:a5:5a:70:de:d4:4e:6c:40:ec:73:d7:77:9f:4c:63: 2e:b4:03:da:1f:8f:67:ad:ed:59:59:6d:c0:f7:d0:b3:64:69: 6f:06:b5:b3:83:22:f8:19:63:18:e0:64:f1:5c:d2:fe:e7:11: ae:95:e8:4d:04:26:1c:0a:d2:fc:d5:db:81:92:98:e7:5a:bc: 20:01:4b:f8:5a:b5:75:e1:71:62:be:50:81:69:b2:b8:9a:7a: ad:3c:22:d2:a2:a6:c4:70:75:ca:2b:69:3b:e7:d7:0b:41:4d: 2c:c2:f0:fc:fd:37:9d:4a:05:38:e0:51:75:91:90:df:5a:5c: 17:1c:2e:ce:f3:c8:2a:69:57:cf:cb:ee:10:ee:fd:d9:00:2a: 46:3f:29:9e:fb:9a:98:7d:38:88:50:f1:68:6d:a5:f0:ac:cb: b7:a0:f6:b0:c0:50:21:68:90:f2:17:d3:0d:10:ab:56:f0:83: 53:ef:74:2d:f7:ae:80:17:e7:3a:bb:2a:69:b6:b4:95:fe:00: 1c:c8:03:cb:a7:98:44:1c:75:6b:1f:6e:7f:b6:8f:37:ed:5e: c6:f9:dc:a3:f6:2f:d0:9a:2f:9f:f4:b6:b3:d1:46:5e:08:d9: f0:f6:fd:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+IuuDydaxmu3zSxcDgSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMTFhZTIzYTNlOWM4YmM2ZjVhNzljNzE1ZmE5OWE3OGNm ODVkZmUwHhcNMjYwMTI3MDEwMTQ1WhcNMjYwMTI4MDEwMTQ1WjAzMTEwLwYDVQQD EygxMjdiNGExZTkxNGM5NzgzZWQ1NTlkODg5NmMzN2RjZmE1ZDMyMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I9IEoh7N5dq3BTp7fybkcEGs1hg TflrOTSq3CXvkMcv4jmmPtMvEzQ4OTSrVhjnY6YY+wsXANsJ4Z3xj8i26CXoXEd9 Dh4Nv+8XzmDuFBm/wRuHRuX8Rfz2/7HkSU5haoONCarmReu6S/i50ihZNsqmOQSS xEolQ+Ezn+DO6BRcJ7+uv/8UJDtuijc78NEGvhXheu8iNvqWENZWmz23fTFTHBHz ofIC6umce5FilGsv13eUutVt7vzSGOeL3zOSofpRSfdH3PXAOSdK7c+ruLo2PW6u 9RMMQys0fo7QoSgLOya/BrN4kGF7zxQUqHRBJlP0BwwzFfqIngJbt6DvcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ7Sh6RTJeD7VWdiJbDfc+l0yLiMB8GA1UdIwQY MBaAFLoRriOj6ci8b1p5xxX6maeM+F3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGIt YjFlMGRkMmJmNWM3LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85ZWE2MzYtZWMxMS00MTU5LWIyNGItYjFlMGRkMmJmNWM3 LzEvdWhHdUk2UHB5THh2V25uSEZmcVpwNHo0WGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqR/WCqI RWPDcuBaAGUg0ZMBckk8pVpw3tRObEDsc9d3n0xjLrQD2h+PZ63tWVltwPfQs2Rp bwa1s4Mi+BljGOBk8VzS/ucRrpXoTQQmHArS/NXbgZKY51q8IAFL+Fq1deFxYr5Q gWmyuJp6rTwi0qKmxHB1yitpO+fXC0FNLMLw/P03nUoFOOBRdZGQ31pcFxwuzvPI KmlXz8vuEO792QAqRj8pnvuamH04iFDxaG2l8KzLt6D2sMBQIWiQ8hfTDRCrVvCD U+90LfeugBfnOrsqaba0lf4AHMgDy6eYRBx1ax9uf7aPN+1exvnco/Yv0Jovn/S2 s9FGXgjZ8Pb95Q== -----END CERTIFICATE-----Generated at Tue Jan 27 09:12:26 2026 by rpki-client