This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json) Hash identifier: NMm+e6/qDmkWg2uPpU/4LhddMlc8Z9+6dkWu14xOYaQ= Subject key identifier: E4:17:2E:5F:39:C9:AB:F2:3C:82:F4:D5:69:0E:B2:ED:20:CF:2A:AA Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874 Certificate serial: 019BFE7831E079F2B14FD9DCFAF94C001ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft Manifest number: 12B7 Signing time: Tue 27 Jan 2026 08:00:48 +0000 Manifest this update: Tue 27 Jan 2026 08:00:48 +0000 Manifest next update: Wed 28 Jan 2026 08:00:48 +0000 Files and hashes: 1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: 6b74/JqCluUQDnX7AVMBgYkZMFgTItBE+dFv9VH3bXE=) 2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:31:e0:79:f2:b1:4f:d9:dc:fa:f9:4c:00:1e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52386e520478e625be1d6282d216b05912f83874 Validity Not Before: Jan 27 08:00:48 2026 GMT Not After : Jan 28 08:00:48 2026 GMT Subject: CN=e4172e5f39c9abf23c82f4d5690eb2ed20cf2aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:34:dc:02:b0:39:49:56:35:ca:f7:2e:29: f0:97:aa:5b:d6:34:44:71:14:dd:06:07:23:e5:08: 13:86:c5:d4:71:de:c3:ad:fb:b8:59:4c:eb:2f:71: 89:0a:94:7b:f0:b2:7e:70:19:a6:10:0a:f5:67:57: 26:ba:60:cf:6f:7e:75:b6:96:27:aa:ad:2f:ca:c1: d8:02:ec:51:d3:c4:e8:e5:7f:e8:c2:b7:1e:f7:91: b5:d9:8c:1d:cf:98:de:56:5f:50:93:7a:d3:d2:d0: 75:f1:d1:3f:a1:0f:2e:e8:fb:f4:bc:f4:d3:03:03: bb:4b:3d:ea:a0:8b:d1:a2:ab:1c:64:6f:e2:a2:0f: fe:57:46:12:21:0e:51:93:3e:59:66:08:e9:5e:5a: f7:3d:18:6f:47:8d:10:d5:13:18:ca:d1:c8:72:8e: 51:81:de:9e:7a:1c:ef:3a:93:6c:a4:3a:ea:75:8d: 45:5d:3b:5c:1f:17:d5:10:0b:bb:f9:46:c2:f1:c5: 70:0f:74:5d:7c:df:d3:41:e1:c8:4e:5a:9d:bb:f1: c7:5e:82:b4:ac:0c:c2:18:76:fb:1a:37:ca:cd:1c: 4c:64:46:fd:f3:9c:8e:7f:45:2c:3e:4d:bd:11:27: e0:db:78:39:cc:c1:d6:ba:69:b9:52:8a:dd:1a:db: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:2E:5F:39:C9:AB:F2:3C:82:F4:D5:69:0E:B2:ED:20:CF:2A:AA X509v3 Authority Key Identifier: keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f9:42:38:ac:a2:e6:a0:6f:41:94:cc:be:61:86:ac:5e:ba: dc:88:da:b1:f8:72:ac:b8:4a:b8:a0:e0:d7:47:30:65:a2:ee: cd:3d:7c:fc:b9:f4:b7:e8:b9:ab:5d:3b:71:7d:83:66:fd:38: 92:ad:be:e3:8b:1d:bc:35:57:66:ca:13:94:4d:f0:77:e0:c6: 57:73:f4:de:e4:42:28:dc:02:95:68:f1:3d:bf:c2:11:f2:d2: 12:5c:cc:5b:82:63:be:8e:8a:39:1e:11:bb:f5:8a:70:ed:fb: 99:7f:be:59:02:f1:c0:04:2c:1e:dd:63:e6:a8:5d:d3:2f:b8: dd:00:03:b0:ac:a3:5e:d7:a5:77:67:1c:15:3b:39:4a:b6:07: a6:52:1a:a1:62:a1:7e:cf:25:56:27:12:f3:32:1a:a8:b0:7a: 11:b9:d4:fb:5f:b9:67:ea:5f:be:b9:4f:93:e1:4a:7b:c7:e6: 05:9e:25:19:db:f4:9a:f4:80:90:1b:ec:1c:0c:bc:74:f1:55: 7f:29:8f:5f:41:54:ee:60:56:1c:92:58:43:22:15:7b:0c:38: 00:16:02:bd:5e:8c:bf:95:fc:9f:5a:b8:15:da:33:cb:68:93: 73:22:61:51:b3:39:1b:3b:dd:09:9f:b9:aa:4b:b1:f2:79:ba: 32:c0:f6:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eDHgefKxT9nc+vlMAB7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm ODM4NzQwHhcNMjYwMTI3MDgwMDQ4WhcNMjYwMTI4MDgwMDQ4WjAzMTEwLwYDVQQD EyhlNDE3MmU1ZjM5YzlhYmYyM2M4MmY0ZDU2OTBlYjJlZDIwY2YyYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBw03AKwOUlWNcr3Linwl6pb1jRE cRTdBgcj5QgThsXUcd7Drfu4WUzrL3GJCpR78LJ+cBmmEAr1Z1cmumDPb351tpYn qq0vysHYAuxR08To5X/owrce95G12Ywdz5jeVl9Qk3rT0tB18dE/oQ8u6Pv0vPTT AwO7Sz3qoIvRoqscZG/iog/+V0YSIQ5Rkz5ZZgjpXlr3PRhvR40Q1RMYytHIco5R gd6eehzvOpNspDrqdY1FXTtcHxfVEAu7+UbC8cVwD3RdfN/TQeHITlqdu/HHXoK0 rAzCGHb7GjfKzRxMZEb985yOf0UsPk29ESfg23g5zMHWumm5UordGtuxswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQXLl85yavyPIL01WkOsu0gzyqqMB8GA1UdIwQY MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvlCOKyi 5qBvQZTMvmGGrF663IjasfhyrLhKuKDg10cwZaLuzT18/Ln0t+i5q107cX2DZv04 kq2+44sdvDVXZsoTlE3wd+DGV3P03uRCKNwClWjxPb/CEfLSElzMW4Jjvo6KOR4R u/WKcO37mX++WQLxwAQsHt1j5qhd0y+43QADsKyjXteld2ccFTs5SrYHplIaoWKh fs8lVicS8zIaqLB6EbnU+1+5Z+pfvrlPk+FKe8fmBZ4lGdv0mvSAkBvsHAy8dPFV fymPX0FU7mBWHJJYQyIVeww4ABYCvV6Mv5X8n1q4Fdozy2iTcyJhUbM5GzvdCZ+5 qkux8nm6MsD2Og== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:22 2026 by rpki-client