This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json) Hash identifier: pMJ3xRZLKzLxpoEv/EJ59gNVX/SDrvPUTjBtqjAdXNg= Subject key identifier: 8F:07:5B:F8:B3:CC:27:B4:11:69:93:EA:09:5A:35:FA:D9:CD:43:BB Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Certificate serial: 019BCE678603E1C2471090C6EB55DD2123D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft Manifest number: 0E97 Signing time: Sun 18 Jan 2026 00:00:49 +0000 Manifest this update: Sun 18 Jan 2026 00:00:49 +0000 Manifest next update: Mon 19 Jan 2026 00:00:49 +0000 Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=) 2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: 9q2mj506Ao85vFrJEZWy9jSenNxVqlCr2o3tSRDtWgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:67:86:03:e1:c2:47:10:90:c6:eb:55:dd:21:23:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94 Validity Not Before: Jan 18 00:00:49 2026 GMT Not After : Jan 19 00:00:49 2026 GMT Subject: CN=8f075bf8b3cc27b4116993ea095a35fad9cd43bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:1f:7d:85:a4:85:bb:43:66:6a:27:f3:1c: be:c4:a8:df:72:62:cb:01:77:21:34:d0:12:db:c2: 60:ed:69:d4:44:2c:24:cb:44:c4:a8:53:ae:d3:f3: 3f:03:ae:02:37:65:86:3d:60:65:86:06:7e:bc:1d: e0:92:43:cb:b9:a0:59:fe:9a:5a:69:c6:50:e5:08: cd:df:58:53:4c:e3:44:85:70:a7:3f:47:fb:46:6b: b3:10:19:a3:9a:e1:16:cc:92:f9:67:d6:da:e7:41: 67:50:a2:bf:11:b1:31:c9:d3:2f:f6:9b:da:3b:68: 41:ee:7d:a7:a3:3a:c6:60:2f:60:ac:69:ab:72:ce: 05:e4:52:7b:a6:c6:15:7c:f6:da:a5:74:01:62:81: c8:ab:fe:8e:42:a9:c4:b2:09:8d:bb:9a:cc:65:76: cb:3d:34:5f:fc:b6:b9:28:5a:ae:99:2e:9a:06:09: 17:a1:50:20:d3:f5:63:cc:4c:e8:08:4e:73:7e:e5: 00:4f:0b:b0:0b:85:2d:cf:45:51:f4:45:0a:33:e9: e0:bf:67:97:3e:c1:5a:9d:76:f5:e5:fa:cf:ea:c3: 05:e1:a0:a6:f1:7c:62:3d:74:dc:c9:ad:60:ab:65: 98:fd:ec:78:93:4c:79:25:34:1e:0d:a0:7a:35:82: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:07:5B:F8:B3:CC:27:B4:11:69:93:EA:09:5A:35:FA:D9:CD:43:BB X509v3 Authority Key Identifier: keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:6a:09:8f:06:21:bd:ec:e6:40:56:69:00:e3:4f:e8:8f: fb:bd:9b:43:ea:0a:9c:cd:82:cd:5d:d5:a6:2c:e6:c4:18:6e: 61:c4:e9:f1:39:a1:39:ee:b3:5e:bf:97:17:1b:be:f6:00:4d: ae:65:9e:5d:93:0a:fa:28:ea:e3:d8:01:9d:85:74:6c:8a:87: a9:87:6f:f8:64:36:ac:31:dd:1a:17:76:10:11:78:14:af:4c: 2d:15:a2:f0:3d:59:17:cb:a7:6b:19:95:70:94:4e:59:4b:cf: bd:55:e2:a5:dd:16:76:2d:fb:c8:f0:ca:fe:71:c2:d5:4c:9e: b4:98:3a:ac:ed:f4:42:5f:f8:a5:8b:92:51:c5:ce:44:29:25: ec:be:a5:1f:07:d6:e5:94:81:c0:97:1e:83:6f:83:91:d9:45: 5c:8c:76:da:8c:41:48:6f:94:55:5b:ba:04:cb:76:11:41:13: ba:a5:1c:cf:d7:96:05:5d:07:e6:23:9f:37:5d:4d:db:f9:21: 68:61:1e:0a:64:29:17:ca:7f:83:3a:eb:1b:74:cf:3c:82:05: eb:a5:70:95:21:11:ee:d2:9c:b5:3d:01:52:65:e0:c9:0d:27: 25:fe:e8:b8:c0:5e:17:38:79:73:80:db:07:d8:83:a6:3a:04: 02:28:35:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvOZ4YD4cJHEJDG61XdISPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1 MmJiOTQwHhcNMjYwMTE4MDAwMDQ5WhcNMjYwMTE5MDAwMDQ5WjAzMTEwLwYDVQQD Eyg4ZjA3NWJmOGIzY2MyN2I0MTE2OTkzZWEwOTVhMzVmYWQ5Y2Q0M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cYffYWkhbtDZmon8xy+xKjfcmLL AXchNNAS28Jg7WnURCwky0TEqFOu0/M/A64CN2WGPWBlhgZ+vB3gkkPLuaBZ/ppa acZQ5QjN31hTTONEhXCnP0f7RmuzEBmjmuEWzJL5Z9ba50FnUKK/EbExydMv9pva O2hB7n2nozrGYC9grGmrcs4F5FJ7psYVfPbapXQBYoHIq/6OQqnEsgmNu5rMZXbL PTRf/La5KFqumS6aBgkXoVAg0/VjzEzoCE5zfuUATwuwC4Utz0VR9EUKM+ngv2eX PsFanXb15frP6sMF4aCm8XxiPXTcya1gq2WY/ex4k0x5JTQeDaB6NYL7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8HW/izzCe0EWmT6glaNfrZzUO7MB8GA1UdIwQY MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+1qCY8G Ib3s5kBWaQDjT+iP+72bQ+oKnM2CzV3VpizmxBhuYcTp8TmhOe6zXr+XFxu+9gBN rmWeXZMK+ijq49gBnYV0bIqHqYdv+GQ2rDHdGhd2EBF4FK9MLRWi8D1ZF8unaxmV cJROWUvPvVXipd0Wdi37yPDK/nHC1UyetJg6rO30Ql/4pYuSUcXORCkl7L6lHwfW 5ZSBwJceg2+DkdlFXIx22oxBSG+UVVu6BMt2EUETuqUcz9eWBV0H5iOfN11N2/kh aGEeCmQpF8p/gzrrG3TPPIIF66VwlSER7tKctT0BUmXgyQ0nJf7ouMBeFzh5c4Db B9iDpjoEAig1NA== -----END CERTIFICATE-----Generated at Sun Jan 18 09:41:11 2026 by rpki-client