This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json) Hash identifier: T0C7ihjvFoCx5PM7uRFZlJlOa661Cz/k7N4LO8+V2So= Subject key identifier: 03:F5:DE:16:AD:58:B7:AC:FF:D9:4E:84:F6:FC:14:0D:5C:B9:76:72 Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Certificate serial: 019BFA9BFF511787E872BD578927E2C3FBED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft Manifest number: 17F4 Signing time: Mon 26 Jan 2026 14:01:25 +0000 Manifest this update: Mon 26 Jan 2026 14:01:25 +0000 Manifest next update: Tue 27 Jan 2026 14:01:25 +0000 Files and hashes: 1: ELl-IrEPcLADQrckbaizcrV9pro.roa (hash: dX1w5CK8c5BwI0rUjgeAtIMuwEFW5kTJU8HWC5OU5oY=) 2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: NiZYeqvXvrYuhz3DafkmBZwZEP8jBeYcMDkZbJg6D8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:ff:51:17:87:e8:72:bd:57:89:27:e2:c3:fb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d Validity Not Before: Jan 26 14:01:25 2026 GMT Not After : Jan 27 14:01:25 2026 GMT Subject: CN=03f5de16ad58b7acffd94e84f6fc140d5cb97672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:df:1a:c2:c6:4b:73:ad:a7:60:f6:ce:69: 47:fa:93:ca:99:ec:d6:82:8d:42:ac:28:89:79:ec: 19:4f:ea:26:9a:e5:c8:75:da:22:a8:ad:80:a6:f0: d9:11:54:35:9e:d5:07:02:b9:7d:e1:6f:c1:30:b4: 33:3b:c0:8b:6e:fe:9c:bc:88:8a:12:c8:7c:dc:a0: 4c:f8:0e:12:81:cf:48:d7:00:53:46:6f:d4:31:c1: f4:0c:6e:a9:86:36:81:45:78:99:a9:8c:ea:27:06: 53:61:36:10:72:1d:9f:70:91:6d:56:a0:e4:96:e0: d8:9e:10:df:63:ff:89:c1:fd:02:f2:46:c4:af:de: 55:39:88:30:78:2d:68:65:a8:8b:c3:38:0d:5a:6f: c3:c0:06:4d:7b:88:40:39:37:2e:e7:f3:93:ba:4a: 8f:45:53:ef:23:de:24:df:36:e6:8a:7d:4e:84:d0: 45:6a:d7:11:9d:82:36:96:7b:14:55:14:65:4c:c0: a8:4e:87:03:d4:e8:d5:00:48:4f:24:41:0c:24:ed: 1b:a8:b7:cd:8c:fa:4c:16:f2:97:a2:4a:19:d3:3c: d3:47:48:bd:38:6e:0a:e4:4f:d7:42:16:9e:68:fd: 76:d0:60:98:04:b6:f2:2a:12:ff:67:2b:89:64:3a: 3b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:DE:16:AD:58:B7:AC:FF:D9:4E:84:F6:FC:14:0D:5C:B9:76:72 X509v3 Authority Key Identifier: keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a8:14:68:a8:62:75:e0:3c:17:b4:1a:62:1d:6c:ce:43:65: 0c:c7:a7:64:a4:02:84:6f:d5:13:8b:f7:4d:03:9c:98:1f:6f: f5:68:86:80:e3:08:ee:3f:98:23:23:83:72:f6:46:3f:27:54: 03:17:7a:2e:ac:20:77:4d:71:bb:72:4b:54:3f:39:ec:72:94: 26:16:43:cc:9f:42:2c:28:f5:1e:2f:27:eb:6f:e2:3d:33:67: 68:0f:20:20:45:8c:dc:c1:cd:a4:67:4a:ca:45:1a:c9:64:7e: e7:85:66:f4:3c:4e:06:fb:56:f0:3a:7a:e4:45:a6:ad:7d:bb: 86:f1:6d:35:0c:0e:55:17:c6:45:bb:bd:da:f5:61:78:86:98: 97:df:5b:57:b3:6c:c8:37:52:11:de:d2:2f:96:7f:ae:63:f8: e2:59:ec:7a:47:4b:cf:66:8c:64:dd:a7:9d:de:fe:76:bc:43: b7:19:1a:86:3d:85:bf:ec:65:55:05:8e:c2:f7:15:ca:8d:88: 61:23:21:cb:f3:06:40:77:8c:1f:83:b3:aa:50:ed:19:e5:b7: 2b:e6:76:de:35:a4:95:b1:1b:a9:94:0e:8c:da:77:bd:92:08: 9d:58:49:ff:18:0b:be:8d:43:e6:8d:8e:90:b2:6c:08:63:c3: 10:39:75:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/9RF4focr1XiSfiw/vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl NmJlMmQwHhcNMjYwMTI2MTQwMTI1WhcNMjYwMTI3MTQwMTI1WjAzMTEwLwYDVQQD EygwM2Y1ZGUxNmFkNThiN2FjZmZkOTRlODRmNmZjMTQwZDVjYjk3NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IDfGsLGS3Otp2D2zmlH+pPKmezW go1CrCiJeewZT+ommuXIddoiqK2ApvDZEVQ1ntUHArl94W/BMLQzO8CLbv6cvIiK Esh83KBM+A4Sgc9I1wBTRm/UMcH0DG6phjaBRXiZqYzqJwZTYTYQch2fcJFtVqDk luDYnhDfY/+Jwf0C8kbEr95VOYgweC1oZaiLwzgNWm/DwAZNe4hAOTcu5/OTukqP RVPvI94k3zbmin1OhNBFatcRnYI2lnsUVRRlTMCoTocD1OjVAEhPJEEMJO0bqLfN jPpMFvKXokoZ0zzTR0i9OG4K5E/XQhaeaP120GCYBLbyKhL/ZyuJZDo7fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP13hatWLes/9lOhPb8FA1cuXZyMB8GA1UdIwQY MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5 LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqgUaKhi deA8F7QaYh1szkNlDMenZKQChG/VE4v3TQOcmB9v9WiGgOMI7j+YIyODcvZGPydU Axd6Lqwgd01xu3JLVD857HKUJhZDzJ9CLCj1Hi8n62/iPTNnaA8gIEWM3MHNpGdK ykUayWR+54Vm9DxOBvtW8Dp65EWmrX27hvFtNQwOVRfGRbu92vVheIaYl99bV7Ns yDdSEd7SL5Z/rmP44lnsekdLz2aMZN2nnd7+drxDtxkahj2Fv+xlVQWOwvcVyo2I YSMhy/MGQHeMH4OzqlDtGeW3K+Z23jWklbEbqZQOjNp3vZIInVhJ/xgLvo1D5o2O kLJsCGPDEDl1Kg== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:29 2026 by rpki-client