This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft File: uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json) Hash identifier: thswI1I0cQ5c9u/zqiYVXgHYjSOp1bTRQl3LL89Kauc= Subject key identifier: 42:3C:01:73:A2:59:41:84:04:74:9D:F9:8B:19:9E:B2:EA:2A:D8:CE Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5 Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5 Certificate serial: 019BD7D8E41711C3B7EEDD2CB41FCF471C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft Manifest number: 24 Signing time: Mon 19 Jan 2026 20:01:14 +0000 Manifest this update: Mon 19 Jan 2026 20:01:14 +0000 Manifest next update: Tue 20 Jan 2026 20:01:14 +0000 Files and hashes: 1: 3GF4RweBnJwOd-6nUT5PiBsu4pA.asa (hash: DpP48tndWTlvXIujf26AwodQv/G4yY8pTSdg8bAtIy4=) 2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: exK+3EYXAYvETZUi9p06h5ECqQ3RtlkGn7soGb9Ecbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d8:e4:17:11:c3:b7:ee:dd:2c:b4:1f:cf:47:1c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5 Validity Not Before: Jan 19 20:01:14 2026 GMT Not After : Jan 20 20:01:14 2026 GMT Subject: CN=423c0173a259418404749df98b199eb2ea2ad8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:9d:c7:a5:ff:83:27:1a:ea:77:f8:c5:a9: 69:aa:b1:30:d6:de:98:d5:9c:b4:f3:d0:fc:dc:a9: 82:29:c3:da:8f:fc:fb:c8:da:54:9f:ac:6b:91:81: 4d:60:4c:70:1b:c5:0f:ae:3e:aa:8c:4d:5c:38:d5: 4a:05:b1:bd:9f:6f:2a:b3:a4:be:74:97:94:dd:0b: 94:86:6e:88:0b:e4:f2:86:da:5d:92:94:9f:92:81: 37:02:42:a1:bc:78:07:49:ac:a1:f9:b3:64:83:31: fe:37:b4:e1:1a:a6:36:da:52:ee:5d:6b:36:f2:03: 87:7f:9b:43:de:34:12:32:94:28:d0:87:0d:ea:2b: 56:3e:9b:35:2c:0f:a1:96:2c:9c:87:87:9a:4e:59: 1a:8f:21:3a:8f:7a:df:ef:ae:28:5e:be:20:13:b3: 28:35:5f:ec:98:da:d2:c4:e0:94:83:4a:cb:2b:7b: 26:7e:87:00:bd:6e:9e:de:55:83:4f:57:9b:c0:5a: 3f:89:e5:54:9a:72:94:b3:7f:ef:1b:8b:1b:d3:2d: 6e:28:61:a9:a9:cf:47:87:17:37:7f:87:27:25:3d: e1:e0:b8:8e:9f:65:c1:f2:1b:af:3e:d0:2a:77:cd: 88:50:aa:ad:ee:8f:8a:98:09:08:7a:23:a8:5a:51: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3C:01:73:A2:59:41:84:04:74:9D:F9:8B:19:9E:B2:EA:2A:D8:CE X509v3 Authority Key Identifier: keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d7:13:08:40:c8:b4:6a:4e:d2:42:5b:fc:bd:8e:8d:ef:dd: 4a:c6:93:d1:03:99:c2:11:f5:18:cb:75:9a:a1:55:ac:48:7a: 70:37:69:0a:81:7a:16:f6:41:f6:b4:f1:22:ab:b2:95:ac:3e: 5d:9f:0c:29:40:75:ae:9a:6a:aa:51:c1:25:37:98:6b:7b:1e: 08:1d:f0:2b:f3:20:c8:be:5e:cd:05:b6:89:cf:55:32:d9:73: dc:13:c4:f8:a4:5f:30:e5:79:51:18:ff:91:d6:6d:c5:f4:9e: da:0f:19:9c:7d:95:8a:fb:51:39:45:54:04:4d:d4:1e:29:ae: 63:f5:a1:30:2f:45:2c:b2:64:42:01:65:b3:29:ab:d7:cf:28: f3:f9:6f:ad:07:f8:f3:e1:1f:c7:e2:6a:ec:73:f2:b9:75:02: 89:e6:bc:fe:f7:02:95:8d:5f:0b:94:21:c9:89:13:01:6c:cd: e2:1d:3d:bb:47:db:59:46:e3:33:ba:2a:2e:08:6d:51:42:eb: d2:a0:de:93:df:fb:13:8e:58:e8:fc:86:b5:3e:98:a9:e7:be: 13:6c:70:af:ba:02:01:5e:42:1e:aa:65:cc:1c:ff:22:24:19: d3:72:0f:83:eb:37:cc:ce:55:85:5d:c9:e7:9f:5f:fe:8a:17: 8c:2c:f4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvX2OQXEcO37t0stB/PRxwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl ZjJkYjUwHhcNMjYwMTE5MjAwMTE0WhcNMjYwMTIwMjAwMTE0WjAzMTEwLwYDVQQD Eyg0MjNjMDE3M2EyNTk0MTg0MDQ3NDlkZjk4YjE5OWViMmVhMmFkOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFGdx6X/gyca6nf4xalpqrEw1t6Y 1Zy089D83KmCKcPaj/z7yNpUn6xrkYFNYExwG8UPrj6qjE1cONVKBbG9n28qs6S+ dJeU3QuUhm6IC+TyhtpdkpSfkoE3AkKhvHgHSayh+bNkgzH+N7ThGqY22lLuXWs2 8gOHf5tD3jQSMpQo0IcN6itWPps1LA+hliych4eaTlkajyE6j3rf764oXr4gE7Mo NV/smNrSxOCUg0rLK3smfocAvW6e3lWDT1ebwFo/ieVUmnKUs3/vG4sb0y1uKGGp qc9Hhxc3f4cnJT3h4LiOn2XB8huvPtAqd82IUKqt7o+KmAkIeiOoWlHIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI8AXOiWUGEBHSd+YsZnrLqKtjOMB8GA1UdIwQY MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et ODM5YWQ3ZDA5M2VkLzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdcTCEDI tGpO0kJb/L2Oje/dSsaT0QOZwhH1GMt1mqFVrEh6cDdpCoF6FvZB9rTxIquylaw+ XZ8MKUB1rppqqlHBJTeYa3seCB3wK/MgyL5ezQW2ic9VMtlz3BPE+KRfMOV5URj/ kdZtxfSe2g8ZnH2VivtROUVUBE3UHimuY/WhMC9FLLJkQgFlsymr188o8/lvrQf4 8+Efx+Jq7HPyuXUCiea8/vcClY1fC5QhyYkTAWzN4h09u0fbWUbjM7oqLghtUULr 0qDek9/7E45Y6PyGtT6Yqee+E2xwr7oCAV5CHqplzBz/IiQZ03IPg+s3zM5VhV3J 559f/ooXjCz0DQ== -----END CERTIFICATE-----Generated at Tue Jan 20 02:13:40 2026 by rpki-client