This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: mO165k0BHL3GkQuEL7B/gCbtRRe29LAV8DRidBviiRk= Subject key identifier: 35:1D:7D:2C:39:26:59:D7:37:E0:ED:9E:29:4F:E0:7E:B3:8D:54:F0 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019BF42BE08D601D9A05CA0A1CEE53610B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0DEB Signing time: Sun 25 Jan 2026 08:01:14 +0000 Manifest this update: Sun 25 Jan 2026 08:01:14 +0000 Manifest next update: Mon 26 Jan 2026 08:01:14 +0000 Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=) 2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=) 3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=) 4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=) 5: O29pt5WdBJDI4HT4wvxq7BQK_kY.roa (hash: SEfN9jxf68fQ4yQGMYSFIzM/5AM/oQlsCNG9wQ//bA8=) 6: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=) 7: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: ahmLENPkLPcuAZhD1N+vBiaDnettDKz3rhPfHWVR1wc=) 8: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=) 9: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=) 10: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=) 11: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=) 12: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e0:8d:60:1d:9a:05:ca:0a:1c:ee:53:61:0b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Jan 25 08:01:14 2026 GMT Not After : Jan 26 08:01:14 2026 GMT Subject: CN=351d7d2c392659d737e0ed9e294fe07eb38d54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:31:0e:c9:f4:1c:b2:07:c5:cf:5b:f4:2c: ff:c6:1c:04:95:f6:66:93:e4:ef:fe:40:5a:8f:4e: 78:48:08:98:f1:f0:62:b5:10:be:53:36:63:e4:a1: 5f:f2:2b:c0:3f:29:fc:6c:d1:26:1f:b7:06:6f:66: c2:fe:e4:87:2c:6a:02:54:81:c6:43:8a:c8:25:78: 68:ce:e1:6e:14:86:8b:27:35:06:83:09:67:03:a8: 8c:00:07:f7:03:dc:19:6e:0c:94:60:7a:3e:d4:fa: 23:85:6c:68:f5:bd:fa:0d:84:ab:ef:bf:bf:51:7d: b9:ff:4d:6a:f9:dc:dc:38:19:f8:03:5d:60:0c:67: 48:b5:64:7c:f5:cf:6d:ec:78:12:86:ea:1a:da:d6: f4:83:f4:60:4a:fb:ed:5d:09:eb:a5:81:d9:3a:c7: c6:b0:d3:91:f8:3c:53:f3:24:76:55:bb:d9:41:88: f9:70:b1:df:88:0e:76:ba:41:ac:ba:38:75:e2:c5: 6e:69:d8:98:d2:8b:1a:b7:b2:b7:f5:30:9f:65:12: bb:f1:f2:0a:70:97:9d:82:4d:fc:37:4a:75:41:37: 3e:3d:a3:68:20:7a:96:a5:a0:0a:31:34:51:52:88: b8:67:df:9f:23:03:61:c5:d7:1c:7b:7e:80:fe:9f: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1D:7D:2C:39:26:59:D7:37:E0:ED:9E:29:4F:E0:7E:B3:8D:54:F0 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:26:86:69:d1:7a:be:7d:a2:37:b4:ae:87:e7:75:bc:6f:62: bd:e0:a0:36:01:9d:a4:b3:9b:09:5e:ca:96:8e:39:f6:db:63: 11:ac:38:be:1a:6d:28:b6:d3:62:3d:56:17:24:1c:04:d8:fc: 23:b0:8a:4e:3b:c1:77:d5:96:7a:a1:2e:94:40:2b:35:01:9a: b8:6a:2a:d4:48:95:c5:0e:5e:b7:05:f0:0d:7f:87:f5:a1:8d: 60:be:6b:23:5c:b3:c4:88:4d:43:a0:03:ed:32:a0:af:1d:d4: 8c:bf:8e:bc:14:59:33:0b:c4:e0:10:72:be:42:fa:a5:59:25: 93:16:26:ed:a5:ed:46:2c:d6:be:50:60:10:00:82:0f:d8:db: ca:73:e3:db:c8:e0:8e:34:a8:bc:03:6c:da:78:ee:ef:09:c0: 0c:f7:63:88:da:82:ef:39:86:0d:a5:51:f1:b8:42:96:f6:29: 41:ac:1c:78:96:18:ce:c5:a8:a5:12:8d:b0:7d:b9:57:62:7a: 03:f7:61:10:31:ff:df:aa:6e:1b:15:e2:3b:60:63:2a:9f:37: 25:e0:2e:78:10:67:d1:0c:38:cf:cd:c6:f7:fe:00:f1:92:c1: 71:5d:75:81:e5:b8:b5:38:fa:90:23:ce:6d:7c:f4:52:aa:ec: a7:14:30:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+CNYB2aBcoKHO5TYQuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjYwMTI1MDgwMTE0WhcNMjYwMTI2MDgwMTE0WjAzMTEwLwYDVQQD EygzNTFkN2QyYzM5MjY1OWQ3MzdlMGVkOWUyOTRmZTA3ZWIzOGQ1NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEoxDsn0HLIHxc9b9Cz/xhwElfZm k+Tv/kBaj054SAiY8fBitRC+UzZj5KFf8ivAPyn8bNEmH7cGb2bC/uSHLGoCVIHG Q4rIJXhozuFuFIaLJzUGgwlnA6iMAAf3A9wZbgyUYHo+1PojhWxo9b36DYSr77+/ UX25/01q+dzcOBn4A11gDGdItWR89c9t7HgShuoa2tb0g/RgSvvtXQnrpYHZOsfG sNOR+DxT8yR2VbvZQYj5cLHfiA52ukGsujh14sVuadiY0osat7K39TCfZRK78fIK cJedgk38N0p1QTc+PaNoIHqWpaAKMTRRUoi4Z9+fIwNhxdcce36A/p/D0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUdfSw5JlnXN+DtnilP4H6zjVTwMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiaGadF6 vn2iN7Suh+d1vG9iveCgNgGdpLObCV7Klo459ttjEaw4vhptKLbTYj1WFyQcBNj8 I7CKTjvBd9WWeqEulEArNQGauGoq1EiVxQ5etwXwDX+H9aGNYL5rI1yzxIhNQ6AD 7TKgrx3UjL+OvBRZMwvE4BByvkL6pVklkxYm7aXtRizWvlBgEACCD9jbynPj28jg jjSovANs2nju7wnADPdjiNqC7zmGDaVR8bhClvYpQawceJYYzsWopRKNsH25V2J6 A/dhEDH/36puGxXiO2BjKp83JeAueBBn0Qw4z83G9/4A8ZLBcV11geW4tTj6kCPO bXz0UqrspxQwqg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:04 2026 by rpki-client