This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json) Hash identifier: svxKY4wltRmJ5EFyJvnY3sfFPmidtLuJfMIy60/w4po= Subject key identifier: 7C:7A:6F:AD:72:F3:AB:92:80:34:7D:C1:FD:28:33:1E:D4:DB:A0:4D Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Certificate serial: 019BF687E60F5B4AEE362C343AEDCF9A558E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft Manifest number: 095C Signing time: Sun 25 Jan 2026 19:00:59 +0000 Manifest this update: Sun 25 Jan 2026 19:00:59 +0000 Manifest next update: Mon 26 Jan 2026 19:00:59 +0000 Files and hashes: 1: HF20xwiU_OmVlYn7AG5yVbrP7VQ.roa (hash: 0b37VardXMFgSQteic5rkAQqorX7ea/QfI9Oz3cEctk=) 2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: B9HBuGOKAOBIwiXMJcxU7KOyb+tGa1u3OEiYmXwRPiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e6:0f:5b:4a:ee:36:2c:34:3a:ed:cf:9a:55:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06 Validity Not Before: Jan 25 19:00:59 2026 GMT Not After : Jan 26 19:00:59 2026 GMT Subject: CN=7c7a6fad72f3ab9280347dc1fd28331ed4dba04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:d6:c4:1f:3c:c2:83:23:6f:be:9b:c5:91: a4:b8:61:29:54:65:ac:e9:54:77:55:d8:f3:80:45: a0:91:d2:a9:16:27:fe:11:35:30:52:b3:4d:52:db: 85:8c:f5:76:6a:54:6d:d3:97:8b:1c:e6:9a:6d:fe: ef:f3:6e:36:3e:73:36:a7:7a:0a:ae:b9:06:e7:7d: 98:80:e5:1f:c0:7d:30:34:a4:35:39:bf:0c:fc:a8: 6f:a3:8c:05:9b:60:19:75:8e:5e:fc:df:7e:87:9b: 1a:c6:a6:c7:f4:a1:01:52:b7:0d:bf:23:31:5c:93: 69:36:ba:ed:08:87:72:69:a3:3d:90:c7:f1:14:cf: d2:9c:65:c8:95:63:7d:a0:4b:1b:f9:49:db:30:4a: ad:d3:c6:02:09:d9:25:e6:2e:95:2f:84:dc:19:36: 6a:09:e1:f6:cb:3a:f7:40:a7:20:b2:44:60:45:6f: 0f:4f:33:81:f0:bd:9d:45:1a:7b:b4:06:be:24:df: 44:7a:5f:4f:53:09:33:0c:fa:75:04:68:22:6b:c3: 02:a0:cd:50:10:2a:11:48:b6:9b:1c:89:ea:9f:fe: b8:9a:df:84:65:95:bd:2f:af:d8:0a:5c:49:bd:71: 2f:ce:d1:12:ab:d0:36:db:5d:b1:53:ad:10:b5:5a: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:6F:AD:72:F3:AB:92:80:34:7D:C1:FD:28:33:1E:D4:DB:A0:4D X509v3 Authority Key Identifier: keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:4b:bf:ab:78:c2:dc:dd:23:a8:7e:92:ac:89:71:80:3c: fa:13:cd:68:94:ba:c0:20:1e:fd:de:8e:be:c2:8f:16:01:ae: 4f:78:9c:3d:0e:cd:f9:6f:3e:fb:cb:ab:ee:5f:f0:47:af:68: a8:7b:a6:2d:d8:51:a4:b0:e5:ce:c0:21:21:5e:fc:f0:84:08: 06:1c:67:a4:01:f4:25:64:f8:e5:91:4e:9e:e4:a6:6b:4d:97: 20:f3:18:b1:4f:40:2f:93:69:34:7d:17:fd:4d:6e:5b:e5:b8: bc:7c:b0:4a:d0:d5:d5:b3:01:7d:c4:2c:31:34:81:88:86:e8: d7:c1:d4:b0:5f:34:54:84:7e:4d:71:d7:ed:e6:66:19:09:f2: b0:7b:ee:93:99:65:73:45:b7:55:3c:d5:92:7e:56:67:bf:6b: 9d:41:a1:7a:4f:fd:26:c6:f6:41:2e:f4:d7:05:6a:b9:cc:51: 87:e2:38:82:48:7a:e6:d5:dc:86:e8:e5:c0:19:ed:03:28:94: d7:7c:b6:aa:2c:e9:a4:b9:31:ee:ae:60:8e:62:ac:14:e6:4e: 44:ee:4d:1d:92:cd:48:ed:58:d0:76:a7:e9:c6:1f:d4:62:db: 52:85:e2:a3:56:9e:93:ea:56:82:08:32:bf:16:8d:a6:d4:9e: 66:35:82:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+YPW0ruNiw0Ou3PmlWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMjhlYzljY2Q2ZDg2MWY1ZjFhZmRhZDAwNDZmMzNjOTEw M2JhMDYwHhcNMjYwMTI1MTkwMDU5WhcNMjYwMTI2MTkwMDU5WjAzMTEwLwYDVQQD Eyg3YzdhNmZhZDcyZjNhYjkyODAzNDdkYzFmZDI4MzMxZWQ0ZGJhMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EHWxB88woMjb76bxZGkuGEpVGWs 6VR3VdjzgEWgkdKpFif+ETUwUrNNUtuFjPV2alRt05eLHOaabf7v8242PnM2p3oK rrkG532YgOUfwH0wNKQ1Ob8M/Khvo4wFm2AZdY5e/N9+h5saxqbH9KEBUrcNvyMx XJNpNrrtCIdyaaM9kMfxFM/SnGXIlWN9oEsb+UnbMEqt08YCCdkl5i6VL4TcGTZq CeH2yzr3QKcgskRgRW8PTzOB8L2dRRp7tAa+JN9Eel9PUwkzDPp1BGgia8MCoM1Q ECoRSLabHInqn/64mt+EZZW9L6/YClxJvXEvztESq9A2212xU60QtVrrGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx6b61y86uSgDR9wf0oMx7U26BNMB8GA1UdIwQY MBaAFHAo7JzNbYYfXxr9rQBG8zyRA7oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAt Y2NkZDA2NTYzYTVmLzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYzMxNTQtNzgwMy00ZWM2LWJmNzAtY2NkZDA2NTYzYTVm LzEvY0Nqc25NMXRoaDlmR3YydEFFYnpQSkVEdWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaBLv6t4 wtzdI6h+kqyJcYA8+hPNaJS6wCAe/d6OvsKPFgGuT3icPQ7N+W8++8ur7l/wR69o qHumLdhRpLDlzsAhIV788IQIBhxnpAH0JWT45ZFOnuSma02XIPMYsU9AL5NpNH0X /U1uW+W4vHywStDV1bMBfcQsMTSBiIbo18HUsF80VIR+TXHX7eZmGQnysHvuk5ll c0W3VTzVkn5WZ79rnUGhek/9Jsb2QS701wVqucxRh+I4gkh65tXchujlwBntAyiU 13y2qizppLkx7q5gjmKsFOZORO5NHZLNSO1Y0Han6cYf1GLbUoXio1aek+pWgggy vxaNptSeZjWCow== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:49 2026 by rpki-client