This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json) Hash identifier: 37VGNRsPNRiinmtt99SD0qlQcaaUkVLVGaPHFvhzdc0= Subject key identifier: 56:81:08:B1:42:48:23:B4:58:A7:85:B5:60:55:04:E4:73:37:F7:DA Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019BF4622CF9859B1CA7213FBE0AC248E506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft Manifest number: 0F34 Signing time: Sun 25 Jan 2026 09:00:33 +0000 Manifest this update: Sun 25 Jan 2026 09:00:33 +0000 Manifest next update: Mon 26 Jan 2026 09:00:33 +0000 Files and hashes: 1: 5g8Srx2NA7txOPEeTGfez2xgZBU.roa (hash: HWA+sVXgg9d4BP39T3YyJLoaTybtYtWFwP5rgA+KK4Y=) 2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=) 3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: JQoMWPYiR24FORP4S/wyHQjGk8LeMP5uHoyKhcHw60w=) 4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=) 5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=) 6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:2c:f9:85:9b:1c:a7:21:3f:be:0a:c2:48:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Jan 25 09:00:33 2026 GMT Not After : Jan 26 09:00:33 2026 GMT Subject: CN=568108b1424823b458a785b5605504e47337f7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:97:de:89:13:63:5d:ec:17:45:21:ea:3e: f9:ba:cb:d9:40:13:df:2a:5c:49:72:2a:61:28:bb: 40:d9:b9:f1:26:45:47:58:10:e6:30:2b:36:a0:3a: 3a:e7:8e:eb:4f:5e:5e:6c:0d:9b:65:53:77:42:02: 54:ce:2b:bf:d6:d1:81:9d:23:33:97:03:6d:c2:62: bf:01:bd:1f:60:46:e6:64:3f:1f:fd:a3:d0:b0:cd: eb:58:80:34:65:d6:3e:5f:f0:9f:1b:6d:89:37:b0: c6:d1:f4:14:52:b0:d5:16:40:7c:c4:4c:cf:12:cf: 43:a5:cf:73:2f:f7:76:24:d0:ef:80:48:ce:b1:d9: fc:e9:83:c0:72:96:fc:0e:46:2a:90:e4:d5:69:e2: 01:ac:4d:d6:49:24:92:8c:3c:0a:05:6a:da:4b:f2: 4f:35:aa:05:4e:80:9d:89:b0:f7:e0:44:9b:f1:29: d0:aa:73:58:d3:c9:35:f6:8f:5b:8e:1c:8d:c2:d7: 6a:5f:f0:e9:90:df:ca:43:e5:c6:f6:09:2f:10:c3: 2d:8a:e0:95:bb:e4:70:7d:c0:ad:b4:08:21:2e:ae: f7:c2:b7:c6:44:82:c5:8c:24:e0:47:ae:91:15:88: 18:b7:8d:02:4d:9b:fe:af:9c:a4:05:6c:61:08:28: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:81:08:B1:42:48:23:B4:58:A7:85:B5:60:55:04:E4:73:37:F7:DA X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:27:e9:7b:96:e6:e7:2d:5a:49:87:88:22:d9:f5:cc:bd:77: cf:c7:25:6c:aa:50:63:0c:86:66:a9:2d:26:e9:12:c3:51:6c: 9d:e2:3e:b5:2b:3b:bc:af:2f:6c:72:c2:29:ca:e7:f4:92:f6: 74:62:ca:f8:15:4b:c1:6c:be:25:27:63:91:c2:9c:74:f3:33: cf:94:b9:e1:c5:a0:df:43:39:cd:2c:18:66:20:a2:3a:64:3b: 35:81:5b:aa:b3:2f:44:15:93:2a:3d:ed:ed:b7:ee:6c:2f:05: ed:6d:32:f7:70:45:f3:be:2e:c9:29:b3:9f:c0:dd:53:c8:a2: 8c:ed:3b:d1:17:bd:d7:6e:59:8c:37:52:d3:2b:d1:35:bb:44: c2:95:8b:c2:2f:5d:b4:fd:c0:54:4b:e8:e5:fa:fa:56:a1:1a: 82:d2:5f:38:18:cf:0e:3e:71:da:89:85:3e:0e:b9:22:4f:c4: 7d:69:0d:b7:1b:e6:dc:b9:99:68:78:aa:52:d3:5e:71:a8:ec: 10:d1:4e:a8:f0:24:d4:2f:33:57:ab:19:91:69:9d:64:ac:c2: 85:45:70:ec:98:6b:07:d3:1f:74:28:15:c3:c3:4c:fb:29:da: f0:c0:36:75:fc:d8:d0:88:37:52:7a:46:ab:87:63:76:e6:5a: 72:fe:4a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yiz5hZscpyE/vgrCSOUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjYwMTI1MDkwMDMzWhcNMjYwMTI2MDkwMDMzWjAzMTEwLwYDVQQD Eyg1NjgxMDhiMTQyNDgyM2I0NThhNzg1YjU2MDU1MDRlNDczMzdmN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aWX3okTY13sF0Uh6j75usvZQBPf KlxJciphKLtA2bnxJkVHWBDmMCs2oDo6547rT15ebA2bZVN3QgJUziu/1tGBnSMz lwNtwmK/Ab0fYEbmZD8f/aPQsM3rWIA0ZdY+X/CfG22JN7DG0fQUUrDVFkB8xEzP Es9Dpc9zL/d2JNDvgEjOsdn86YPAcpb8DkYqkOTVaeIBrE3WSSSSjDwKBWraS/JP NaoFToCdibD34ESb8SnQqnNY08k19o9bjhyNwtdqX/DpkN/KQ+XG9gkvEMMtiuCV u+RwfcCttAghLq73wrfGRILFjCTgR66RFYgYt40CTZv+r5ykBWxhCCi/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaBCLFCSCO0WKeFtWBVBORzN/faMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCfpe5bm 5y1aSYeIItn1zL13z8clbKpQYwyGZqktJukSw1FsneI+tSs7vK8vbHLCKcrn9JL2 dGLK+BVLwWy+JSdjkcKcdPMzz5S54cWg30M5zSwYZiCiOmQ7NYFbqrMvRBWTKj3t 7bfubC8F7W0y93BF874uySmzn8DdU8iijO070Re9125ZjDdS0yvRNbtEwpWLwi9d tP3AVEvo5fr6VqEagtJfOBjPDj5x2omFPg65Ik/EfWkNtxvm3LmZaHiqUtNecajs ENFOqPAk1C8zV6sZkWmdZKzChUVw7JhrB9MfdCgVw8NM+yna8MA2dfzY0Ig3UnpG q4djduZacv5KAg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:37 2026 by rpki-client