This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json) Hash identifier: 3WdmvFBCiGHnpEu4NkiHxaTPtfWzlamfSXjG+KbqapY= Subject key identifier: 2C:9E:37:99:07:2E:72:5C:0C:C9:81:58:1A:9D:2F:90:8F:2D:97:4D Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739 Certificate serial: 019BF76376233C3D5965C26FCE9B24E6122B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft Manifest number: 121F Signing time: Sun 25 Jan 2026 23:00:48 +0000 Manifest this update: Sun 25 Jan 2026 23:00:48 +0000 Manifest next update: Mon 26 Jan 2026 23:00:48 +0000 Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: UzP9rlaeLLd7lUhYTXVUQxmlov0jT6O2SZqen1ARRhQ=) 2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:76:23:3c:3d:59:65:c2:6f:ce:9b:24:e6:12:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a16747018e944e405a6d23a564701a155f43739 Validity Not Before: Jan 25 23:00:48 2026 GMT Not After : Jan 26 23:00:48 2026 GMT Subject: CN=2c9e3799072e725c0cc981581a9d2f908f2d974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:0d:e8:e1:99:82:93:38:7b:41:85:fb:b0: 86:a3:58:ce:e6:75:88:34:87:96:5f:66:3e:32:ad: b5:48:8c:ef:fc:dc:15:f4:d2:a6:50:1a:11:bb:82: 3b:af:b8:17:3a:d4:1d:fb:3c:8c:1b:c3:54:65:5b: 4e:45:1c:b1:0b:e8:6b:78:9e:f3:a0:81:0a:07:a5: c4:85:70:7b:e9:00:6b:4a:e8:65:80:20:eb:40:65: b8:61:a3:90:eb:f4:d0:f8:ce:1a:be:fe:b1:e1:ec: 12:91:05:b4:23:c5:92:a8:f5:43:ff:89:67:40:b5: 9f:0e:53:48:7e:16:69:46:57:8c:e8:91:45:be:ef: 84:dd:df:e8:33:bf:53:a7:7a:ed:cd:84:a8:0c:23: c2:c3:13:78:b6:eb:e6:57:37:c6:4a:5e:ed:1b:d0: 8a:0b:8f:cf:39:1d:6f:e6:41:18:7f:95:4e:97:c0: f1:d1:3c:d6:db:1e:6c:0c:97:29:c0:ff:46:92:32: 35:bd:a8:f1:56:db:ba:b6:ad:fb:f9:32:3b:39:3f: b2:f6:2d:d6:f2:cd:3e:ed:f4:95:e0:ac:9b:d9:2f: f6:3b:5a:7c:7b:6f:4a:7b:b9:1a:34:e0:e8:fa:89: dd:c2:f7:85:a0:26:d2:86:e8:53:48:36:82:66:39: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:37:99:07:2E:72:5C:0C:C9:81:58:1A:9D:2F:90:8F:2D:97:4D X509v3 Authority Key Identifier: keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:84:d6:43:28:b6:21:c4:fb:1c:e2:73:75:b3:2c:00:33:00: e9:f6:f7:2f:46:52:d2:b1:f1:a7:0f:15:1a:95:be:0e:80:85: c6:d6:98:34:76:2e:3a:ae:66:d0:80:84:f8:9b:27:a7:53:77: 12:66:00:06:20:0f:6d:3e:af:3c:80:5a:0f:c2:85:04:a8:af: 9e:ae:3f:16:f0:46:61:55:10:4e:13:65:17:d3:07:1a:02:00: 05:74:38:38:d6:c2:ac:5d:8b:a6:93:21:95:d5:38:7e:92:d9: c4:fd:ca:3e:46:5f:bd:ef:c6:2f:6f:df:30:88:f7:e2:4c:ad: ba:aa:80:ab:94:52:38:28:85:11:59:4a:fe:c5:f2:2d:b0:ed: 8d:c7:26:58:49:32:ab:53:a4:06:44:f1:c4:a1:c0:8f:21:bf: 27:4e:fa:2b:46:cb:e9:54:61:a7:10:30:62:04:90:2d:46:d2: a3:d7:b5:7f:3e:87:55:a1:75:0c:96:8a:a5:70:b2:3c:55:a1: 9f:ca:79:91:17:00:b8:94:30:05:96:b7:3d:46:66:c7:0b:6a: c6:1b:b9:20:89:7e:b4:77:c0:af:24:fc:11:c3:05:65:2b:4f: 5f:f6:7c:72:30:2c:3c:9b:b2:3a:e3:52:0c:92:50:86:0a:bd: 1b:32:97:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3YjPD1ZZcJvzpsk5hIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTY3NDcwMThlOTQ0ZTQwNWE2ZDIzYTU2NDcwMWExNTVm NDM3MzkwHhcNMjYwMTI1MjMwMDQ4WhcNMjYwMTI2MjMwMDQ4WjAzMTEwLwYDVQQD EygyYzllMzc5OTA3MmU3MjVjMGNjOTgxNTgxYTlkMmY5MDhmMmQ5NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJEN6OGZgpM4e0GF+7CGo1jO5nWI NIeWX2Y+Mq21SIzv/NwV9NKmUBoRu4I7r7gXOtQd+zyMG8NUZVtORRyxC+hreJ7z oIEKB6XEhXB76QBrSuhlgCDrQGW4YaOQ6/TQ+M4avv6x4ewSkQW0I8WSqPVD/4ln QLWfDlNIfhZpRleM6JFFvu+E3d/oM79Tp3rtzYSoDCPCwxN4tuvmVzfGSl7tG9CK C4/POR1v5kEYf5VOl8Dx0TzW2x5sDJcpwP9GkjI1vajxVtu6tq37+TI7OT+y9i3W 8s0+7fSV4Kyb2S/2O1p8e29Ke7kaNODo+ondwveFoCbShuhTSDaCZjkKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyeN5kHLnJcDMmBWBqdL5CPLZdNMB8GA1UdIwQY MBaAFAoWdHAY6UTkBabSOlZHAaFV9Dc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWIt ZDlkMGFhMjhhYjJiLzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTA2OTAtOTYzNy00ZmM1LWI0MWItZDlkMGFhMjhhYjJi LzEvQ2haMGNCanBST1FGcHRJNlZrY0JvVlgwTnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4TWQyi2 IcT7HOJzdbMsADMA6fb3L0ZS0rHxpw8VGpW+DoCFxtaYNHYuOq5m0ICE+Jsnp1N3 EmYABiAPbT6vPIBaD8KFBKivnq4/FvBGYVUQThNlF9MHGgIABXQ4ONbCrF2LppMh ldU4fpLZxP3KPkZfve/GL2/fMIj34kytuqqAq5RSOCiFEVlK/sXyLbDtjccmWEky q1OkBkTxxKHAjyG/J076K0bL6VRhpxAwYgSQLUbSo9e1fz6HVaF1DJaKpXCyPFWh n8p5kRcAuJQwBZa3PUZmxwtqxhu5IIl+tHfAryT8EcMFZStPX/Z8cjAsPJuyOuNS DJJQhgq9GzKXcg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client