This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: QXKDnqATfMkA2jI6v57THMBvW3yuUYV9IksrPoxsw58= Subject key identifier: 71:90:7A:2E:AA:B7:98:5A:53:50:73:8C:50:AA:78:F8:78:32:18:CB Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019BF6F60EBB704BC2CC8F58969FFC570450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 21:01:19 +0000 Manifest this update: Sun 25 Jan 2026 21:01:19 +0000 Manifest next update: Mon 26 Jan 2026 21:01:19 +0000 Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: pweFn0SgT8EuzvQvmA18H5LRzq98pcXbf7IJwt1ZKy8=) 2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=) 3: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=) 4: zPP8T8fW5nYmNXr1z-76QSW13Wk.roa (hash: U5ca9wIzwUrG3jGkQlOsfKkE/6PvZnPpGQSjql+VyV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:0e:bb:70:4b:c2:cc:8f:58:96:9f:fc:57:04:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Jan 25 21:01:19 2026 GMT Not After : Jan 26 21:01:19 2026 GMT Subject: CN=71907a2eaab7985a5350738c50aa78f8783218cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:20:97:5e:b4:a4:d9:27:84:1c:7c:21:33: e7:5f:d1:3a:90:95:ab:9e:82:9b:dd:e4:56:ce:97: a7:42:f0:8d:46:3b:04:65:77:4e:25:f7:35:d7:62: 7d:9a:75:19:fb:b1:72:3d:c6:92:7c:8b:08:c3:c0: d9:ab:95:df:4b:fa:7d:ff:a5:d9:27:94:67:07:b0: ff:ce:63:94:e4:eb:74:38:75:11:bf:53:39:80:9e: e0:78:88:ee:74:d4:3a:a4:2c:a5:3e:38:bd:9b:d0: 05:da:86:bd:6a:d7:c9:7e:87:15:74:9b:03:f6:61: 4c:f4:2b:e2:99:b5:0c:64:88:01:5b:79:8a:60:48: 2f:be:56:93:dc:0d:15:1f:1e:38:6c:44:dc:f3:5e: 4f:6e:38:8c:c3:de:5e:04:c0:10:17:a9:04:df:07: 2f:4a:63:4e:0c:8e:26:40:7e:39:2d:7c:df:a6:21: b1:24:6e:1d:cf:0f:66:e5:d5:54:ce:18:cf:37:50: 22:0d:34:5f:5c:eb:33:71:70:8e:6d:7a:83:4a:d2: 60:fc:ef:3a:bc:05:af:58:09:40:06:26:a2:3c:b5: 6f:d9:24:1b:4c:da:bd:84:9e:2d:ce:23:75:c0:32: 84:78:8e:24:71:cf:c4:29:08:e7:43:2e:6b:9a:b6: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:7A:2E:AA:B7:98:5A:53:50:73:8C:50:AA:78:F8:78:32:18:CB X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7b:54:24:12:a1:c8:04:8d:f2:60:27:2b:bc:23:b7:e2:35: d0:a8:e9:1a:4e:5e:5b:c1:e5:7e:61:d0:da:96:3a:92:b1:2f: 5f:17:0b:a1:ea:b0:95:64:9d:a5:07:28:bf:13:07:f9:b3:b8: 90:3e:fd:be:78:8a:8a:5e:ae:cf:3d:ab:c5:73:e2:ce:c8:01: 0a:59:a7:5e:e5:90:b0:dd:32:16:eb:49:1a:e1:11:db:db:dc: 21:da:e9:4e:53:55:f0:f0:66:6e:d6:a8:e2:be:6c:3c:36:cf: 47:d3:f9:36:16:5f:b1:47:a3:c6:b6:b7:6a:d7:0b:ec:0b:73: 1e:30:c1:bb:73:69:e4:49:40:34:1f:bc:56:7d:93:b5:70:6d: d4:7a:ea:83:30:fe:97:e9:22:f1:6c:20:c2:f8:71:c1:32:71: 74:a8:c0:26:f9:14:65:28:04:8b:d4:a9:df:e3:87:90:2b:63: c1:49:3c:d2:ee:0d:47:28:49:f4:7d:06:a9:40:7c:c9:aa:b2: 03:8c:9f:90:be:39:fc:4e:a6:f6:cb:82:05:e5:65:d0:c9:3e: 2e:f3:3e:09:f0:5b:ac:d1:ea:c9:7b:3a:74:a1:23:6b:5f:94: 47:35:97:01:0d:68:9a:94:da:68:fe:0c:5f:41:3f:ae:fd:ba: f5:be:bd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29g67cEvCzI9Ylp/8VwRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjYwMTI1MjEwMTE5WhcNMjYwMTI2MjEwMTE5WjAzMTEwLwYDVQQD Eyg3MTkwN2EyZWFhYjc5ODVhNTM1MDczOGM1MGFhNzhmODc4MzIxOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqkgl160pNknhBx8ITPnX9E6kJWr noKb3eRWzpenQvCNRjsEZXdOJfc112J9mnUZ+7FyPcaSfIsIw8DZq5XfS/p9/6XZ J5RnB7D/zmOU5Ot0OHURv1M5gJ7geIjudNQ6pCylPji9m9AF2oa9atfJfocVdJsD 9mFM9CvimbUMZIgBW3mKYEgvvlaT3A0VHx44bETc815PbjiMw95eBMAQF6kE3wcv SmNODI4mQH45LXzfpiGxJG4dzw9m5dVUzhjPN1AiDTRfXOszcXCObXqDStJg/O86 vAWvWAlABiaiPLVv2SQbTNq9hJ4tziN1wDKEeI4kcc/EKQjnQy5rmrZ8IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGQei6qt5haU1BzjFCqePh4MhjLMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXtUJBKh yASN8mAnK7wjt+I10KjpGk5eW8HlfmHQ2pY6krEvXxcLoeqwlWSdpQcovxMH+bO4 kD79vniKil6uzz2rxXPizsgBClmnXuWQsN0yFutJGuER29vcIdrpTlNV8PBmbtao 4r5sPDbPR9P5NhZfsUejxra3atcL7AtzHjDBu3Np5ElANB+8Vn2TtXBt1HrqgzD+ l+ki8WwgwvhxwTJxdKjAJvkUZSgEi9Sp3+OHkCtjwUk80u4NRyhJ9H0GqUB8yaqy A4yfkL45/E6m9suCBeVl0Mk+LvM+CfBbrNHqyXs6dKEja1+URzWXAQ1ompTaaP4M X0E/rv269b69+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:05 2026 by rpki-client