This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json) Hash identifier: L2sPYcvCVWEnOOVdETIUWkMyx9jq5EcS7DYWAXzAloY= Subject key identifier: BF:EA:27:04:DF:68:2A:D1:D1:56:4F:91:98:A7:03:FD:BA:F7:7F:83 Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Certificate serial: 019BF50759FEDCAF278CAD1529C786325BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 12:00:58 +0000 Manifest this update: Sun 25 Jan 2026 12:00:58 +0000 Manifest next update: Mon 26 Jan 2026 12:00:58 +0000 Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: ItEj4T0ekMjstNV4XnOyODsyGvNYAWVdHdGgadIjVKM=) 2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=) 3: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=) 4: zPP8T8fW5nYmNXr1z-76QSW13Wk.roa (hash: U5ca9wIzwUrG3jGkQlOsfKkE/6PvZnPpGQSjql+VyV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:59:fe:dc:af:27:8c:ad:15:29:c7:86:32:5b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027 Validity Not Before: Jan 25 12:00:58 2026 GMT Not After : Jan 26 12:00:58 2026 GMT Subject: CN=bfea2704df682ad1d1564f9198a703fdbaf77f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:db:51:ae:a9:3d:a5:b4:f4:81:3b:8a:b3:e7: c8:e5:b6:34:d9:ee:b6:2a:53:c7:99:1f:5b:91:b3: b5:11:94:a0:75:91:85:4e:86:c2:70:78:b7:37:67: 3f:c0:2e:a0:f8:e3:6d:5d:5e:9d:14:ce:3d:8a:5a: c2:be:1a:4d:e4:e2:8c:fd:74:ff:32:02:50:8b:59: f7:22:04:22:3c:bb:40:8e:0c:80:c2:01:ab:4f:9d: dc:3e:0f:e0:ec:b9:c0:a0:1a:da:06:a6:79:5c:cb: b1:14:7b:7a:4c:f6:e9:e5:7c:84:d6:d3:99:54:ef: ee:57:2a:59:20:3b:93:d1:da:de:8c:50:e7:a2:37: 1e:00:19:31:7b:77:6c:ba:13:70:6c:c0:94:b9:06: 2e:9a:ef:d8:96:09:01:a7:2d:ab:f2:95:86:af:00: 7a:3c:8c:56:fe:d7:cf:45:f2:6f:f0:99:c7:ea:6c: 76:ba:7c:81:3b:c9:6f:85:e0:30:47:0c:e7:6b:ad: 26:f3:51:fa:1e:14:d8:ed:27:71:bd:bd:2b:0b:1a: cc:2e:2e:04:b2:55:37:9f:ec:f0:0b:bb:19:d0:cd: e6:e8:f2:9a:b3:2b:5a:21:09:d8:d1:aa:5a:03:84: 87:14:1b:b6:67:7d:c4:84:86:69:4e:92:a4:9d:b7: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:27:04:DF:68:2A:D1:D1:56:4F:91:98:A7:03:FD:BA:F7:7F:83 X509v3 Authority Key Identifier: keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3e:74:ef:71:77:57:16:af:63:cc:23:1d:7d:2a:8b:27:71: 25:af:f3:54:57:f5:2a:d0:f8:63:8b:03:8c:e0:d8:3a:5b:71: 12:45:b7:f7:5d:88:10:2e:e5:87:dc:cc:14:d2:43:f4:d8:36: a3:5c:c0:6f:1a:5d:12:84:56:ed:a7:0a:b6:7c:45:98:6c:5d: b0:30:0f:ba:4b:fb:e9:14:cb:dc:23:be:b7:d9:d7:de:da:1e: 5e:a6:39:51:2f:01:1c:cd:c4:08:d4:97:3b:09:75:3e:93:47: 1e:83:2d:ae:2b:73:f1:62:77:5c:63:9f:8c:2b:6c:a2:8d:56: 54:70:70:ae:c5:d7:f0:b1:49:aa:80:17:c6:82:76:c0:bf:62: 97:99:1f:61:2c:ed:e8:9a:5b:7b:7e:63:51:db:70:7f:c8:03: 02:c2:b1:f7:43:84:af:69:23:4c:a8:6f:ec:21:4a:7c:0b:e9: 15:bb:e9:9d:d1:ab:bb:53:70:60:49:45:71:93:6d:62:b4:5f: 98:98:b6:86:aa:6f:13:a0:37:43:ff:c4:5d:74:47:3c:8f:b0: 51:d9:12:75:03:28:cd:12:44:b1:f2:62:bd:13:9a:7a:3b:00: 7a:0d:be:fd:1c:d9:50:46:77:ee:eb:d3:a6:84:96:47:1d:08: a4:6b:31:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B1n+3K8njK0VKceGMlu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0 NDkwMjcwHhcNMjYwMTI1MTIwMDU4WhcNMjYwMTI2MTIwMDU4WjAzMTEwLwYDVQQD EyhiZmVhMjcwNGRmNjgyYWQxZDE1NjRmOTE5OGE3MDNmZGJhZjc3ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89tRrqk9pbT0gTuKs+fI5bY02e62 KlPHmR9bkbO1EZSgdZGFTobCcHi3N2c/wC6g+ONtXV6dFM49ilrCvhpN5OKM/XT/ MgJQi1n3IgQiPLtAjgyAwgGrT53cPg/g7LnAoBraBqZ5XMuxFHt6TPbp5XyE1tOZ VO/uVypZIDuT0drejFDnojceABkxe3dsuhNwbMCUuQYumu/YlgkBpy2r8pWGrwB6 PIxW/tfPRfJv8JnH6mx2unyBO8lvheAwRwzna60m81H6HhTY7Sdxvb0rCxrMLi4E slU3n+zwC7sZ0M3m6PKasytaIQnY0apaA4SHFBu2Z33EhIZpTpKknbd00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/qJwTfaCrR0VZPkZinA/2693+DMB8GA1UdIwQY MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1 LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwj5073F3 VxavY8wjHX0qiydxJa/zVFf1KtD4Y4sDjODYOltxEkW3912IEC7lh9zMFNJD9Ng2 o1zAbxpdEoRW7acKtnxFmGxdsDAPukv76RTL3CO+t9nX3toeXqY5US8BHM3ECNSX Owl1PpNHHoMtritz8WJ3XGOfjCtsoo1WVHBwrsXX8LFJqoAXxoJ2wL9il5kfYSzt 6Jpbe35jUdtwf8gDAsKx90OEr2kjTKhv7CFKfAvpFbvpndGru1NwYElFcZNtYrRf mJi2hqpvE6A3Q//EXXRHPI+wUdkSdQMozRJEsfJivROaejsAeg2+/RzZUEZ37uvT poSWRx0IpGsxtA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:12 2026 by rpki-client