This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json) Hash identifier: Ni5w+zGCvolrm3B+lKjT3o1rR3buH75e2TGIBRIW5j4= Subject key identifier: 0D:FF:63:AB:A0:C7:2F:CD:E0:88:50:ED:CD:D7:25:C2:D5:D7:41:7D Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019BF5ABDC52A9B7365532DCAD2880D457BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft Manifest number: 0EC8 Signing time: Sun 25 Jan 2026 15:00:39 +0000 Manifest this update: Sun 25 Jan 2026 15:00:39 +0000 Manifest next update: Mon 26 Jan 2026 15:00:39 +0000 Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: Xy45Hx6JbDokGZSkWfHtsM9cLk97u+o6eRwEQVUtbyc=) 2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:dc:52:a9:b7:36:55:32:dc:ad:28:80:d4:57:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Jan 25 15:00:39 2026 GMT Not After : Jan 26 15:00:39 2026 GMT Subject: CN=0dff63aba0c72fcde08850edcdd725c2d5d7417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:b4:ac:b1:ab:47:45:9d:26:50:ec:b3:5c: 03:b9:9a:14:b4:5b:66:92:9e:56:97:0e:30:9e:a0: a9:63:3d:48:d0:9f:31:b9:2b:e4:c1:2c:6c:71:21: 27:62:7a:6b:cb:71:c6:72:df:8c:41:a5:47:d9:80: 49:09:46:a8:fe:c8:f2:90:aa:f6:85:b9:5e:b3:69: c7:5b:32:87:3f:5a:3b:86:f1:61:a8:fe:56:4c:fa: 45:5e:53:d2:20:c8:04:73:2d:8c:19:eb:65:09:37: f6:32:a5:16:cb:c5:5a:d4:17:de:b8:a5:bb:71:a1: 19:14:28:2a:08:32:fb:2e:f8:b1:b1:94:f3:ba:7d: 3f:11:1f:0b:35:da:e3:87:1b:7c:74:1d:f4:79:56: c4:ae:a7:19:d5:5c:b2:26:97:f6:a3:46:d9:e5:f3: 17:85:d6:03:4a:5f:e1:28:e3:db:1a:79:e2:9b:24: 72:d8:6d:6f:ce:f3:19:94:c6:4d:78:08:dc:11:b7: ba:f6:ab:4d:1c:bd:b3:1b:90:64:2e:3c:2f:1b:c0: 24:bd:e6:be:5d:ff:0a:84:bc:df:16:d5:67:9e:ff: dd:0e:52:fe:bf:f9:b0:e6:54:57:95:49:36:ee:92: 90:fe:b7:c9:b5:89:c9:64:68:ee:1a:84:6c:c4:02: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:63:AB:A0:C7:2F:CD:E0:88:50:ED:CD:D7:25:C2:D5:D7:41:7D X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ff:b1:00:1a:3e:93:57:3b:fe:e3:2c:e5:5c:db:d9:73:ee: 78:99:9b:7c:01:5c:ab:42:e8:49:46:2d:e0:01:09:99:ab:36: 81:fb:f2:e6:41:64:10:8f:53:f2:6a:a0:a9:a5:4b:9d:97:56: b5:64:21:5d:2c:0c:91:c9:b7:ea:f6:36:ee:45:21:ad:05:e1: df:57:77:c8:36:3d:36:36:27:cc:42:4e:9f:5d:86:b6:12:ec: 79:8b:2e:33:42:2a:d0:ac:cc:6c:b5:d2:b6:ab:c3:58:a3:64: 68:cc:87:06:96:b7:86:87:46:d5:5c:8e:4e:f8:2a:9d:6d:28: ad:4f:2b:12:d5:33:76:36:90:04:ab:55:c9:7c:90:c4:ee:c0: b8:ab:a7:2e:ff:ca:0f:50:5b:85:f7:e4:8f:76:6d:68:09:2e: 8f:c4:6d:31:51:e0:91:d4:1c:55:6c:47:9f:c3:71:ee:84:d6: 68:82:2d:f8:1b:db:83:cc:9e:7a:5c:34:f6:1b:c1:86:1c:a1: d4:9f:e9:65:2f:11:42:2c:9b:f8:1f:f2:8c:4e:3c:b0:b9:26: b0:85:f7:19:7f:fa:dd:9e:a6:70:97:ef:72:67:f7:91:0c:7d: 23:0f:ed:0e:36:f3:45:61:94:d9:43:56:03:cc:e9:8d:27:b0: 55:31:38:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9xSqbc2VTLcrSiA1Fe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjYwMTI1MTUwMDM5WhcNMjYwMTI2MTUwMDM5WjAzMTEwLwYDVQQD EygwZGZmNjNhYmEwYzcyZmNkZTA4ODUwZWRjZGQ3MjVjMmQ1ZDc0MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQy0rLGrR0WdJlDss1wDuZoUtFtm kp5Wlw4wnqCpYz1I0J8xuSvkwSxscSEnYnpry3HGct+MQaVH2YBJCUao/sjykKr2 hbles2nHWzKHP1o7hvFhqP5WTPpFXlPSIMgEcy2MGetlCTf2MqUWy8Va1BfeuKW7 caEZFCgqCDL7LvixsZTzun0/ER8LNdrjhxt8dB30eVbErqcZ1VyyJpf2o0bZ5fMX hdYDSl/hKOPbGnnimyRy2G1vzvMZlMZNeAjcEbe69qtNHL2zG5BkLjwvG8Akvea+ Xf8KhLzfFtVnnv/dDlL+v/mw5lRXlUk27pKQ/rfJtYnJZGjuGoRsxALquQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3/Y6ugxy/N4IhQ7c3XJcLV10F9MB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/+xABo+ k1c7/uMs5Vzb2XPueJmbfAFcq0LoSUYt4AEJmas2gfvy5kFkEI9T8mqgqaVLnZdW tWQhXSwMkcm36vY27kUhrQXh31d3yDY9NjYnzEJOn12GthLseYsuM0Iq0KzMbLXS tqvDWKNkaMyHBpa3hodG1VyOTvgqnW0orU8rEtUzdjaQBKtVyXyQxO7AuKunLv/K D1Bbhffkj3ZtaAkuj8RtMVHgkdQcVWxHn8Nx7oTWaIIt+Bvbg8yeelw09hvBhhyh 1J/pZS8RQiyb+B/yjE48sLkmsIX3GX/63Z6mcJfvcmf3kQx9Iw/tDjbzRWGU2UNW A8zpjSewVTE4fQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:54 2026 by rpki-client