This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft File: CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json) Hash identifier: kfI+JD4YI3H1lujQuK3K40/kyLCyeu/mw4AAIaFyQSc= Subject key identifier: DC:49:DF:1F:66:69:3C:F6:06:69:2D:D3:E0:53:7E:74:39:58:91:D1 Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Certificate serial: 019BF72CA45AC061F6AC1D8FA99916648B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft Manifest number: 0950 Signing time: Sun 25 Jan 2026 22:00:56 +0000 Manifest this update: Sun 25 Jan 2026 22:00:56 +0000 Manifest next update: Mon 26 Jan 2026 22:00:56 +0000 Files and hashes: 1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: mprK8MZW6yCKUG7a5qpd2gWA9Pip1qFKJOKttS95iuQ=) 2: RsTSr-3jTnG1CeXmaL5yjIv3e7A.roa (hash: U9h7mXi2TPfXP2mWBMjzpDcUhTXc3t6ZDS7Y90GMnqI=) 3: V2mAUhiuLSdY43WTX18t68JU52U.roa (hash: 0HD53IzD09TTvFxGJ5/toZ8gNnKRelVvlZQJyDdwGvM=) 4: ZYguphbq_OVZXqnSVXPcyY-MrWU.roa (hash: YBNSr4xuGhr4HSUuVKzH8avlZXqqbx+cNVBs9dQx+pg=) 5: kNW-FofDRFcYyJ6jdZntLsWi_kQ.roa (hash: vsRui+TumYQf+mEKOxKsjjJTMlbNB6Ytf/Fua/xhVUM=) 6: ksfa6RQDM_0VxmjR64arGWZD9rM.roa (hash: eBadilkI77a4zTmLhePWsFBGmFNKACYzx+SMzHBV/40=) 7: yNd_DMkIMvgYnrn_7Wsari1U2DE.roa (hash: IEhZvaGq91qhQu5JNN1NRfY/8v2XmumSPV2Zm2UUU6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:a4:5a:c0:61:f6:ac:1d:8f:a9:99:16:64:8b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Validity Not Before: Jan 25 22:00:56 2026 GMT Not After : Jan 26 22:00:56 2026 GMT Subject: CN=dc49df1f66693cf606692dd3e0537e74395891d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:2d:08:21:a6:48:24:1b:71:f9:db:aa:31: 8e:87:2b:c5:ea:ed:37:e4:36:33:f4:a5:4f:cb:63: 2a:6e:2b:b5:57:a5:93:e8:9d:86:c4:a3:cf:95:8c: 18:8e:99:cd:a1:a4:58:bd:28:f9:c1:92:18:ff:0a: b0:4b:e9:c3:66:36:6e:40:68:75:20:58:25:69:8e: b0:e7:fd:81:e6:0d:9b:01:a1:7e:cc:d6:e7:f1:13: 4f:f6:ce:23:e8:83:09:98:93:7b:7d:8c:73:1b:9d: 81:ac:06:4f:66:e6:46:bc:2f:3e:31:35:57:c6:63: 64:cd:83:c8:e0:82:be:d9:bc:80:13:36:74:75:86: 2d:6f:2c:ab:22:8b:f7:df:be:d0:12:33:1a:80:a9: 3a:d6:bd:18:1a:b6:fd:8f:9e:3c:a2:1e:80:04:69: d5:57:17:22:17:43:b8:ca:98:a7:d7:c3:37:d6:9e: 26:7e:c2:35:31:a8:b0:3b:b2:dd:cc:b3:44:f5:5f: 67:48:da:f7:aa:ec:d3:e9:24:e8:2c:dc:b0:e3:61: f9:0f:fd:5f:3b:f2:49:51:72:3e:8b:2e:f8:c3:62: 53:96:12:ed:bf:71:70:58:af:ed:35:ac:95:54:22: a0:5e:19:e9:b2:1a:33:e9:1d:4d:6b:67:29:4b:89: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:49:DF:1F:66:69:3C:F6:06:69:2D:D3:E0:53:7E:74:39:58:91:D1 X509v3 Authority Key Identifier: keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fb:af:64:1c:a2:61:78:5f:ee:12:9b:dc:00:4c:51:bb:62: 1d:4a:b8:9a:ec:41:aa:0d:05:ce:94:b6:e2:de:03:4c:a5:69: bb:32:e2:4e:9f:e0:0f:05:c9:60:f0:e0:32:d7:cb:58:0e:c8: da:2f:b9:77:73:26:a4:f0:af:d8:70:0b:4d:55:cd:80:24:20: 4a:0d:8e:2b:33:b8:87:6d:f3:54:c2:7a:6e:78:95:2e:94:85: e4:ce:88:4a:28:e1:8d:06:35:69:ef:0c:30:f4:5f:3b:e5:70: ba:f4:11:0b:59:6b:13:fa:4b:67:3b:7a:73:dc:f8:e8:04:a8: 62:eb:96:b0:ef:c1:d6:44:72:03:a8:de:aa:c7:4c:76:e4:69: af:95:08:12:23:e6:11:ae:2c:6a:8b:ab:f8:1f:14:c0:50:f2: 13:08:f2:fb:4b:78:7b:75:64:4e:a3:af:61:30:cf:43:60:c2: 3d:92:ce:f4:ac:88:8a:ff:eb:1f:a7:2c:78:3f:03:59:3d:ea: 8a:7e:d1:c1:42:e8:65:d1:34:ec:e5:56:01:fe:79:92:6d:46: c8:83:45:54:b5:74:df:db:93:fe:92:38:31:dd:fc:c8:7c:17: 71:e4:2e:f1:e8:f7:a2:39:0e:d4:69:77:ae:71:54:d1:19:ac: 0a:6d:f8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKRawGH2rB2PqZkWZIscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz M2I1MzMwHhcNMjYwMTI1MjIwMDU2WhcNMjYwMTI2MjIwMDU2WjAzMTEwLwYDVQQD EyhkYzQ5ZGYxZjY2NjkzY2Y2MDY2OTJkZDNlMDUzN2U3NDM5NTg5MWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwtCCGmSCQbcfnbqjGOhyvF6u03 5DYz9KVPy2Mqbiu1V6WT6J2GxKPPlYwYjpnNoaRYvSj5wZIY/wqwS+nDZjZuQGh1 IFglaY6w5/2B5g2bAaF+zNbn8RNP9s4j6IMJmJN7fYxzG52BrAZPZuZGvC8+MTVX xmNkzYPI4IK+2byAEzZ0dYYtbyyrIov3377QEjMagKk61r0YGrb9j548oh6ABGnV VxciF0O4ypin18M31p4mfsI1MaiwO7LdzLNE9V9nSNr3quzT6SToLNyw42H5D/1f O/JJUXI+iy74w2JTlhLtv3FwWK/tNayVVCKgXhnpshoz6R1Na2cpS4lmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxJ3x9maTz2Bmkt0+BTfnQ5WJHRMB8GA1UdIwQY MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/uvZByi YXhf7hKb3ABMUbtiHUq4muxBqg0FzpS24t4DTKVpuzLiTp/gDwXJYPDgMtfLWA7I 2i+5d3MmpPCv2HALTVXNgCQgSg2OKzO4h23zVMJ6bniVLpSF5M6ISijhjQY1ae8M MPRfO+VwuvQRC1lrE/pLZzt6c9z46ASoYuuWsO/B1kRyA6jeqsdMduRpr5UIEiPm Ea4saour+B8UwFDyEwjy+0t4e3VkTqOvYTDPQ2DCPZLO9KyIiv/rH6cseD8DWT3q in7RwULoZdE07OVWAf55km1GyINFVLV039uT/pI4Md38yHwXceQu8ej3ojkO1Gl3 rnFU0RmsCm34eQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:42 2026 by rpki-client