This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json) Hash identifier: G2P57TCTsPebZ5Nsj/rPoG3xvT9qwjnnZV+k1Y4UY14= Subject key identifier: 5E:A6:8A:5B:F7:A0:0F:92:FC:9C:38:E0:56:82:E7:C1:8D:D5:B3:BB Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Certificate serial: 019BF72D8D75CDB3A07DFB529EC58A3E551D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft Manifest number: 1401 Signing time: Sun 25 Jan 2026 22:01:56 +0000 Manifest this update: Sun 25 Jan 2026 22:01:56 +0000 Manifest next update: Mon 26 Jan 2026 22:01:56 +0000 Files and hashes: 1: 3H3uMb09v_ZrwdlGPIkEO0W4l-g.roa (hash: 6eeS3X3yVlDS6UMAKTM8DWVBH+h7Du+YIwS3EzqpDnU=) 2: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=) 3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=) 4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=) 5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=) 6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: zNxuFUeR628tvJaXgLPN5ljVD5n9PywwLhL/j5LXCc0=) 7: enyFFWh9n2gyKI-wgUqYxZWV6TQ.roa (hash: ffqDLFJnt7EZIYCzOELgd9ZMArcFIA7EhD99Kgcs9xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:8d:75:cd:b3:a0:7d:fb:52:9e:c5:8a:3e:55:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20 Validity Not Before: Jan 25 22:01:56 2026 GMT Not After : Jan 26 22:01:56 2026 GMT Subject: CN=5ea68a5bf7a00f92fc9c38e05682e7c18dd5b3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:6d:53:65:57:e3:d4:53:91:74:03:3d:79: c3:e4:1f:93:66:f1:45:5c:c7:f1:2a:12:ba:66:b1: 73:ca:8b:31:f2:d3:2f:98:34:80:71:6c:f0:a7:61: 55:ea:d2:57:ae:57:21:84:75:dd:76:aa:7d:e5:b8: b4:6f:2b:b5:a7:90:ec:93:da:bb:b0:44:40:9a:7f: 69:45:6f:dd:16:c4:d3:ec:70:88:86:4a:15:7f:7a: 9e:10:8d:33:70:3a:87:3f:f4:e7:69:8a:9d:5a:72: 8e:2a:ef:34:2e:5b:66:59:07:03:e7:5d:94:85:6c: 72:5e:6d:c4:0e:a1:f0:8d:88:ea:b3:f6:ff:b1:28: 24:c0:6e:95:30:aa:28:a5:92:ce:8b:5b:3a:ec:ec: cf:35:60:15:5c:23:67:b6:29:89:19:f1:d7:39:31: d9:18:29:bc:27:69:48:4c:29:76:8b:9d:f9:95:9d: 7c:84:0d:69:77:be:17:c0:59:f6:a6:37:9d:e8:61: 95:86:2e:54:0c:58:9b:d9:5d:54:a6:29:04:60:f1: 0f:19:07:a5:92:db:34:18:ec:67:93:b5:69:2e:90: c4:81:82:ed:d1:29:e5:7b:ef:c4:51:45:94:90:a4: a9:e6:e7:6d:72:88:ce:56:84:21:63:3a:1c:30:fa: 70:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:8A:5B:F7:A0:0F:92:FC:9C:38:E0:56:82:E7:C1:8D:D5:B3:BB X509v3 Authority Key Identifier: keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cc:ee:19:0a:1d:dc:3a:85:a2:53:7a:76:19:bc:cd:db:a0: ac:a7:b3:8c:97:6b:74:5a:70:d2:c5:f8:88:b8:c4:73:b4:85: 27:af:97:c8:db:12:b2:03:09:a6:56:1f:29:3b:b5:51:25:93: ea:f8:4b:b1:2f:6e:da:6c:f2:a5:2a:88:b5:c0:0e:5a:46:9c: 76:03:e8:f3:a9:3b:1f:aa:e4:2c:78:70:28:3e:97:87:12:57: 77:28:90:05:50:02:3c:d6:64:1a:6f:73:f4:ec:96:78:c6:e4: 21:96:80:b8:fd:f9:75:98:82:df:47:b0:89:41:4c:73:fc:e5: 02:8c:20:02:e5:bb:70:8d:c4:f5:06:a0:7e:34:57:71:62:d5: 65:b0:17:d8:ed:15:fb:ad:a1:6f:10:3d:56:5c:04:35:18:82: fd:5b:71:20:13:20:ab:6f:2d:e5:ea:32:6f:f2:25:0a:e4:9c: c8:a1:b9:ec:12:44:f1:92:8b:9e:2f:0a:c7:9a:ba:c6:72:2b: 5d:ea:c1:e4:cd:47:cc:28:9b:11:e1:ce:66:fa:65:bf:53:eb: fd:a9:11:0c:f5:e6:f9:a7:fa:d7:c4:cc:21:cb:77:bd:86:e4: 0d:34:6f:e9:8e:c3:cc:c5:9e:19:ef:29:e1:63:e6:db:7e:62: ce:54:15:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LY11zbOgfftSnsWKPlUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5 MjNmMjAwHhcNMjYwMTI1MjIwMTU2WhcNMjYwMTI2MjIwMTU2WjAzMTEwLwYDVQQD Eyg1ZWE2OGE1YmY3YTAwZjkyZmM5YzM4ZTA1NjgyZTdjMThkZDViM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+NtU2VX49RTkXQDPXnD5B+TZvFF XMfxKhK6ZrFzyosx8tMvmDSAcWzwp2FV6tJXrlchhHXddqp95bi0byu1p5Dsk9q7 sERAmn9pRW/dFsTT7HCIhkoVf3qeEI0zcDqHP/TnaYqdWnKOKu80LltmWQcD512U hWxyXm3EDqHwjYjqs/b/sSgkwG6VMKoopZLOi1s67OzPNWAVXCNntimJGfHXOTHZ GCm8J2lITCl2i535lZ18hA1pd74XwFn2pjed6GGVhi5UDFib2V1UpikEYPEPGQel kts0GOxnk7VpLpDEgYLt0Snle+/EUUWUkKSp5udtcojOVoQhYzocMPpw3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6milv3oA+S/Jw44FaC58GN1bO7MB8GA1UdIwQY MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARszuGQod 3DqFolN6dhm8zdugrKezjJdrdFpw0sX4iLjEc7SFJ6+XyNsSsgMJplYfKTu1USWT 6vhLsS9u2mzypSqItcAOWkacdgPo86k7H6rkLHhwKD6XhxJXdyiQBVACPNZkGm9z 9OyWeMbkIZaAuP35dZiC30ewiUFMc/zlAowgAuW7cI3E9QagfjRXcWLVZbAX2O0V +62hbxA9VlwENRiC/VtxIBMgq28t5eoyb/IlCuScyKG57BJE8ZKLni8Kx5q6xnIr XerB5M1HzCibEeHOZvplv1Pr/akRDPXm+af618TMIct3vYbkDTRv6Y7DzMWeGe8p 4WPm235izlQV8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:46 2026 by rpki-client