This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json) Hash identifier: zy8Z+A42BruZ28rlcVbt7Z3Iq7mNnd4D2WXnetHgZm8= Subject key identifier: D6:94:D5:47:1F:A3:24:82:47:0C:A2:39:F4:FC:72:F1:D9:8A:DB:E1 Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Certificate serial: 019BF5E3656F4B0178DB08CB2AAFCC8141B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft Manifest number: 0651 Signing time: Sun 25 Jan 2026 16:01:19 +0000 Manifest this update: Sun 25 Jan 2026 16:01:19 +0000 Manifest next update: Mon 26 Jan 2026 16:01:19 +0000 Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: l1nRitoe+ZSPnscg5eUZwCt0w3zqZ6QcbWb9vrRBkWU=) 2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:65:6f:4b:01:78:db:08:cb:2a:af:cc:81:41:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Validity Not Before: Jan 25 16:01:19 2026 GMT Not After : Jan 26 16:01:19 2026 GMT Subject: CN=d694d5471fa32482470ca239f4fc72f1d98adbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:c5:11:32:7e:1b:0a:32:c2:15:c6:0a:a3: 1b:95:44:3e:a3:53:9b:5d:21:8c:c0:a9:eb:27:fa: 37:04:2c:73:d4:40:5b:1a:ab:fb:d0:25:cd:71:71: 32:76:c5:7f:fc:be:d3:f9:3a:41:6a:72:fb:a5:7e: 8f:44:f7:1a:ba:e0:e5:0b:4b:b6:02:1b:a2:f0:aa: 1d:f3:76:e5:d0:22:08:29:01:5e:0b:e8:94:79:d7: a1:97:07:5f:10:11:3c:50:69:fa:bb:74:ee:61:87: 9d:b8:3e:f9:bc:24:67:c0:d8:86:af:af:2f:2f:00: 2b:c9:6e:03:a4:b0:25:f3:67:4c:51:1b:17:a5:86: 1a:ae:8c:45:de:61:87:d5:ff:96:8f:f6:5c:a0:53: 5c:df:9e:d8:2c:2e:03:7b:d0:28:fa:2c:49:c5:47: 27:50:4e:08:4d:3a:5c:47:f8:ff:e8:7c:9b:40:95: de:45:46:79:93:6e:da:7c:68:01:d8:12:51:89:53: 84:e3:d6:0e:97:3a:35:2f:ff:1c:19:50:41:68:90: 6c:ff:35:e6:70:9e:58:47:c7:dd:75:47:4d:39:14: 64:73:7a:bf:a7:20:84:ca:b9:0d:fe:48:71:cd:aa: 1e:eb:02:4e:ee:34:da:dd:d8:71:59:e8:fd:57:63: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:94:D5:47:1F:A3:24:82:47:0C:A2:39:F4:FC:72:F1:D9:8A:DB:E1 X509v3 Authority Key Identifier: keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f0:b0:ed:49:6a:19:8e:cf:4d:7c:f8:85:a3:e7:0f:2f:3b: 17:af:dd:36:67:2a:34:7b:60:14:01:5c:01:2a:c4:03:b0:f0: 88:c2:0d:31:14:77:30:67:82:78:73:ac:3b:17:a7:cd:36:0d: f1:ed:07:ac:95:a1:b2:4c:7a:e2:63:01:a9:82:02:78:e4:f3: 44:0a:17:13:6b:1e:21:00:97:16:10:bd:1b:99:22:5b:d7:2f: 90:91:aa:20:5f:31:3a:46:8b:e7:98:10:c1:32:c3:10:6e:b2: 44:92:0c:01:44:e3:58:47:04:14:74:e0:ab:c6:61:20:7d:dd: 37:9a:2c:18:18:79:d7:e2:5b:64:6c:2c:d3:1d:ee:3a:0a:a5: b1:a0:2e:5f:1d:91:74:99:2e:73:d1:e3:bd:d9:10:08:20:84: 7c:d8:8d:57:02:26:b8:c0:fe:67:fa:9e:93:5f:dd:87:c6:10: 3a:5c:03:5e:19:e0:72:ce:65:b6:e3:57:34:20:f5:35:e3:34: da:b9:8f:86:52:8c:4f:8b:c2:67:4b:32:e0:50:93:89:5e:8c: 00:63:7a:b0:45:0d:f5:25:3d:0e:33:68:66:1b:26:a0:82:65: 47:b9:b1:34:9f:8a:f9:a8:e2:59:a0:00:08:97:a2:22:2e:6b: 64:d3:35:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142VvSwF42wjLKq/MgUG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTUyNmY5YWIwZGQyNzY4MjNmYzFmMGViYWExZGU2M2I3 ZDY1NmMwHhcNMjYwMTI1MTYwMTE5WhcNMjYwMTI2MTYwMTE5WjAzMTEwLwYDVQQD EyhkNjk0ZDU0NzFmYTMyNDgyNDcwY2EyMzlmNGZjNzJmMWQ5OGFkYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKDFETJ+GwoywhXGCqMblUQ+o1Ob XSGMwKnrJ/o3BCxz1EBbGqv70CXNcXEydsV//L7T+TpBanL7pX6PRPcauuDlC0u2 Ahui8Kod83bl0CIIKQFeC+iUedehlwdfEBE8UGn6u3TuYYeduD75vCRnwNiGr68v LwAryW4DpLAl82dMURsXpYYaroxF3mGH1f+Wj/ZcoFNc357YLC4De9Ao+ixJxUcn UE4ITTpcR/j/6HybQJXeRUZ5k27afGgB2BJRiVOE49YOlzo1L/8cGVBBaJBs/zXm cJ5YR8fddUdNORRkc3q/pyCEyrkN/khxzaoe6wJO7jTa3dhxWej9V2OrEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaU1UcfoySCRwyiOfT8cvHZitvhMB8GA1UdIwQY MBaAFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEt Njk5OGFiN2VkZjdhLzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEtNjk5OGFiN2VkZjdh LzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfCw7Ulq GY7PTXz4haPnDy87F6/dNmcqNHtgFAFcASrEA7DwiMINMRR3MGeCeHOsOxenzTYN 8e0HrJWhskx64mMBqYICeOTzRAoXE2seIQCXFhC9G5kiW9cvkJGqIF8xOkaL55gQ wTLDEG6yRJIMAUTjWEcEFHTgq8ZhIH3dN5osGBh51+JbZGws0x3uOgqlsaAuXx2R dJkuc9HjvdkQCCCEfNiNVwImuMD+Z/qek1/dh8YQOlwDXhngcs5ltuNXNCD1NeM0 2rmPhlKMT4vCZ0sy4FCTiV6MAGN6sEUN9SU9DjNoZhsmoIJlR7mxNJ+K+ajiWaAA CJeiIi5rZNM1JA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:52 2026 by rpki-client