This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json) Hash identifier: MmBJ6LhuO0aWpFJ+eW9V63ecY7B0iMFFX7u6VFOmjK4= Subject key identifier: 38:44:B9:69:A1:CB:9B:F6:75:DF:84:4D:7B:3B:C1:2E:2A:3A:5B:82 Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Certificate serial: 019BF6BF6B8590C249D3AE917ACF8EEEBDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft Manifest number: 076C Signing time: Sun 25 Jan 2026 20:01:38 +0000 Manifest this update: Sun 25 Jan 2026 20:01:38 +0000 Manifest next update: Mon 26 Jan 2026 20:01:38 +0000 Files and hashes: 1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=) 2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: QMbhqhALPv+G7MLx9iostytbbMt4+eRWiHNnjVKs4RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:6b:85:90:c2:49:d3:ae:91:7a:cf:8e:ee:bd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b Validity Not Before: Jan 25 20:01:38 2026 GMT Not After : Jan 26 20:01:38 2026 GMT Subject: CN=3844b969a1cb9bf675df844d7b3bc12e2a3a5b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:84:06:6b:54:22:b4:09:ca:f2:dc:8d:1f: 75:0c:a7:ca:ec:02:c0:91:d1:57:60:39:10:be:8d: 37:7e:be:c3:11:76:b7:19:03:31:b8:8f:19:52:0b: 35:60:25:fc:af:dc:63:4d:3e:42:34:ad:f1:67:27: 11:1a:ce:f2:f3:19:c5:10:c0:26:38:01:c6:94:63: 3e:7e:1f:e4:19:77:9e:31:88:79:dc:12:c4:88:02: f7:c7:a4:b8:af:79:61:ba:d3:4b:29:b9:f8:4c:b3: 68:24:da:7a:cf:f6:3b:08:6a:81:e2:00:c8:93:e1: 72:b6:bf:86:73:c2:c1:c7:9a:91:54:4e:00:cb:4c: 18:bb:13:64:7d:46:0d:38:1f:de:e8:3a:7c:f9:12: 80:5e:1c:50:ff:d6:bc:16:a6:5a:98:3a:f7:b0:0c: e0:45:29:20:86:64:c1:61:10:58:a4:17:2b:44:15: ea:85:f0:d5:9d:25:4d:94:f8:2b:f8:37:2e:0e:67: 79:0c:4b:17:bf:82:6f:17:50:73:27:9a:29:d4:33: 31:ec:35:8c:62:81:9c:0d:53:e6:33:13:69:03:f1: 81:41:4c:aa:e5:be:de:7a:c7:a6:0e:d6:2f:0c:e9: 41:b8:f9:5e:ae:fa:64:c1:ad:b3:78:48:21:71:30: a2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:B9:69:A1:CB:9B:F6:75:DF:84:4D:7B:3B:C1:2E:2A:3A:5B:82 X509v3 Authority Key Identifier: keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:3a:b3:6a:01:bf:e2:3b:e7:9e:ae:84:2b:eb:5a:61:8c: 5c:c6:b3:89:53:5f:8b:33:6c:71:df:3a:ae:c1:5f:f3:06:eb: cf:65:90:73:88:76:d0:45:cc:3d:ba:24:c5:52:12:d7:c5:53: 13:8b:59:07:4c:ce:b7:0d:50:c9:20:1e:19:53:0c:e3:e2:ae: 31:c9:e9:da:04:a4:d3:16:4b:06:d8:4b:e4:71:50:10:0d:63: 42:e6:f1:95:15:3a:15:f8:6b:40:4c:73:58:17:76:47:ab:07: 7e:93:52:a3:3e:61:24:4f:56:9d:94:4a:af:1b:6f:9c:26:c4: 37:2f:ca:e6:e2:7a:43:53:f4:7c:29:db:5d:5a:80:15:6d:13: b2:0c:78:10:b3:0b:ec:d8:1f:1d:e0:7f:84:52:c9:b3:b4:50: 38:0b:7a:a7:f7:14:d7:93:e5:ee:f0:c7:12:fc:5f:bc:bb:f3: 7d:d3:89:56:21:91:c6:1e:36:6c:ee:1d:91:b1:e7:f3:1e:dd: 53:86:ed:c8:ad:55:f4:53:ea:3e:28:26:10:b6:ab:95:6b:ef: 16:0d:02:2e:b9:d2:0c:f1:87:e8:5b:c2:ec:7d:37:a5:a7:4f: d9:9c:4e:21:c8:f1:c6:c6:9d:a0:ff:bf:d7:e5:49:85:7b:16: 25:be:5f:a6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv2v2uFkMJJ066Res+O7r2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzE4Y2IxYTUwMjdmYTE3MjZmMTE0YjNlZmU2MmEzYTk3 OWNlMWIwHhcNMjYwMTI1MjAwMTM4WhcNMjYwMTI2MjAwMTM4WjAzMTEwLwYDVQQD EygzODQ0Yjk2OWExY2I5YmY2NzVkZjg0NGQ3YjNiYzEyZTJhM2E1YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujyEBmtUIrQJyvLcjR91DKfK7ALA kdFXYDkQvo03fr7DEXa3GQMxuI8ZUgs1YCX8r9xjTT5CNK3xZycRGs7y8xnFEMAm OAHGlGM+fh/kGXeeMYh53BLEiAL3x6S4r3lhutNLKbn4TLNoJNp6z/Y7CGqB4gDI k+Fytr+Gc8LBx5qRVE4Ay0wYuxNkfUYNOB/e6Dp8+RKAXhxQ/9a8FqZamDr3sAzg RSkghmTBYRBYpBcrRBXqhfDVnSVNlPgr+DcuDmd5DEsXv4JvF1BzJ5op1DMx7DWM YoGcDVPmMxNpA/GBQUyq5b7eesemDtYvDOlBuPlervpkwa2zeEghcTCi7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDhEuWmhy5v2dd+ETXs7wS4qOluCMB8GA1UdIwQY MBaAFPnBjLGlAn+hcm8RSz7+YqOpec4bMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jR01zYVVDZjZGeWJ4RkxQdjVpbzZsNXpocy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMjZjYTkyLTZmYjgtNGRkMi05Nzk1 LTliYzVjMjZkNGJlOC8xLzEtY0dNc2FVQ2Y2RnlieEZMUHY1aW82bDV6aHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM1LzI2Y2E5Mi02ZmI4LTRkZDItOTc5NS05YmM1YzI2ZDRi ZTgvMS8xLWNHTXNhVUNmNkZ5YnhGTFB2NWlvNmw1emhzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/46 s2oBv+I7556uhCvrWmGMXMaziVNfizNscd86rsFf8wbrz2WQc4h20EXMPbokxVIS 18VTE4tZB0zOtw1QySAeGVMM4+KuMcnp2gSk0xZLBthL5HFQEA1jQubxlRU6Ffhr QExzWBd2R6sHfpNSoz5hJE9WnZRKrxtvnCbENy/K5uJ6Q1P0fCnbXVqAFW0Tsgx4 ELML7NgfHeB/hFLJs7RQOAt6p/cU15Pl7vDHEvxfvLvzfdOJViGRxh42bO4dkbHn 8x7dU4btyK1V9FPqPigmELarlWvvFg0CLrnSDPGH6FvC7H03padP2ZxOIcjxxsad oP+/1+VJhXsWJb5fpg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:20 2026 by rpki-client