This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json) Hash identifier: PhPygGcMeDWZU1pBs9MMkLxwz9O4ErXLLKn/FRrcJ84= Subject key identifier: 00:8D:28:D3:FF:7F:5C:89:39:07:6A:1D:1F:7F:81:04:C1:C8:0E:94 Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Certificate serial: 019BF7636CFBC13D8EBA739F24C058EC78DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:00:46 +0000 Manifest this update: Sun 25 Jan 2026 23:00:46 +0000 Manifest next update: Mon 26 Jan 2026 23:00:46 +0000 Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: hAR2/odOxtJQUKGvhimxbQmSg9gEHplaeK8VUpvpX24=) 2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:6c:fb:c1:3d:8e:ba:73:9f:24:c0:58:ec:78:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Validity Not Before: Jan 25 23:00:46 2026 GMT Not After : Jan 26 23:00:46 2026 GMT Subject: CN=008d28d3ff7f5c8939076a1d1f7f8104c1c80e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:46:b2:75:44:e5:e2:fe:99:7c:7e:af:e9: 1e:5e:ee:1a:b2:b8:1d:05:68:e1:4e:70:26:59:cb: 28:be:78:79:27:18:d3:7b:78:a1:8c:35:16:c7:ce: 59:04:9c:a1:c2:4a:db:0d:26:f6:6b:0d:bb:65:18: c1:f3:c0:95:32:7a:d4:53:69:7c:25:fe:41:b3:4f: 7e:d6:89:c5:c5:48:96:f8:19:77:7b:2e:23:51:bd: 1d:17:e9:42:8d:92:19:dd:2a:70:5e:25:32:a4:4f: 77:8a:7e:26:c6:e5:9c:fc:8a:9d:ae:29:a9:b9:a6: 81:9b:40:78:40:fd:9c:fd:32:ee:65:6f:07:22:02: 25:d9:09:4e:90:f2:a1:79:fd:f9:c4:10:e2:e2:ce: ab:53:4e:71:57:d2:07:c3:c8:41:d7:18:eb:b5:0d: fc:48:83:e1:bd:4d:ce:90:49:94:8d:66:ca:34:3a: d8:0f:d7:e5:58:11:3c:a2:df:a5:13:75:fb:04:a3: de:87:08:19:c2:b0:83:8d:37:b5:34:ba:f7:e7:e1: bb:d6:7d:5b:4a:78:45:86:f3:b5:42:83:da:0d:22: d8:c9:4c:eb:ec:0b:85:34:cc:21:06:4f:1d:aa:99: 31:be:34:3d:37:09:08:7d:c3:26:12:71:62:7c:aa: 0f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:28:D3:FF:7F:5C:89:39:07:6A:1D:1F:7F:81:04:C1:C8:0E:94 X509v3 Authority Key Identifier: keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:c4:8f:d8:12:eb:8b:3b:be:36:c8:8d:e5:e1:1e:56:7a: 30:54:5d:e1:1b:21:0d:c2:d4:ad:ce:42:5c:c6:29:80:fa:67: df:ed:39:d9:37:9b:40:58:6a:e3:60:da:24:0b:02:b2:5a:27: 0c:1b:9d:e3:47:b0:84:36:17:55:71:4d:19:b8:cf:84:fa:54: ab:8e:f3:ad:52:08:f0:d8:f9:25:fb:51:68:d8:2b:f2:41:2e: ec:c2:64:ab:a0:bf:17:82:53:b9:7a:2c:2f:79:66:84:35:b5: 7d:a6:b8:1e:1b:ff:ad:53:e7:55:35:dd:fa:56:d7:50:ad:f5: 09:dd:17:ea:fa:93:6c:09:01:9a:eb:c9:a7:3a:6c:6e:15:a2: 97:49:7a:10:66:32:76:c0:47:31:79:6c:b8:93:d0:d9:e7:cd: 84:03:25:58:57:8d:ca:41:20:7f:55:5d:fa:fa:46:ae:82:68: 95:8f:4f:67:0b:4c:a0:84:ee:92:a2:05:e8:17:fa:55:3a:17: 4f:e2:f2:bc:45:f3:83:2a:4f:37:0b:55:00:4c:dd:85:11:07: 02:cf:5e:3a:76:26:74:85:b2:71:12:75:f3:48:33:15:31:47: 47:69:15:b3:fb:e9:59:21:88:d8:db:2b:67:bf:e8:03:28:27: a7:67:4a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2z7wT2OunOfJMBY7HjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi YTEyNjAwHhcNMjYwMTI1MjMwMDQ2WhcNMjYwMTI2MjMwMDQ2WjAzMTEwLwYDVQQD EygwMDhkMjhkM2ZmN2Y1Yzg5MzkwNzZhMWQxZjdmODEwNGMxYzgwZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRtGsnVE5eL+mXx+r+keXu4asrgd BWjhTnAmWcsovnh5JxjTe3ihjDUWx85ZBJyhwkrbDSb2aw27ZRjB88CVMnrUU2l8 Jf5Bs09+1onFxUiW+Bl3ey4jUb0dF+lCjZIZ3SpwXiUypE93in4mxuWc/Iqdrimp uaaBm0B4QP2c/TLuZW8HIgIl2QlOkPKhef35xBDi4s6rU05xV9IHw8hB1xjrtQ38 SIPhvU3OkEmUjWbKNDrYD9flWBE8ot+lE3X7BKPehwgZwrCDjTe1NLr35+G71n1b SnhFhvO1QoPaDSLYyUzr7AuFNMwhBk8dqpkxvjQ9NwkIfcMmEnFifKoPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACNKNP/f1yJOQdqHR9/gQTByA6UMB8GA1UdIwQY MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2 LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINHEj9gS 64s7vjbIjeXhHlZ6MFRd4RshDcLUrc5CXMYpgPpn3+052TebQFhq42DaJAsCslon DBud40ewhDYXVXFNGbjPhPpUq47zrVII8Nj5JftRaNgr8kEu7MJkq6C/F4JTuXos L3lmhDW1faa4Hhv/rVPnVTXd+lbXUK31Cd0X6vqTbAkBmuvJpzpsbhWil0l6EGYy dsBHMXlsuJPQ2efNhAMlWFeNykEgf1Vd+vpGroJolY9PZwtMoITukqIF6Bf6VToX T+LyvEXzgypPNwtVAEzdhREHAs9eOnYmdIWycRJ180gzFTFHR2kVs/vpWSGI2Nsr Z7/oAygnp2dKxA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:02 2026 by rpki-client