This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json) Hash identifier: YX0Q7epYCZxQBOWEdRwJMZ3hz+Jua52+BeT1w4ZG36Y= Subject key identifier: 01:9A:F4:5D:22:84:AF:EB:6F:96:5B:6E:21:37:D9:24:69:6B:12:45 Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e Certificate serial: 019BF650E5DF34870E48E98B8518C2241595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft Manifest number: 042A Signing time: Sun 25 Jan 2026 18:00:55 +0000 Manifest this update: Sun 25 Jan 2026 18:00:55 +0000 Manifest next update: Mon 26 Jan 2026 18:00:55 +0000 Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: GZ9jwT2HPur4po2VHBbIMT08+UbSXpYd0o+jFwPoTng=) 2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=) 3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=) 4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:e5:df:34:87:0e:48:e9:8b:85:18:c2:24:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Validity Not Before: Jan 25 18:00:55 2026 GMT Not After : Jan 26 18:00:55 2026 GMT Subject: CN=019af45d2284afeb6f965b6e2137d924696b1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:ed:d6:c0:fe:3a:04:5c:46:a0:da:08:c3: a2:b5:f3:71:da:9f:ba:e6:1c:84:cd:f0:4c:6c:70: d2:93:41:73:8a:10:2a:f1:f9:af:39:df:a4:d3:f0: ba:11:63:c4:af:3d:93:74:03:87:27:49:36:5f:9f: 14:b9:e7:11:c5:19:e7:55:bd:f5:44:06:8f:59:7f: 2f:93:14:8d:17:d0:73:24:aa:7a:69:92:07:5d:fc: 76:80:27:4f:19:3b:eb:bd:7f:32:6b:31:77:1a:32: 92:37:95:d0:92:01:e6:34:b3:2e:5d:4a:af:3f:fe: 66:e2:e9:33:da:6b:f1:0f:24:82:59:72:29:16:83: bd:5b:05:b2:1a:0f:49:fa:d9:51:3c:04:7e:34:82: 52:58:f2:b8:f1:f8:75:36:5c:86:98:78:ab:b3:a8: 0a:58:33:24:9c:23:9d:21:ee:ab:15:2d:7a:73:75: 86:25:88:48:4b:69:9e:dc:4e:49:65:cf:fd:53:92: 09:67:c9:20:7c:f8:d3:b7:85:95:b5:a4:0c:70:5b: 48:80:fc:08:4d:98:9f:cd:3a:06:b1:98:5f:dd:75: b9:a5:74:e7:c9:5a:f8:90:3b:f6:9e:1a:27:13:3a: fd:2c:f6:c9:07:df:77:27:1c:eb:ce:88:ac:2f:b4: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9A:F4:5D:22:84:AF:EB:6F:96:5B:6E:21:37:D9:24:69:6B:12:45 X509v3 Authority Key Identifier: keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5c:d2:ed:f4:d2:23:4a:8e:ed:82:af:73:61:cb:9a:c3:14: 47:1d:80:2c:06:72:6a:11:07:f6:71:89:e3:b6:00:0e:75:82: 65:92:b6:e1:14:df:3d:38:16:7f:65:5e:96:d6:af:ab:a7:f0: 95:3f:17:03:8f:2c:d0:57:a1:c4:aa:3d:2b:d9:9a:25:d9:2b: 0a:7d:55:ab:f6:32:12:0d:fe:2f:71:52:99:c9:72:cd:b1:e3: 87:41:b6:56:0f:03:47:76:ad:31:55:52:29:6c:8b:a4:6f:e3: 33:09:2d:e8:a4:c5:d7:c1:ca:7a:ba:ce:41:d6:2c:24:ad:3b: 22:7d:09:e8:4a:0e:f5:79:1e:b5:30:0e:07:55:36:ab:38:ba: ea:bd:91:58:71:ce:9d:a8:8b:02:83:45:eb:19:0a:f9:32:b5: e1:f1:b7:52:7e:ff:e4:2d:8f:68:76:c5:db:5d:3d:dd:e7:c2: 1f:1b:08:e7:5d:57:72:a7:3b:55:e9:70:c8:ed:ab:61:5f:63: 62:ae:df:92:7d:a9:9b:03:cc:a9:60:29:49:93:10:cd:b2:11: 21:96:82:0e:f2:12:28:b6:10:93:87:bf:fe:62:00:e7:01:a1: 75:1c:e1:cb:ad:da:b7:dd:44:0f:85:66:7b:42:10:1b:32:96: 5e:9b:66:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UOXfNIcOSOmLhRjCJBWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0 MTIxMmUwHhcNMjYwMTI1MTgwMDU1WhcNMjYwMTI2MTgwMDU1WjAzMTEwLwYDVQQD EygwMTlhZjQ1ZDIyODRhZmViNmY5NjViNmUyMTM3ZDkyNDY5NmIxMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI/t1sD+OgRcRqDaCMOitfNx2p+6 5hyEzfBMbHDSk0FzihAq8fmvOd+k0/C6EWPErz2TdAOHJ0k2X58UuecRxRnnVb31 RAaPWX8vkxSNF9BzJKp6aZIHXfx2gCdPGTvrvX8yazF3GjKSN5XQkgHmNLMuXUqv P/5m4ukz2mvxDySCWXIpFoO9WwWyGg9J+tlRPAR+NIJSWPK48fh1NlyGmHirs6gK WDMknCOdIe6rFS16c3WGJYhIS2me3E5JZc/9U5IJZ8kgfPjTt4WVtaQMcFtIgPwI TZifzToGsZhf3XW5pXTnyVr4kDv2nhonEzr9LPbJB993JxzrzoisL7S6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGa9F0ihK/rb5ZbbiE32SRpaxJFMB8GA1UdIwQY MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVzS7fTS I0qO7YKvc2HLmsMURx2ALAZyahEH9nGJ47YADnWCZZK24RTfPTgWf2Veltavq6fw lT8XA48s0FehxKo9K9maJdkrCn1Vq/YyEg3+L3FSmclyzbHjh0G2Vg8DR3atMVVS KWyLpG/jMwkt6KTF18HKerrOQdYsJK07In0J6EoO9XketTAOB1U2qzi66r2RWHHO naiLAoNF6xkK+TK14fG3Un7/5C2PaHbF21093efCHxsI511Xcqc7VelwyO2rYV9j Yq7fkn2pmwPMqWApSZMQzbIRIZaCDvISKLYQk4e//mIA5wGhdRzhy63at91ED4Vm e0IQGzKWXptm0g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:26 2026 by rpki-client