This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: HhY16CuY9HTmc199efvsOtbju/uRMRIdEwisI5kUy5Q= Subject key identifier: 0A:9F:03:E9:08:3C:2B:E2:F0:88:C8:0E:A6:99:9D:AA:77:FD:36:19 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019BF7D161212AACF86F6F5B9558E3174CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1803 Signing time: Mon 26 Jan 2026 01:00:52 +0000 Manifest this update: Mon 26 Jan 2026 01:00:52 +0000 Manifest next update: Tue 27 Jan 2026 01:00:52 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: A65uE9HlKIHTAHsH2tO4zmHAabeBUN4h0nNYfKDyEV0=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: R3e8EP6U572NIEwLXcwI5IO-_Gc.roa (hash: IMUABkpJVknPlYeXsWWkw4ZBUgDiuzIM8ni8AxR0Udc=) 7: T9-vW3KXUqDV-hHkYIlU0h63B7k.roa (hash: GVI+BtriLywrqwYg8b8nOqyUDiKVbNRN2/cPik19wB8=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:61:21:2a:ac:f8:6f:6f:5b:95:58:e3:17:4c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 26 01:00:52 2026 GMT Not After : Jan 27 01:00:52 2026 GMT Subject: CN=0a9f03e9083c2be2f088c80ea6999daa77fd3619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:c1:b5:28:32:e1:d2:38:b1:70:49:98:13: e2:0d:a2:b1:92:3e:20:8b:d1:77:11:74:f3:db:ee: 5c:26:99:a6:ba:04:ca:fd:42:02:17:f1:9a:59:a5: 47:f2:9d:2c:80:3e:39:cb:d0:a7:23:e2:21:6b:bc: 51:b2:72:14:9d:3e:8e:67:c5:86:99:14:b2:7d:c6: 06:1f:1a:8f:24:e8:13:3a:21:ea:4b:aa:28:61:4b: c7:37:fd:ed:ff:1f:40:a2:f9:a2:ca:88:06:d5:05: 34:5c:ad:84:46:32:66:d2:8c:94:4d:fa:3e:36:fb: 68:b0:f5:9d:69:c2:b6:dc:c2:64:3f:3b:1d:85:62: 91:75:26:71:a1:bd:e5:01:aa:8b:2d:ec:63:a6:27: b3:e1:57:c8:91:ff:72:1e:08:4b:79:8e:18:bc:59: af:60:f1:44:b0:39:09:fa:ba:b5:37:a3:46:12:54: 5d:c5:d7:27:13:72:4d:fa:29:21:f2:55:9e:3f:c5: ff:aa:d6:10:e2:27:8d:fc:63:99:4c:22:2b:ce:19: c4:82:a3:c7:5f:d1:f3:bd:e3:a7:0a:cd:ef:d0:73: 3d:a6:ed:e9:84:b4:bc:a5:95:fc:7b:26:26:99:cb: 15:bb:ca:1b:fb:0f:49:f0:fb:4a:5d:04:ce:f2:6a: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9F:03:E9:08:3C:2B:E2:F0:88:C8:0E:A6:99:9D:AA:77:FD:36:19 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:d5:10:b5:0f:23:cf:3b:09:21:8a:13:69:e8:b5:90:a4: 6b:d3:96:05:c0:43:6e:05:d7:13:9b:cf:c9:94:43:8c:3a:aa: a6:30:ee:51:11:f3:82:94:3b:55:2d:10:fd:69:15:de:25:07: 71:fc:4e:72:ae:0b:ed:35:eb:f9:0f:5c:71:ee:d2:43:41:c0: 01:b0:8c:22:2a:a1:7f:c2:ee:c9:4a:22:18:cd:65:b1:86:79: 30:37:57:cb:85:5e:c5:93:f8:ed:ef:64:12:b0:b1:c3:43:25: fb:20:7b:eb:fe:ac:f5:20:78:9b:50:77:f3:92:63:55:57:33: 26:ed:85:42:4b:8f:52:28:91:ba:c0:a3:26:22:5c:2b:5c:53: 51:3b:64:44:b2:77:af:c9:8a:2e:f1:58:31:71:82:5c:52:bd: 31:25:3f:c5:a7:27:84:37:e2:d1:da:38:89:37:1e:b6:e9:f5: 3e:79:d2:96:3e:bb:28:bd:b9:8a:08:05:b8:c5:46:a9:f6:84: 1a:f0:65:5d:28:9d:9e:e8:63:a6:cd:6f:77:ce:56:6a:78:f9: 71:01:1b:a9:76:cc:bd:c4:c7:d9:5e:40:6d:c9:93:38:a0:86: f6:91:c7:91:b1:45:db:35:04:22:b1:a8:4b:a4:e0:2d:6f:4a: 9a:7f:01:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30WEhKqz4b29blVjjF0zsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTI2MDEwMDUyWhcNMjYwMTI3MDEwMDUyWjAzMTEwLwYDVQQD EygwYTlmMDNlOTA4M2MyYmUyZjA4OGM4MGVhNjk5OWRhYTc3ZmQzNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvBtSgy4dI4sXBJmBPiDaKxkj4g i9F3EXTz2+5cJpmmugTK/UICF/GaWaVH8p0sgD45y9CnI+Iha7xRsnIUnT6OZ8WG mRSyfcYGHxqPJOgTOiHqS6ooYUvHN/3t/x9AovmiyogG1QU0XK2ERjJm0oyUTfo+ NvtosPWdacK23MJkPzsdhWKRdSZxob3lAaqLLexjpiez4VfIkf9yHghLeY4YvFmv YPFEsDkJ+rq1N6NGElRdxdcnE3JN+ikh8lWeP8X/qtYQ4ieN/GOZTCIrzhnEgqPH X9HzveOnCs3v0HM9pu3phLS8pZX8eyYmmcsVu8ob+w9J8PtKXQTO8mry2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqfA+kIPCvi8IjIDqaZnap3/TYZMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYnVELUP I887CSGKE2notZCka9OWBcBDbgXXE5vPyZRDjDqqpjDuURHzgpQ7VS0Q/WkV3iUH cfxOcq4L7TXr+Q9cce7SQ0HAAbCMIiqhf8LuyUoiGM1lsYZ5MDdXy4VexZP47e9k ErCxw0Ml+yB76/6s9SB4m1B385JjVVczJu2FQkuPUiiRusCjJiJcK1xTUTtkRLJ3 r8mKLvFYMXGCXFK9MSU/xacnhDfi0do4iTcetun1PnnSlj67KL25iggFuMVGqfaE GvBlXSidnuhjps1vd85Wanj5cQEbqXbMvcTH2V5AbcmTOKCG9pHHkbFF2zUEIrGo S6TgLW9Kmn8Bmw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:49 2026 by rpki-client