This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json) Hash identifier: UdJXhkOqfRFeD0FSHwkfOtuFLo8xL7C6EvuhlBc+qqs= Subject key identifier: 8F:F8:27:7C:50:C2:7A:E6:6E:E3:35:60:05:99:B9:43:0E:75:0E:63 Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019BF4999AA41B1EEC8E8D8AF7F78F209436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft Manifest number: 1534 Signing time: Sun 25 Jan 2026 10:01:05 +0000 Manifest this update: Sun 25 Jan 2026 10:01:05 +0000 Manifest next update: Mon 26 Jan 2026 10:01:05 +0000 Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=) 2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: 7u14S1QCq143Bx0j1CnJuIrbUq2Oe3XeoMnVSsOAum8=) 3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=) 4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=) 5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:9a:a4:1b:1e:ec:8e:8d:8a:f7:f7:8f:20:94:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Jan 25 10:01:05 2026 GMT Not After : Jan 26 10:01:05 2026 GMT Subject: CN=8ff8277c50c27ae66ee335600599b9430e750e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:33:e4:0d:3b:c8:28:4e:41:85:60:a3:c4: 5e:e1:67:de:ff:e9:2e:97:84:d0:f3:1e:ec:9f:14: a6:f3:f8:01:43:9d:98:51:d0:22:85:76:58:6d:53: 8e:3f:5a:94:2c:1e:8c:1e:d9:43:8d:57:15:73:a1: 21:12:36:d7:34:e0:dd:4b:fd:a7:e4:c5:2f:61:aa: 4a:35:65:c9:5e:85:58:81:c8:f6:f2:16:c0:97:cd: 6b:66:40:76:cf:d1:48:c8:2f:b1:5d:f8:17:cc:a1: bf:c9:b9:57:df:35:5a:29:81:70:0c:91:ae:00:df: af:e3:b9:0d:41:ed:42:af:cd:40:3d:d7:76:49:ce: 85:e5:fb:e9:4d:89:94:58:f0:60:27:37:3e:93:4c: 6d:fa:21:a9:a9:1f:68:ee:78:b7:60:94:6a:30:8c: 49:08:dd:0a:2c:df:3e:73:b9:93:ae:2a:76:36:92: 40:19:49:14:1d:6c:18:52:68:9a:f8:3c:56:86:86: f2:83:8a:46:80:62:a3:0d:af:5f:b2:46:a3:ba:68: b3:4f:0d:fe:b3:45:59:7e:23:c3:d5:95:db:da:77: 76:0b:77:1a:d9:76:8f:bf:76:90:86:70:ce:3e:c7: 71:a3:e5:19:f3:1a:8b:28:17:ac:17:fd:a4:4e:b3: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:27:7C:50:C2:7A:E6:6E:E3:35:60:05:99:B9:43:0E:75:0E:63 X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ba:5f:f0:d8:98:5a:0f:7d:d1:3f:ab:c4:94:dc:29:71:11: dd:8a:cc:e1:c9:be:51:6f:a9:41:22:a5:a6:44:91:c4:53:d6: 91:d5:db:bf:67:19:8e:36:9a:09:8b:74:fe:70:a8:da:02:10: ca:9b:31:cd:b8:0e:c3:6e:11:1e:a9:a9:10:9b:21:58:29:fd: 84:41:5e:4b:8d:70:c9:a6:a4:b8:1b:97:da:1e:dd:c9:43:36: 81:c2:78:27:d5:4b:33:a6:57:e8:a1:19:5b:3f:e1:4c:5b:88: d6:3c:be:ec:bb:45:28:b4:d4:8b:8c:b5:2e:81:a8:da:c2:99: bf:a8:cb:84:25:f8:37:01:ac:07:07:33:86:08:95:4a:d6:25: 99:90:58:7d:a5:c2:b0:e8:37:d0:80:7c:1b:7b:16:71:b9:2c: 48:4f:86:cd:45:1f:8b:cb:ad:96:57:0e:3d:2a:57:d8:ee:4e: 1f:2c:4b:4a:ac:68:1f:f2:80:71:c1:63:83:20:73:0e:3c:29: 7a:7a:ab:c0:f7:a2:7a:87:21:fd:3a:e4:07:c9:e6:f4:e2:6f: 55:c5:1a:c5:0b:30:59:ef:c4:c1:c8:4c:c3:62:12:78:7d:dc: c1:af:cf:72:2b:24:e4:aa:9a:0a:84:f8:b9:54:7f:bd:40:63: e5:fa:75:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZqkGx7sjo2K9/ePIJQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjYwMTI1MTAwMTA1WhcNMjYwMTI2MTAwMTA1WjAzMTEwLwYDVQQD Eyg4ZmY4Mjc3YzUwYzI3YWU2NmVlMzM1NjAwNTk5Yjk0MzBlNzUwZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgz5A07yChOQYVgo8Re4Wfe/+ku l4TQ8x7snxSm8/gBQ52YUdAihXZYbVOOP1qULB6MHtlDjVcVc6EhEjbXNODdS/2n 5MUvYapKNWXJXoVYgcj28hbAl81rZkB2z9FIyC+xXfgXzKG/yblX3zVaKYFwDJGu AN+v47kNQe1Cr81APdd2Sc6F5fvpTYmUWPBgJzc+k0xt+iGpqR9o7ni3YJRqMIxJ CN0KLN8+c7mTrip2NpJAGUkUHWwYUmia+DxWhobyg4pGgGKjDa9fskajumizTw3+ s0VZfiPD1ZXb2nd2C3ca2XaPv3aQhnDOPsdxo+UZ8xqLKBesF/2kTrNmswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/4J3xQwnrmbuM1YAWZuUMOdQ5jMB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbpf8NiY Wg990T+rxJTcKXER3YrM4cm+UW+pQSKlpkSRxFPWkdXbv2cZjjaaCYt0/nCo2gIQ ypsxzbgOw24RHqmpEJshWCn9hEFeS41wyaakuBuX2h7dyUM2gcJ4J9VLM6ZX6KEZ Wz/hTFuI1jy+7LtFKLTUi4y1LoGo2sKZv6jLhCX4NwGsBwczhgiVStYlmZBYfaXC sOg30IB8G3sWcbksSE+GzUUfi8utllcOPSpX2O5OHyxLSqxoH/KAccFjgyBzDjwp enqrwPeieoch/TrkB8nm9OJvVcUaxQswWe/EwchMw2ISeH3cwa/Pcisk5KqaCoT4 uVR/vUBj5fp1VQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:44 2026 by rpki-client