This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json) Hash identifier: 7KBA9WOT+6NviqlTr7t/zUqUpiZ+VEYNT1oLHQqDSLU= Subject key identifier: 75:BF:EC:1E:ED:2C:2F:47:CD:A2:AF:A6:47:E2:26:F6:26:7B:C1:68 Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac Certificate serial: 019BFC8A8B05B3E15C0ACD3C48124E6FBB53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 23:01:36 +0000 Manifest this update: Mon 26 Jan 2026 23:01:36 +0000 Manifest next update: Tue 27 Jan 2026 23:01:36 +0000 Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: 1ADi/4Md5colud5EanG6m+2rWV8zEBHswXFjlutg4OY=) 2: cDoC-jSYN7u0frpLx2bXUSxluu0.roa (hash: 0c+KBOgKhiecSN5vnMV9D8GmEY0jyIF5LXtXoNSNf7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:8b:05:b3:e1:5c:0a:cd:3c:48:12:4e:6f:bb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac Validity Not Before: Jan 26 23:01:36 2026 GMT Not After : Jan 27 23:01:36 2026 GMT Subject: CN=75bfec1eed2c2f47cda2afa647e226f6267bc168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:85:19:f4:f2:18:07:b9:24:e3:25:bb:89: 30:82:4b:14:42:ae:c9:04:e7:7a:48:d8:90:57:93: cd:a9:19:63:5e:59:c0:25:e1:97:b6:f6:1f:be:7e: 4f:38:7f:7b:a3:e5:2d:71:61:b7:07:07:a2:55:c5: 76:a4:62:75:78:52:71:88:90:10:64:38:eb:b4:b1: 4d:a6:df:a8:b9:59:e1:84:a7:84:75:f6:68:f8:29: f7:86:62:a6:23:5c:1e:b3:bf:e0:19:9e:83:e7:24: 31:61:43:78:31:25:ec:3f:df:ee:a9:57:08:04:ba: 61:e7:5b:aa:68:b5:10:b8:a9:de:ef:d4:3c:81:14: b8:f3:27:7d:c8:53:85:0a:eb:1a:ed:b9:27:1c:f1: ce:0b:c3:3f:d1:9a:a2:4f:df:71:7e:68:7e:f5:76: dd:09:ab:b5:23:a4:38:b3:81:dc:10:5a:77:a0:e0: 7f:a4:6d:1b:5f:6d:90:d0:48:da:8e:2e:47:48:9f: 24:f1:ca:00:d4:b7:99:f1:bc:4c:68:04:10:98:45: 60:1b:2a:88:3d:9d:7e:ac:4f:38:79:f6:86:f2:a6: 37:27:f8:fb:1c:ea:8c:0e:dc:cb:93:bc:0e:e6:58: 69:c1:3e:05:b1:9c:98:6a:ff:4d:3f:7b:38:6f:f1: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:EC:1E:ED:2C:2F:47:CD:A2:AF:A6:47:E2:26:F6:26:7B:C1:68 X509v3 Authority Key Identifier: keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c8:b7:61:2b:35:2c:f4:7c:4f:a4:f5:d5:43:2f:fd:c5:04: e1:38:c5:24:f1:e1:3a:a9:34:0d:fd:b0:6b:23:2e:71:fc:c7: 89:4b:e4:08:d6:a8:26:9a:90:3f:9d:0a:37:a2:cb:18:fb:32: ad:f8:3d:e7:e4:c4:ab:c2:28:93:34:d0:e0:77:e7:e2:60:bb: 52:83:ec:c6:b5:ff:92:ef:e2:19:f1:7c:4c:61:09:55:de:bf: 5e:02:c6:b2:7b:c5:b0:3d:cc:45:7d:07:dd:cc:82:c7:c8:3a: 8c:3e:5e:0b:08:94:8f:b3:01:22:39:11:3d:c6:f1:d0:ed:32: eb:72:87:b9:fb:fe:6d:9e:50:0f:a2:2d:9d:51:25:8b:4d:b8: 85:b7:59:7f:b0:a1:54:76:a6:74:ad:b2:a3:56:db:2a:e2:be: 44:8f:88:12:55:61:04:01:0e:8c:5a:a5:33:43:86:e5:c4:50: a4:7a:f0:b9:e9:58:27:48:5e:31:33:15:c2:61:b2:7c:c0:8f: 8e:74:14:cc:54:96:b4:a0:cc:6b:40:42:ee:5f:65:86:d8:a1: 4b:cc:c4:b4:9c:2d:df:a7:f4:3a:2b:53:7e:1c:af:c4:7c:c9: d1:be:40:21:ce:96:5a:8c:f1:b7:03:cf:c8:19:56:29:42:a9: 06:75:b9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iosFs+FcCs08SBJOb7tTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3 M2NhYWMwHhcNMjYwMTI2MjMwMTM2WhcNMjYwMTI3MjMwMTM2WjAzMTEwLwYDVQQD Eyg3NWJmZWMxZWVkMmMyZjQ3Y2RhMmFmYTY0N2UyMjZmNjI2N2JjMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNSFGfTyGAe5JOMlu4kwgksUQq7J BOd6SNiQV5PNqRljXlnAJeGXtvYfvn5POH97o+UtcWG3BweiVcV2pGJ1eFJxiJAQ ZDjrtLFNpt+ouVnhhKeEdfZo+Cn3hmKmI1wes7/gGZ6D5yQxYUN4MSXsP9/uqVcI BLph51uqaLUQuKne79Q8gRS48yd9yFOFCusa7bknHPHOC8M/0ZqiT99xfmh+9Xbd Cau1I6Q4s4HcEFp3oOB/pG0bX22Q0Ejaji5HSJ8k8coA1LeZ8bxMaAQQmEVgGyqI PZ1+rE84efaG8qY3J/j7HOqMDtzLk7wO5lhpwT4FsZyYav9NP3s4b/GozwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW/7B7tLC9HzaKvpkfiJvYme8FoMB8GA1UdIwQY MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0 LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMi3YSs1 LPR8T6T11UMv/cUE4TjFJPHhOqk0Df2wayMucfzHiUvkCNaoJpqQP50KN6LLGPsy rfg95+TEq8IokzTQ4Hfn4mC7UoPsxrX/ku/iGfF8TGEJVd6/XgLGsnvFsD3MRX0H 3cyCx8g6jD5eCwiUj7MBIjkRPcbx0O0y63KHufv+bZ5QD6ItnVEli024hbdZf7Ch VHamdK2yo1bbKuK+RI+IElVhBAEOjFqlM0OG5cRQpHrwuelYJ0heMTMVwmGyfMCP jnQUzFSWtKDMa0BC7l9lhtihS8zEtJwt36f0OitTfhyvxHzJ0b5AIc6WWozxtwPP yBlWKUKpBnW5wg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:35 2026 by rpki-client