This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json) Hash identifier: 6MGJdAYQpb0GcT/c5/mM7zaJk6eNiorvgF0HCG5714k= Subject key identifier: 83:48:16:BF:10:28:8F:2E:DA:21:F1:BF:6E:4C:A2:17:59:D6:8B:6D Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019BF988C9585392896513FFC2151684AEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft Manifest number: 1532 Signing time: Mon 26 Jan 2026 09:00:49 +0000 Manifest this update: Mon 26 Jan 2026 09:00:49 +0000 Manifest next update: Tue 27 Jan 2026 09:00:49 +0000 Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: eWuPhYwNQ/W1XHviTzuiO06i3MwaH5X99PaT3xRNO8k=) 2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:c9:58:53:92:89:65:13:ff:c2:15:16:84:ae:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Jan 26 09:00:49 2026 GMT Not After : Jan 27 09:00:49 2026 GMT Subject: CN=834816bf10288f2eda21f1bf6e4ca21759d68b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:31:26:2a:23:28:73:eb:44:9a:4a:13:93: c3:a5:3b:42:d4:7e:fa:65:86:88:a7:11:5c:a1:e1: 07:2b:1e:27:e5:af:6e:d0:2a:58:a0:29:87:e0:f1: 39:b6:14:8f:0c:b0:d8:fd:49:c0:f3:cb:64:7c:f2: 18:c7:ca:17:14:48:08:55:85:ab:b8:9f:9c:e4:56: 36:82:87:5e:ac:6b:f6:42:57:7d:06:ba:20:ce:4c: ca:e2:b8:39:2a:67:a8:a0:a7:85:2b:2d:1a:35:c5: 71:8e:6d:05:7f:a6:62:95:f7:64:02:62:c0:e6:99: 88:56:e4:b4:d4:dc:d9:9c:20:78:5b:a0:34:89:61: d5:60:bb:be:f8:30:e5:29:38:8d:95:9c:7f:28:90: 44:c3:a9:71:32:42:30:37:15:81:6b:5f:87:10:07: f1:b3:f7:dc:80:90:b2:d7:d6:bf:0e:62:0f:04:23: f1:35:a8:c4:7b:95:39:b7:19:b5:14:98:c6:6d:8d: 66:f2:5b:60:9b:6c:76:60:e2:d6:4b:fb:14:58:59: 76:c8:f4:8f:d6:4d:25:c9:a7:00:73:41:1f:ff:cb: 22:60:22:1d:91:06:0d:69:11:29:31:a2:ae:fd:d6: 23:78:8a:f3:1f:d4:e7:e8:2f:77:06:46:f5:25:b2: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:48:16:BF:10:28:8F:2E:DA:21:F1:BF:6E:4C:A2:17:59:D6:8B:6D X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:ac:32:ea:c0:98:f4:0f:83:86:d0:41:97:ec:2e:81:47: 13:62:7b:77:b2:d2:2a:a9:a9:ed:82:30:4a:37:32:3a:f8:a1: 8d:91:af:09:3f:3a:8a:4e:43:eb:70:da:cb:14:f6:f8:b2:1f: 29:9d:89:9e:69:57:14:f1:bd:f6:1c:ba:01:04:e0:ef:f2:af: 22:93:d8:00:58:34:ab:0e:44:e7:7d:f3:01:60:4f:83:09:d3: 51:44:3d:7c:56:cb:b3:06:25:3b:17:56:b5:b6:19:ee:c0:d7: 18:92:b7:c8:a3:20:e5:d4:c5:65:d3:dd:fe:97:80:cd:87:a8: 5e:43:f7:9e:68:f2:3b:ee:9c:44:3c:b2:54:e2:63:24:6b:39: 55:1a:5f:78:f5:26:61:1f:be:69:6a:62:05:c9:d6:5b:e9:53: 82:f3:be:f4:b7:db:00:ae:91:76:39:05:1a:7f:ae:62:9a:8d: 42:1f:4e:91:4c:44:fe:04:42:8a:6a:29:a1:af:b1:60:d1:fc: 55:90:ec:44:b4:68:0f:cc:3a:09:fa:3b:b5:75:6f:65:90:80: 4d:e2:60:50:ec:06:f5:34:01:84:8b:d2:b2:4a:88:d2:f0:8a: a8:4c:3c:0c:46:9b:8e:78:bb:a1:36:84:b5:56:c9:01:02:35: 05:d8:63:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iMlYU5KJZRP/whUWhK7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjYwMTI2MDkwMDQ5WhcNMjYwMTI3MDkwMDQ5WjAzMTEwLwYDVQQD Eyg4MzQ4MTZiZjEwMjg4ZjJlZGEyMWYxYmY2ZTRjYTIxNzU5ZDY4YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4xJiojKHPrRJpKE5PDpTtC1H76 ZYaIpxFcoeEHKx4n5a9u0CpYoCmH4PE5thSPDLDY/UnA88tkfPIYx8oXFEgIVYWr uJ+c5FY2goderGv2Qld9BrogzkzK4rg5KmeooKeFKy0aNcVxjm0Ff6ZilfdkAmLA 5pmIVuS01NzZnCB4W6A0iWHVYLu++DDlKTiNlZx/KJBEw6lxMkIwNxWBa1+HEAfx s/fcgJCy19a/DmIPBCPxNajEe5U5txm1FJjGbY1m8ltgm2x2YOLWS/sUWFl2yPSP 1k0lyacAc0Ef/8siYCIdkQYNaREpMaKu/dYjeIrzH9Tn6C93Bkb1JbIDfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINIFr8QKI8u2iHxv25MohdZ1ottMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC6sMurA mPQPg4bQQZfsLoFHE2J7d7LSKqmp7YIwSjcyOvihjZGvCT86ik5D63DayxT2+LIf KZ2JnmlXFPG99hy6AQTg7/KvIpPYAFg0qw5E533zAWBPgwnTUUQ9fFbLswYlOxdW tbYZ7sDXGJK3yKMg5dTFZdPd/peAzYeoXkP3nmjyO+6cRDyyVOJjJGs5VRpfePUm YR++aWpiBcnWW+lTgvO+9LfbAK6RdjkFGn+uYpqNQh9OkUxE/gRCimopoa+xYNH8 VZDsRLRoD8w6Cfo7tXVvZZCATeJgUOwG9TQBhIvSskqI0vCKqEw8DEabjni7oTaE tVbJAQI1BdhjOA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:18 2026 by rpki-client