This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: X/z3LzVZcutcB4BsuWGWKLc8lE/54e5mPQGOd6r8HmA= Subject key identifier: F4:05:75:31:F3:E0:9E:41:1A:D5:F3:3C:5C:5C:CD:30:C9:A1:94:FF Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019BF386E30C6C10B73D80C1EBE87E5DC305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 158E Signing time: Sun 25 Jan 2026 05:01:01 +0000 Manifest this update: Sun 25 Jan 2026 05:01:01 +0000 Manifest next update: Mon 26 Jan 2026 05:01:01 +0000 Files and hashes: 1: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 4: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 5: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 6: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 7: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 8: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 9: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: lmNRIKv23Yz//cHngseRBRbqoq5zeCqbAeJ7W3+jkJ4=) 11: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 12: hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa (hash: yFRAlutdbfqI9DX9panTjVrB5bc9srd6cM00XqjPdl4=) 13: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 14: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 15: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 16: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 17: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:e3:0c:6c:10:b7:3d:80:c1:eb:e8:7e:5d:c3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 25 05:01:01 2026 GMT Not After : Jan 26 05:01:01 2026 GMT Subject: CN=f4057531f3e09e411ad5f33c5c5ccd30c9a194ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:c3:86:54:de:05:d7:ae:ef:55:fa:90:34: 74:d2:9b:44:47:06:7d:4f:50:b5:5e:7e:18:d1:11: 71:ea:d9:28:b2:4b:5f:36:e1:35:e9:cd:ba:09:a5: 03:16:fc:10:6e:76:6d:ce:a6:f2:be:a2:45:2e:fb: c6:c8:25:4a:7d:18:88:f4:a2:1b:f3:16:6c:30:0b: 52:76:b1:4d:05:e3:ca:5d:75:5f:d4:ae:f5:f2:b1: 99:f0:20:48:9e:4c:01:44:3b:5c:05:4f:c5:59:90: 08:82:0f:ce:5d:3f:6a:e7:42:c4:a2:c5:a8:4f:e7: 48:07:9b:1e:d0:b0:f2:43:c3:7a:31:3c:46:2c:b5: 1e:25:d5:c3:99:61:e7:97:d3:e8:52:23:d2:7c:68: bb:c3:9e:a1:f8:49:e5:20:53:d5:0c:c4:5a:04:08: 95:6a:63:a7:99:ce:b6:9a:36:f3:b8:fd:8b:8e:2d: c2:c7:10:40:72:d1:0b:ef:df:32:08:11:40:66:d9: 58:76:01:ae:91:b3:91:fc:2e:61:b2:66:77:6b:0e: 70:ad:a4:dc:fa:04:68:ab:42:2c:79:d8:92:8e:f0: d6:77:62:32:7c:50:da:cd:ea:bc:0f:87:f8:8d:ac: 3e:24:d7:17:df:53:95:67:05:30:9a:89:a6:ae:8d: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:05:75:31:F3:E0:9E:41:1A:D5:F3:3C:5C:5C:CD:30:C9:A1:94:FF X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:92:8d:bc:36:01:04:17:96:3d:fb:91:c8:5d:9b:0b:a3: f4:6e:f8:8e:44:4e:00:76:34:50:c5:da:43:46:1f:f4:8e:47: ef:67:89:71:c8:33:e2:05:81:5b:c0:12:c6:a6:91:b6:69:d3: db:57:d2:94:e6:40:da:c4:a6:99:10:75:69:30:e0:d4:0c:27: 00:94:4e:55:8d:97:ef:f0:46:9f:85:fb:1a:1c:4b:20:d1:37: 8b:d6:99:c4:2f:0d:c7:8b:0c:b0:04:6d:7e:d4:53:b4:1d:06: 72:a5:ab:df:5b:23:2b:7c:80:0f:f4:9f:c2:59:14:34:1b:08: 55:ea:37:43:7f:95:32:31:22:27:09:9d:93:04:d0:09:2d:fc: 5e:4d:5a:51:75:13:c5:e4:9c:6e:22:91:89:21:a6:b7:ce:6d: 2e:4f:6a:2f:3c:fe:09:82:ca:42:ba:24:08:a2:c7:1c:d8:94: 93:91:8b:fa:12:b4:52:7b:c9:90:56:78:31:01:00:a1:ef:00: 18:e8:e9:c2:7b:8b:9e:86:50:0d:f0:c4:92:36:31:88:8e:fb: bc:46:60:0b:00:b8:11:55:3e:2b:49:e8:0c:ca:88:e3:db:5d: 2a:75:03:74:44:01:76:0d:84:fb:bc:ed:07:13:62:78:01:1a: a7:c2:68:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhuMMbBC3PYDB6+h+XcMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTI1MDUwMTAxWhcNMjYwMTI2MDUwMTAxWjAzMTEwLwYDVQQD EyhmNDA1NzUzMWYzZTA5ZTQxMWFkNWYzM2M1YzVjY2QzMGM5YTE5NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G3DhlTeBdeu71X6kDR00ptERwZ9 T1C1Xn4Y0RFx6tkosktfNuE16c26CaUDFvwQbnZtzqbyvqJFLvvGyCVKfRiI9KIb 8xZsMAtSdrFNBePKXXVf1K718rGZ8CBInkwBRDtcBU/FWZAIgg/OXT9q50LEosWo T+dIB5se0LDyQ8N6MTxGLLUeJdXDmWHnl9PoUiPSfGi7w56h+EnlIFPVDMRaBAiV amOnmc62mjbzuP2Lji3CxxBActEL798yCBFAZtlYdgGukbOR/C5hsmZ3aw5wraTc +gRoq0IsediSjvDWd2IyfFDazeq8D4f4jaw+JNcX31OVZwUwmommro0cDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQFdTHz4J5BGtXzPFxczTDJoZT/MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb2Sjbw2 AQQXlj37kchdmwuj9G74jkROAHY0UMXaQ0Yf9I5H72eJccgz4gWBW8ASxqaRtmnT 21fSlOZA2sSmmRB1aTDg1AwnAJROVY2X7/BGn4X7GhxLINE3i9aZxC8Nx4sMsARt ftRTtB0GcqWr31sjK3yAD/SfwlkUNBsIVeo3Q3+VMjEiJwmdkwTQCS38Xk1aUXUT xeScbiKRiSGmt85tLk9qLzz+CYLKQrokCKLHHNiUk5GL+hK0UnvJkFZ4MQEAoe8A GOjpwnuLnoZQDfDEkjYxiI77vEZgCwC4EVU+K0noDMqI49tdKnUDdEQBdg2E+7zt BxNieAEap8Jo3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:09 2026 by rpki-client