This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json) Hash identifier: BbhP7nkh3hMuF/24yeVxpfLx2IvP9j9V7+VFDQZMD64= Subject key identifier: 8D:9F:A3:26:34:77:9F:4A:0C:30:A2:2C:3C:7E:5C:7B:B0:36:83:C8 Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019BF42BC62B113F6F42C612F0697C045DDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft Manifest number: 17FA Signing time: Sun 25 Jan 2026 08:01:08 +0000 Manifest this update: Sun 25 Jan 2026 08:01:08 +0000 Manifest next update: Mon 26 Jan 2026 08:01:08 +0000 Files and hashes: 1: 1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa (hash: Ha8Q7daEnMbbFyY/dxOcBlU2bNw+1RH5tta+lgnhb9k=) 2: J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa (hash: rk9skdq4jJ58Yezr/EGSdkIl0oNJ4Rc1ouYxvWKZPx4=) 3: Snl5qCrO18GvoZkBCNag-_FCvXQ.roa (hash: boOmLIzLkXM0jR5/AjohjFmN5/TCVfh/j8d7LjiBERk=) 4: WInZSLnnGSQiu1WNXz8M2PoWvVY.roa (hash: fvhBez0/rVC+YOWpQ3YX0TtdpMREsi6UE/qQfQbepu0=) 5: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: YT3SMTu2oT68Zi9x3Hjs1/pWwvVWh3VzgZ+LxHpPCQo=) 6: lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa (hash: lV4Xq524SycxtnX+ET+22iLBNWE46Mr/vlQVFjNh0m0=) 7: r8QQa0KeKI1GL64nr5wN_b7RP5c.roa (hash: VPjTppJbG0cInafRi0EuzWNFWUjNr+CGPb1+lvJ/FIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:c6:2b:11:3f:6f:42:c6:12:f0:69:7c:04:5d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Jan 25 08:01:08 2026 GMT Not After : Jan 26 08:01:08 2026 GMT Subject: CN=8d9fa32634779f4a0c30a22c3c7e5c7bb03683c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:9e:8a:fa:2a:b0:2a:90:2a:00:49:a3:7f: d9:a3:4b:20:04:91:31:b1:05:58:d9:7b:95:7d:cc: 87:0c:e7:e9:0f:cc:61:14:9b:87:19:5d:9e:c9:17: 15:66:fa:dc:27:6d:25:7f:1a:e3:c9:59:fa:e8:ed: bb:3d:2b:cf:a7:d3:b1:48:02:3a:f9:9d:86:b1:43: 0a:e1:da:99:3f:47:b1:83:6c:d2:90:c5:b3:30:98: 2a:84:44:42:f0:f3:7f:25:0e:55:6d:89:f2:fc:b1: 07:75:2a:8d:bd:17:74:4b:79:77:c6:c3:15:19:4d: e3:66:5e:a9:19:d8:c0:e4:f6:bc:bf:78:bf:6d:03: 21:1f:32:1f:75:82:26:d7:7c:ba:fb:fe:8b:25:2c: 1d:95:73:73:47:e6:c6:72:18:a3:7d:86:4d:65:83: c0:af:79:6d:a5:dd:e6:31:cd:3f:d6:5c:ee:0f:4c: dc:84:0f:67:e5:32:1d:cf:15:46:e2:c4:74:e8:6e: d6:1f:66:b6:a9:18:db:35:17:75:ad:c4:3d:e0:5e: d6:7b:a7:80:30:6f:dc:34:39:4d:e1:94:bb:a5:ff: b4:64:c5:fd:b9:b1:da:06:3e:d1:27:9a:eb:88:4f: 98:ed:01:a4:c9:e3:e6:8c:9f:31:9f:91:8a:2d:da: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:A3:26:34:77:9F:4A:0C:30:A2:2C:3C:7E:5C:7B:B0:36:83:C8 X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:4f:42:2a:d1:28:4a:ce:c3:44:94:89:4e:da:71:3b:ca:e5: 75:9a:1f:4c:44:5f:d8:be:f5:c8:0a:61:72:ff:70:21:50:d4: c6:e1:51:e2:97:33:0e:2a:87:40:10:55:bf:4b:66:08:cb:ee: 0f:5e:3a:b6:57:2a:3b:9c:21:16:23:0c:c3:87:7b:4a:0a:a0: f0:72:21:2c:93:b9:8b:35:e6:47:61:f6:83:15:93:7c:1e:e9: 70:65:0e:05:a8:8e:37:c2:12:b6:19:d8:b0:d9:8c:73:df:c7: 74:39:38:6e:31:95:85:6d:b9:4c:4e:3f:3b:70:7c:15:d1:24: 7c:93:c5:5d:91:a1:99:c8:fb:34:47:9d:d5:1a:c7:49:f9:25: 2d:d8:79:ff:f0:cf:8d:7a:86:0a:8f:84:e6:ce:ac:ee:5a:5b: 52:7e:c0:64:7f:7a:7b:23:fb:26:0b:b0:52:50:9a:5e:8a:1b: a3:4e:fd:b5:50:ce:f3:5f:64:2e:0d:64:7e:c0:b5:e8:4d:b7: 45:0a:44:81:c6:50:83:4a:2b:23:62:ea:cf:e8:bf:b1:17:a3: a9:58:47:fe:e6:d2:a7:dd:22:87:4b:d6:19:a5:c3:f2:52:a8: e5:50:2e:8f:8e:c7:46:af:c9:d1:e4:3d:8c:6d:63:e9:03:db: e2:6b:2f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K8YrET9vQsYS8Gl8BF3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMTI1MDgwMTA4WhcNMjYwMTI2MDgwMTA4WjAzMTEwLwYDVQQD Eyg4ZDlmYTMyNjM0Nzc5ZjRhMGMzMGEyMmMzYzdlNWM3YmIwMzY4M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgyeivoqsCqQKgBJo3/Zo0sgBJEx sQVY2XuVfcyHDOfpD8xhFJuHGV2eyRcVZvrcJ20lfxrjyVn66O27PSvPp9OxSAI6 +Z2GsUMK4dqZP0exg2zSkMWzMJgqhERC8PN/JQ5VbYny/LEHdSqNvRd0S3l3xsMV GU3jZl6pGdjA5Pa8v3i/bQMhHzIfdYIm13y6+/6LJSwdlXNzR+bGchijfYZNZYPA r3ltpd3mMc0/1lzuD0zchA9n5TIdzxVG4sR06G7WH2a2qRjbNRd1rcQ94F7We6eA MG/cNDlN4ZS7pf+0ZMX9ubHaBj7RJ5rriE+Y7QGkyePmjJ8xn5GKLdqDawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2foyY0d59KDDCiLDx+XHuwNoPIMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyU9CKtEo Ss7DRJSJTtpxO8rldZofTERf2L71yAphcv9wIVDUxuFR4pczDiqHQBBVv0tmCMvu D146tlcqO5whFiMMw4d7Sgqg8HIhLJO5izXmR2H2gxWTfB7pcGUOBaiON8ISthnY sNmMc9/HdDk4bjGVhW25TE4/O3B8FdEkfJPFXZGhmcj7NEed1RrHSfklLdh5//DP jXqGCo+E5s6s7lpbUn7AZH96eyP7JguwUlCaXoobo079tVDO819kLg1kfsC16E23 RQpEgcZQg0orI2Lqz+i/sRejqVhH/ubSp90ih0vWGaXD8lKo5VAuj47HRq/J0eQ9 jG1j6QPb4msvLg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:57 2026 by rpki-client