This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json) Hash identifier: Qaky3A7JoLz37ip668qeJGaXmA4YBHwTLFhNI9md5QE= Subject key identifier: E4:86:F3:32:70:E7:4E:D4:93:7E:85:56:FD:60:C7:55:5E:3F:45:52 Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Certificate serial: 019BF6BF8D1DD090DBC32A23E12A41723DBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 20:01:47 +0000 Manifest this update: Sun 25 Jan 2026 20:01:47 +0000 Manifest next update: Mon 26 Jan 2026 20:01:47 +0000 Files and hashes: 1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: rbtKybmA1PbXBCrMBYJYN6MUMlFrWCGykXhbXeq8dsc=) 2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:8d:1d:d0:90:db:c3:2a:23:e1:2a:41:72:3d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Validity Not Before: Jan 25 20:01:47 2026 GMT Not After : Jan 26 20:01:47 2026 GMT Subject: CN=e486f33270e74ed4937e8556fd60c7555e3f4552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:19:6e:84:76:ac:d7:2e:04:4a:68:b9:02: 12:d1:f6:ba:c4:42:8a:30:0f:7e:78:71:cc:7d:30: 41:59:1d:99:38:74:7f:b0:0b:be:58:bb:16:74:d2: 01:bc:06:78:a0:6d:1f:c0:21:f7:4b:df:72:ab:2b: fe:4c:29:5e:d8:c8:28:cb:37:fc:c9:d0:e2:de:b8: 3b:28:93:66:92:9e:11:1e:ba:94:12:fa:f9:8b:5e: 26:ad:30:f7:0a:8d:d5:dd:94:a0:ce:b9:56:49:a9: bc:5c:ce:83:26:4f:c3:eb:37:29:9e:9a:c6:77:13: 89:c0:01:b8:08:4e:76:35:1e:f4:d5:4d:a5:82:95: cf:05:68:98:e6:86:49:53:c9:c6:ab:52:d5:35:37: cd:c2:b0:41:62:de:0e:e5:67:f4:fe:2f:cb:b4:10: e7:ea:8b:b7:d9:a2:a8:a2:e3:18:fd:68:6f:65:e5: c7:78:7c:4c:64:8f:49:31:e0:a9:cc:a8:0b:f5:01: 11:59:6f:28:78:22:cb:c0:aa:75:e0:91:8f:0d:d4: 14:0b:19:1f:4d:c1:d8:b8:30:cb:64:bd:23:13:63: 03:fe:9b:e6:7f:5a:d9:92:58:17:01:2a:73:d7:0e: 82:0e:17:e0:db:3c:a0:4d:df:60:69:40:03:78:d0: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:86:F3:32:70:E7:4E:D4:93:7E:85:56:FD:60:C7:55:5E:3F:45:52 X509v3 Authority Key Identifier: keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:4d:60:dd:f7:f3:e9:1a:ca:39:f7:df:ca:e8:1e:2c:98:15: a0:a9:91:79:3f:87:93:df:56:1e:42:4c:eb:99:8a:a7:cf:45: c3:3d:30:d1:91:72:cd:95:d9:af:5e:62:6b:4e:c2:58:0f:4e: 96:7c:c6:f1:a2:0d:09:95:99:3a:8a:b3:48:90:3d:27:86:03: 57:df:33:cd:6a:27:cb:08:c5:79:bd:55:1e:29:53:d7:f2:2e: 57:00:11:9e:85:f8:0d:7f:e3:da:46:3c:14:a0:af:45:61:75: 99:d5:14:02:73:6c:f3:9a:11:8b:ee:3c:28:65:7f:8b:a7:3e: 99:d3:62:7e:ff:fd:7b:7d:6e:36:04:7d:39:5b:e9:57:14:0a: e3:3b:a5:97:e8:3a:72:c1:b3:5a:da:1b:5e:29:2e:87:12:d8: 1c:81:a1:ec:e0:af:3b:6f:a7:0d:a7:d6:f1:e8:c2:40:04:82: 92:07:3e:03:68:28:58:06:69:34:5b:4a:95:38:1d:e7:eb:96: 75:42:2e:7a:36:21:e4:8c:e5:98:12:08:f4:df:63:a1:e0:68: 17:91:66:36:8e:02:3f:ee:cd:4c:a9:c4:53:fc:9c:e4:d6:a5: eb:ec:36:15:20:19:ef:c0:03:70:08:0b:ab:dc:05:50:7b:0d: 1e:7d:a9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v40d0JDbwyoj4SpBcj28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl MTZmOWYwHhcNMjYwMTI1MjAwMTQ3WhcNMjYwMTI2MjAwMTQ3WjAzMTEwLwYDVQQD EyhlNDg2ZjMzMjcwZTc0ZWQ0OTM3ZTg1NTZmZDYwYzc1NTVlM2Y0NTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV4ZboR2rNcuBEpouQIS0fa6xEKK MA9+eHHMfTBBWR2ZOHR/sAu+WLsWdNIBvAZ4oG0fwCH3S99yqyv+TCle2Mgoyzf8 ydDi3rg7KJNmkp4RHrqUEvr5i14mrTD3Co3V3ZSgzrlWSam8XM6DJk/D6zcpnprG dxOJwAG4CE52NR701U2lgpXPBWiY5oZJU8nGq1LVNTfNwrBBYt4O5Wf0/i/LtBDn 6ou32aKoouMY/WhvZeXHeHxMZI9JMeCpzKgL9QERWW8oeCLLwKp14JGPDdQUCxkf TcHYuDDLZL0jE2MD/pvmf1rZklgXASpz1w6CDhfg2zygTd9gaUADeND6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSG8zJw507Uk36FVv1gx1VeP0VSMB8GA1UdIwQY MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsU1g3ffz 6RrKOfffyugeLJgVoKmReT+Hk99WHkJM65mKp89Fwz0w0ZFyzZXZr15ia07CWA9O lnzG8aINCZWZOoqzSJA9J4YDV98zzWonywjFeb1VHilT1/IuVwARnoX4DX/j2kY8 FKCvRWF1mdUUAnNs85oRi+48KGV/i6c+mdNifv/9e31uNgR9OVvpVxQK4zull+g6 csGzWtobXikuhxLYHIGh7OCvO2+nDafW8ejCQASCkgc+A2goWAZpNFtKlTgd5+uW dUIuejYh5IzlmBII9N9joeBoF5FmNo4CP+7NTKnEU/yc5Nal6+w2FSAZ78ADcAgL q9wFUHsNHn2pXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:32 2026 by rpki-client