This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json) Hash identifier: WmxIVigbd4cI/f4rtlAiIEZOklELbm7kNu05U/OzYOo= Subject key identifier: 16:0D:CF:8B:01:88:1C:C6:63:DD:96:5C:24:DC:CD:7C:2F:68:A6:59 Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7 Certificate serial: 019BF4D04119F7036A1022ED6DF673B1CC3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft Manifest number: 07EE Signing time: Sun 25 Jan 2026 11:00:47 +0000 Manifest this update: Sun 25 Jan 2026 11:00:47 +0000 Manifest next update: Mon 26 Jan 2026 11:00:47 +0000 Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=) 2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: xkbPcqvV/StZcX3S85+Lw5TR0/b+a96FNJ3qW9K30+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:41:19:f7:03:6a:10:22:ed:6d:f6:73:b1:cc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Validity Not Before: Jan 25 11:00:47 2026 GMT Not After : Jan 26 11:00:47 2026 GMT Subject: CN=160dcf8b01881cc663dd965c24dccd7c2f68a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:be:a2:a2:f6:4d:ba:a6:54:e2:08:0b:d9: 6b:0c:4c:ba:6e:13:b9:3f:6d:7e:9c:70:be:c3:e2: 79:53:be:b3:4c:80:52:26:64:88:57:c8:4c:08:27: 47:8d:86:97:8e:3e:c6:1e:b9:7e:6d:29:0f:6f:b7: 82:4c:3e:89:c5:79:9b:e5:eb:a6:32:cb:6a:44:a1: f2:e2:17:6c:e3:b5:c0:94:32:b7:73:95:11:f7:da: 77:84:04:23:1c:da:4a:19:c2:36:ab:2f:30:9d:54: d4:84:55:94:fd:2d:ff:7e:ff:38:9c:ee:31:4b:36: 34:86:e7:3e:92:4f:ba:a9:69:8b:8b:a5:af:80:77: 34:6a:38:be:b5:70:dc:b8:01:9f:e7:d7:2a:c9:0e: f1:51:20:de:c9:a2:c2:01:50:b8:97:26:59:27:e5: 73:9c:f1:46:38:a4:1d:51:c0:c2:ae:2a:bf:3e:23: 1a:70:c4:be:70:4f:0a:20:c7:35:65:9f:3c:21:dc: 8b:96:70:be:67:ce:2f:e7:c9:f7:ec:f7:45:22:02: f7:1f:88:bf:78:0a:70:89:2b:29:a0:ad:91:2d:63: a5:57:b6:ec:43:1a:74:63:1b:a8:2e:f3:79:9d:ae: 90:36:c4:92:95:e0:61:46:80:38:c5:00:58:48:48: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0D:CF:8B:01:88:1C:C6:63:DD:96:5C:24:DC:CD:7C:2F:68:A6:59 X509v3 Authority Key Identifier: keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ba:e7:29:af:52:67:28:7e:f0:51:f0:cd:2b:e0:71:d4:08: 4d:8c:c5:96:b9:54:86:86:e0:66:4a:7d:76:a6:eb:d9:f2:f2: eb:7f:34:41:c3:60:45:47:e8:fb:71:28:b3:e6:6c:93:e7:13: e3:22:4a:fc:51:7d:51:7b:95:2c:a2:4b:dc:c9:44:b0:00:78: d0:74:d4:ec:f2:b4:08:06:dd:17:41:ab:e2:d7:6e:9f:7f:97: 03:7f:a5:55:2a:35:d3:5d:7f:97:9d:1f:89:36:e9:a5:ce:88: f7:c9:f8:d2:51:c1:48:13:93:a1:52:8e:20:bb:4a:a9:d6:38: 62:e1:c4:7a:9d:a9:cc:5a:83:05:16:21:5a:9d:99:48:3c:78: 40:ee:70:a0:5e:d1:91:cd:26:6e:c9:e0:04:49:09:5d:86:cb: dc:4f:59:c8:ed:2f:ca:9d:14:c2:25:60:47:8d:1d:69:ff:4e: ca:33:a8:f7:e7:35:4e:99:d9:4b:3f:91:3c:ac:56:58:0b:f8: e4:17:15:cb:6a:32:39:12:bf:ae:61:94:58:95:49:90:44:a9: 57:08:52:fd:19:1e:f5:cd:e7:01:3f:be:c6:44:4e:2a:77:da: 6d:bf:b1:cd:98:21:61:44:8d:c4:f6:3f:bc:6d:31:0e:ca:60: 49:c7:15:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00EEZ9wNqECLtbfZzscw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk Y2VmZTcwHhcNMjYwMTI1MTEwMDQ3WhcNMjYwMTI2MTEwMDQ3WjAzMTEwLwYDVQQD EygxNjBkY2Y4YjAxODgxY2M2NjNkZDk2NWMyNGRjY2Q3YzJmNjhhNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjru+oqL2TbqmVOIIC9lrDEy6bhO5 P21+nHC+w+J5U76zTIBSJmSIV8hMCCdHjYaXjj7GHrl+bSkPb7eCTD6JxXmb5eum MstqRKHy4hds47XAlDK3c5UR99p3hAQjHNpKGcI2qy8wnVTUhFWU/S3/fv84nO4x SzY0huc+kk+6qWmLi6WvgHc0aji+tXDcuAGf59cqyQ7xUSDeyaLCAVC4lyZZJ+Vz nPFGOKQdUcDCriq/PiMacMS+cE8KIMc1ZZ88IdyLlnC+Z84v58n37PdFIgL3H4i/ eApwiSspoK2RLWOlV7bsQxp0YxuoLvN5na6QNsSSleBhRoA4xQBYSEhtawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYNz4sBiBzGY92WXCTczXwvaKZZMB8GA1UdIwQY MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7rnKa9S Zyh+8FHwzSvgcdQITYzFlrlUhobgZkp9dqbr2fLy6380QcNgRUfo+3Eos+Zsk+cT 4yJK/FF9UXuVLKJL3MlEsAB40HTU7PK0CAbdF0Gr4tdun3+XA3+lVSo1011/l50f iTbppc6I98n40lHBSBOToVKOILtKqdY4YuHEep2pzFqDBRYhWp2ZSDx4QO5woF7R kc0mbsngBEkJXYbL3E9ZyO0vyp0UwiVgR40daf9OyjOo9+c1TpnZSz+RPKxWWAv4 5BcVy2oyORK/rmGUWJVJkESpVwhS/Rke9c3nAT++xkROKnfabb+xzZghYUSNxPY/ vG0xDspgSccVeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:20 2026 by rpki-client