This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json) Hash identifier: P955CELKWJUM2E0JtocPAaMrb0I21RFEfpeQsIa1Jrk= Subject key identifier: BA:72:F7:3B:85:00:DF:24:BE:D9:EF:86:23:7E:4C:AF:F3:02:65:0B Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Certificate serial: 019BF4D0D1795C8392D5CDB4CB1F06AB36B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft Manifest number: 04DD Signing time: Sun 25 Jan 2026 11:01:24 +0000 Manifest this update: Sun 25 Jan 2026 11:01:24 +0000 Manifest next update: Mon 26 Jan 2026 11:01:24 +0000 Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: vEp4KiRjbjq3sF4u9fVq5OM9+hZfJt3eRz/31iHUGOQ=) 2: tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa (hash: 4N/4Cs97VSolZG2uH4kNH6VCwjqzoA3qCO8vzH4tvd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:d1:79:5c:83:92:d5:cd:b4:cb:1f:06:ab:36:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Validity Not Before: Jan 25 11:01:24 2026 GMT Not After : Jan 26 11:01:24 2026 GMT Subject: CN=ba72f73b8500df24bed9ef86237e4caff302650b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2d:8a:1b:d8:66:af:40:7b:c9:e1:4d:74:25: c4:a3:54:32:e3:be:97:6c:91:75:4b:a7:91:33:ab: e0:be:ab:b9:83:e5:90:7d:00:57:d9:90:8f:2a:b2: d1:84:f5:73:b8:d1:d5:bf:dc:60:0b:cd:14:6a:1e: 6b:b0:45:ed:e6:31:47:06:f7:0f:66:93:4d:ab:64: 7f:3d:18:90:a6:89:d0:4f:6d:4c:9a:a1:bc:a4:93: b1:21:b5:fe:2c:1d:cf:9c:f6:ad:e0:19:a4:f1:26: 0e:fb:e2:85:f7:b1:6b:2b:89:30:3e:ca:00:4e:6d: 83:bf:5f:e3:bc:60:4d:49:b3:4e:8e:53:45:af:78: 37:a2:89:42:35:97:72:53:2f:25:09:65:0a:14:c8: 75:5a:24:aa:70:1d:75:49:21:dd:13:b8:21:52:2a: 39:fa:2f:9d:4a:94:30:0e:31:2b:07:90:d4:b2:12: 1b:76:bb:0f:f4:ab:7f:23:af:9c:f5:46:de:e4:01: 4f:74:05:6a:b6:92:9b:17:f0:32:17:79:15:a0:07: 40:f8:a5:46:22:c8:49:3f:b1:0d:66:8f:38:ea:d8: 85:1c:dc:2c:b1:b7:c6:72:26:46:5e:59:f9:a0:e2: c8:7e:53:d5:4b:e9:a3:da:63:d2:ea:bd:91:2d:90: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:F7:3B:85:00:DF:24:BE:D9:EF:86:23:7E:4C:AF:F3:02:65:0B X509v3 Authority Key Identifier: keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:45:72:5b:c3:89:c0:36:7a:fa:24:6e:42:1c:d8:4b:8c:04: 31:8a:0a:8a:ef:99:e1:a6:a0:fc:66:ce:f1:a2:7e:25:63:f2: 5b:03:0d:bf:2a:d7:e6:80:3f:30:95:7d:10:43:71:9d:ab:0a: 24:b4:30:62:99:bd:10:a6:b3:86:fb:dc:a9:ec:cc:2a:d1:74: 74:57:15:c5:21:c8:21:96:5b:9b:7c:a6:2b:f1:fd:ed:42:04: e3:2b:b2:1c:7b:5a:82:18:0c:b1:b1:65:88:90:c6:5a:c9:fa: b4:b8:0b:c9:33:09:af:ac:ac:e9:91:51:84:ba:fe:9e:80:cc: d2:02:a0:dd:3d:ff:d4:00:1f:9a:1a:a3:6a:86:b9:e8:c4:f2: 45:81:22:e5:e1:d4:56:7e:57:80:a8:b8:05:1a:5c:02:98:de: 72:6a:e8:18:e6:d8:42:b5:a9:72:6b:c6:a5:59:e1:af:76:a9: 00:c9:3c:b0:98:fc:1b:87:ac:98:11:91:03:27:02:54:af:11: 11:f0:e5:26:ce:38:a0:55:6b:ca:95:62:0c:8c:55:86:a8:12: d5:7c:39:0f:1d:f7:a7:2c:40:28:4e:09:ea:42:32:2e:56:ea: 24:3f:b8:fd:5b:f3:27:1d:ea:ac:f8:a1:dc:17:71:c6:b4:c7: 36:a1:25:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00NF5XIOS1c20yx8Gqza5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky MjI5Y2QwHhcNMjYwMTI1MTEwMTI0WhcNMjYwMTI2MTEwMTI0WjAzMTEwLwYDVQQD EyhiYTcyZjczYjg1MDBkZjI0YmVkOWVmODYyMzdlNGNhZmYzMDI2NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C2KG9hmr0B7yeFNdCXEo1Qy476X bJF1S6eRM6vgvqu5g+WQfQBX2ZCPKrLRhPVzuNHVv9xgC80Uah5rsEXt5jFHBvcP ZpNNq2R/PRiQponQT21MmqG8pJOxIbX+LB3PnPat4Bmk8SYO++KF97FrK4kwPsoA Tm2Dv1/jvGBNSbNOjlNFr3g3oolCNZdyUy8lCWUKFMh1WiSqcB11SSHdE7ghUio5 +i+dSpQwDjErB5DUshIbdrsP9Kt/I6+c9Ube5AFPdAVqtpKbF/AyF3kVoAdA+KVG IshJP7ENZo846tiFHNwssbfGciZGXln5oOLIflPVS+mj2mPS6r2RLZBAKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpy9zuFAN8kvtnvhiN+TK/zAmULMB8GA1UdIwQY MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEVyW8OJ wDZ6+iRuQhzYS4wEMYoKiu+Z4aag/GbO8aJ+JWPyWwMNvyrX5oA/MJV9EENxnasK JLQwYpm9EKazhvvcqezMKtF0dFcVxSHIIZZbm3ymK/H97UIE4yuyHHtaghgMsbFl iJDGWsn6tLgLyTMJr6ys6ZFRhLr+noDM0gKg3T3/1AAfmhqjaoa56MTyRYEi5eHU Vn5XgKi4BRpcApjecmroGObYQrWpcmvGpVnhr3apAMk8sJj8G4esmBGRAycCVK8R EfDlJs44oFVrypViDIxVhqgS1Xw5Dx33pyxAKE4J6kIyLlbqJD+4/VvzJx3qrPih 3BdxxrTHNqElMw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:36 2026 by rpki-client