This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json) Hash identifier: 4qLiPhaOboz54byhBQ37S+d1Y2aYJlwHHSSckyu+X+I= Subject key identifier: D5:A7:86:03:CB:51:D2:8F:03:91:F7:2F:3B:BB:56:A8:C7:AD:51:0E Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Certificate serial: 019BF6BE9D7259F3783635F264E55110096C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft Manifest number: 04DE Signing time: Sun 25 Jan 2026 20:00:45 +0000 Manifest this update: Sun 25 Jan 2026 20:00:45 +0000 Manifest next update: Mon 26 Jan 2026 20:00:45 +0000 Files and hashes: 1: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: MKlHvpZShkHXczeJryd3zq5DXXb4NJsGKoNrTEF4o8k=) 2: tbvYOvb5SVTVJR3EbU70Kzk3qVo.roa (hash: 4N/4Cs97VSolZG2uH4kNH6VCwjqzoA3qCO8vzH4tvd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:9d:72:59:f3:78:36:35:f2:64:e5:51:10:09:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Validity Not Before: Jan 25 20:00:45 2026 GMT Not After : Jan 26 20:00:45 2026 GMT Subject: CN=d5a78603cb51d28f0391f72f3bbb56a8c7ad510e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:8b:3f:83:65:ba:1b:e8:65:8a:24:8e:d7: 69:f6:d2:2c:1e:38:d6:f7:96:8a:e5:98:b2:a3:6f: a9:df:51:b5:dc:d3:b0:39:6b:8c:60:3b:5d:c2:40: 9e:d1:25:a7:00:6a:fd:9c:06:9a:10:15:35:97:e8: 03:3f:bc:7d:de:52:17:e0:2f:0f:37:d7:36:16:a2: 98:e1:8d:11:34:0c:86:a0:c9:e3:dc:2b:44:03:b6: 7a:a8:d2:97:8d:77:3b:79:b4:86:89:3f:99:6d:35: 0d:79:b2:f5:29:42:99:74:0f:2a:ae:09:f0:5a:15: c8:ef:dd:55:6f:ba:f9:b4:43:be:cd:da:b8:4d:f1: 3b:a5:53:2a:d5:2c:c5:5f:78:aa:e7:89:1e:35:40: b9:5b:0e:9f:da:0c:d3:c4:38:1c:2f:c6:14:07:b3: 6e:80:91:43:d0:92:0f:c7:a1:a0:69:98:ab:53:16: 3f:96:27:4d:ef:3e:e8:93:42:69:bc:9d:1c:15:3a: f7:b2:4b:a0:a1:94:23:93:75:35:0e:e6:4c:65:68: 81:b8:8d:52:d4:ff:46:c8:81:d3:a8:ed:65:6d:79: 09:e7:15:98:17:74:1e:4a:57:b3:66:3e:a4:58:c8: a2:6e:e9:ee:c5:6c:ba:d0:4f:44:59:e2:cf:0d:02: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:86:03:CB:51:D2:8F:03:91:F7:2F:3B:BB:56:A8:C7:AD:51:0E X509v3 Authority Key Identifier: keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:22:c2:81:90:93:5f:6d:48:9d:f9:7a:c4:7f:24:4a:f4:a9: 87:77:76:a4:eb:7b:e9:dd:92:ed:19:48:5f:7f:27:c4:73:95: db:20:06:60:4f:8f:c1:cb:e2:bb:54:a1:23:fb:38:03:ac:1a: b8:1f:55:87:3a:62:81:b4:88:3e:d8:13:fc:29:ef:63:a4:23: 61:f8:8e:69:ac:52:02:e0:7e:13:40:6e:60:cd:b6:f6:ff:c0: 94:83:c8:4c:73:6b:b3:18:f9:1e:38:ca:2a:b2:26:52:41:fd: 61:d3:39:c0:a4:c4:e2:b8:f2:ae:be:01:93:e2:ae:6a:0f:f4: 6e:26:a3:37:1a:e4:67:a3:c2:6b:fa:75:ef:9c:dc:ed:73:06: 4d:80:b4:60:b3:96:9a:20:5d:91:f2:bc:f5:9f:e0:61:90:bd: 4c:91:da:3d:ef:dd:8a:30:2c:ae:b2:35:47:fc:77:94:f3:9f: b1:a1:45:32:85:48:0d:4e:84:7f:81:15:8b:33:75:8a:c9:9c: 38:92:13:e7:9c:26:2c:77:ac:46:f6:24:94:ec:f7:d1:a9:a6: 4e:5e:9f:6c:97:e2:21:33:b4:13:57:32:cd:70:f5:9c:33:20: 40:28:a8:1e:b4:4d:80:ac:93:a5:6d:77:46:47:b0:1d:e7:d5: a6:73:34:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vp1yWfN4NjXyZOVREAlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky MjI5Y2QwHhcNMjYwMTI1MjAwMDQ1WhcNMjYwMTI2MjAwMDQ1WjAzMTEwLwYDVQQD EyhkNWE3ODYwM2NiNTFkMjhmMDM5MWY3MmYzYmJiNTZhOGM3YWQ1MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p2LP4NluhvoZYokjtdp9tIsHjjW 95aK5Ziyo2+p31G13NOwOWuMYDtdwkCe0SWnAGr9nAaaEBU1l+gDP7x93lIX4C8P N9c2FqKY4Y0RNAyGoMnj3CtEA7Z6qNKXjXc7ebSGiT+ZbTUNebL1KUKZdA8qrgnw WhXI791Vb7r5tEO+zdq4TfE7pVMq1SzFX3iq54keNUC5Ww6f2gzTxDgcL8YUB7Nu gJFD0JIPx6GgaZirUxY/lidN7z7ok0JpvJ0cFTr3skugoZQjk3U1DuZMZWiBuI1S 1P9GyIHTqO1lbXkJ5xWYF3QeSlezZj6kWMiibunuxWy60E9EWeLPDQI76wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWnhgPLUdKPA5H3Lzu7VqjHrVEOMB8GA1UdIwQY MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSLCgZCT X21Infl6xH8kSvSph3d2pOt76d2S7RlIX38nxHOV2yAGYE+Pwcviu1ShI/s4A6wa uB9VhzpigbSIPtgT/CnvY6QjYfiOaaxSAuB+E0BuYM229v/AlIPITHNrsxj5HjjK KrImUkH9YdM5wKTE4rjyrr4Bk+Kuag/0biajNxrkZ6PCa/p175zc7XMGTYC0YLOW miBdkfK89Z/gYZC9TJHaPe/dijAsrrI1R/x3lPOfsaFFMoVIDU6Ef4EVizN1ismc OJIT55wmLHesRvYklOz30ammTl6fbJfiITO0E1cyzXD1nDMgQCioHrRNgKyTpW13 RkewHefVpnM0Fg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:51 2026 by rpki-client