This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft File: CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json) Hash identifier: EP+ISqHEJtnbbCY02WJDVGfbnkeVYC07KhidXHnqzqY= Subject key identifier: 38:38:4D:60:4B:77:E0:8A:DA:A0:3A:AB:2A:95:60:69:22:7F:10:9D Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Certificate serial: 019BF34FDDB81013B7B97C6FB7E2108C4758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 04:00:56 +0000 Manifest this update: Sun 25 Jan 2026 04:00:56 +0000 Manifest next update: Mon 26 Jan 2026 04:00:56 +0000 Files and hashes: 1: 6vhp1ce20Y_L8eUU8Vs3lpXvUZA.roa (hash: ElRNIc4H9+nY8ihpL9VNMuMoFDZmouO2HJPvAis8eGA=) 2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: sOWNiLrxXnmUBwEiBQThEBv3u4ped6FB+FNDENeMKGc=) 3: Jf6R_SXdBBCUhKX4mzDZLMiBJQk.roa (hash: SifU3rjYSstOzSyjjAgOfjY8aPan6w6IRltT7xNrspI=) 4: LDJyoOJGhIQqTxKt1w79LsiZZfg.roa (hash: t4Q1h/nG4uIRyIAkGMCLliaY/6jicJDu6HhTUCv2w5w=) 5: _7MSmPfHZMozoiPWYFBRiwIJjBU.roa (hash: l1CgCUWmNH0+Aq4gowYZKQx+xrYM6E0A7d7Mcviy/Zk=) 6: bR0XPH7F_jPk4chFPnkPIIniMJs.roa (hash: OMfK2Wtg88NIYCYy8HYbWAyizHBgcI12Ed35Gu0quac=) 7: rPAuBKaHRRCQxAsJEJoI2PAvcMs.roa (hash: bYljlXb82Oeh+Kr8lA/+ad26mdki7j4+BH52eXf/BbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:dd:b8:10:13:b7:b9:7c:6f:b7:e2:10:8c:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465 Validity Not Before: Jan 25 04:00:56 2026 GMT Not After : Jan 26 04:00:56 2026 GMT Subject: CN=38384d604b77e08adaa03aab2a956069227f109d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:0a:62:66:08:60:28:95:42:c9:0a:2c:25: 9d:91:7d:41:ef:3c:5a:03:8b:0f:06:f4:8a:b3:e4: 5a:00:fa:99:25:d3:75:05:57:ea:1a:86:bd:97:76: 7d:1d:20:37:97:33:f3:a6:ab:1b:af:e5:35:04:42: 40:bc:88:35:ac:d9:43:60:ce:45:96:30:cf:fc:c4: c0:8e:15:9f:23:26:2f:c8:d4:71:ae:a8:62:b8:09: 5d:ec:67:80:f8:aa:a8:44:a3:44:68:da:a0:48:fd: 5d:ca:31:5b:41:d3:f9:4d:b5:22:37:62:78:e8:89: f5:7b:e2:a2:54:7a:6d:1a:56:c3:77:60:db:c6:3c: dd:f6:92:ec:79:f6:fd:2f:9b:99:da:84:95:f4:78: 28:f5:5e:e3:af:b1:c0:36:69:ed:20:df:9b:b5:a7: 7b:a9:88:0b:4c:61:bf:77:69:03:ae:2f:0a:14:87: 0c:37:9b:fe:33:df:ae:05:25:3f:da:85:9b:0e:a9: 9d:03:b8:35:35:42:62:f6:ec:90:99:b0:5a:9f:82: 62:5f:c7:e6:27:2f:1b:29:e8:2d:64:02:26:65:32: a0:84:b3:24:23:89:6d:23:75:a5:98:62:9a:f1:3e: ea:c3:83:5c:91:5c:2b:8a:ae:91:16:5e:13:f2:fe: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:38:4D:60:4B:77:E0:8A:DA:A0:3A:AB:2A:95:60:69:22:7F:10:9D X509v3 Authority Key Identifier: keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1a:ef:26:73:7a:2e:7c:a7:a9:69:8d:5a:c5:37:33:b5:a8: c8:1e:88:d3:e4:41:ad:9b:30:20:05:6b:15:7f:6c:ee:20:bd: a1:27:bf:a1:c4:43:ff:19:95:92:89:f5:fb:e1:e2:85:ee:63: 34:de:8c:82:c0:24:ab:dc:a6:36:1d:1f:86:f7:a6:96:75:ec: 83:5e:9a:a9:36:6f:06:39:e4:23:4e:d0:0b:f8:57:b0:05:db: f9:12:dd:80:d2:a3:d9:44:18:47:26:fc:4d:8d:bc:2e:f6:10: 52:53:10:d3:1d:3b:0e:66:ab:7f:af:24:74:e0:4c:4a:10:83: 96:c4:f1:cc:20:dc:1d:32:e0:02:ae:ff:89:4f:a2:ee:f3:e5: 30:de:d2:b6:df:b6:49:fc:83:10:f4:89:12:8f:93:ad:21:12: 23:e0:35:12:f7:ae:b3:c4:13:5b:af:77:b6:de:82:cd:b2:de: 28:31:61:b4:52:a2:21:20:25:89:8c:80:2c:47:03:a8:1f:19: 4a:86:da:3a:b9:d7:c5:6c:c4:fc:0e:58:2e:49:c1:75:6d:06: 8a:ca:7a:37:9b:23:42:22:92:72:c8:7f:c6:6d:9f:15:39:d1: f4:08:a2:bf:cb:52:bd:a3:68:7c:c6:82:df:d9:98:48:34:95: d4:60:f9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT924EBO3uXxvt+IQjEdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm OWY0NjUwHhcNMjYwMTI1MDQwMDU2WhcNMjYwMTI2MDQwMDU2WjAzMTEwLwYDVQQD EygzODM4NGQ2MDRiNzdlMDhhZGFhMDNhYWIyYTk1NjA2OTIyN2YxMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsUKYmYIYCiVQskKLCWdkX1B7zxa A4sPBvSKs+RaAPqZJdN1BVfqGoa9l3Z9HSA3lzPzpqsbr+U1BEJAvIg1rNlDYM5F ljDP/MTAjhWfIyYvyNRxrqhiuAld7GeA+KqoRKNEaNqgSP1dyjFbQdP5TbUiN2J4 6In1e+KiVHptGlbDd2Dbxjzd9pLsefb9L5uZ2oSV9Hgo9V7jr7HANmntIN+btad7 qYgLTGG/d2kDri8KFIcMN5v+M9+uBSU/2oWbDqmdA7g1NUJi9uyQmbBan4JiX8fm Jy8bKegtZAImZTKghLMkI4ltI3WlmGKa8T7qw4NckVwriq6RFl4T8v5rnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg4TWBLd+CK2qA6qyqVYGkifxCdMB8GA1UdIwQY MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt NmRlZjM5OGNlNWM5LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5 LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBrvJnN6 LnynqWmNWsU3M7WoyB6I0+RBrZswIAVrFX9s7iC9oSe/ocRD/xmVkon1++Hihe5j NN6MgsAkq9ymNh0fhvemlnXsg16aqTZvBjnkI07QC/hXsAXb+RLdgNKj2UQYRyb8 TY28LvYQUlMQ0x07Dmarf68kdOBMShCDlsTxzCDcHTLgAq7/iU+i7vPlMN7Stt+2 SfyDEPSJEo+TrSESI+A1Eveus8QTW693tt6CzbLeKDFhtFKiISAliYyALEcDqB8Z SobaOrnXxWzE/A5YLknBdW0Gisp6N5sjQiKScsh/xm2fFTnR9Aiiv8tSvaNofMaC 39mYSDSV1GD5Rw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:14 2026 by rpki-client