This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json) Hash identifier: ojwheGNMrx5xtnA32H/seluPM5jO335KYEAZ9zZ3nfc= Subject key identifier: 3D:CC:4C:D8:81:C5:AC:9A:08:EA:3F:4D:2C:F3:DC:4F:35:F8:15:BE Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1 Certificate serial: 019BF5AC2CBC7A1920CEEDC00DA7C22889A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft Manifest number: 10FD Signing time: Sun 25 Jan 2026 15:01:00 +0000 Manifest this update: Sun 25 Jan 2026 15:01:00 +0000 Manifest next update: Mon 26 Jan 2026 15:01:00 +0000 Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=) 2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: wZIjYEqE1i20w1LzrG/cp7N7ZwgWLAFD0IBNcI6u/Qc=) 3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2c:bc:7a:19:20:ce:ed:c0:0d:a7:c2:28:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1 Validity Not Before: Jan 25 15:01:00 2026 GMT Not After : Jan 26 15:01:00 2026 GMT Subject: CN=3dcc4cd881c5ac9a08ea3f4d2cf3dc4f35f815be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:ae:83:11:9f:c7:00:db:8b:19:92:2e:a4: 20:f2:ef:9f:11:1a:4b:c8:53:e3:a4:dc:db:13:0e: d7:69:75:65:12:62:1a:bb:99:cb:f2:03:12:d4:58: 34:43:c1:0f:b2:0c:d8:3a:f0:e6:20:65:0e:b2:fa: 59:2a:93:56:f0:a9:83:66:2c:e2:ce:c8:08:46:76: 1e:80:d7:ab:35:df:72:f7:1b:ca:98:69:ca:c9:bd: 5b:ee:75:48:73:20:6f:70:f9:d8:92:96:80:33:cf: bb:83:70:b0:98:8e:76:e1:19:3f:27:7b:c1:a1:85: dc:63:80:72:4f:f4:b7:21:af:b2:f0:6f:71:b9:8a: c5:b7:4d:0f:09:0c:07:f1:65:08:32:3f:71:da:d8: 14:16:63:76:7d:f3:f1:96:86:05:a5:39:11:40:a5: 34:da:01:9f:14:18:49:c0:bb:57:73:8a:c7:23:b1: fe:47:1d:af:68:47:5f:13:d5:cb:3b:dc:d1:9c:1e: 70:ec:2f:82:ad:af:78:7a:d6:d2:5f:6d:ac:04:ec: b8:7b:4d:3f:4a:f5:66:a0:b0:0e:9b:ed:9b:e9:e6: f7:71:45:86:a3:a7:69:14:76:41:9d:a3:c6:16:1f: cb:61:d4:3a:cc:8d:fb:fe:25:aa:d4:e5:7b:95:c6: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CC:4C:D8:81:C5:AC:9A:08:EA:3F:4D:2C:F3:DC:4F:35:F8:15:BE X509v3 Authority Key Identifier: keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:d5:65:f6:2d:12:fe:d9:99:5f:48:e1:3a:4d:c6:53:ce: 0c:d7:a5:c4:59:d9:ed:ac:d5:76:f7:29:3f:b0:c2:d1:09:7d: 67:16:25:22:1b:4b:82:f2:8b:2e:f7:d4:c6:b5:26:8a:df:8a: b5:29:71:ef:3c:a9:3d:c8:79:72:7f:30:b7:9c:44:9a:c2:25: 28:21:83:2b:11:e3:92:ac:71:65:15:b0:62:8a:3b:f7:1e:28: 87:c3:97:74:64:3d:68:d9:c9:9d:9f:c2:94:70:6c:80:90:6d: c0:d5:7c:3a:3e:c6:62:b1:03:68:d4:18:30:2a:ed:09:20:28: 59:3f:ba:54:37:24:bc:32:0d:84:cf:dd:7e:e6:17:45:1c:ae: 9f:b6:15:17:68:b9:89:fe:d1:4f:62:f0:cf:24:eb:a1:34:2b: f9:a9:ab:d5:53:cc:e4:cd:9a:3d:54:b3:88:70:59:59:07:8b: 58:59:ad:d2:61:7d:fe:54:ca:be:3e:5d:f3:5f:89:cc:2b:8c: 31:75:13:bb:f9:61:e0:de:19:9d:f4:71:8e:39:52:57:59:50: d7:47:bf:8f:31:f3:f5:34:f6:33:b8:fa:81:39:91:e5:56:3b: e8:1a:c8:df:76:3f:47:6e:5d:5d:57:00:d5:1d:b2:78:3d:1f: 99:b0:b8:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCy8ehkgzu3ADafCKImnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy NjgyZjEwHhcNMjYwMTI1MTUwMTAwWhcNMjYwMTI2MTUwMTAwWjAzMTEwLwYDVQQD EygzZGNjNGNkODgxYzVhYzlhMDhlYTNmNGQyY2YzZGM0ZjM1ZjgxNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d2ugxGfxwDbixmSLqQg8u+fERpL yFPjpNzbEw7XaXVlEmIau5nL8gMS1Fg0Q8EPsgzYOvDmIGUOsvpZKpNW8KmDZizi zsgIRnYegNerNd9y9xvKmGnKyb1b7nVIcyBvcPnYkpaAM8+7g3CwmI524Rk/J3vB oYXcY4ByT/S3Ia+y8G9xuYrFt00PCQwH8WUIMj9x2tgUFmN2ffPxloYFpTkRQKU0 2gGfFBhJwLtXc4rHI7H+Rx2vaEdfE9XLO9zRnB5w7C+Cra94etbSX22sBOy4e00/ SvVmoLAOm+2b6eb3cUWGo6dpFHZBnaPGFh/LYdQ6zI37/iWq1OV7lca4zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3MTNiBxayaCOo/TSzz3E81+BW+MB8GA1UdIwQY MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt NTcwOGY1ODBlMzZhLzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd3VZfYt Ev7ZmV9I4TpNxlPODNelxFnZ7azVdvcpP7DC0Ql9ZxYlIhtLgvKLLvfUxrUmit+K tSlx7zypPch5cn8wt5xEmsIlKCGDKxHjkqxxZRWwYoo79x4oh8OXdGQ9aNnJnZ/C lHBsgJBtwNV8Oj7GYrEDaNQYMCrtCSAoWT+6VDckvDINhM/dfuYXRRyun7YVF2i5 if7RT2LwzyTroTQr+amr1VPM5M2aPVSziHBZWQeLWFmt0mF9/lTKvj5d81+JzCuM MXUTu/lh4N4ZnfRxjjlSV1lQ10e/jzHz9TT2M7j6gTmR5VY76BrI33Y/R25dXVcA 1R2yeD0fmbC4dA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:43 2026 by rpki-client