This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json) Hash identifier: ODb02hiRzdB3ADAiF8fz6C2e597vB1XtbVhIpo5+GiY= Subject key identifier: BA:92:1B:03:DB:87:41:2D:73:F8:98:7C:9E:C9:2C:31:DA:1D:7F:E8 Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Certificate serial: 019BF4632EA639D2D914B565827A769313AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft Manifest number: 0A4C Signing time: Sun 25 Jan 2026 09:01:39 +0000 Manifest this update: Sun 25 Jan 2026 09:01:39 +0000 Manifest next update: Mon 26 Jan 2026 09:01:39 +0000 Files and hashes: 1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=) 2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: Fup4DywQpfVANN8Xp6ilZH71f2al7HwxuQiykQVmIcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2e:a6:39:d2:d9:14:b5:65:82:7a:76:93:13:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220 Validity Not Before: Jan 25 09:01:39 2026 GMT Not After : Jan 26 09:01:39 2026 GMT Subject: CN=ba921b03db87412d73f8987c9ec92c31da1d7fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:3b:62:f5:68:e8:b1:4d:47:1f:dc:c7:d1: cd:49:21:b8:64:1c:a4:14:5b:f3:d3:01:e5:7c:86: b1:1e:dc:b8:54:a5:4a:45:01:d8:7f:b1:12:61:7a: da:a9:87:f7:6c:e6:e0:a8:2d:0f:18:44:c2:08:a9: ab:98:33:50:b1:94:8e:8a:df:48:c6:1b:db:21:dc: 26:5c:fc:b7:cf:66:87:96:54:51:2e:bf:9b:15:9b: b4:8d:e1:4b:e0:92:b2:86:b2:23:89:0d:e7:33:59: 6c:c3:90:0a:2a:1c:10:75:e5:df:59:f7:9d:d7:07: 06:2a:c4:b0:48:0c:f0:0b:d9:92:65:4f:bf:a6:f5: 77:bd:9b:e5:7b:2a:c6:2b:fe:03:cf:f6:90:11:d9: 1e:15:f3:39:30:40:7a:8e:0f:69:f2:51:be:69:32: 6a:24:ad:dc:a6:e1:0f:96:e5:65:4b:fc:9b:1d:7f: 1b:35:4f:73:98:05:fa:3b:38:bf:33:d3:8f:cd:81: 39:fe:f1:24:57:23:e2:b9:f0:76:ef:ef:12:44:d2: 12:78:48:0c:7e:13:06:79:55:44:60:f6:a6:20:d1: 36:10:98:2f:72:0b:0f:7d:8d:08:8c:29:be:00:9b: 9e:f6:c6:0b:e8:ca:ad:9b:b2:00:08:68:f6:1e:f2: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:92:1B:03:DB:87:41:2D:73:F8:98:7C:9E:C9:2C:31:DA:1D:7F:E8 X509v3 Authority Key Identifier: keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:57:04:5f:0a:23:37:a3:ea:71:7b:6c:2a:3f:1e:8b:af:f8: fb:eb:79:17:ee:fa:4d:84:66:40:2e:43:78:a8:40:57:dc:58: bd:53:e4:80:f1:21:73:4b:2c:5f:c9:39:ff:36:87:30:ce:42: 12:a0:12:e1:18:4d:a6:86:b4:fb:05:69:64:6d:8a:8e:4a:2b: 3a:c3:73:62:b4:d5:fb:24:ca:9c:14:22:e5:44:c8:f1:38:7c: 00:48:ba:bf:76:ba:47:f6:c4:79:f5:9e:ed:82:7b:6f:cc:4a: 80:95:1f:5a:86:22:e4:f0:13:61:7d:69:8b:32:a8:9d:50:ac: f7:8f:ed:12:b1:6a:50:fd:87:28:42:33:c4:da:65:70:a0:82: 71:e3:77:e0:5a:d0:17:f1:c6:fd:01:e0:09:d1:eb:dd:2a:14: 63:18:1b:fa:64:61:07:71:6f:35:63:fe:3b:1d:a4:c8:fb:a9: e0:8a:ae:56:95:cd:26:d8:92:86:24:61:5c:0d:c4:c0:dd:bd: a3:ff:60:db:e5:b5:8d:35:a4:02:6a:a4:a3:a0:f8:0c:f3:9d: 6f:30:b8:10:7b:92:5d:d1:4c:f9:78:af:8b:57:5d:1c:ca:57: 46:2e:91:19:ae:8e:68:45:32:1b:76:dd:93:39:9a:da:62:db: 5c:4d:0f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yy6mOdLZFLVlgnp2kxOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDBiYTc0NGUwOWUxZDM2Y2I3MDQ2Y2I1ODk5NWMxZTM1 MTMyMjAwHhcNMjYwMTI1MDkwMTM5WhcNMjYwMTI2MDkwMTM5WjAzMTEwLwYDVQQD EyhiYTkyMWIwM2RiODc0MTJkNzNmODk4N2M5ZWM5MmMzMWRhMWQ3ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlk7YvVo6LFNRx/cx9HNSSG4ZByk FFvz0wHlfIaxHty4VKVKRQHYf7ESYXraqYf3bObgqC0PGETCCKmrmDNQsZSOit9I xhvbIdwmXPy3z2aHllRRLr+bFZu0jeFL4JKyhrIjiQ3nM1lsw5AKKhwQdeXfWfed 1wcGKsSwSAzwC9mSZU+/pvV3vZvleyrGK/4Dz/aQEdkeFfM5MEB6jg9p8lG+aTJq JK3cpuEPluVlS/ybHX8bNU9zmAX6Ozi/M9OPzYE5/vEkVyPiufB27+8SRNISeEgM fhMGeVVEYPamINE2EJgvcgsPfY0IjCm+AJue9sYL6Mqtm7IACGj2HvKM/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqSGwPbh0Etc/iYfJ7JLDHaHX/oMB8GA1UdIwQY MBaAFHJAunROCeHTbLcEbLWJlcHjUTIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMt MmI1ZWM2NTJhZjZkLzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMtMmI1ZWM2NTJhZjZk LzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlcEXwoj N6PqcXtsKj8ei6/4++t5F+76TYRmQC5DeKhAV9xYvVPkgPEhc0ssX8k5/zaHMM5C EqAS4RhNpoa0+wVpZG2KjkorOsNzYrTV+yTKnBQi5UTI8Th8AEi6v3a6R/bEefWe 7YJ7b8xKgJUfWoYi5PATYX1pizKonVCs94/tErFqUP2HKEIzxNplcKCCceN34FrQ F/HG/QHgCdHr3SoUYxgb+mRhB3FvNWP+Ox2kyPup4IquVpXNJtiShiRhXA3EwN29 o/9g2+W1jTWkAmqko6D4DPOdbzC4EHuSXdFM+Xivi1ddHMpXRi6RGa6OaEUyG3bd kzma2mLbXE0P1g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:22 2026 by rpki-client