This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json) Hash identifier: C11k2miJbypskRqErqAlzxYh7BHNIvXxyEsQYbZO6Yg= Subject key identifier: CE:BB:88:F8:80:E2:99:8E:96:24:D5:7A:98:E3:84:FE:F4:93:D7:54 Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Certificate serial: 019BF499A04A85EDC9ABB0F0FA4C4350E7B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 10:01:07 +0000 Manifest this update: Sun 25 Jan 2026 10:01:07 +0000 Manifest next update: Mon 26 Jan 2026 10:01:07 +0000 Files and hashes: 1: 1BSkcVOn1qfh4jN9Y9DJswoRbtE.roa (hash: LWd2G+pwtnf/D4Tz+gcRRy7rXH1Fkn75SR7a0vRuma0=) 2: D6outDiE1pK_DydHGZyVGQce45w.roa (hash: k67yvwHSAG5YZmtQAvs13ltyI5n27aqgR+L0RdVOVfU=) 3: Fd5umUhcoCCaJGYibKCvP6v4FDo.roa (hash: aX4f/4JkLGsDLe+rXVPfGB2prsQe4LXC6c7f8OmsATA=) 4: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: lGZ1NtljIvTTi39tt2bboZYfnN9FlR45Pz5eLNpqsP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:a0:4a:85:ed:c9:ab:b0:f0:fa:4c:43:50:e7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Validity Not Before: Jan 25 10:01:07 2026 GMT Not After : Jan 26 10:01:07 2026 GMT Subject: CN=cebb88f880e2998e9624d57a98e384fef493d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:53:81:79:9c:c9:03:a9:11:2e:d1:b1:80: a3:eb:f9:aa:19:4c:7b:2e:3e:18:2b:43:b8:8f:be: 35:a7:d7:12:e2:fb:73:a0:27:12:18:82:dc:19:17: 75:80:4a:99:a3:ab:87:a1:ac:4a:1c:5e:3f:54:cb: f3:93:08:80:03:15:a0:86:78:e9:41:c2:37:bd:33: 5c:ab:57:70:f7:49:03:e1:21:17:80:5c:42:4b:81: 7e:98:2a:4a:78:fe:9e:cf:8f:7a:93:bf:db:b1:78: 8d:94:11:4b:d5:83:15:8a:59:6b:83:ba:ea:b9:2a: af:02:d8:b4:45:60:59:ba:de:8f:89:22:56:1f:47: 73:df:5a:3f:4c:93:b7:29:0b:cd:01:b8:db:ff:84: ea:4f:6d:87:31:26:08:a2:e2:85:6c:c2:7f:91:21: a3:eb:eb:db:6e:fb:6a:de:bf:bd:17:3f:3f:a5:1c: 9c:cb:20:52:f9:7c:ba:be:3c:c3:5d:ef:59:a0:6e: 2e:a5:b7:7a:cc:e3:2c:c5:a5:dc:f6:2d:c1:eb:c1: 7f:2f:88:31:db:8d:4b:ed:2a:53:e1:99:d4:b2:60: 2a:af:86:e5:8c:16:dc:60:1c:9a:1c:fd:21:9d:a9: 4e:4b:8a:31:e1:13:0f:e7:3e:0c:0d:3a:0d:27:e6: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:88:F8:80:E2:99:8E:96:24:D5:7A:98:E3:84:FE:F4:93:D7:54 X509v3 Authority Key Identifier: keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:ff:38:57:a3:ec:88:c8:0c:91:42:78:cf:18:7d:dc:f8: 57:0e:ec:5d:3d:10:c4:ab:e6:b2:b0:30:0d:3f:e0:3e:a6:1a: 62:66:7b:0c:79:b8:89:97:a9:1b:dc:cd:f8:e7:63:01:8e:3c: 5f:74:f0:48:76:65:05:d1:c8:78:aa:89:88:8a:10:35:39:16: c6:c0:da:3c:c7:b5:4b:87:bb:ec:50:d1:68:19:65:f1:43:17: 99:fd:0b:22:85:df:dd:a3:56:0f:87:62:03:83:d5:e7:c0:a5: ce:da:c4:c0:23:fe:ec:aa:84:1e:d2:60:0b:58:e3:6d:f8:ae: 8a:f1:39:6c:18:77:90:56:f6:3f:0b:69:12:5f:0d:00:d0:5a: 74:6c:54:8e:a4:4a:d7:a1:e8:39:15:b5:55:f7:01:87:90:7b: c0:2d:12:c5:cf:4a:73:aa:46:65:8d:e0:1a:b5:32:72:44:d0: 99:88:58:bb:3b:53:17:f7:81:ef:97:e3:3d:ca:84:72:f3:87: ce:f9:a0:e2:3f:1a:4c:94:83:da:cd:6a:c1:d5:7d:c8:6e:de: 4a:2f:02:e4:69:63:a1:01:8d:e4:f7:58:2f:f0:60:aa:71:61: d5:63:37:e9:c6:c9:1a:9e:e0:52:05:6e:86:be:32:d9:5d:54: 09:ea:aa:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0maBKhe3Jq7Dw+kxDUOe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2 NjQzNDQwHhcNMjYwMTI1MTAwMTA3WhcNMjYwMTI2MTAwMTA3WjAzMTEwLwYDVQQD EyhjZWJiODhmODgwZTI5OThlOTYyNGQ1N2E5OGUzODRmZWY0OTNkNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyhTgXmcyQOpES7RsYCj6/mqGUx7 Lj4YK0O4j741p9cS4vtzoCcSGILcGRd1gEqZo6uHoaxKHF4/VMvzkwiAAxWghnjp QcI3vTNcq1dw90kD4SEXgFxCS4F+mCpKeP6ez496k7/bsXiNlBFL1YMVillrg7rq uSqvAti0RWBZut6PiSJWH0dz31o/TJO3KQvNAbjb/4TqT22HMSYIouKFbMJ/kSGj 6+vbbvtq3r+9Fz8/pRycyyBS+Xy6vjzDXe9ZoG4upbd6zOMsxaXc9i3B68F/L4gx 241L7SpT4ZnUsmAqr4bljBbcYByaHP0hnalOS4ox4RMP5z4MDToNJ+Z9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM67iPiA4pmOliTVepjjhP70k9dUMB8GA1UdIwQY MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt NzZiMDMyNWMzYjA3LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3 LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYH/OFej 7IjIDJFCeM8Yfdz4Vw7sXT0QxKvmsrAwDT/gPqYaYmZ7DHm4iZepG9zN+OdjAY48 X3TwSHZlBdHIeKqJiIoQNTkWxsDaPMe1S4e77FDRaBll8UMXmf0LIoXf3aNWD4di A4PV58ClztrEwCP+7KqEHtJgC1jjbfiuivE5bBh3kFb2PwtpEl8NANBadGxUjqRK 16HoORW1VfcBh5B7wC0Sxc9Kc6pGZY3gGrUyckTQmYhYuztTF/eB75fjPcqEcvOH zvmg4j8aTJSD2s1qwdV9yG7eSi8C5GljoQGN5PdYL/BgqnFh1WM36cbJGp7gUgVu hr4y2V1UCeqq0A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:32 2026 by rpki-client