This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json) Hash identifier: e3bSOzg9E2fbWctd95Gnn7z7viduZcEngJx+RTGz/zQ= Subject key identifier: E6:7C:A8:2F:4F:30:F9:53:AC:02:76:AA:EC:8A:DC:38:8F:85:A8:7D Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Certificate serial: 019BF6882EBF5C4B6960F8BE0FC7436BC387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:01:18 +0000 Manifest this update: Sun 25 Jan 2026 19:01:18 +0000 Manifest next update: Mon 26 Jan 2026 19:01:18 +0000 Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: x+dpj+66fkJ2P54+S1WoOxtpWNz69i1XX5ZyW00RMzw=) 2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:2e:bf:5c:4b:69:60:f8:be:0f:c7:43:6b:c3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Validity Not Before: Jan 25 19:01:18 2026 GMT Not After : Jan 26 19:01:18 2026 GMT Subject: CN=e67ca82f4f30f953ac0276aaec8adc388f85a87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:71:7a:da:a8:33:58:76:8e:47:09:4c:13: 33:40:16:5c:54:85:77:d8:32:3d:c5:ed:6e:a3:18: aa:9b:f7:3c:18:3e:1a:f0:1a:78:80:e2:b4:27:6d: d9:36:28:2e:5b:1d:60:20:0e:e9:97:e9:c7:2d:bc: 08:aa:4f:29:89:43:20:d4:67:38:d5:0a:03:4e:2b: fe:11:71:25:c9:d3:7f:2f:f3:ac:2d:93:12:9e:10: 4e:e3:06:4c:cd:56:f9:8d:00:bb:1b:ea:86:10:d7: 5f:2b:11:01:c9:81:ad:e0:75:25:e1:a4:82:ce:2c: 3f:c6:3d:98:ce:98:43:b0:40:a6:a2:2c:51:4a:fc: 27:c2:63:b0:8a:36:03:c4:a0:2a:8f:3d:c1:f1:6b: 97:6b:e7:f9:4c:d6:0c:a3:c2:61:32:54:f7:a3:8a: c2:a2:80:f1:c5:1c:39:1c:d1:4f:9a:5f:7d:97:28: 92:15:67:6b:4d:13:de:d5:4b:aa:8f:f9:1b:41:48: 75:3b:81:8b:83:ea:96:28:88:56:70:35:79:fb:4f: 8a:c7:b7:45:f8:e7:c5:44:db:fe:20:85:05:0d:55: 38:28:0f:a1:10:e9:ec:79:10:eb:5a:5b:0d:84:c4: 9d:9c:05:bc:dd:f6:d1:11:8f:b9:88:9f:94:d5:a9: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:A8:2F:4F:30:F9:53:AC:02:76:AA:EC:8A:DC:38:8F:85:A8:7D X509v3 Authority Key Identifier: keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:bb:10:67:b7:6d:92:98:4f:b1:17:e7:49:61:c9:76:91: 34:c5:bd:e0:23:b7:8e:61:6c:7a:cd:a8:68:d3:3a:61:c4:bb: 3f:8a:e3:93:e2:d8:6a:e1:bf:98:b2:4a:2b:66:5f:f8:53:94: d8:84:70:4f:a6:3c:50:07:28:37:22:12:40:36:38:91:e6:fd: 08:97:03:7f:c5:ca:9d:22:47:46:80:6f:c3:01:02:73:64:c1: 20:92:c8:74:c2:23:ee:66:d3:2e:57:82:92:6c:b3:2e:67:3a: 8c:8a:a3:ab:60:cf:fd:b6:11:14:d6:2a:11:93:fe:c6:aa:6d: 6b:44:a2:bc:1e:d1:55:4c:ee:f8:9d:a8:ad:66:9e:91:fa:eb: bc:32:0c:20:8f:e1:cc:86:a7:26:4f:a4:d3:f0:3e:a0:9e:8a: e6:5f:e9:fb:95:55:a3:85:27:02:ad:e9:51:c5:f9:24:d7:79: 57:4e:a3:e2:c2:2f:e5:a0:72:83:78:67:14:d2:6a:e4:b6:7c: 4b:71:a2:f9:25:b3:2d:5e:cf:3e:e3:48:f9:08:0f:1b:92:13: 6a:ee:cf:6d:25:bf:69:ca:8c:41:98:b2:79:2c:2b:2e:88:24: f0:02:9d:51:16:bc:17:48:a6:4f:9e:30:9c:88:58:6a:eb:ca: 79:d5:0d:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iC6/XEtpYPi+D8dDa8OHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0 NDVmYmUwHhcNMjYwMTI1MTkwMTE4WhcNMjYwMTI2MTkwMTE4WjAzMTEwLwYDVQQD EyhlNjdjYTgyZjRmMzBmOTUzYWMwMjc2YWFlYzhhZGMzODhmODVhODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaFxetqoM1h2jkcJTBMzQBZcVIV3 2DI9xe1uoxiqm/c8GD4a8Bp4gOK0J23ZNiguWx1gIA7pl+nHLbwIqk8piUMg1Gc4 1QoDTiv+EXElydN/L/OsLZMSnhBO4wZMzVb5jQC7G+qGENdfKxEByYGt4HUl4aSC ziw/xj2YzphDsECmoixRSvwnwmOwijYDxKAqjz3B8WuXa+f5TNYMo8JhMlT3o4rC ooDxxRw5HNFPml99lyiSFWdrTRPe1Uuqj/kbQUh1O4GLg+qWKIhWcDV5+0+Kx7dF +OfFRNv+IIUFDVU4KA+hEOnseRDrWlsNhMSdnAW83fbREY+5iJ+U1antxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ8qC9PMPlTrAJ2quyK3DiPhah9MB8GA1UdIwQY MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5 LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB67EGe3 bZKYT7EX50lhyXaRNMW94CO3jmFses2oaNM6YcS7P4rjk+LYauG/mLJKK2Zf+FOU 2IRwT6Y8UAcoNyISQDY4keb9CJcDf8XKnSJHRoBvwwECc2TBIJLIdMIj7mbTLleC kmyzLmc6jIqjq2DP/bYRFNYqEZP+xqpta0SivB7RVUzu+J2orWaekfrrvDIMII/h zIanJk+k0/A+oJ6K5l/p+5VVo4UnAq3pUcX5JNd5V06j4sIv5aByg3hnFNJq5LZ8 S3Gi+SWzLV7PPuNI+QgPG5ITau7PbSW/acqMQZiyeSwrLogk8AKdURa8F0imT54w nIhYauvKedUNYA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:11 2026 by rpki-client