This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json) Hash identifier: hv+RNA4z+N6dYWFdN437zIBELepMK2yxYsZR3aA6JRI= Subject key identifier: 38:E0:AE:C1:6A:15:81:44:39:2C:8A:65:A7:CC:C1:D3:AD:C4:14:C1 Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Certificate serial: 019BF4D02C03049E7FF7C0B7FD0BEEEEA85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft Manifest number: 0648 Signing time: Sun 25 Jan 2026 11:00:41 +0000 Manifest this update: Sun 25 Jan 2026 11:00:41 +0000 Manifest next update: Mon 26 Jan 2026 11:00:41 +0000 Files and hashes: 1: B8t2bBTkaLAR5TIW9fbMzDeK7wM.roa (hash: rEfJvzviw6ozBNoCBXd6KOO7hAZ89y6wXkNGYhrBaG0=) 2: HMrz0ooKEJFXKSO4vlLH3tqjuoY.roa (hash: Q44eqltej8ZT7IIY9L9uJnTiWZ7q0wvG++yznZV8P2Y=) 3: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (hash: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8=) 4: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: Jq1VGzJpCtIKbdb2nYUchyJUaRtfdsD1ivxruEiBo3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:2c:03:04:9e:7f:f7:c0:b7:fd:0b:ee:ee:a8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Validity Not Before: Jan 25 11:00:41 2026 GMT Not After : Jan 26 11:00:41 2026 GMT Subject: CN=38e0aec16a158144392c8a65a7ccc1d3adc414c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:70:32:82:af:c5:fd:91:5e:82:5c:e4:3d: 91:13:16:1b:de:2b:79:07:f3:64:66:57:72:18:aa: fa:ec:b9:78:7a:9b:c9:f4:52:80:f9:ab:63:71:14: 0b:2d:cb:76:6d:40:26:6d:46:de:c6:61:71:c1:1d: 0c:d0:d9:1a:9b:c7:dc:75:4e:90:08:08:a0:ae:27: 5b:d3:8d:f7:0c:8a:4f:bd:ec:93:8b:73:31:3d:e0: 07:e3:11:51:27:3c:fc:c5:ef:6c:eb:d6:62:c7:b5: 3d:f4:aa:f5:89:dc:85:40:f4:a5:a0:0c:f8:6e:7f: 10:3b:50:f1:ce:d5:8f:69:b9:d0:7f:f9:a3:b3:8a: 01:0d:2c:74:87:59:1e:63:34:b2:22:9b:bd:8e:af: eb:a0:19:94:73:ce:f8:28:d4:36:0a:d0:ce:66:6c: 8f:b6:fa:53:7f:3e:6f:64:84:89:37:30:12:7f:0f: 17:93:1e:7b:40:f9:c4:24:e4:b7:a2:c7:0f:24:ab: e9:9c:31:75:01:50:0c:2f:88:01:dc:28:0d:4d:ff: 39:ce:72:3b:e6:d4:73:eb:1d:ee:cc:43:52:d2:ff: bf:a2:e2:5e:cf:94:aa:0b:72:58:55:a9:8c:bd:b3: 8e:c0:ff:a0:c8:9c:f4:cc:b0:04:f8:f1:1d:29:1f: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:AE:C1:6A:15:81:44:39:2C:8A:65:A7:CC:C1:D3:AD:C4:14:C1 X509v3 Authority Key Identifier: keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:e2:5c:28:43:8d:f9:a3:91:92:e7:88:40:98:6f:91:9d: 8e:70:6b:04:d2:3c:60:66:85:ad:c1:c1:67:8c:3a:6c:b8:ac: 17:90:4b:b6:6f:1d:13:43:d7:77:db:9d:f1:ae:b5:6b:43:af: b2:42:20:bd:f5:6e:e3:3c:2b:0f:55:ec:6b:45:f0:81:af:86: 0f:13:24:7e:8e:7b:fb:57:a0:8d:98:3e:57:97:0f:10:7d:79: a6:da:8a:30:63:d6:62:b0:8f:44:dd:e2:d1:0f:08:13:78:ef: 86:c1:fb:82:d3:1d:3d:dd:db:ce:a2:7d:d3:0d:9b:94:64:d3: 35:3c:57:cd:38:69:78:2d:7b:94:c8:56:29:c2:78:a7:05:0c: ad:25:58:96:95:27:9b:2c:3e:4a:77:e0:77:49:a7:70:61:1d: 2b:10:cd:37:8e:64:98:27:02:b1:00:f3:f6:73:0e:82:7d:ea: e8:7c:1c:43:98:54:77:c3:88:2a:9c:50:2d:f0:66:41:2b:d3: 0e:7c:bf:e7:30:9d:ed:f6:17:d7:2c:83:ca:a9:c3:8c:37:27: 0a:46:95:09:e4:c9:77:04:be:5b:e9:28:31:cf:97:42:96:1d: 2d:7f:63:e9:ad:da:9d:34:8c:c5:10:44:ff:36:52:be:60:65: a6:7a:95:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00CwDBJ5/98C3/Qvu7qhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz MzRiYTUwHhcNMjYwMTI1MTEwMDQxWhcNMjYwMTI2MTEwMDQxWjAzMTEwLwYDVQQD EygzOGUwYWVjMTZhMTU4MTQ0MzkyYzhhNjVhN2NjYzFkM2FkYzQxNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JFwMoKvxf2RXoJc5D2RExYb3it5 B/NkZldyGKr67Ll4epvJ9FKA+atjcRQLLct2bUAmbUbexmFxwR0M0Nkam8fcdU6Q CAigridb0433DIpPveyTi3MxPeAH4xFRJzz8xe9s69Zix7U99Kr1idyFQPSloAz4 bn8QO1DxztWPabnQf/mjs4oBDSx0h1keYzSyIpu9jq/roBmUc874KNQ2CtDOZmyP tvpTfz5vZISJNzASfw8Xkx57QPnEJOS3oscPJKvpnDF1AVAML4gB3CgNTf85znI7 5tRz6x3uzENS0v+/ouJez5SqC3JYVamMvbOOwP+gyJz0zLAE+PEdKR9KgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjgrsFqFYFEOSyKZafMwdOtxBTBMB8GA1UdIwQY MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkjiXChD jfmjkZLniECYb5GdjnBrBNI8YGaFrcHBZ4w6bLisF5BLtm8dE0PXd9ud8a61a0Ov skIgvfVu4zwrD1Xsa0Xwga+GDxMkfo57+1egjZg+V5cPEH15ptqKMGPWYrCPRN3i 0Q8IE3jvhsH7gtMdPd3bzqJ90w2blGTTNTxXzThpeC17lMhWKcJ4pwUMrSVYlpUn myw+Snfgd0mncGEdKxDNN45kmCcCsQDz9nMOgn3q6HwcQ5hUd8OIKpxQLfBmQSvT Dny/5zCd7fYX1yyDyqnDjDcnCkaVCeTJdwS+W+koMc+XQpYdLX9j6a3anTSMxRBE /zZSvmBlpnqV9A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:18 2026 by rpki-client