This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: 3fkO3b5fhepjd4ClEC0slcVwZkspXI9qEdDrYdHZSRs= Subject key identifier: 2D:04:FC:C7:AB:35:CC:36:63:AB:D9:C9:0C:2E:F1:B0:6B:FF:DF:1F Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019BF507AF9414EC0DDB0B4E228DCC614B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 12:01:20 +0000 Manifest this update: Sun 25 Jan 2026 12:01:20 +0000 Manifest next update: Mon 26 Jan 2026 12:01:20 +0000 Files and hashes: 1: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 2: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 3: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: SXBFTm0FLvZOZwFhEXPKGgLc1FAmJvNNS1lHHWsBLQ8=) 4: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 5: ICdi3Xclm2LMQx68Q6etVXL0KFc.roa (hash: vjU1GcA1cFFndt3wwSI4VfmzP+VMXEKnzNIVU0wZIsQ=) 6: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 7: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 8: XTs5NFI5GGPmdILyJoe1UZermoY.roa (hash: Y8Lo2YH8sWKxYhv5OE189NboWo9z7HM5q1eUAOyY79s=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa (hash: d357UZrxqtoD/uKcbAujVU8Zr9YkZh05q80AX1/cYA4=) 11: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:af:94:14:ec:0d:db:0b:4e:22:8d:cc:61:4b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 25 12:01:20 2026 GMT Not After : Jan 26 12:01:20 2026 GMT Subject: CN=2d04fcc7ab35cc3663abd9c90c2ef1b06bffdf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:fc:9b:0e:07:1c:4c:f7:64:9e:a9:db:6f: 1a:80:8d:1b:5b:77:93:6a:9a:c3:48:7c:4e:d0:f6: e8:90:94:71:30:62:16:44:28:68:99:06:d8:2c:b6: ac:15:47:11:3f:75:09:5e:45:dc:cf:06:ce:29:bd: a5:0e:58:61:92:76:bb:f5:22:ff:eb:22:a8:b7:39: 7f:da:19:21:25:be:4c:ef:13:07:fc:79:20:6a:1d: 80:c4:2d:03:3d:67:ec:e8:b8:f8:93:2a:10:0b:3e: 30:da:18:21:d2:62:03:f2:85:72:21:12:13:35:a9: 87:29:72:7d:1d:ef:5f:28:bd:bb:15:7a:96:1c:6a: 43:7f:37:47:98:cc:df:22:fc:40:8e:91:bb:b3:7f: 25:ab:fd:3b:0d:a9:63:ec:af:22:d2:89:28:54:5d: bc:f8:7f:b1:08:11:5a:06:16:89:e2:30:b2:8f:41: 7c:bb:bc:e2:62:1b:60:10:bf:e2:a3:d8:7e:8e:38: 6f:d9:8a:10:14:da:0c:a1:cd:11:63:3d:aa:1a:42: be:47:ff:45:64:46:89:8c:d1:1b:2d:fc:4a:28:c8: a6:fc:58:9a:82:2c:3e:25:e0:99:31:e9:e4:c1:f6: 7e:93:f1:89:7a:54:0e:f7:24:9c:d1:06:a7:80:9e: cc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:04:FC:C7:AB:35:CC:36:63:AB:D9:C9:0C:2E:F1:B0:6B:FF:DF:1F X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:60:1c:a1:da:9c:db:84:27:3e:ed:90:30:a4:cf:0c:a6:34: c2:b7:bd:d3:f1:b1:48:60:73:ba:28:e6:91:d0:82:df:c3:63: 58:33:e4:b7:72:82:0d:02:74:7e:b2:7e:df:c6:7f:ba:a0:41: 34:51:de:a4:4a:b1:49:7d:f5:b6:4d:4c:84:b8:47:d0:c7:89: f5:45:ad:8e:2a:ea:71:c1:71:b6:b5:ad:50:f5:78:cb:f3:53: 1c:36:8d:db:c4:54:45:e6:82:42:4f:e3:af:ad:c7:bf:29:bb: 70:37:a1:08:63:4b:36:dc:a8:76:07:d0:d5:6d:d3:d8:0b:6d: 0c:91:a9:98:97:d1:e7:74:8f:a8:0e:7f:0e:a9:bd:d9:23:08: 41:d4:79:41:cc:46:4d:64:cb:01:20:84:f8:e2:3c:9c:38:37: ba:c6:db:8c:61:c9:4c:b3:db:a8:03:08:27:fa:4f:de:d7:18: 85:36:7a:ca:e4:55:e1:41:3e:b5:e7:1a:0a:5c:82:2e:14:d3: b9:07:e2:38:1a:03:34:9d:54:cb:b1:eb:94:2e:7e:33:36:0a: 25:49:15:cd:3d:93:e7:17:b2:36:d7:51:f0:a8:c3:bb:27:b1: 43:61:4b:69:17:2e:b2:45:e2:3f:ce:6d:42:1f:76:36:d4:eb: d0:87:48:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6+UFOwN2wtOIo3MYUt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTI1MTIwMTIwWhcNMjYwMTI2MTIwMTIwWjAzMTEwLwYDVQQD EygyZDA0ZmNjN2FiMzVjYzM2NjNhYmQ5YzkwYzJlZjFiMDZiZmZkZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX78mw4HHEz3ZJ6p228agI0bW3eT aprDSHxO0PbokJRxMGIWRChomQbYLLasFUcRP3UJXkXczwbOKb2lDlhhkna79SL/ 6yKotzl/2hkhJb5M7xMH/Hkgah2AxC0DPWfs6Lj4kyoQCz4w2hgh0mID8oVyIRIT NamHKXJ9He9fKL27FXqWHGpDfzdHmMzfIvxAjpG7s38lq/07Dalj7K8i0okoVF28 +H+xCBFaBhaJ4jCyj0F8u7ziYhtgEL/io9h+jjhv2YoQFNoMoc0RYz2qGkK+R/9F ZEaJjNEbLfxKKMim/Fiagiw+JeCZMenkwfZ+k/GJelQO9ySc0QangJ7MdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0E/MerNcw2Y6vZyQwu8bBr/98fMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGAcodqc 24QnPu2QMKTPDKY0wre90/GxSGBzuijmkdCC38NjWDPkt3KCDQJ0frJ+38Z/uqBB NFHepEqxSX31tk1MhLhH0MeJ9UWtjirqccFxtrWtUPV4y/NTHDaN28RUReaCQk/j r63Hvym7cDehCGNLNtyodgfQ1W3T2AttDJGpmJfR53SPqA5/Dqm92SMIQdR5QcxG TWTLASCE+OI8nDg3usbbjGHJTLPbqAMIJ/pP3tcYhTZ6yuRV4UE+tecaClyCLhTT uQfiOBoDNJ1Uy7HrlC5+MzYKJUkVzT2T5xeyNtdR8KjDuyexQ2FLaRcuskXiP85t Qh92NtTr0IdI2g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:00 2026 by rpki-client