This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: wqtE2fmTBFLzns9L+u+005ybKOj7/F3JbU7VeRDioKg= Subject key identifier: 75:CE:45:E1:E1:9D:BA:38:F8:4E:B2:C2:56:8C:0C:97:E9:9D:AA:2A Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019BF6F601C96EF557397977894938BAE0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 17F7 Signing time: Sun 25 Jan 2026 21:01:15 +0000 Manifest this update: Sun 25 Jan 2026 21:01:15 +0000 Manifest next update: Mon 26 Jan 2026 21:01:15 +0000 Files and hashes: 1: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (hash: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU=) 2: A1Mk8aLvUIYkXCPbeSuDU3Hli4Y.roa (hash: 6HTRUzOZM9L9Wg/uHA0I0KF3U5ylm2c/kJX/463Szd4=) 3: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: 5ZYuFI/Qn19iinsyZRa9TXL7PkkK+HbS6dAPvYJpgvc=) 4: HgbYfqgWEgBTtHpfnCWuHLmWfdc.roa (hash: HMoC4HbqEHwkb4dO3/C2FUOmIHSy3Jpy2ww8Kfj1GLQ=) 5: ICdi3Xclm2LMQx68Q6etVXL0KFc.roa (hash: vjU1GcA1cFFndt3wwSI4VfmzP+VMXEKnzNIVU0wZIsQ=) 6: JTLXgLzRLUbBBSRVTWms-KrY030.roa (hash: Zz6+CVIeJzHTwZbXpV9f3Jk2ToknnGjWiBUQP/bGQYw=) 7: MPfZa80zx8JD19B0YvKo1B-KyMs.roa (hash: hWxzkpQob8nqa1qn5tGNwr5NCD7Lovv8X8P0foxw+GY=) 8: XTs5NFI5GGPmdILyJoe1UZermoY.roa (hash: Y8Lo2YH8sWKxYhv5OE189NboWo9z7HM5q1eUAOyY79s=) 9: aB0CFj7HhZYpp4ebpVhWCAyE-Zo.roa (hash: FE2nN2ZVDrPMPN1fblBP/Z17brnB7Kwxa7lfUoyA7Ak=) 10: dwKvi-B2ZQX6gRhuM9-iaMM_WYg.roa (hash: d357UZrxqtoD/uKcbAujVU8Zr9YkZh05q80AX1/cYA4=) 11: lHfae3UMrtkbZl9pwmHCG7QPKCs.roa (hash: uTooVNNQdT2Xp41rPldHjXa4GM+toHNemDQJjp4UhfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:01:c9:6e:f5:57:39:79:77:89:49:38:ba:e0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 25 21:01:15 2026 GMT Not After : Jan 26 21:01:15 2026 GMT Subject: CN=75ce45e1e19dba38f84eb2c2568c0c97e99daa2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:14:80:94:a5:ad:c6:68:d0:3d:6f:d1:ee: af:4c:db:41:1e:6b:c9:43:c1:f9:9d:3a:51:82:26: c7:9c:58:2a:b2:1d:b8:cf:ed:0f:87:a2:7b:88:b3: ee:e6:27:f9:de:35:d0:6b:c4:da:46:17:09:f5:1a: 3f:8b:20:54:af:ee:98:0d:c3:ac:ce:33:fb:62:84: 3d:8f:8d:54:ee:99:cd:65:00:d9:b5:18:0b:21:b4: 47:7e:2d:cf:df:40:30:46:6f:e8:a5:16:98:7e:5a: 6f:25:70:5c:00:ac:b8:b3:7c:55:f7:50:8e:1f:fd: ed:6b:81:db:81:c4:c0:46:9a:a0:2e:ba:a5:9f:9f: d1:eb:03:14:a9:57:a9:fb:b8:62:31:09:ad:1f:8d: 43:0b:a5:1d:f1:27:b7:37:93:e3:d6:27:77:b5:ef: ee:35:c3:27:13:e2:8b:6e:c1:3b:4e:02:b5:34:1a: fa:77:0e:a6:11:4c:18:20:d9:22:37:6d:4d:4a:ee: d2:10:c8:2d:72:30:3a:11:60:fd:4b:2e:4b:26:e6: 81:b9:04:a3:be:87:75:3b:97:d2:0c:f5:ab:9a:4a: b7:a4:28:35:7c:d6:ea:88:00:54:16:a4:54:05:4a: 0e:3a:0d:b0:d9:69:82:f1:8b:35:96:0f:f1:0d:96: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CE:45:E1:E1:9D:BA:38:F8:4E:B2:C2:56:8C:0C:97:E9:9D:AA:2A X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:55:6c:c2:42:17:39:b0:22:45:13:1d:c7:af:66:fe:71: 5b:dc:9e:57:56:f6:d3:d1:03:5a:a9:8a:41:00:39:fe:3f:c0: 80:42:6d:0b:1f:da:31:5d:fd:c5:82:cd:5a:0f:d1:50:fc:23: c4:6b:47:3b:5c:d4:9c:89:1a:75:55:9d:a3:93:fa:b3:28:44: ab:04:28:4f:b7:af:fb:7a:a7:88:ff:17:67:ff:50:9d:34:66: 77:e3:cd:a6:fe:e2:44:b4:e1:94:23:50:9d:1b:0a:ad:ad:2d: 1a:5b:c4:4f:7d:9f:76:b9:35:31:b4:d7:73:2f:54:d7:d4:ef: 9d:fb:e0:22:a1:1e:70:7e:43:f7:f7:61:4d:46:cf:0e:b7:0e: d9:3a:cd:76:2d:ca:b8:d2:fb:70:25:13:97:55:bc:62:b7:f2: 8c:82:8c:83:5f:17:fb:0b:23:bf:b8:36:c3:8a:ab:67:41:59: 65:c7:3c:f7:6d:c7:c4:2c:2b:02:2f:2c:8d:0e:47:38:f1:f6: 28:fb:14:db:13:c7:d0:6d:6d:ab:80:4d:de:31:86:45:56:69: f6:54:69:25:fc:b4:b9:eb:94:e3:7d:43:0a:8d:37:34:66:5a: 8b:bb:55:55:5b:d4:64:c5:e8:ba:77:2d:ea:7d:01:d4:02:00: 11:2e:68:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gHJbvVXOXl3iUk4uuD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTI1MjEwMTE1WhcNMjYwMTI2MjEwMTE1WjAzMTEwLwYDVQQD Eyg3NWNlNDVlMWUxOWRiYTM4Zjg0ZWIyYzI1NjhjMGM5N2U5OWRhYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pgUgJSlrcZo0D1v0e6vTNtBHmvJ Q8H5nTpRgibHnFgqsh24z+0Ph6J7iLPu5if53jXQa8TaRhcJ9Ro/iyBUr+6YDcOs zjP7YoQ9j41U7pnNZQDZtRgLIbRHfi3P30AwRm/opRaYflpvJXBcAKy4s3xV91CO H/3ta4HbgcTARpqgLrqln5/R6wMUqVep+7hiMQmtH41DC6Ud8Se3N5Pj1id3te/u NcMnE+KLbsE7TgK1NBr6dw6mEUwYINkiN21NSu7SEMgtcjA6EWD9Sy5LJuaBuQSj vod1O5fSDPWrmkq3pCg1fNbqiABUFqRUBUoOOg2w2WmC8Ys1lg/xDZaMIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXOReHhnbo4+E6ywlaMDJfpnaoqMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATupVbMJC FzmwIkUTHcevZv5xW9yeV1b209EDWqmKQQA5/j/AgEJtCx/aMV39xYLNWg/RUPwj xGtHO1zUnIkadVWdo5P6syhEqwQoT7ev+3qniP8XZ/9QnTRmd+PNpv7iRLThlCNQ nRsKra0tGlvET32fdrk1MbTXcy9U19TvnfvgIqEecH5D9/dhTUbPDrcO2TrNdi3K uNL7cCUTl1W8YrfyjIKMg18X+wsjv7g2w4qrZ0FZZcc8923HxCwrAi8sjQ5HOPH2 KPsU2xPH0G1tq4BN3jGGRVZp9lRpJfy0ueuU431DCo03NGZai7tVVVvUZMXounct 6n0B1AIAES5omA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:26 2026 by rpki-client