This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json) Hash identifier: hlZ7xuZqNgaYAOvgR8AWp1mSNrc3Z/IKZhuU9OYvj/Y= Subject key identifier: D6:15:7E:8C:A4:7F:AE:95:0A:1C:EB:35:01:16:A2:23:0D:E7:6A:C8 Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Certificate serial: 019BF8ACFA7391F525BC3E1B7A9A0910CCA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft Manifest number: 0389 Signing time: Mon 26 Jan 2026 05:00:44 +0000 Manifest this update: Mon 26 Jan 2026 05:00:44 +0000 Manifest next update: Tue 27 Jan 2026 05:00:44 +0000 Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=) 2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=) 3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: V0wriiXgfC9npLlOKW3HHH+BgL1FeQgRa9hOl/LvAVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:fa:73:91:f5:25:bc:3e:1b:7a:9a:09:10:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Validity Not Before: Jan 26 05:00:44 2026 GMT Not After : Jan 27 05:00:44 2026 GMT Subject: CN=d6157e8ca47fae950a1ceb350116a2230de76ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:1b:20:bf:27:39:12:7b:0d:03:7a:f8:a2: da:1e:13:7d:03:c8:e4:ed:3f:5e:9d:40:80:d6:47: 5a:c2:fd:e5:ae:54:4d:0a:25:cd:0d:f3:f5:61:b4: 4e:9c:74:f8:c3:32:4f:ac:71:6c:37:0a:70:ba:fc: 86:32:ce:8d:09:6e:4b:41:b0:f9:cd:5a:ca:66:3e: bf:d3:ab:48:34:d1:59:6a:e5:1f:c2:cd:7b:da:3a: 42:6d:50:fe:d9:6d:aa:f7:35:f9:fa:0d:ca:f8:fb: 53:b7:f8:e2:94:65:8d:c3:16:e9:08:c1:ce:2d:95: 43:61:d3:71:0e:ee:fe:7c:14:c2:17:13:3c:7a:ef: fc:c3:a2:c1:e1:66:a1:71:eb:c2:cd:21:03:2f:57: c1:21:95:32:71:03:cc:8c:16:8e:89:1a:b9:6b:96: 16:bc:8e:49:89:ab:90:54:70:2c:1a:0d:35:20:48: fd:96:b9:07:b7:bb:92:8e:68:eb:79:d7:63:69:1e: 32:80:a4:fc:77:d2:76:42:67:0c:d7:6e:93:c0:df: 7a:8d:c1:4a:39:55:cc:5c:bd:a0:25:c8:d7:3b:bf: 06:b3:8c:02:eb:ed:94:5c:0f:1f:1d:31:1c:3e:b4: 3e:6c:0b:49:d8:70:26:7e:4c:9c:4d:ad:b9:88:ee: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:15:7E:8C:A4:7F:AE:95:0A:1C:EB:35:01:16:A2:23:0D:E7:6A:C8 X509v3 Authority Key Identifier: keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:0e:68:f8:97:3a:4a:93:a1:a0:ff:11:a3:72:3f:34:5b: 7a:97:87:10:55:9e:fe:fb:7d:7a:d9:39:de:78:59:36:24:05: 6b:06:a3:12:75:86:d8:47:3e:a0:42:8c:4d:1b:38:b4:08:e8: 16:e7:36:f6:df:08:ea:76:cc:93:47:17:92:5c:02:37:ce:7d: 77:0c:d9:ba:2a:c4:ea:a9:18:21:39:4a:91:fb:15:f4:2c:71: 5f:2d:82:c9:35:b8:99:7b:07:7a:a3:86:91:f6:83:db:09:2e: 25:9f:32:84:d8:6e:ca:41:a8:b7:ac:9c:4a:7c:4d:1d:38:ea: 99:79:70:cd:25:73:7d:c0:44:5a:e3:d0:bb:88:d9:6d:8b:aa: bc:42:58:ac:f1:ac:29:35:5c:2a:5e:9a:37:e6:81:3f:b7:fe: 30:ea:28:d6:9a:73:42:3f:32:7a:44:50:31:f3:46:ed:df:8a: 29:63:16:0d:0a:78:91:22:2a:29:f8:b0:7f:96:e7:1e:98:57: 08:05:7a:d5:d1:bb:80:0f:2d:20:94:f9:97:7b:5a:35:10:42: 60:a9:97:85:95:42:b7:58:b2:43:19:00:d2:fe:f2:19:18:8e: ee:68:c7:eb:8e:ff:fd:2e:85:25:98:61:fb:98:2c:7e:b9:9a: 43:3d:a2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rPpzkfUlvD4bepoJEMygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0 NDA3YjkwHhcNMjYwMTI2MDUwMDQ0WhcNMjYwMTI3MDUwMDQ0WjAzMTEwLwYDVQQD EyhkNjE1N2U4Y2E0N2ZhZTk1MGExY2ViMzUwMTE2YTIyMzBkZTc2YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFkbIL8nORJ7DQN6+KLaHhN9A8jk 7T9enUCA1kdawv3lrlRNCiXNDfP1YbROnHT4wzJPrHFsNwpwuvyGMs6NCW5LQbD5 zVrKZj6/06tINNFZauUfws172jpCbVD+2W2q9zX5+g3K+PtTt/jilGWNwxbpCMHO LZVDYdNxDu7+fBTCFxM8eu/8w6LB4WahcevCzSEDL1fBIZUycQPMjBaOiRq5a5YW vI5JiauQVHAsGg01IEj9lrkHt7uSjmjreddjaR4ygKT8d9J2QmcM126TwN96jcFK OVXMXL2gJcjXO78Gs4wC6+2UXA8fHTEcPrQ+bAtJ2HAmfkycTa25iO4DywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYVfoykf66VChzrNQEWoiMN52rIMB8GA1UdIwQY MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVAOaPiX OkqToaD/EaNyPzRbepeHEFWe/vt9etk53nhZNiQFawajEnWG2Ec+oEKMTRs4tAjo Fuc29t8I6nbMk0cXklwCN859dwzZuirE6qkYITlKkfsV9CxxXy2CyTW4mXsHeqOG kfaD2wkuJZ8yhNhuykGot6ycSnxNHTjqmXlwzSVzfcBEWuPQu4jZbYuqvEJYrPGs KTVcKl6aN+aBP7f+MOoo1ppzQj8yekRQMfNG7d+KKWMWDQp4kSIqKfiwf5bnHphX CAV61dG7gA8tIJT5l3taNRBCYKmXhZVCt1iyQxkA0v7yGRiO7mjH647//S6FJZhh +5gsfrmaQz2i3A== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:41 2026 by rpki-client