This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json) Hash identifier: zR5LXQIOE7rw2BC7H6N64n8YaxKVckw6ZMMBMXumw5g= Subject key identifier: 68:90:23:48:52:81:73:05:85:8A:9F:C2:60:18:81:1C:BA:D7:80:46 Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Certificate serial: 019BF72D0FA7C59739A82FA81C1C9C84E404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 22:01:24 +0000 Manifest this update: Sun 25 Jan 2026 22:01:24 +0000 Manifest next update: Mon 26 Jan 2026 22:01:24 +0000 Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: n1Pd4lx3EZs82c/P1JAAv5LRvL0SKCdsIdArGGsZyIQ=) 2: V2Wte8BkaNous7CrZqWcxBIQZdM.roa (hash: Yw62UYpiIknNRj302cRCmgt62IIB168KgDQY4GJXYIo=) 3: tDq0OuNEcyHyXrNZJvYPajWGOJ8.roa (hash: jTB45cj34yVE8wIWj57B+/0GzTBSMq8W3N2dZK8KTqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:0f:a7:c5:97:39:a8:2f:a8:1c:1c:9c:84:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Validity Not Before: Jan 25 22:01:24 2026 GMT Not After : Jan 26 22:01:24 2026 GMT Subject: CN=6890234852817305858a9fc26018811cbad78046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:78:cd:49:a2:02:ba:5d:9a:e3:c4:68:b8: 00:45:13:49:81:3b:cd:bd:26:ea:58:ee:14:15:54: 97:d0:4d:85:17:b3:23:84:10:3d:41:a8:06:4a:e3: 8e:8f:00:17:0f:c8:25:07:ad:54:1f:67:31:df:2e: e8:de:c9:ce:f9:e4:16:62:a4:e9:05:1f:92:8a:7e: 1a:85:ec:66:ac:95:02:35:2e:2e:67:e0:6b:f5:3b: 16:39:7f:5e:0f:77:8f:16:25:20:97:35:06:6e:06: 87:9e:36:8c:b9:25:19:26:b8:85:86:9e:32:19:e5: eb:b2:83:52:ca:c5:03:94:ea:d5:bf:45:ac:d2:3a: 40:07:87:cd:6a:e9:a3:14:cd:47:5f:ee:b5:9a:13: 7f:e1:e6:06:71:f2:cc:59:e7:c5:8e:15:3b:c7:46: cd:d3:81:ba:ae:81:50:44:62:1c:83:fb:bc:da:2b: f8:c9:3b:f5:f7:54:c9:17:5d:91:55:93:b5:41:2d: 76:50:9f:42:18:28:90:0d:c2:45:24:02:9e:78:be: 5c:98:c5:db:08:0b:7d:c4:31:28:0d:ba:8f:20:81: f1:81:78:f4:0b:44:78:1d:79:a4:0e:8f:8a:07:96: 6a:91:1f:16:bb:90:2c:82:cb:cf:c9:76:fe:af:07: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:90:23:48:52:81:73:05:85:8A:9F:C2:60:18:81:1C:BA:D7:80:46 X509v3 Authority Key Identifier: keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a7:b0:44:2c:78:f8:3e:82:85:f4:0a:9e:e0:06:8f:bc:63: e1:82:1c:b3:aa:a0:f5:99:a3:28:3e:88:f7:7e:63:dd:6e:4f: 1c:48:61:bb:ae:f1:da:55:b9:17:75:40:d6:e4:8d:0e:0b:5d: ed:3e:34:48:85:51:da:63:c0:23:21:03:0a:53:28:b5:a0:5e: 20:de:86:1b:35:2d:41:bc:78:99:15:4c:f4:72:81:ba:2a:98: df:93:6c:77:89:88:53:1b:d6:1a:f1:7d:5f:9b:21:b4:9a:46: af:11:bc:93:03:23:3b:3b:67:1b:b5:0d:03:f4:fd:9d:92:68: 73:64:31:af:e9:89:63:42:74:ad:95:c2:bf:c4:17:1c:2c:da: 29:62:c2:fb:8f:ae:9a:59:e0:96:b0:fc:35:e7:27:c9:b5:94: 7f:5a:1d:a2:39:ab:52:2a:68:45:c8:bf:ac:45:ef:12:d7:22: 32:56:d4:50:44:02:00:a0:48:72:85:8b:9c:8b:c6:4a:15:98: f0:28:f5:4a:b2:0f:5e:3b:c9:64:c3:b0:5f:63:80:18:1c:bc: 7f:1d:20:a2:fc:11:ba:fe:4e:cc:6e:a9:23:29:c5:0e:95:03: eb:53:4a:02:3a:81:59:6f:f5:a0:aa:4a:1a:08:5c:24:ff:2e: b3:32:ac:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQ+nxZc5qC+oHBychOQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy MjdkOTUwHhcNMjYwMTI1MjIwMTI0WhcNMjYwMTI2MjIwMTI0WjAzMTEwLwYDVQQD Eyg2ODkwMjM0ODUyODE3MzA1ODU4YTlmYzI2MDE4ODExY2JhZDc4MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnel4zUmiArpdmuPEaLgARRNJgTvN vSbqWO4UFVSX0E2FF7MjhBA9QagGSuOOjwAXD8glB61UH2cx3y7o3snO+eQWYqTp BR+Sin4ahexmrJUCNS4uZ+Br9TsWOX9eD3ePFiUglzUGbgaHnjaMuSUZJriFhp4y GeXrsoNSysUDlOrVv0Ws0jpAB4fNaumjFM1HX+61mhN/4eYGcfLMWefFjhU7x0bN 04G6roFQRGIcg/u82iv4yTv191TJF12RVZO1QS12UJ9CGCiQDcJFJAKeeL5cmMXb CAt9xDEoDbqPIIHxgXj0C0R4HXmkDo+KB5ZqkR8Wu5AsgsvPyXb+rwekswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiQI0hSgXMFhYqfwmAYgRy614BGMB8GA1UdIwQY MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It NzExNjk1NjdlMzljLzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaewRCx4 +D6ChfQKnuAGj7xj4YIcs6qg9ZmjKD6I935j3W5PHEhhu67x2lW5F3VA1uSNDgtd 7T40SIVR2mPAIyEDClMotaBeIN6GGzUtQbx4mRVM9HKBuiqY35Nsd4mIUxvWGvF9 X5shtJpGrxG8kwMjOztnG7UNA/T9nZJoc2Qxr+mJY0J0rZXCv8QXHCzaKWLC+4+u mlnglrD8NecnybWUf1odojmrUipoRci/rEXvEtciMlbUUEQCAKBIcoWLnIvGShWY 8Cj1SrIPXjvJZMOwX2OAGBy8fx0govwRuv5OzG6pIynFDpUD61NKAjqBWW/1oKpK GghcJP8uszKs2g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:30 2026 by rpki-client