This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json) Hash identifier: PEqdGMJKnX58uf4QjcDcPtYc4mYkFIBo2x0cwu8ZYA0= Subject key identifier: E2:4B:6D:F4:B2:5B:EE:C0:C6:DC:FE:01:51:80:00:10:62:63:E8:89 Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d Certificate serial: 019BF79AEE0F953545903619EC5D11291D3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft Manifest number: 1528 Signing time: Mon 26 Jan 2026 00:01:24 +0000 Manifest this update: Mon 26 Jan 2026 00:01:24 +0000 Manifest next update: Tue 27 Jan 2026 00:01:24 +0000 Files and hashes: 1: 16-o5D08rbE7lTUgb5ajL0G6fa8.roa (hash: 7ydkWJqy9XQ6IMrJs1nIZDnEpIAWxBiZpC4U/ks/Bqo=) 2: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: XLAIeT9BSctgckMVH3dSPHmq4Dztyv47+Q48jlPhpLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:ee:0f:95:35:45:90:36:19:ec:5d:11:29:1d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d Validity Not Before: Jan 26 00:01:24 2026 GMT Not After : Jan 27 00:01:24 2026 GMT Subject: CN=e24b6df4b25beec0c6dcfe01518000106263e889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:1a:98:21:d9:0b:e0:42:bd:c8:92:70:85: 97:83:4c:a9:c7:b9:ad:2c:fc:06:27:f8:05:78:e6: 2e:83:b7:2f:68:d4:ac:0d:31:77:50:71:f8:8f:90: fa:36:fd:50:49:8d:b2:58:66:3d:09:5f:ce:3a:1f: c7:2e:5e:af:24:f4:d4:bc:72:5b:6f:ad:a6:e6:63: ce:3b:55:7d:45:c8:b2:70:e5:a6:86:6d:35:42:6a: 38:8b:7c:44:ba:90:ab:2d:e9:6c:65:06:a8:f6:24: ec:ef:b6:58:26:e5:4d:4b:30:22:b2:ff:6a:39:c6: 60:aa:bb:90:37:eb:09:4d:be:2c:a5:36:56:8a:50: 2d:41:25:b4:49:6f:0a:f9:fd:67:e5:84:e6:05:a0: d3:b2:74:4e:ce:33:fc:b8:ec:97:e8:fe:f9:ab:91: bf:44:5c:16:cb:bc:a1:90:2d:20:68:60:99:1f:9c: 64:67:ec:4a:82:4a:40:2f:d1:3f:cb:8e:b5:40:f9: 8e:ab:c2:22:bc:d6:01:67:aa:fe:58:ad:ef:34:3d: 59:92:8f:c7:c0:5b:83:12:2d:e0:50:ad:32:94:1d: 82:12:ac:94:a5:74:d9:3d:0d:de:d1:22:67:28:9e: 73:28:a4:86:15:6a:3e:7b:88:85:c6:27:2e:bc:27: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4B:6D:F4:B2:5B:EE:C0:C6:DC:FE:01:51:80:00:10:62:63:E8:89 X509v3 Authority Key Identifier: keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5d:48:3f:7c:b0:2c:96:91:4b:74:ed:be:93:f2:77:46:9e: 56:bd:72:11:a2:7f:7e:e8:7f:e2:37:b9:62:bb:f0:b4:10:a2: a7:ce:a7:d9:7e:04:4a:15:3b:2e:f2:7b:92:8c:c8:b6:96:3b: 5b:2a:27:ae:ef:82:f3:0f:ea:c9:74:18:e8:39:94:0b:32:1b: d1:1d:35:53:f4:5f:63:71:77:30:c3:d1:17:b7:e6:9a:e8:2e: 85:00:29:07:2e:0c:ae:f3:1d:6a:58:53:fc:23:2d:ba:d4:93: 00:21:1e:00:3d:2b:86:43:4c:8d:68:ef:3d:a0:a4:c4:f3:27: 02:77:19:f4:91:ef:cb:12:1d:5a:3a:8c:db:78:02:bb:38:39: 06:5d:f0:56:fc:0b:c7:b7:bb:09:90:08:63:87:92:53:29:ba: a5:28:1b:61:2c:ea:07:a8:a2:50:91:77:30:ed:6d:cd:91:b5: 0e:4d:40:55:81:99:86:a3:62:49:c8:64:72:9f:98:11:61:59: 21:07:c5:71:bc:17:fd:72:be:51:7a:af:6f:7a:13:1a:ec:6f: 04:c5:86:53:25:74:7e:17:a4:31:01:6a:ad:a4:b9:3a:02:ea: 4a:ef:b1:c7:25:03:34:4d:28:6c:cb:21:3f:9a:d1:8b:85:ab: dd:d1:6b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mu4PlTVFkDYZ7F0RKR06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0 Zjc0M2QwHhcNMjYwMTI2MDAwMTI0WhcNMjYwMTI3MDAwMTI0WjAzMTEwLwYDVQQD EyhlMjRiNmRmNGIyNWJlZWMwYzZkY2ZlMDE1MTgwMDAxMDYyNjNlODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQamCHZC+BCvciScIWXg0ypx7mt LPwGJ/gFeOYug7cvaNSsDTF3UHH4j5D6Nv1QSY2yWGY9CV/OOh/HLl6vJPTUvHJb b62m5mPOO1V9RciycOWmhm01Qmo4i3xEupCrLelsZQao9iTs77ZYJuVNSzAisv9q OcZgqruQN+sJTb4spTZWilAtQSW0SW8K+f1n5YTmBaDTsnROzjP8uOyX6P75q5G/ RFwWy7yhkC0gaGCZH5xkZ+xKgkpAL9E/y461QPmOq8IivNYBZ6r+WK3vND1Zko/H wFuDEi3gUK0ylB2CEqyUpXTZPQ3e0SJnKJ5zKKSGFWo+e4iFxicuvCco9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJLbfSyW+7Axtz+AVGAABBiY+iJMB8GA1UdIwQY MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt NWEyMDZlOGIxMzY5LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5 LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV1IP3yw LJaRS3TtvpPyd0aeVr1yEaJ/fuh/4je5YrvwtBCip86n2X4EShU7LvJ7kozItpY7 Wyonru+C8w/qyXQY6DmUCzIb0R01U/RfY3F3MMPRF7fmmuguhQApBy4MrvMdalhT /CMtutSTACEeAD0rhkNMjWjvPaCkxPMnAncZ9JHvyxIdWjqM23gCuzg5Bl3wVvwL x7e7CZAIY4eSUym6pSgbYSzqB6iiUJF3MO1tzZG1Dk1AVYGZhqNiSchkcp+YEWFZ IQfFcbwX/XK+UXqvb3oTGuxvBMWGUyV0fhekMQFqraS5OgLqSu+xxyUDNE0obMsh P5rRi4Wr3dFrvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:44 2026 by rpki-client