This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json) Hash identifier: OKRO+nS7a0ht2HFlnBfXWXRAbKSXX5+vgUGA2PTa7Yo= Subject key identifier: 24:FB:E1:87:F8:0D:2C:B4:5B:7D:9A:ED:80:B1:37:D0:50:4D:62:7E Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Certificate serial: 019BF8AD08B8194C66CD4B5FFE2AA2691BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft Manifest number: 1396 Signing time: Mon 26 Jan 2026 05:00:48 +0000 Manifest this update: Mon 26 Jan 2026 05:00:48 +0000 Manifest next update: Tue 27 Jan 2026 05:00:48 +0000 Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=) 2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: 7Q4pzusR3kfjHdcJXmkjN/TQUPPZUh2Fx6U1TdCdOpY=) 3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:08:b8:19:4c:66:cd:4b:5f:fe:2a:a2:69:1b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Validity Not Before: Jan 26 05:00:48 2026 GMT Not After : Jan 27 05:00:48 2026 GMT Subject: CN=24fbe187f80d2cb45b7d9aed80b137d0504d627e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:2c:42:ae:15:c2:5e:af:5c:b8:80:05:d1: e3:1e:4d:91:e8:20:80:5d:34:63:e1:ed:e7:5b:ce: 92:fd:fc:84:18:15:b4:1d:e0:fa:ce:3a:df:01:7e: 75:b2:13:88:82:aa:12:5e:8a:df:b5:a3:90:fd:b3: ef:ce:79:a9:5c:16:5b:27:4c:a5:e3:c2:4d:ed:46: 1c:02:e4:1e:cb:9b:01:e2:8a:e5:60:19:98:38:00: 53:84:f0:2b:de:6d:db:6d:6f:35:b2:2f:64:07:95: 91:c5:83:97:3f:f3:47:50:f8:b3:36:f3:e9:ac:f3: 93:ff:24:1d:e0:ff:62:9d:7b:ac:69:93:7b:31:71: 4b:12:52:12:25:36:c6:e9:10:ba:40:1f:f9:e4:a5: 6d:70:e0:7c:67:ac:d4:de:99:17:d5:48:28:05:4b: c2:be:c2:1f:85:fa:4e:5f:30:2a:51:40:f6:8f:38: 39:fc:25:c2:b5:6b:82:03:e1:90:91:e8:7b:18:25: 84:a3:3d:65:dc:c2:0a:79:b0:7d:96:32:7b:c9:02: f2:10:fc:b0:ce:a0:aa:17:0b:cb:35:b7:19:f8:40: ce:9c:d7:a8:1c:c9:5d:04:89:29:65:a8:e8:72:57: ff:7c:61:6c:44:6c:9c:8f:71:ff:86:36:0f:da:95: d2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FB:E1:87:F8:0D:2C:B4:5B:7D:9A:ED:80:B1:37:D0:50:4D:62:7E X509v3 Authority Key Identifier: keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4f:46:ca:8f:b3:54:d6:e3:1a:67:f1:40:86:ae:71:e4:9b: 51:90:95:f8:d6:33:96:f1:5e:2f:7e:c0:e9:88:80:c6:b5:97: 36:ff:97:ca:99:21:8c:a0:a8:1a:97:5f:30:f0:be:df:21:1b: be:12:40:11:ba:f9:08:1c:e3:1b:bf:b8:14:1b:71:02:ea:eb: 15:ba:71:9e:18:53:05:ed:cf:f6:3f:bb:e0:0a:6d:cf:4e:85: eb:9a:b2:dc:c8:d7:c1:2b:1c:7d:8d:7a:bf:98:7c:64:f0:e8: cf:50:3f:1b:fb:4c:15:55:aa:b7:3a:10:fa:56:8b:1f:e3:20: a0:88:db:0c:80:8f:e9:9e:86:3a:75:da:6c:08:0f:d1:28:bd: 26:3d:57:84:77:d8:29:d4:db:57:74:45:28:2c:e7:fb:09:16: 3e:39:39:52:2e:75:ca:34:48:88:0a:e7:ac:b7:a9:16:0d:69: 7d:7a:fb:62:7d:2a:59:94:8c:9a:ed:86:39:38:20:b1:8c:e9: 29:ef:56:29:f4:9b:c7:30:15:70:fc:26:7f:e7:d5:3c:8b:96: 6d:29:f4:a0:ce:22:2e:e8:2d:6e:1b:44:5a:d3:54:16:eb:37: ab:91:79:97:7b:75:8f:d0:d9:19:36:2f:d7:d0:94:fa:9c:66: 01:2a:2c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rQi4GUxmzUtf/iqiaRuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy NTY5ZDMwHhcNMjYwMTI2MDUwMDQ4WhcNMjYwMTI3MDUwMDQ4WjAzMTEwLwYDVQQD EygyNGZiZTE4N2Y4MGQyY2I0NWI3ZDlhZWQ4MGIxMzdkMDUwNGQ2MjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5QsQq4Vwl6vXLiABdHjHk2R6CCA XTRj4e3nW86S/fyEGBW0HeD6zjrfAX51shOIgqoSXorftaOQ/bPvznmpXBZbJ0yl 48JN7UYcAuQey5sB4orlYBmYOABThPAr3m3bbW81si9kB5WRxYOXP/NHUPizNvPp rPOT/yQd4P9inXusaZN7MXFLElISJTbG6RC6QB/55KVtcOB8Z6zU3pkX1UgoBUvC vsIfhfpOXzAqUUD2jzg5/CXCtWuCA+GQkeh7GCWEoz1l3MIKebB9ljJ7yQLyEPyw zqCqFwvLNbcZ+EDOnNeoHMldBIkpZajoclf/fGFsRGycj3H/hjYP2pXSOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT74Yf4DSy0W32a7YCxN9BQTWJ+MB8GA1UdIwQY MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct MTM4Yzg0MTdhZTkzLzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGk9Gyo+z VNbjGmfxQIauceSbUZCV+NYzlvFeL37A6YiAxrWXNv+XypkhjKCoGpdfMPC+3yEb vhJAEbr5CBzjG7+4FBtxAurrFbpxnhhTBe3P9j+74Aptz06F65qy3MjXwSscfY16 v5h8ZPDoz1A/G/tMFVWqtzoQ+laLH+MgoIjbDICP6Z6GOnXabAgP0Si9Jj1XhHfY KdTbV3RFKCzn+wkWPjk5Ui51yjRIiArnrLepFg1pfXr7Yn0qWZSMmu2GOTggsYzp Ke9WKfSbxzAVcPwmf+fVPIuWbSn0oM4iLugtbhtEWtNUFus3q5F5l3t1j9DZGTYv 19CU+pxmASosHA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:28 2026 by rpki-client