This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json) Hash identifier: wNe95XOXVvTGonRUIQDdOpPpvzyDHsJD3atZFFksHQU= Subject key identifier: B6:EF:12:CF:49:F9:E6:D2:61:08:12:60:42:29:08:AB:27:06:8F:36 Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76 Certificate serial: 019BF91AEDF4EB343DB8E06A8E2D75C350E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:00:50 +0000 Manifest this update: Mon 26 Jan 2026 07:00:50 +0000 Manifest next update: Tue 27 Jan 2026 07:00:50 +0000 Files and hashes: 1: 1bsriQWY4jSatQMxmY8Qxs1dbnk.roa (hash: dpKGUl9f27lorQFox2dicEed3HaPMPgfTGyDEbSeAn0=) 2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: kySPmT/Srl3xTY/dBO8JZAbIxkJDVvbOKHd4/AUzm54=) 3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:ed:f4:eb:34:3d:b8:e0:6a:8e:2d:75:c3:50:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76 Validity Not Before: Jan 26 07:00:50 2026 GMT Not After : Jan 27 07:00:50 2026 GMT Subject: CN=b6ef12cf49f9e6d261081260422908ab27068f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:3c:77:fb:35:22:ac:c5:a7:d3:e1:a3:a7: df:0b:e6:22:09:6a:2c:71:05:e2:58:d8:03:b7:c9: 0e:f4:4a:47:07:0c:f1:cd:aa:53:16:30:a7:ae:99: 4c:79:9e:b9:06:9e:bf:78:dc:76:7a:03:07:47:e5: 3e:b0:de:bd:93:57:95:c3:24:b0:ef:7c:64:9a:62: 0a:c0:3d:a2:ca:32:6f:3f:c7:fd:01:bb:85:64:50: f5:a8:af:bb:5c:b0:26:1a:02:ad:f1:a2:db:27:8f: 86:4a:d7:80:a4:2c:51:6c:d7:86:86:82:1d:0b:da: d3:6d:bc:8d:7a:29:b3:ad:2b:49:fb:7c:53:78:f1: 43:3c:f5:af:78:f3:9e:37:40:5c:22:0b:49:6c:b2: 18:87:06:82:b5:fb:c2:fc:99:77:f0:ae:2d:d8:78: 5d:38:d6:29:53:19:00:cb:91:b1:d9:1d:13:49:d3: 1a:30:22:c5:6d:21:71:d4:01:66:26:c9:78:28:ac: c3:a2:71:df:09:61:18:b4:86:b8:35:6f:23:b5:b7: 56:de:15:98:e2:00:ef:41:0a:e5:83:04:98:4c:8d: aa:09:0b:15:b6:87:2e:85:9f:ef:3c:f1:07:53:2b: 7b:8c:7c:71:0b:41:b1:c3:fc:14:00:38:28:3c:96: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EF:12:CF:49:F9:E6:D2:61:08:12:60:42:29:08:AB:27:06:8F:36 X509v3 Authority Key Identifier: keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:11:f8:77:a2:7c:0c:cb:1a:0c:91:5e:a6:e7:8b:f4:16: e7:09:c9:91:0c:64:c9:0a:db:33:3a:d7:92:cb:2a:c6:20:99: 23:9a:1a:b9:0f:fe:1c:67:8e:51:49:63:92:a5:7b:db:15:c5: 4e:ee:27:bc:95:54:b3:1f:48:eb:5f:bd:ab:07:f3:21:e4:ec: c2:b5:9a:04:a7:11:f2:3a:27:96:b7:c2:ad:c4:92:d1:e6:50: 07:44:6f:1b:23:03:ce:b7:9c:39:15:0f:2d:ee:54:c6:2d:e0: bf:93:25:da:34:68:81:e5:0d:ed:f1:3c:c7:87:08:07:ca:33: 34:25:62:d1:8e:40:0f:a1:b7:bf:69:98:27:52:92:21:05:d9: bb:77:ff:1e:a6:dd:d0:9a:39:2e:66:da:8f:c1:47:0e:bd:4d: b9:ba:b3:55:be:95:58:1c:9a:a3:68:63:92:e3:68:87:e5:d4: 53:0e:a9:86:0b:7f:1d:b3:1c:5e:45:d7:2c:27:d4:92:b1:c7: c2:11:46:b6:a5:6d:bb:b2:f8:c4:1c:c4:79:91:65:cd:55:48: bf:c0:e0:f1:a3:35:4a:56:32:48:8a:65:26:e6:d2:5c:0a:c7: 37:4f:0d:21:94:ce:a1:a6:cf:7d:da:dd:66:8c:4b:6a:19:51: b0:5b:8f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gu306zQ9uOBqji11w1DmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj NTVjNzYwHhcNMjYwMTI2MDcwMDUwWhcNMjYwMTI3MDcwMDUwWjAzMTEwLwYDVQQD EyhiNmVmMTJjZjQ5ZjllNmQyNjEwODEyNjA0MjI5MDhhYjI3MDY4ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo48d/s1IqzFp9Pho6ffC+YiCWos cQXiWNgDt8kO9EpHBwzxzapTFjCnrplMeZ65Bp6/eNx2egMHR+U+sN69k1eVwySw 73xkmmIKwD2iyjJvP8f9AbuFZFD1qK+7XLAmGgKt8aLbJ4+GSteApCxRbNeGhoId C9rTbbyNeimzrStJ+3xTePFDPPWvePOeN0BcIgtJbLIYhwaCtfvC/Jl38K4t2Hhd ONYpUxkAy5Gx2R0TSdMaMCLFbSFx1AFmJsl4KKzDonHfCWEYtIa4NW8jtbdW3hWY 4gDvQQrlgwSYTI2qCQsVtocuhZ/vPPEHUyt7jHxxC0Gxw/wUADgoPJa49wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbvEs9J+ebSYQgSYEIpCKsnBo82MB8GA1UdIwQY MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy8R+Hei fAzLGgyRXqbni/QW5wnJkQxkyQrbMzrXkssqxiCZI5oauQ/+HGeOUUljkqV72xXF Tu4nvJVUsx9I61+9qwfzIeTswrWaBKcR8jonlrfCrcSS0eZQB0RvGyMDzrecORUP Le5Uxi3gv5Ml2jRogeUN7fE8x4cIB8ozNCVi0Y5AD6G3v2mYJ1KSIQXZu3f/Hqbd 0Jo5Lmbaj8FHDr1NubqzVb6VWByao2hjkuNoh+XUUw6phgt/HbMcXkXXLCfUkrHH whFGtqVtu7L4xBzEeZFlzVVIv8Dg8aM1SlYySIplJubSXArHN08NIZTOoabPfdrd ZoxLahlRsFuPgw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:25 2026 by rpki-client