This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json) Hash identifier: Z/hqjN7AMrba8hBK2B1QGoC+Gk0H/oPSryPP9dFEhH0= Subject key identifier: D8:CE:10:74:26:89:98:82:C3:08:99:A9:88:BE:CB:87:F0:2B:81:18 Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76 Certificate serial: 019BF72C92B3EED07073D88372181414EBD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 22:00:51 +0000 Manifest this update: Sun 25 Jan 2026 22:00:51 +0000 Manifest next update: Mon 26 Jan 2026 22:00:51 +0000 Files and hashes: 1: 1bsriQWY4jSatQMxmY8Qxs1dbnk.roa (hash: dpKGUl9f27lorQFox2dicEed3HaPMPgfTGyDEbSeAn0=) 2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: 6sesIwQO291HnFRv/Co8anSXkQ6TvZCkke93u5dJIKM=) 3: sV-mYML_TKE38eTlgadihi7XoEg.roa (hash: DlzC9cilbThgBPbjJV0pjmCFEg1K/ZCcTUpF4AIBnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:92:b3:ee:d0:70:73:d8:83:72:18:14:14:eb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76 Validity Not Before: Jan 25 22:00:51 2026 GMT Not After : Jan 26 22:00:51 2026 GMT Subject: CN=d8ce107426899882c30899a988becb87f02b8118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:3e:25:03:aa:1c:ba:4e:bb:01:7c:24:28: 1d:1b:a7:19:d0:05:c5:b9:71:ff:6c:78:5f:7f:ef: 1f:3e:02:41:2f:e5:d2:1f:2e:95:af:f8:a2:7e:0c: 4f:eb:2c:42:4a:92:28:79:c8:ea:1c:bd:3d:ff:68: 29:d1:49:73:bb:4d:6f:f1:89:6c:b4:4a:ee:6c:df: 4d:a6:20:aa:b6:8e:5b:e5:06:f9:ea:ee:83:b6:e7: 2e:53:e1:4a:85:75:17:22:5c:fe:8e:92:fe:1c:6f: da:e3:b2:b3:92:44:7c:86:d0:4e:88:44:3f:62:7f: 4b:73:db:a1:65:58:fb:dc:28:d3:98:10:45:a0:38: 71:26:96:8d:81:f1:4d:54:89:d8:69:64:7e:c1:58: 06:19:f9:48:69:09:16:fa:fb:9c:d5:dd:d3:b8:33: 19:4b:95:70:85:8c:67:14:1d:3a:f6:43:11:e0:47: 32:99:3a:8d:c9:5d:8d:71:41:cd:e4:8b:8a:3e:3c: eb:c0:a7:ae:45:8f:b6:2c:2a:c2:a6:5b:98:c6:ee: d5:c5:35:58:41:0a:e6:50:44:6a:1b:6f:59:b8:8d: 34:0a:55:f4:5c:38:c6:df:ce:f5:c1:03:85:1a:0a: 98:42:87:3b:f5:70:d2:a2:96:e3:f3:24:25:2c:48: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CE:10:74:26:89:98:82:C3:08:99:A9:88:BE:CB:87:F0:2B:81:18 X509v3 Authority Key Identifier: keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:a2:ba:d1:38:5e:89:48:ef:19:88:1e:0c:32:3f:3e:c7: c0:d4:f5:b4:41:a8:7a:41:52:8f:cc:7d:b7:ee:a8:83:1b:6c: ac:14:71:7c:c8:4e:b5:70:c5:10:18:29:4b:28:9b:05:62:3f: 7d:69:f9:8b:e9:28:a6:3d:e8:f9:54:50:34:67:d7:91:3c:87: f5:a1:67:b0:9c:54:06:ab:71:4b:1a:4d:2f:99:dc:de:69:19: 71:c1:83:58:38:ed:34:43:f8:45:56:97:80:02:d5:3d:8f:21: 73:93:5b:b0:d0:d0:64:88:e2:0d:0f:3e:32:c6:79:e7:ce:c7: 67:f6:3b:e4:9f:7e:a4:7f:7c:cb:7d:84:39:79:d8:b6:b4:93: 21:de:76:0b:3a:b4:73:36:12:26:12:17:ec:c6:fd:3c:8e:da: e5:20:32:c0:56:12:06:b4:e7:e4:56:4c:2f:f7:26:c5:4d:6a: e0:f0:75:c7:68:a9:6c:4b:52:ec:2c:5a:a7:60:99:31:a7:05: 0a:09:2d:ef:92:92:26:9b:a0:bd:20:1a:7b:29:19:da:2b:1b: 1c:17:d0:23:25:32:58:2c:0a:47:c3:d3:c0:e2:03:52:63:ac: 95:77:33:bb:5c:4e:9b:e4:41:39:cd:1f:65:c0:98:d3:81:5a: bf:99:bd:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LJKz7tBwc9iDchgUFOvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj NTVjNzYwHhcNMjYwMTI1MjIwMDUxWhcNMjYwMTI2MjIwMDUxWjAzMTEwLwYDVQQD EyhkOGNlMTA3NDI2ODk5ODgyYzMwODk5YTk4OGJlY2I4N2YwMmI4MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTM+JQOqHLpOuwF8JCgdG6cZ0AXF uXH/bHhff+8fPgJBL+XSHy6Vr/iifgxP6yxCSpIoecjqHL09/2gp0Ulzu01v8Yls tErubN9NpiCqto5b5Qb56u6DtucuU+FKhXUXIlz+jpL+HG/a47KzkkR8htBOiEQ/ Yn9Lc9uhZVj73CjTmBBFoDhxJpaNgfFNVInYaWR+wVgGGflIaQkW+vuc1d3TuDMZ S5VwhYxnFB069kMR4EcymTqNyV2NcUHN5IuKPjzrwKeuRY+2LCrCpluYxu7VxTVY QQrmUERqG29ZuI00ClX0XDjG3871wQOFGgqYQoc79XDSopbj8yQlLEjWmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjOEHQmiZiCwwiZqYi+y4fwK4EYMB8GA1UdIwQY MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVqiutE4 XolI7xmIHgwyPz7HwNT1tEGoekFSj8x9t+6ogxtsrBRxfMhOtXDFEBgpSyibBWI/ fWn5i+kopj3o+VRQNGfXkTyH9aFnsJxUBqtxSxpNL5nc3mkZccGDWDjtNEP4RVaX gALVPY8hc5NbsNDQZIjiDQ8+MsZ5587HZ/Y75J9+pH98y32EOXnYtrSTId52Czq0 czYSJhIX7Mb9PI7a5SAywFYSBrTn5FZML/cmxU1q4PB1x2ipbEtS7Cxap2CZMacF Cgkt75KSJpugvSAaeykZ2isbHBfQIyUyWCwKR8PTwOIDUmOslXczu1xOm+RBOc0f ZcCY04Fav5m9xw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:15 2026 by rpki-client