This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json) Hash identifier: 57OggYQpmsDqYvNsrV6n8L/BnlkWtN7OvkN/hFmAnZU= Subject key identifier: 3A:B7:90:D5:36:9C:61:FB:40:A4:DB:43:CE:EA:A1:91:6E:4A:58:7B Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Certificate serial: 019BF7D226584DAB32C2F61E753CBE485ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 01:01:43 +0000 Manifest this update: Mon 26 Jan 2026 01:01:43 +0000 Manifest next update: Tue 27 Jan 2026 01:01:43 +0000 Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: hNxguXt3FePFt6P7WXGx9Jl/+Hm+ykrh701fRCuFGkI=) 2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:26:58:4d:ab:32:c2:f6:1e:75:3c:be:48:5a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Validity Not Before: Jan 26 01:01:43 2026 GMT Not After : Jan 27 01:01:43 2026 GMT Subject: CN=3ab790d5369c61fb40a4db43ceeaa1916e4a587b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:e6:d6:b2:4a:6e:b2:a5:fc:46:58:95:1b: e1:66:71:04:8f:97:d6:e2:7e:98:79:b2:c6:4e:04: 65:f4:df:3e:42:73:58:42:42:24:7a:c9:fa:e5:e9: fd:5c:fd:b5:73:50:ae:8e:26:bc:9d:d9:07:c0:c8: 9c:a8:e8:31:ba:26:68:5f:2f:86:b2:ff:18:74:27: c5:03:84:bf:3e:dd:b3:8f:9e:8d:8b:0b:a1:2d:e9: a8:4e:2e:a1:fa:77:e7:42:87:15:63:88:91:22:60: f0:51:18:64:5e:59:56:da:92:13:38:21:29:1e:a1: ff:c0:44:1e:3b:94:1d:98:fd:2e:be:83:88:27:96: c9:20:90:8f:ab:3c:32:87:ed:03:5f:9d:04:53:2b: 2e:ba:a2:7b:31:23:c9:5d:bd:30:75:11:62:98:37: 00:af:1c:7b:6b:fe:26:7e:46:6b:94:7b:38:42:40: a8:e6:2f:5b:53:1a:29:84:23:5a:04:3f:99:d1:d9: c7:c6:cd:52:74:51:c9:e6:66:01:79:26:9e:1b:8c: 56:98:96:21:2d:ab:c8:9a:d3:b7:f5:e3:3a:fb:75: ea:5e:19:ab:fc:d0:20:fa:ae:0e:07:c3:04:6b:5a: 61:84:53:6a:52:84:b7:7b:e7:ff:1d:d9:7a:62:cc: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:90:D5:36:9C:61:FB:40:A4:DB:43:CE:EA:A1:91:6E:4A:58:7B X509v3 Authority Key Identifier: keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:40:bd:67:8b:d7:71:46:18:52:6f:b5:82:52:0f:2b:9b:eb: 66:49:af:3f:db:f4:c7:29:73:43:c3:0d:3d:1c:c5:47:7e:bf: 77:03:d3:00:15:12:ab:38:46:a1:81:c7:3b:fa:9d:71:f8:09: 72:29:c3:f9:a6:db:bc:62:51:a5:27:64:9a:c5:24:3a:e6:5f: 68:79:6c:c2:1b:f6:e3:f8:3a:72:d7:24:0c:9a:4c:b5:94:14: 98:68:a9:ba:f0:60:fa:3a:7e:62:76:8d:d5:35:d2:18:11:5f: b3:83:35:4e:f6:a9:83:46:e4:f8:fe:10:35:a1:ad:c9:de:58: 49:8c:ed:11:52:97:58:07:87:7a:a8:88:fe:bb:ff:c9:72:e7: ed:18:f4:a5:84:e2:8d:6e:de:0b:48:8a:3a:ae:87:5d:42:9d: ab:b8:af:19:d6:dc:51:5a:f9:d5:63:d6:f8:91:ce:71:7a:5d: 66:d3:4f:2a:f2:53:67:cc:6f:08:5e:29:fc:32:d3:64:b6:74: a1:a6:ee:1f:c8:4f:1f:a4:1b:83:95:db:49:e9:ef:ee:7b:ec: eb:f4:d6:a7:82:fc:99:7a:98:66:14:b2:ef:cf:a3:e8:fa:ae: 17:c2:af:f6:13:4c:58:9b:ea:b2:1c:ec:fc:72:80:b0:9d:98: aa:da:da:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30iZYTasywvYedTy+SFq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl MGY2NDEwHhcNMjYwMTI2MDEwMTQzWhcNMjYwMTI3MDEwMTQzWjAzMTEwLwYDVQQD EygzYWI3OTBkNTM2OWM2MWZiNDBhNGRiNDNjZWVhYTE5MTZlNGE1ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI3m1rJKbrKl/EZYlRvhZnEEj5fW 4n6YebLGTgRl9N8+QnNYQkIkesn65en9XP21c1Cujia8ndkHwMicqOgxuiZoXy+G sv8YdCfFA4S/Pt2zj56NiwuhLemoTi6h+nfnQocVY4iRImDwURhkXllW2pITOCEp HqH/wEQeO5QdmP0uvoOIJ5bJIJCPqzwyh+0DX50EUysuuqJ7MSPJXb0wdRFimDcA rxx7a/4mfkZrlHs4QkCo5i9bUxophCNaBD+Z0dnHxs1SdFHJ5mYBeSaeG4xWmJYh LavImtO39eM6+3XqXhmr/NAg+q4OB8MEa1phhFNqUoS3e+f/Hdl6Ysxw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq3kNU2nGH7QKTbQ87qoZFuSlh7MB8GA1UdIwQY MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt ZWY0NmRkZWVhYmY0LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0 LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUC9Z4vX cUYYUm+1glIPK5vrZkmvP9v0xylzQ8MNPRzFR36/dwPTABUSqzhGoYHHO/qdcfgJ cinD+abbvGJRpSdkmsUkOuZfaHlswhv24/g6ctckDJpMtZQUmGipuvBg+jp+YnaN 1TXSGBFfs4M1Tvapg0bk+P4QNaGtyd5YSYztEVKXWAeHeqiI/rv/yXLn7Rj0pYTi jW7eC0iKOq6HXUKdq7ivGdbcUVr51WPW+JHOcXpdZtNPKvJTZ8xvCF4p/DLTZLZ0 oabuH8hPH6Qbg5XbSenv7nvs6/TWp4L8mXqYZhSy78+j6PquF8Kv9hNMWJvqshzs /HKAsJ2Yqtra2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 06:39:07 2026 by rpki-client