This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json) Hash identifier: pcB+1QFrWoBY8CnKja5iucQPPBD01eM+x9M6aoLIg7U= Subject key identifier: 27:D8:CB:4D:A0:78:71:F7:28:39:E9:5E:61:BA:37:36:24:27:FE:04 Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Certificate serial: 019BF763C2616C1DC0D816E3DF8B7471E333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft Manifest number: 1333 Signing time: Sun 25 Jan 2026 23:01:08 +0000 Manifest this update: Sun 25 Jan 2026 23:01:08 +0000 Manifest next update: Mon 26 Jan 2026 23:01:08 +0000 Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: bYXSWsLSzM2T35b/amUj1rbUZOZwVCxgT/YNdp6V/kc=) 2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=) 3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:c2:61:6c:1d:c0:d8:16:e3:df:8b:74:71:e3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Validity Not Before: Jan 25 23:01:08 2026 GMT Not After : Jan 26 23:01:08 2026 GMT Subject: CN=27d8cb4da07871f72839e95e61ba37362427fe04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:7a:de:e1:ee:95:32:23:1f:b6:53:de:31: 55:77:be:f8:c9:50:ed:55:6a:42:90:cd:f7:31:22: 91:71:24:ec:56:df:68:4f:4e:d3:9e:29:e6:67:ea: 20:d7:81:ab:53:4e:e2:2c:2f:73:d1:fc:0f:05:a5: 1d:a4:91:95:a1:3e:60:b9:ba:e8:14:f9:2c:a1:89: e4:1c:f0:c6:f1:43:2a:a0:b5:4e:d7:e4:6f:68:2d: 6c:14:6b:fd:07:e5:42:02:b0:fa:ac:f5:39:43:df: 39:c2:0b:89:77:c8:bd:eb:9b:f2:e1:b6:f0:13:70: 4b:82:ea:79:b8:c4:5a:21:53:2d:9a:ff:dd:12:aa: 2c:5a:f0:ec:37:5b:34:3b:02:0f:fe:cc:19:5d:d2: a3:f2:22:73:a3:f5:10:da:eb:7c:7b:55:35:01:be: 3d:d5:92:8f:7e:eb:c4:20:76:72:38:e3:98:59:ea: 5c:4f:26:81:e5:05:b6:db:96:38:ab:e7:2a:ee:48: 68:37:9d:43:62:47:e4:bd:90:1e:94:c4:25:92:9e: f5:26:e2:47:70:a1:ae:37:8e:e7:51:5a:ad:f5:7c: 38:c0:a8:fb:7a:47:e4:e6:4d:e5:b7:a3:49:6d:bd: 6a:16:f3:cc:fe:bb:94:71:78:1d:45:5c:a4:65:5a: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:CB:4D:A0:78:71:F7:28:39:E9:5E:61:BA:37:36:24:27:FE:04 X509v3 Authority Key Identifier: keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:11:b4:ac:98:c5:8c:1b:1a:94:30:7a:b3:a6:2a:b1:0e:d3: 13:39:11:e9:d4:50:0e:b3:37:97:f1:71:48:b3:77:c8:93:22: f5:eb:34:e2:6f:ae:15:37:de:03:7a:11:59:17:c1:a4:de:e7: 00:c6:85:74:bc:06:12:80:27:f8:f7:1a:27:09:c4:ab:1e:d8: 34:ea:4b:7f:7a:79:11:9b:14:a6:01:bc:f5:48:3f:ce:6e:b9: b4:7d:0d:55:5a:ef:bf:2c:74:6b:dc:e9:11:fc:d8:7b:a7:c0: 9f:4e:65:fe:95:c0:ab:c4:27:33:77:e6:00:eb:bc:9e:2f:09: 5e:3b:05:31:8a:3f:93:5c:fa:5b:57:99:6b:c4:cc:f8:86:8e: 1d:0d:e8:dc:a7:96:27:2e:aa:5d:32:5d:5a:77:ec:db:a6:04: 39:a4:1d:6b:ca:7b:b3:de:04:a6:86:57:7b:63:ae:a8:6f:4c: 21:1b:f2:66:8d:9e:9d:fc:6d:89:0a:46:11:29:bf:6d:87:89: da:4b:3b:ef:71:1d:a3:6e:f2:dc:3c:cc:c0:18:7b:b7:2d:99: 48:10:cb:a2:42:81:41:02:2a:88:99:db:c0:d6:f2:4e:7e:ba: 32:53:21:06:77:e5:ee:33:c1:df:e1:d3:cf:00:96:5f:2a:d8: 03:ef:f9:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y8JhbB3A2Bbj34t0ceMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5 ODNmNWMwHhcNMjYwMTI1MjMwMTA4WhcNMjYwMTI2MjMwMTA4WjAzMTEwLwYDVQQD EygyN2Q4Y2I0ZGEwNzg3MWY3MjgzOWU5NWU2MWJhMzczNjI0MjdmZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76F63uHulTIjH7ZT3jFVd774yVDt VWpCkM33MSKRcSTsVt9oT07TninmZ+og14GrU07iLC9z0fwPBaUdpJGVoT5gubro FPksoYnkHPDG8UMqoLVO1+RvaC1sFGv9B+VCArD6rPU5Q985wguJd8i965vy4bbw E3BLgup5uMRaIVMtmv/dEqosWvDsN1s0OwIP/swZXdKj8iJzo/UQ2ut8e1U1Ab49 1ZKPfuvEIHZyOOOYWepcTyaB5QW225Y4q+cq7khoN51DYkfkvZAelMQlkp71JuJH cKGuN47nUVqt9Xw4wKj7ekfk5k3lt6NJbb1qFvPM/ruUcXgdRVykZVou3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfYy02geHH3KDnpXmG6NzYkJ/4EMB8GA1UdIwQY MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBG0rJjF jBsalDB6s6YqsQ7TEzkR6dRQDrM3l/FxSLN3yJMi9es04m+uFTfeA3oRWRfBpN7n AMaFdLwGEoAn+PcaJwnEqx7YNOpLf3p5EZsUpgG89Ug/zm65tH0NVVrvvyx0a9zp EfzYe6fAn05l/pXAq8QnM3fmAOu8ni8JXjsFMYo/k1z6W1eZa8TM+IaOHQ3o3KeW Jy6qXTJdWnfs26YEOaQda8p7s94EpoZXe2OuqG9MIRvyZo2enfxtiQpGESm/bYeJ 2ks773Edo27y3DzMwBh7ty2ZSBDLokKBQQIqiJnbwNbyTn66MlMhBnfl7jPB3+HT zwCWXyrYA+/5PA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:56 2026 by rpki-client