This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json) Hash identifier: kgEMDgLuIppf5HWsoj5zEbkitqn10J6eBruTkvGDbQs= Subject key identifier: FF:4E:44:A0:B4:92:AA:2D:07:E9:70:0C:E6:3F:01:7B:41:8C:17:A9 Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Certificate serial: 019BF1CF7466A403D453CECF0D431D985080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft Manifest number: 17EE Signing time: Sat 24 Jan 2026 21:01:03 +0000 Manifest this update: Sat 24 Jan 2026 21:01:03 +0000 Manifest next update: Sun 25 Jan 2026 21:01:03 +0000 Files and hashes: 1: HxA8indcAYi8lBDTHZnwWgbkAio.roa (hash: em1TlDQMm/m+whiE9c240Qp5U+ubPa/+m3LSAa1d6LI=) 2: _AgXfmrENJRGa8SUzw8r4QbpeFc.roa (hash: 5DSjA+45VSfY58OSfrhbacz2KkNvODMfoUqLbPQQxis=) 3: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: aLBhoHUXIRpzJZ+Dl9GAzyQ/rbyoz9BdaD8JS82NZSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:74:66:a4:03:d4:53:ce:cf:0d:43:1d:98:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Validity Not Before: Jan 24 21:01:03 2026 GMT Not After : Jan 25 21:01:03 2026 GMT Subject: CN=ff4e44a0b492aa2d07e9700ce63f017b418c17a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:a2:93:d2:38:6b:8d:25:c3:c8:8c:bf:70: 99:da:9c:1d:47:82:48:99:e9:01:9e:4b:b7:54:a8: a1:25:1e:c9:06:ec:df:6c:70:5e:82:9e:ea:32:66: da:49:5b:a6:69:e1:75:5f:78:a7:16:aa:ac:22:1a: 9c:b5:4a:ac:81:99:e4:92:0f:5a:ee:76:51:74:4d: 5e:ad:1b:9e:fe:39:64:20:95:88:da:8c:1d:3a:cd: 2f:44:a9:8e:15:a1:5c:10:0b:7d:bb:87:63:83:ac: b3:62:f2:6a:30:cb:35:19:33:20:18:fd:2e:cb:9b: a7:3d:3e:e5:f4:6d:0d:09:62:66:08:ba:94:16:e7: 39:d8:e5:91:00:c4:1b:46:0e:80:45:5e:25:01:ce: c3:b5:00:94:8b:a8:84:01:26:23:dd:9b:6a:c2:c4: f5:1d:b2:05:72:cf:f2:67:c5:7c:43:80:84:77:09: bc:65:c8:39:c6:9e:54:38:bc:ea:f8:21:10:97:45: 7e:4b:c4:93:f0:07:dd:3f:4a:2a:fa:19:0d:16:a0: 5c:c6:5c:d4:43:67:8d:6b:d5:42:0c:f6:1e:2a:99: 6e:7d:8d:41:40:49:fb:b9:a9:00:c3:cd:7c:33:2f: b9:04:44:3b:a8:54:55:f6:bd:56:30:5e:68:ee:f8: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4E:44:A0:B4:92:AA:2D:07:E9:70:0C:E6:3F:01:7B:41:8C:17:A9 X509v3 Authority Key Identifier: keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:f4:34:74:0a:f7:f5:1f:f1:af:d5:13:eb:96:b9:28:db: 26:3a:a5:77:38:a8:fc:ef:5e:59:73:f8:b1:b0:af:44:ca:e2: 5c:77:d3:d4:c4:b9:10:59:dd:df:d7:c4:6f:8c:43:77:e0:c9: 5d:7e:d3:32:57:72:49:1d:d3:60:f8:89:89:28:f6:95:27:b2: bd:32:d3:d5:3b:5d:5a:58:4a:c1:6d:7e:f8:87:c4:f1:4d:e0: d9:0c:b9:9d:66:78:b7:98:62:a0:e6:82:4c:f3:eb:f3:d7:2a: 62:03:db:3d:4a:8b:91:45:45:3a:7f:6f:b0:28:4e:e3:5f:ce: f4:6d:e1:49:b8:8f:2c:c1:91:e4:c9:2b:97:e3:f6:6b:32:30: 52:89:3f:b5:2b:0b:dc:5c:0a:69:71:8a:0f:f9:e5:9c:04:ed: 69:2f:a0:a2:73:3f:c7:ab:5b:10:7e:96:a5:7e:58:b8:98:ed: d5:db:32:6a:ec:78:32:3b:f4:27:e2:3f:f3:c4:e5:77:c8:07: a0:15:63:e0:fa:34:2c:23:4d:c9:10:21:87:28:0c:e7:2f:4e: 98:f4:e3:b7:4b:ee:d4:8e:ec:b7:e6:c1:e7:f4:e2:26:06:a3: 9e:c3:b0:68:36:57:8d:67:6e:4e:8c:df:db:b0:0d:b5:ef:27: bc:6b:14:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz3RmpAPUU87PDUMdmFCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh ZmM0NjEwHhcNMjYwMTI0MjEwMTAzWhcNMjYwMTI1MjEwMTAzWjAzMTEwLwYDVQQD EyhmZjRlNDRhMGI0OTJhYTJkMDdlOTcwMGNlNjNmMDE3YjQxOGMxN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L2ik9I4a40lw8iMv3CZ2pwdR4JI mekBnku3VKihJR7JBuzfbHBegp7qMmbaSVumaeF1X3inFqqsIhqctUqsgZnkkg9a 7nZRdE1erRue/jlkIJWI2owdOs0vRKmOFaFcEAt9u4djg6yzYvJqMMs1GTMgGP0u y5unPT7l9G0NCWJmCLqUFuc52OWRAMQbRg6ARV4lAc7DtQCUi6iEASYj3ZtqwsT1 HbIFcs/yZ8V8Q4CEdwm8Zcg5xp5UOLzq+CEQl0V+S8ST8AfdP0oq+hkNFqBcxlzU Q2eNa9VCDPYeKplufY1BQEn7uakAw818My+5BEQ7qFRV9r1WMF5o7vjWEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9ORKC0kqotB+lwDOY/AXtBjBepMB8GA1UdIwQY MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+P0NHQK 9/Uf8a/VE+uWuSjbJjqldzio/O9eWXP4sbCvRMriXHfT1MS5EFnd39fEb4xDd+DJ XX7TMldySR3TYPiJiSj2lSeyvTLT1TtdWlhKwW1++IfE8U3g2Qy5nWZ4t5hioOaC TPPr89cqYgPbPUqLkUVFOn9vsChO41/O9G3hSbiPLMGR5Mkrl+P2azIwUok/tSsL 3FwKaXGKD/nlnATtaS+gonM/x6tbEH6WpX5YuJjt1dsyaux4Mjv0J+I/88Tld8gH oBVj4Po0LCNNyRAhhygM5y9OmPTjt0vu1I7st+bB5/TiJgajnsOwaDZXjWduTozf 27ANte8nvGsUlg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:50 2026 by rpki-client