This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json) Hash identifier: bL3sAK2qKdkI1Co7R5bgGjmOKcBIL9NRXm83BsSHctY= Subject key identifier: 43:5E:D8:09:48:31:66:9B:68:B1:A4:47:98:43:5E:75:7D:0F:2F:DB Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Certificate serial: 019BF79A26CB082FBFC2A99C951172E5B99E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft Manifest number: 1751 Signing time: Mon 26 Jan 2026 00:00:33 +0000 Manifest this update: Mon 26 Jan 2026 00:00:33 +0000 Manifest next update: Tue 27 Jan 2026 00:00:33 +0000 Files and hashes: 1: 2lc1GZ3gGSQDIoRqW1OdY8NXkpE.roa (hash: yHk/HPXIpPTEO2mErbNUbyRInwqWmQhiOnI/WtPGa8o=) 2: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: JG9vv98H2xMPdUpzw/KFw2LCPwNrog5LuMna/GgWcEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:26:cb:08:2f:bf:c2:a9:9c:95:11:72:e5:b9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c Validity Not Before: Jan 26 00:00:33 2026 GMT Not After : Jan 27 00:00:33 2026 GMT Subject: CN=435ed8094831669b68b1a44798435e757d0f2fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:63:ce:26:c2:0f:64:68:73:fc:c7:5a:1a: 1e:cf:07:9d:a5:fc:ce:7f:eb:19:1c:79:dc:05:f2: 2c:20:2d:46:cb:4e:84:3e:6e:25:9f:f5:3d:b0:e4: d0:dc:82:ee:0b:d9:8d:6a:b0:29:59:2d:c5:05:a6: b9:d3:1e:e0:73:4f:47:ac:2f:69:4d:24:95:0b:b2: 2d:92:56:b3:9a:d4:ec:ec:a7:c7:ac:e8:ac:f9:8e: ca:21:cc:a7:65:0f:05:9c:db:ec:d6:e6:1a:71:01: 27:8c:33:4a:39:db:ab:c3:ae:ee:34:a7:a8:3e:1c: 7e:4b:5d:04:ea:e6:71:39:88:cf:8b:a2:07:e7:0d: b7:53:07:af:75:4a:4e:30:ad:30:09:9b:25:a0:45: a9:04:e1:4c:d0:ab:41:19:f0:6c:99:5d:cb:e7:48: 71:f8:72:c4:05:81:ab:b6:c8:f8:36:7f:8f:7a:77: a1:72:99:0d:5d:17:92:cb:78:c6:58:90:6a:24:da: ae:cd:1d:ed:70:af:87:43:a4:53:7a:53:83:25:d4: a0:30:9d:f7:89:8c:30:cc:97:30:0a:86:d4:e8:4e: c6:77:a8:75:81:4a:f1:65:0a:83:f5:84:8b:86:7f: c7:9c:c5:ba:36:2e:a9:3d:bd:bd:9b:6e:bc:a6:4d: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5E:D8:09:48:31:66:9B:68:B1:A4:47:98:43:5E:75:7D:0F:2F:DB X509v3 Authority Key Identifier: keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d9:f3:ae:b4:89:76:fb:a9:d1:56:17:1a:ec:0e:72:d4:cd: 69:f1:71:f4:e9:2e:f9:d1:cf:c2:19:8a:d2:4e:5c:6b:17:d1: 90:61:4b:42:d6:b5:7f:d5:45:84:8c:96:13:16:dd:66:45:ed: a9:87:8a:5e:b7:e5:73:20:c9:5f:9a:1a:dd:00:86:e5:5d:a6: 6d:c2:f9:69:f8:76:f8:cc:db:9d:30:8d:e3:4d:ab:77:61:24: a7:83:a7:4f:ef:88:b1:e0:af:44:7e:be:89:51:de:42:f9:c2: 1d:7f:eb:45:89:8e:95:89:8f:6f:94:db:ec:d0:f5:30:a7:64: 2b:49:82:ee:57:52:c6:37:57:d4:10:33:6d:b2:c3:ec:d2:7d: 74:e2:21:76:7b:a8:18:d0:ba:1e:e4:1d:f8:cc:98:c6:bd:fb: 44:ff:1d:1a:e0:2d:53:12:91:89:5d:98:1c:ec:05:d0:ff:01: ea:0a:1f:f2:d6:3c:42:28:c8:df:e9:03:83:d3:eb:65:b1:cb: 9a:7f:17:86:94:00:77:1d:2a:30:5c:60:22:87:ce:ff:94:b1: 15:87:37:5d:ec:37:60:a8:32:ec:f6:9c:31:13:72:0f:5e:51: dc:d5:14:73:e2:33:53:a3:92:b5:94:10:3e:d5:75:8a:10:9e: 08:31:1e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mibLCC+/wqmclRFy5bmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2ExYTVjZmY1MmViZTJmMjJiNjY5ZGNjMmM5MDI3Y2Vh MGI4MWMwHhcNMjYwMTI2MDAwMDMzWhcNMjYwMTI3MDAwMDMzWjAzMTEwLwYDVQQD Eyg0MzVlZDgwOTQ4MzE2NjliNjhiMWE0NDc5ODQzNWU3NTdkMGYyZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ljzibCD2Roc/zHWhoezwedpfzO f+sZHHncBfIsIC1Gy06EPm4ln/U9sOTQ3ILuC9mNarApWS3FBaa50x7gc09HrC9p TSSVC7ItklazmtTs7KfHrOis+Y7KIcynZQ8FnNvs1uYacQEnjDNKOdurw67uNKeo Phx+S10E6uZxOYjPi6IH5w23UwevdUpOMK0wCZsloEWpBOFM0KtBGfBsmV3L50hx +HLEBYGrtsj4Nn+PenehcpkNXReSy3jGWJBqJNquzR3tcK+HQ6RTelODJdSgMJ33 iYwwzJcwCobU6E7Gd6h1gUrxZQqD9YSLhn/HnMW6Ni6pPb29m268pk0AbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENe2AlIMWabaLGkR5hDXnV9Dy/bMB8GA1UdIwQY MBaAFHLKGlz/Uuvi8itmncwskCfOoLgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYt NmE0MTRmMTg0NzA2LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xMmFjMGUtNTQ3NC00NWQ1LThkZWYtNmE0MTRmMTg0NzA2 LzEvY3NvYVhQOVM2LUx5SzJhZHpDeVFKODZndUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtnzrrSJ dvup0VYXGuwOctTNafFx9Oku+dHPwhmK0k5caxfRkGFLQta1f9VFhIyWExbdZkXt qYeKXrflcyDJX5oa3QCG5V2mbcL5afh2+MzbnTCN402rd2Ekp4OnT++IseCvRH6+ iVHeQvnCHX/rRYmOlYmPb5Tb7ND1MKdkK0mC7ldSxjdX1BAzbbLD7NJ9dOIhdnuo GNC6HuQd+MyYxr37RP8dGuAtUxKRiV2YHOwF0P8B6gof8tY8QijI3+kDg9PrZbHL mn8XhpQAdx0qMFxgIofO/5SxFYc3Xew3YKgy7PacMRNyD15R3NUUc+IzU6OStZQQ PtV1ihCeCDEebQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:35 2026 by rpki-client