This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json) Hash identifier: J4cjhYozmUyC+bmMntQ7H3sTbCq4Ckv1JGVrlpU98Y8= Subject key identifier: A9:A7:D5:9D:75:BC:D8:A5:F6:06:E2:F4:06:46:22:9F:A7:D8:17:D2 Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec Certificate serial: 019BF57575F3FC81F6594026AADC65206E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 14:01:14 +0000 Manifest this update: Sun 25 Jan 2026 14:01:14 +0000 Manifest next update: Mon 26 Jan 2026 14:01:14 +0000 Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=) 2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: hZWfGAjJm1U00SyoLeN5Aqv+7liFCQwnXFGszNFIOiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:75:f3:fc:81:f6:59:40:26:aa:dc:65:20:6e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec Validity Not Before: Jan 25 14:01:14 2026 GMT Not After : Jan 26 14:01:14 2026 GMT Subject: CN=a9a7d59d75bcd8a5f606e2f40646229fa7d817d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:54:2f:40:5e:a1:c0:3e:68:73:ba:a0:14:f7: e5:b3:18:7c:75:cd:c5:ff:78:04:36:f4:11:0b:20: 45:e0:c4:0c:ab:e5:30:e0:71:3a:03:84:b7:e7:a4: 89:8d:bc:e4:8c:ee:e0:9d:e5:7c:68:3c:6c:d1:a0: ae:7e:78:2f:c1:10:8d:ab:0f:06:a0:73:3d:58:35: 0e:40:ba:ec:3d:2e:4d:e7:e9:ed:81:79:4d:21:62: a3:cb:8b:50:71:ad:f5:6e:5c:c1:c8:74:39:fa:a5: b8:9c:5d:0a:8a:1b:dd:61:92:85:97:7e:db:6e:b3: af:08:fe:5a:6a:be:e0:22:41:24:06:c1:a5:39:9b: a2:c7:d3:af:70:75:da:cf:c4:ca:5b:97:a3:56:84: a5:d8:21:48:3d:92:49:f1:43:2e:51:96:66:3b:4d: 0f:77:c8:ba:e2:19:f9:90:63:7b:e0:d8:f0:5e:aa: 23:57:ea:19:0c:db:ad:b9:54:ef:f0:4a:05:17:2e: 1f:a5:00:97:9f:06:e5:ad:87:55:c9:82:7d:3f:72: 7d:a4:63:97:57:a6:62:42:4f:f9:cc:ce:b7:2a:ac: 10:64:54:6f:dd:fd:95:2b:c1:68:17:4f:4e:0d:70: d2:45:7e:fc:3d:c4:b1:39:9f:b8:1e:d6:35:df:b6: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A7:D5:9D:75:BC:D8:A5:F6:06:E2:F4:06:46:22:9F:A7:D8:17:D2 X509v3 Authority Key Identifier: keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:31:b5:9f:69:26:94:de:64:07:3c:5e:99:a1:0c:a3:e6:bb: ad:9c:9b:c7:e5:46:80:32:a9:57:32:ba:7a:c3:61:bf:af:4a: 6d:9e:f3:43:58:7f:0d:4a:9d:de:e9:aa:80:92:de:20:29:32: 14:f5:9b:9a:8f:8a:93:b5:49:ac:64:62:e7:fc:cc:ce:42:32: 5e:c7:ec:52:d9:4a:25:66:5a:fd:e7:8a:99:4f:d2:f0:7b:0e: f5:96:e5:e4:0f:f2:42:cd:e9:30:7a:a8:05:77:08:66:3c:59: cb:9a:b4:8e:1e:d1:3c:62:74:8b:33:4f:e5:8c:a5:63:f7:e3: da:78:9d:c0:13:40:23:84:44:25:f1:04:1e:a9:47:22:6f:cb: ef:85:97:a7:86:5c:99:5f:ce:25:db:7f:fd:83:29:f9:62:d9: 69:e9:58:80:17:ec:20:a6:19:12:1a:b4:09:b8:5e:46:be:86: a5:e8:03:5d:7b:36:a3:49:b9:05:34:37:3f:49:19:24:23:83: a4:1f:64:e7:ee:68:f3:8f:01:eb:d4:f2:77:9f:7a:19:6b:8f: dd:5a:73:ab:8d:c8:ba:6e:90:55:e1:84:cd:a4:09:5b:b4:7a: 89:fc:0e:42:b2:94:69:aa:55:57:64:b3:f5:91:f9:ff:ce:a0: 58:29:4e:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXXz/IH2WUAmqtxlIG6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjRkYTBmMTAxM2FjZGI2MWMyZjdhMjZkMTRjNGYwZGU4 MjIyZWMwHhcNMjYwMTI1MTQwMTE0WhcNMjYwMTI2MTQwMTE0WjAzMTEwLwYDVQQD EyhhOWE3ZDU5ZDc1YmNkOGE1ZjYwNmUyZjQwNjQ2MjI5ZmE3ZDgxN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VQvQF6hwD5oc7qgFPflsxh8dc3F /3gENvQRCyBF4MQMq+Uw4HE6A4S356SJjbzkjO7gneV8aDxs0aCufngvwRCNqw8G oHM9WDUOQLrsPS5N5+ntgXlNIWKjy4tQca31blzByHQ5+qW4nF0KihvdYZKFl37b brOvCP5aar7gIkEkBsGlOZuix9OvcHXaz8TKW5ejVoSl2CFIPZJJ8UMuUZZmO00P d8i64hn5kGN74NjwXqojV+oZDNutuVTv8EoFFy4fpQCXnwblrYdVyYJ9P3J9pGOX V6ZiQk/5zM63KqwQZFRv3f2VK8FoF09ODXDSRX78PcSxOZ+4HtY137aGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmn1Z11vNil9gbi9AZGIp+n2BfSMB8GA1UdIwQY MBaAFHC02g8QE6zbYcL3om0UxPDegiLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODct ZjMwNjllZTU5MGRhLzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODctZjMwNjllZTU5MGRh LzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDG1n2km lN5kBzxemaEMo+a7rZybx+VGgDKpVzK6esNhv69KbZ7zQ1h/DUqd3umqgJLeICky FPWbmo+Kk7VJrGRi5/zMzkIyXsfsUtlKJWZa/eeKmU/S8HsO9Zbl5A/yQs3pMHqo BXcIZjxZy5q0jh7RPGJ0izNP5YylY/fj2nidwBNAI4REJfEEHqlHIm/L74WXp4Zc mV/OJdt//YMp+WLZaelYgBfsIKYZEhq0CbheRr6GpegDXXs2o0m5BTQ3P0kZJCOD pB9k5+5o848B69Tyd596GWuP3Vpzq43Ium6QVeGEzaQJW7R6ifwOQrKUaapVV2Sz 9ZH5/86gWClORw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:41 2026 by rpki-client