This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json) Hash identifier: Tarv2uBD4CTaKMT7wx3Vyygr4BWlidu0wfkbD+Wk1TE= Subject key identifier: 25:93:41:3B:39:BC:E1:57:F4:13:A2:55:CA:21:F6:E7:F7:19:6A:79 Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019BF1CF3AAAB115B3DB83ABC3C6679BEB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft Manifest number: 162F Signing time: Sat 24 Jan 2026 21:00:48 +0000 Manifest this update: Sat 24 Jan 2026 21:00:48 +0000 Manifest next update: Sun 25 Jan 2026 21:00:48 +0000 Files and hashes: 1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=) 2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=) 3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: TR1a5AhKWSSzg01A0+ntSfEQH2RsIpzFUYAEfUm5hbw=) 4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=) 5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:3a:aa:b1:15:b3:db:83:ab:c3:c6:67:9b:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 24 21:00:48 2026 GMT Not After : Jan 25 21:00:48 2026 GMT Subject: CN=2593413b39bce157f413a255ca21f6e7f7196a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:c0:05:95:71:68:93:2b:07:37:7f:31:00: ab:3f:c6:c8:e8:e6:f5:4f:70:e7:6c:10:86:8b:36: f5:1e:56:15:ca:b4:bb:37:3d:ca:f4:de:42:5a:79: b5:68:14:dc:5f:ee:db:86:13:ba:92:46:1d:c0:52: 86:4b:43:ec:a4:6e:26:12:7a:4b:64:bb:f3:61:f9: b3:ac:86:94:78:40:6c:1e:8d:fd:e2:5e:82:24:38: 6b:70:7b:8d:c3:7a:5b:84:89:d0:50:ca:b0:83:23: a3:b5:b4:b8:7f:0b:93:7d:f1:54:74:e7:77:1d:36: e2:1e:b6:96:b4:eb:e1:07:dc:47:7a:08:bb:55:a3: 10:04:0c:c2:f7:93:4a:42:4f:af:48:2b:87:eb:77: cb:59:ca:a5:7c:33:77:b2:ec:ae:34:02:0b:cd:28: 49:d8:3e:d4:eb:d8:26:2f:a3:da:2a:2f:45:ae:40: 03:34:51:77:5f:44:cf:0d:33:fd:3b:08:da:9c:a8: e7:d2:1b:87:24:5e:9b:37:b8:81:78:f8:93:eb:8b: 92:a3:16:b5:e4:4f:f1:86:31:68:89:73:cd:34:aa: 43:07:11:23:1d:56:c3:6c:8a:88:86:54:10:2b:4e: 41:62:7c:9b:83:14:27:d8:34:d1:5d:43:7f:2f:c1: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:41:3B:39:BC:E1:57:F4:13:A2:55:CA:21:F6:E7:F7:19:6A:79 X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3b:c6:bf:05:d2:e7:36:04:65:71:14:b3:48:39:7d:b2:f3: 36:14:4c:d0:b0:1c:22:22:bb:e3:2a:35:d5:22:c6:1e:95:ff: 6b:0b:b5:49:58:89:11:4f:ae:aa:5a:7d:d4:19:73:02:bc:d0: 42:c5:b0:fc:f0:f4:07:4c:92:ee:66:59:a1:bd:4c:15:29:a5: 82:bd:bb:c9:6f:88:38:e1:0d:58:d1:fb:fe:4a:89:cf:6b:07: 7e:86:4f:3f:ca:1f:5c:48:ea:82:89:22:ed:c1:7b:51:a4:42: d6:3e:5c:5c:76:0b:6b:09:44:1d:28:f6:42:f9:be:01:74:b9: 05:af:38:67:92:b6:cf:92:b6:43:c0:7a:1d:50:d4:79:ae:be: e0:f3:1e:47:6c:06:05:61:e7:94:d3:ab:b6:71:5e:fb:86:dd: 89:fc:68:a0:bc:26:1b:33:c6:56:b5:31:c8:9a:24:74:56:e4: ec:c4:ad:c2:a1:c1:dc:cd:82:eb:58:d4:e4:eb:e6:00:c7:e2: be:21:c4:4c:34:18:31:c4:0c:91:1a:27:8b:8b:ed:74:5f:25: 6f:9e:f5:09:60:b0:a9:59:58:73:41:7d:f0:97:71:53:f3:d6: cc:94:0c:d1:8a:90:bd:4c:3a:b2:c4:de:29:8d:29:41:3a:c2: 12:30:a6:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxzzqqsRWz24Orw8Znm+tgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTI0MjEwMDQ4WhcNMjYwMTI1MjEwMDQ4WjAzMTEwLwYDVQQD EygyNTkzNDEzYjM5YmNlMTU3ZjQxM2EyNTVjYTIxZjZlN2Y3MTk2YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08zABZVxaJMrBzd/MQCrP8bI6Ob1 T3DnbBCGizb1HlYVyrS7Nz3K9N5CWnm1aBTcX+7bhhO6kkYdwFKGS0PspG4mEnpL ZLvzYfmzrIaUeEBsHo394l6CJDhrcHuNw3pbhInQUMqwgyOjtbS4fwuTffFUdOd3 HTbiHraWtOvhB9xHegi7VaMQBAzC95NKQk+vSCuH63fLWcqlfDN3suyuNAILzShJ 2D7U69gmL6PaKi9FrkADNFF3X0TPDTP9OwjanKjn0huHJF6bN7iBePiT64uSoxa1 5E/xhjFoiXPNNKpDBxEjHVbDbIqIhlQQK05BYnybgxQn2DTRXUN/L8EebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWTQTs5vOFX9BOiVcoh9uf3GWp5MB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDvGvwXS 5zYEZXEUs0g5fbLzNhRM0LAcIiK74yo11SLGHpX/awu1SViJEU+uqlp91BlzArzQ QsWw/PD0B0yS7mZZob1MFSmlgr27yW+IOOENWNH7/kqJz2sHfoZPP8ofXEjqgoki 7cF7UaRC1j5cXHYLawlEHSj2Qvm+AXS5Ba84Z5K2z5K2Q8B6HVDUea6+4PMeR2wG BWHnlNOrtnFe+4bdifxooLwmGzPGVrUxyJokdFbk7MStwqHB3M2C61jU5OvmAMfi viHETDQYMcQMkRoni4vtdF8lb571CWCwqVlYc0F98JdxU/PWzJQM0YqQvUw6ssTe KY0pQTrCEjCm4A== -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:30 2026 by rpki-client