This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json) Hash identifier: Hn+YxupzUYCAlrRqaEh8ny8WGQn7J4pqzSlu+dNinKg= Subject key identifier: F5:D2:29:41:AB:43:93:ED:AD:3C:E0:EF:42:08:35:54:2F:30:19:E8 Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Certificate serial: 019BF5073A14E96348C90B1B7BD3DD2512F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft Manifest number: 1229 Signing time: Sun 25 Jan 2026 12:00:49 +0000 Manifest this update: Sun 25 Jan 2026 12:00:49 +0000 Manifest next update: Mon 26 Jan 2026 12:00:49 +0000 Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=) 2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: DvqCTHxg+VUvWCjWRJ4TX5qEpDBG1l/hz+nkQhrLYCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:3a:14:e9:63:48:c9:0b:1b:7b:d3:dd:25:12:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Validity Not Before: Jan 25 12:00:49 2026 GMT Not After : Jan 26 12:00:49 2026 GMT Subject: CN=f5d22941ab4393edad3ce0ef420835542f3019e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:be:c8:fa:59:db:57:25:64:a2:f3:2c:60: aa:8a:f0:63:32:92:85:9c:4b:01:97:fd:8a:82:2e: bc:59:4a:e0:ef:47:58:78:e7:57:7d:45:0d:5e:d2: a4:10:d0:37:9b:1a:94:32:5c:8f:5a:f2:f7:77:94: e8:23:26:46:30:65:ef:03:8d:f0:d3:eb:53:29:f5: c8:8f:84:8d:6d:dd:aa:c0:96:c3:62:24:b3:47:de: eb:4c:56:1e:c6:38:a4:f2:aa:c3:e5:3c:82:17:c4: 42:40:cf:41:a7:a9:d5:5f:ac:04:5a:24:da:fe:d1: 4f:20:0e:53:4d:32:0b:4f:51:56:08:68:3c:f0:f0: d2:2f:0a:77:db:d4:2f:04:e3:80:4f:f1:93:05:05: 6f:7d:00:12:2d:10:36:5b:31:d1:6a:9e:02:47:de: 05:69:1d:09:5b:4a:93:6a:3e:a9:18:2d:32:4e:3e: dc:92:21:ee:6e:0b:11:3f:fc:e2:a1:67:83:c8:93: 15:9a:ee:1b:dc:a8:72:b7:92:83:3f:0e:8e:40:37: 56:4b:59:ad:c6:02:26:03:f7:0b:8a:e8:68:ff:07: 1d:eb:73:8a:80:45:bf:5a:ff:9c:d9:c0:82:29:f0: 4f:e0:b0:8c:8b:69:49:c7:b2:e2:60:31:ed:4b:d9: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D2:29:41:AB:43:93:ED:AD:3C:E0:EF:42:08:35:54:2F:30:19:E8 X509v3 Authority Key Identifier: keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1e:eb:48:0d:af:a0:19:a8:b4:95:44:b2:5a:f9:2d:bf:0a: 64:96:6b:35:62:fd:a5:c6:28:74:75:14:2b:bc:1b:b0:cb:87: f8:6b:b9:fb:a4:18:39:d9:37:df:d4:87:21:f8:f1:ad:10:9d: 2e:4e:62:2b:3c:c6:a1:77:cf:c1:ac:5c:61:bc:c9:a9:78:11: d1:ec:39:91:ee:62:67:9b:c1:be:a4:46:0a:6f:36:be:d9:1d: d6:7d:b3:22:fc:c9:9f:e6:a7:23:bb:62:e7:9d:e4:95:71:b3: 3a:3c:7f:f5:b8:c7:7a:dc:04:8a:27:c4:b6:2c:73:5d:02:22: 20:1b:0e:82:a2:90:87:28:37:bf:05:b7:c2:88:61:c0:73:1f: 26:ce:f4:52:9d:21:e6:c4:e2:47:55:b6:5f:78:36:06:11:b0: 48:e7:c4:6e:27:6a:55:1b:a9:5a:6b:61:11:75:f4:08:cf:3e: 62:09:c4:0d:06:a0:89:3f:48:d1:d7:95:c3:f5:50:74:d2:97: 12:44:f4:9c:51:9b:28:fb:90:e9:50:3f:9b:a6:9c:f6:7e:08: ba:17:57:7c:f6:13:cc:f9:1e:8a:0e:44:4c:71:a8:e2:49:a2: 88:55:3b:ff:ff:67:88:85:38:eb:b1:da:0a:b3:2a:84:3d:89: fb:54:63:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzoU6WNIyQsbe9PdJRL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk NGZlMjgwHhcNMjYwMTI1MTIwMDQ5WhcNMjYwMTI2MTIwMDQ5WjAzMTEwLwYDVQQD EyhmNWQyMjk0MWFiNDM5M2VkYWQzY2UwZWY0MjA4MzU1NDJmMzAxOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3S+yPpZ21clZKLzLGCqivBjMpKF nEsBl/2Kgi68WUrg70dYeOdXfUUNXtKkENA3mxqUMlyPWvL3d5ToIyZGMGXvA43w 0+tTKfXIj4SNbd2qwJbDYiSzR97rTFYexjik8qrD5TyCF8RCQM9Bp6nVX6wEWiTa /tFPIA5TTTILT1FWCGg88PDSLwp329QvBOOAT/GTBQVvfQASLRA2WzHRap4CR94F aR0JW0qTaj6pGC0yTj7ckiHubgsRP/zioWeDyJMVmu4b3Khyt5KDPw6OQDdWS1mt xgImA/cLiuho/wcd63OKgEW/Wv+c2cCCKfBP4LCMi2lJx7LiYDHtS9kqjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXSKUGrQ5PtrTzg70IINVQvMBnoMB8GA1UdIwQY MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt YTc2MmU5YzBkZDMyLzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAx7rSA2v oBmotJVEslr5Lb8KZJZrNWL9pcYodHUUK7wbsMuH+Gu5+6QYOdk339SHIfjxrRCd Lk5iKzzGoXfPwaxcYbzJqXgR0ew5ke5iZ5vBvqRGCm82vtkd1n2zIvzJn+anI7ti 553klXGzOjx/9bjHetwEiifEtixzXQIiIBsOgqKQhyg3vwW3wohhwHMfJs70Up0h 5sTiR1W2X3g2BhGwSOfEbidqVRupWmthEXX0CM8+YgnEDQagiT9I0deVw/VQdNKX EkT0nFGbKPuQ6VA/m6ac9n4IuhdXfPYTzPkeig5ETHGo4kmiiFU7//9niIU467Ha CrMqhD2J+1Rj7w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:29 2026 by rpki-client