This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json) Hash identifier: Ui2L6b+PLPL90x5veI4g6urLs4cwiRx5rluU+G2GrEA= Subject key identifier: 54:14:45:2A:E5:1E:EB:F7:59:5F:6F:F1:79:AF:59:61:92:53:23:49 Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Certificate serial: 019BF5AC1554A7568DA9225B9DD8486C7131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft Manifest number: 0C10 Signing time: Sun 25 Jan 2026 15:00:53 +0000 Manifest this update: Sun 25 Jan 2026 15:00:53 +0000 Manifest next update: Mon 26 Jan 2026 15:00:53 +0000 Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: XeEw/MWk8hlKl/Q7rrNQoOIWXWkNyljAy5EnYzlPD9M=) 2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=) 3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:15:54:a7:56:8d:a9:22:5b:9d:d8:48:6c:71:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Validity Not Before: Jan 25 15:00:53 2026 GMT Not After : Jan 26 15:00:53 2026 GMT Subject: CN=5414452ae51eebf7595f6ff179af596192532349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:ff:ec:ad:1b:89:a6:f9:e6:9e:ef:75:bb: 1a:0a:67:16:bf:75:72:e5:73:2c:28:1c:bb:c2:22: d0:d1:f9:8a:22:d7:26:5a:db:2c:f0:53:8c:82:a5: 7d:af:14:ef:36:e1:80:03:23:bd:2f:bc:01:42:51: f5:0d:ea:a0:8a:d6:aa:4a:6f:35:b8:bb:07:21:65: 1b:2a:b6:35:73:de:08:ce:5b:84:d2:25:ce:f4:1b: b3:2a:b5:7a:f2:d4:14:c6:ad:3f:57:74:8e:3e:c3: c2:6a:0f:5b:9f:17:59:a4:1b:35:9b:14:c3:5a:2f: ef:72:a8:e9:f9:06:33:62:0f:7d:97:91:52:aa:ba: e2:ee:bd:47:3e:ee:01:c4:df:d8:d8:47:ab:48:af: f6:e0:8c:b5:8d:b3:5d:95:d0:f3:4e:da:7d:02:7f: 06:95:2c:f7:03:07:72:f2:c6:5a:f1:ff:44:db:ef: 71:5b:19:62:34:cf:4d:cc:d4:46:b1:22:e4:e3:13: 09:bd:00:12:3d:de:b2:9e:0a:77:49:03:4f:64:8a: ad:a2:70:73:de:82:f6:08:72:c6:a3:89:92:fe:25: 38:34:4f:6d:eb:20:43:0e:da:a7:b2:e3:5c:3e:f2: e9:73:bf:d7:3c:6a:20:f5:3d:3c:98:3c:5a:42:86: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:45:2A:E5:1E:EB:F7:59:5F:6F:F1:79:AF:59:61:92:53:23:49 X509v3 Authority Key Identifier: keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9c:d0:ed:9f:88:23:0f:52:da:57:4d:a6:ed:2d:8f:e7:43: f6:8e:6a:22:74:bb:fb:8b:57:7f:41:48:19:5f:0f:83:83:ea: 76:43:75:9e:37:e5:12:de:a1:e4:90:4f:41:2e:4c:7f:e6:f6: 98:32:84:69:95:9c:06:7c:ec:40:02:c9:d9:54:4e:63:10:cc: d1:12:70:f5:b3:89:d8:cd:da:5f:38:94:4d:15:ba:fb:2f:7c: 6a:31:d2:a5:d5:7a:a3:0b:85:29:7d:64:f5:39:14:9e:08:ef: 15:3c:60:93:b7:22:55:fb:0b:ae:39:5c:51:f6:10:42:31:78: 4c:6d:d5:cb:9b:fc:ef:1c:f7:fd:1f:f3:f2:5d:db:35:2d:d9: 91:b1:f3:6d:a3:62:4f:7e:25:37:d1:e2:4c:75:15:fd:4b:30: 88:19:6e:9a:06:9e:03:d6:21:bf:e4:0d:d8:4f:a5:db:f2:a0: fb:f8:05:9a:25:ce:47:58:3c:72:23:d9:3c:bd:17:17:61:47: 2e:8a:51:5a:37:f0:c5:3c:05:7f:bc:97:5e:a8:02:62:2f:6c: ca:d5:4e:d8:a9:ef:2d:0c:9f:4a:1d:e9:02:c9:3b:31:fb:15: c7:c4:50:ac:98:47:80:1b:b7:09:fb:9b:71:0d:1b:90:0b:37: e7:fe:19:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rBVUp1aNqSJbndhIbHExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0 YjRkOTAwHhcNMjYwMTI1MTUwMDUzWhcNMjYwMTI2MTUwMDUzWjAzMTEwLwYDVQQD Eyg1NDE0NDUyYWU1MWVlYmY3NTk1ZjZmZjE3OWFmNTk2MTkyNTMyMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoL/7K0biab55p7vdbsaCmcWv3Vy 5XMsKBy7wiLQ0fmKItcmWtss8FOMgqV9rxTvNuGAAyO9L7wBQlH1DeqgitaqSm81 uLsHIWUbKrY1c94IzluE0iXO9BuzKrV68tQUxq0/V3SOPsPCag9bnxdZpBs1mxTD Wi/vcqjp+QYzYg99l5FSqrri7r1HPu4BxN/Y2EerSK/24Iy1jbNdldDzTtp9An8G lSz3Awdy8sZa8f9E2+9xWxliNM9NzNRGsSLk4xMJvQASPd6yngp3SQNPZIqtonBz 3oL2CHLGo4mS/iU4NE9t6yBDDtqnsuNcPvLpc7/XPGog9T08mDxaQobPCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQURSrlHuv3WV9v8XmvWWGSUyNJMB8GA1UdIwQY MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZzQ7Z+I Iw9S2ldNpu0tj+dD9o5qInS7+4tXf0FIGV8Pg4PqdkN1njflEt6h5JBPQS5Mf+b2 mDKEaZWcBnzsQALJ2VROYxDM0RJw9bOJ2M3aXziUTRW6+y98ajHSpdV6owuFKX1k 9TkUngjvFTxgk7ciVfsLrjlcUfYQQjF4TG3Vy5v87xz3/R/z8l3bNS3ZkbHzbaNi T34lN9HiTHUV/UswiBlumgaeA9Yhv+QN2E+l2/Kg+/gFmiXOR1g8ciPZPL0XF2FH LopRWjfwxTwFf7yXXqgCYi9sytVO2KnvLQyfSh3pAsk7MfsVx8RQrJhHgBu3Cfub cQ0bkAs35/4Zkw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:37 2026 by rpki-client