This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json) Hash identifier: jDsd0NgrThUdXQHnOnUM4R7X3tNUAL9heZ4Rc2M6OtY= Subject key identifier: 30:A4:EC:A2:6A:2C:AC:36:8A:2D:0D:FD:94:51:43:4C:00:E8:3E:52 Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Certificate serial: 019BF7D240A024A7EB91D93F623F2AF2B70F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft Manifest number: 060D Signing time: Mon 26 Jan 2026 01:01:50 +0000 Manifest this update: Mon 26 Jan 2026 01:01:50 +0000 Manifest next update: Tue 27 Jan 2026 01:01:50 +0000 Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: 8Xbs0xytEYKDiEWbugcBmhHwawIYVDnS83qC7292h2Y=) 2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:40:a0:24:a7:eb:91:d9:3f:62:3f:2a:f2:b7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Validity Not Before: Jan 26 01:01:50 2026 GMT Not After : Jan 27 01:01:50 2026 GMT Subject: CN=30a4eca26a2cac368a2d0dfd9451434c00e83e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:ff:93:fe:41:fc:db:86:e0:38:31:32:16: 36:5a:1b:f4:72:a8:59:5e:b7:36:f2:4c:e6:f0:61: 6a:2f:72:9e:db:eb:b6:3d:cf:34:9c:1c:1d:34:72: 95:b0:65:f2:b4:91:0a:2a:4e:c2:cc:71:e0:60:9a: 29:da:56:50:85:26:2b:ff:b1:7b:c6:ea:0d:d2:c1: 58:4b:49:fc:a8:a1:08:0d:4e:a4:8e:78:71:ea:c2: 71:64:da:f0:27:fa:f6:fd:9f:41:a3:ec:45:e1:27: 70:7f:21:dc:b4:db:79:52:a2:25:79:ec:84:33:54: 99:97:f4:50:e3:20:05:80:03:0b:b4:c4:e2:0a:15: 00:7d:6a:b8:18:21:e9:52:b2:da:26:0b:ec:f8:e6: 03:2e:0a:9e:30:7a:6b:0d:1b:e7:9e:e1:46:c0:38: 7e:bc:2d:8d:45:57:49:33:10:37:37:8b:dd:f4:c1: d1:84:53:34:f7:75:f1:a0:3f:a7:3b:30:8f:ef:c4: 78:88:dd:41:e1:01:47:eb:6f:42:9b:49:55:d1:41: 16:9e:ed:fe:d8:3c:dc:58:86:1f:ec:42:a3:7d:64: 83:97:b8:83:1a:23:91:c4:ae:bb:41:68:e0:b4:28: 24:cf:6c:9a:a3:d4:ef:c4:bf:99:ae:29:55:f6:c9: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A4:EC:A2:6A:2C:AC:36:8A:2D:0D:FD:94:51:43:4C:00:E8:3E:52 X509v3 Authority Key Identifier: keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5e:99:9d:b3:a9:88:21:b7:0e:a5:24:43:26:77:da:43:57: 99:0a:e7:ff:59:80:a4:1b:51:dd:55:67:d0:07:95:16:b9:c4: d6:2f:11:9e:05:11:bf:d4:fb:d8:21:3c:de:f3:61:6d:61:d8: 71:d9:58:cd:a1:0c:e4:2f:a4:b2:c0:f7:ba:1f:52:b4:c9:9b: c1:8a:2b:bb:f1:5d:88:13:34:a2:17:fd:f9:13:ef:4e:db:56: b8:b5:03:7e:5e:d4:ea:96:9e:1d:80:a8:ee:f6:73:41:18:4d: ea:db:4f:79:41:7a:3a:f1:c9:77:83:3a:f3:17:4a:83:65:10: 74:c6:68:ed:c0:5b:6b:86:23:42:a7:99:16:4e:97:8d:4d:ce: 24:d3:57:50:91:af:6d:ac:fd:3d:ec:5c:41:0e:01:a2:a2:8e: e6:78:09:f9:06:0e:29:7b:83:d9:c5:31:0d:b8:60:c7:c3:0f: b6:01:96:5e:df:ba:7b:12:06:a7:4d:7e:ea:b3:52:23:3f:75: e0:59:21:e2:51:ff:94:1d:45:ca:f9:05:47:5a:8f:e2:af:00: c3:57:79:0f:9c:b9:b7:cc:f1:a9:f5:6d:ae:1d:08:71:07:b2: 2c:d7:7f:b0:c6:2b:90:92:75:18:cc:a1:d2:fe:62:de:99:51: 3a:88:8c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kCgJKfrkdk/Yj8q8rcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw ZTZjZDgwHhcNMjYwMTI2MDEwMTUwWhcNMjYwMTI3MDEwMTUwWjAzMTEwLwYDVQQD EygzMGE0ZWNhMjZhMmNhYzM2OGEyZDBkZmQ5NDUxNDM0YzAwZTgzZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRD/k/5B/NuG4DgxMhY2Whv0cqhZ Xrc28kzm8GFqL3Ke2+u2Pc80nBwdNHKVsGXytJEKKk7CzHHgYJop2lZQhSYr/7F7 xuoN0sFYS0n8qKEIDU6kjnhx6sJxZNrwJ/r2/Z9Bo+xF4SdwfyHctNt5UqIleeyE M1SZl/RQ4yAFgAMLtMTiChUAfWq4GCHpUrLaJgvs+OYDLgqeMHprDRvnnuFGwDh+ vC2NRVdJMxA3N4vd9MHRhFM093XxoD+nOzCP78R4iN1B4QFH629Cm0lV0UEWnu3+ 2DzcWIYf7EKjfWSDl7iDGiORxK67QWjgtCgkz2yao9TvxL+ZrilV9snR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCk7KJqLKw2ii0N/ZRRQ0wA6D5SMB8GA1UdIwQY MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4 LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl6ZnbOp iCG3DqUkQyZ32kNXmQrn/1mApBtR3VVn0AeVFrnE1i8RngURv9T72CE83vNhbWHY cdlYzaEM5C+kssD3uh9StMmbwYoru/FdiBM0ohf9+RPvTttWuLUDfl7U6paeHYCo 7vZzQRhN6ttPeUF6OvHJd4M68xdKg2UQdMZo7cBba4YjQqeZFk6XjU3OJNNXUJGv baz9PexcQQ4BoqKO5ngJ+QYOKXuD2cUxDbhgx8MPtgGWXt+6exIGp01+6rNSIz91 4Fkh4lH/lB1FyvkFR1qP4q8Aw1d5D5y5t8zxqfVtrh0IcQeyLNd/sMYrkJJ1GMyh 0v5i3plROoiMgA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:19 2026 by rpki-client