This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json) Hash identifier: 7mqw3ZoDuoX5DvzYnLFsuSB1TskD4li0xekDGMqDcbs= Subject key identifier: 9E:9B:AB:97:EB:AC:E6:47:73:C4:AA:45:A4:E2:E8:24:32:39:E8:52 Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d Certificate serial: 019BF4D04FB37B7B2DC4B15BA60B9E65B8F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft Manifest number: 0B2B Signing time: Sun 25 Jan 2026 11:00:51 +0000 Manifest this update: Sun 25 Jan 2026 11:00:51 +0000 Manifest next update: Mon 26 Jan 2026 11:00:51 +0000 Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=) 2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: p/SM4iXWNnxpnSu9Qs4FJtqP3V9PSViwNuSXqNLTJec=) 3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=) 4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:4f:b3:7b:7b:2d:c4:b1:5b:a6:0b:9e:65:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d Validity Not Before: Jan 25 11:00:51 2026 GMT Not After : Jan 26 11:00:51 2026 GMT Subject: CN=9e9bab97ebace64773c4aa45a4e2e8243239e852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:a4:49:42:3a:5d:df:06:b4:91:95:75:aa: 99:c6:3e:9b:8f:f2:e7:ee:6a:47:34:33:fa:9b:e5: 1d:55:b4:23:54:ff:93:25:6a:b1:73:9d:b7:4e:2e: 5f:53:32:da:36:59:c6:bd:ef:87:e4:49:0e:80:b1: bd:77:c9:68:3a:40:97:af:3a:31:74:dd:ce:4f:b7: 9d:4d:65:b2:a3:26:d6:fc:c0:44:8a:81:4e:02:89: 09:01:86:2e:33:06:be:c4:b0:47:05:31:e1:fc:a5: 9a:54:b3:64:8f:38:23:f1:02:60:e9:1c:73:ae:39: 7c:a4:09:db:21:0e:3e:d9:dc:77:1d:6e:b2:c1:fa: 84:2d:88:46:7d:2a:b3:c5:9b:29:86:1d:02:23:64: 9a:a9:64:74:62:c5:bf:33:4e:ac:f4:4e:bb:22:cf: 58:1f:ee:b4:b5:f9:6b:2f:f2:d9:1a:a3:bc:62:7d: 3c:a5:a4:82:bd:7b:d6:96:76:4d:8e:af:07:c7:02: 00:a5:42:0c:46:cf:2b:43:68:93:87:fc:03:7c:e2: 67:d8:a5:63:f5:d8:2b:30:10:5c:21:82:9e:eb:db: df:ff:5f:aa:de:c0:cc:ec:99:18:fc:4f:0f:1c:61: 7b:5b:e1:dc:fe:09:53:44:e7:84:c9:6e:d4:0d:98: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9B:AB:97:EB:AC:E6:47:73:C4:AA:45:A4:E2:E8:24:32:39:E8:52 X509v3 Authority Key Identifier: keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:29:98:d3:5a:d0:de:f4:b4:a5:73:5f:63:0c:8e:fe:02:08: 68:be:7b:23:1d:83:3a:e4:bb:41:94:f3:0d:28:b7:92:51:e2: 08:b4:07:94:d2:7b:83:d6:43:45:f1:f3:5a:a1:d5:15:f5:78: a5:99:bc:73:19:10:ae:5a:6e:99:a7:83:ae:b2:6f:f0:f4:a0: 08:bd:ff:ce:8d:00:e8:12:d6:91:6f:06:d1:aa:80:45:7c:bc: 0e:ab:39:51:fe:c9:28:8f:13:0c:fe:4a:11:a3:fe:9b:34:e4: 94:86:70:d9:58:56:62:81:05:7e:08:70:7d:cc:fa:1e:66:e2: 74:15:22:8c:12:d0:42:cf:de:fb:dd:4e:0c:7e:a2:2e:a2:a5: 37:0f:28:9d:ed:bd:61:64:99:2b:e6:d4:db:6b:3f:55:ec:61: 7c:86:78:a9:af:27:0a:11:4e:31:33:f4:9a:17:d6:88:14:8f: c3:e4:a0:45:f3:38:01:8f:ee:51:eb:21:e1:56:24:71:f7:90: 66:7f:5d:20:34:fa:51:8e:9f:e8:4c:f3:b1:37:17:c0:77:5e: 52:87:3d:40:50:f9:c3:56:69:e3:eb:36:02:0a:9a:cd:f8:21: c1:8d:e3:00:39:8b:b4:1f:09:88:1f:a1:63:b0:61:67:05:47: 14:a6:17:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00E+ze3stxLFbpgueZbjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1 MjA0OWQwHhcNMjYwMTI1MTEwMDUxWhcNMjYwMTI2MTEwMDUxWjAzMTEwLwYDVQQD Eyg5ZTliYWI5N2ViYWNlNjQ3NzNjNGFhNDVhNGUyZTgyNDMyMzllODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oakSUI6Xd8GtJGVdaqZxj6bj/Ln 7mpHNDP6m+UdVbQjVP+TJWqxc523Ti5fUzLaNlnGve+H5EkOgLG9d8loOkCXrzox dN3OT7edTWWyoybW/MBEioFOAokJAYYuMwa+xLBHBTHh/KWaVLNkjzgj8QJg6Rxz rjl8pAnbIQ4+2dx3HW6ywfqELYhGfSqzxZsphh0CI2SaqWR0YsW/M06s9E67Is9Y H+60tflrL/LZGqO8Yn08paSCvXvWlnZNjq8HxwIApUIMRs8rQ2iTh/wDfOJn2KVj 9dgrMBBcIYKe69vf/1+q3sDM7JkY/E8PHGF7W+Hc/glTROeEyW7UDZiJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6bq5frrOZHc8SqRaTi6CQyOehSMB8GA1UdIwQY MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSmY01rQ 3vS0pXNfYwyO/gIIaL57Ix2DOuS7QZTzDSi3klHiCLQHlNJ7g9ZDRfHzWqHVFfV4 pZm8cxkQrlpumaeDrrJv8PSgCL3/zo0A6BLWkW8G0aqARXy8Dqs5Uf7JKI8TDP5K EaP+mzTklIZw2VhWYoEFfghwfcz6HmbidBUijBLQQs/e+91ODH6iLqKlNw8one29 YWSZK+bU22s/VexhfIZ4qa8nChFOMTP0mhfWiBSPw+SgRfM4AY/uUesh4VYkcfeQ Zn9dIDT6UY6f6EzzsTcXwHdeUoc9QFD5w1Zp4+s2AgqazfghwY3jADmLtB8JiB+h Y7BhZwVHFKYXCg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:14 2026 by rpki-client