This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json) Hash identifier: DFMvXNalc6QHOG8WxFS1i4f65nAznwyy/0c0N2EvIaE= Subject key identifier: A7:38:D8:5C:0C:2C:96:80:CE:15:91:2B:FE:A9:BB:58:12:9A:F2:C0 Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Certificate serial: 019BF8089EF17862879DD5C248091C292D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft Manifest number: 01E9 Signing time: Mon 26 Jan 2026 02:01:13 +0000 Manifest this update: Mon 26 Jan 2026 02:01:13 +0000 Manifest next update: Tue 27 Jan 2026 02:01:13 +0000 Files and hashes: 1: U2gb-EjyRMt7fV8m-vDaXptr02U.roa (hash: o3dQkZyaFtK7POh0P6n77n6F8iCQXMX1VAPnE+jPMDM=) 2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: 3BW2GGMeAoZNoj1VmoeMVSvRaI/DstY3jHZe/oIkOXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:9e:f1:78:62:87:9d:d5:c2:48:09:1c:29:2d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Validity Not Before: Jan 26 02:01:13 2026 GMT Not After : Jan 27 02:01:13 2026 GMT Subject: CN=a738d85c0c2c9680ce15912bfea9bb58129af2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:ac:6b:91:31:d6:cc:d4:d6:4f:78:56:6c: 23:2a:d6:04:39:d3:15:1b:46:26:e9:ed:f4:47:3f: 48:3b:a3:cf:d5:ea:1c:d7:59:f7:82:da:65:62:99: 37:b7:e8:1c:c7:52:21:8e:5c:82:56:7d:2c:3e:84: be:45:73:89:42:f3:49:8d:a8:e9:aa:58:a3:28:e9: e5:1f:61:47:0b:9b:18:0a:15:13:63:dd:2b:a8:44: 94:41:25:1d:e8:fc:3f:29:6c:bc:50:44:76:c5:c0: bc:b5:12:90:10:4b:3b:9a:de:2d:ff:22:7f:51:ef: 01:38:05:c5:ec:3c:6d:67:13:49:96:e8:c9:a1:9a: 49:3c:63:fe:26:37:e0:30:18:2b:49:a5:88:0c:ed: 99:22:fb:e8:40:d8:57:67:56:7a:dd:80:4f:14:53: e0:b6:5e:ad:9c:16:4f:3f:6c:08:86:d5:b7:e2:21: 60:28:45:7e:71:8c:03:5e:c2:9a:5e:fd:15:98:33: 85:56:4b:9a:c3:a1:43:38:dc:2c:87:18:fd:7c:4f: 73:bb:1d:a9:e3:2a:a7:4a:40:47:f3:84:00:75:a3: 9e:cf:c5:50:70:f1:64:10:25:be:4a:29:8c:f8:0b: b1:1e:67:19:ed:24:6e:da:de:8f:fb:1d:a7:5b:85: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:38:D8:5C:0C:2C:96:80:CE:15:91:2B:FE:A9:BB:58:12:9A:F2:C0 X509v3 Authority Key Identifier: keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:72:45:02:85:91:49:f9:d5:c7:f0:ea:ae:0e:12:7e:94:6f: ed:e4:29:4f:d7:f5:ec:45:47:e1:a7:36:9c:92:44:62:47:34: f9:1f:3d:cc:c5:3d:23:60:e6:2c:3f:4a:99:cb:0a:68:73:a5: d2:a0:4b:16:7b:91:e7:39:e7:86:38:2d:ca:f6:ef:8b:15:bb: 46:95:50:4c:c6:80:ee:b3:2e:dc:04:8d:84:18:c5:30:69:70: 19:e7:bd:4d:ba:7f:1e:c9:d4:eb:1e:86:81:f4:cf:6c:e7:8c: f0:76:dd:d4:0d:dd:03:45:c3:bf:2b:05:3b:11:14:18:dc:1b: bf:03:64:c0:94:07:6c:5d:11:b1:61:47:72:b9:1f:5f:03:89: 95:90:0c:f2:b5:1c:4d:2b:47:4c:5b:e5:35:9a:ba:1d:e0:c0: 2a:00:e5:46:d2:c2:e4:21:bf:b8:80:07:b1:5c:76:36:37:57: 5d:ef:6a:5d:02:37:4f:ac:43:06:a9:e1:ab:1b:f8:dc:ba:c6: 92:98:e7:7e:1e:57:a9:d9:82:5c:2c:0b:93:b3:dd:c2:57:ca: 87:30:0b:8b:32:c5:4b:da:6b:70:c5:f9:8c:0a:2b:86:6d:9a: d8:41:c1:cd:d8:32:db:85:3c:13:f6:66:b7:02:d7:3c:06:bd: f1:ae:7c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJ7xeGKHndXCSAkcKS2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5 YjRjNDUwHhcNMjYwMTI2MDIwMTEzWhcNMjYwMTI3MDIwMTEzWjAzMTEwLwYDVQQD EyhhNzM4ZDg1YzBjMmM5NjgwY2UxNTkxMmJmZWE5YmI1ODEyOWFmMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Osa5Ex1szU1k94VmwjKtYEOdMV G0Ym6e30Rz9IO6PP1eoc11n3gtplYpk3t+gcx1IhjlyCVn0sPoS+RXOJQvNJjajp qlijKOnlH2FHC5sYChUTY90rqESUQSUd6Pw/KWy8UER2xcC8tRKQEEs7mt4t/yJ/ Ue8BOAXF7DxtZxNJlujJoZpJPGP+JjfgMBgrSaWIDO2ZIvvoQNhXZ1Z63YBPFFPg tl6tnBZPP2wIhtW34iFgKEV+cYwDXsKaXv0VmDOFVkuaw6FDONwshxj9fE9zux2p 4yqnSkBH84QAdaOez8VQcPFkECW+SimM+AuxHmcZ7SRu2t6P+x2nW4WPSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc42FwMLJaAzhWRK/6pu1gSmvLAMB8GA1UdIwQY MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2 LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3JFAoWR SfnVx/Dqrg4SfpRv7eQpT9f17EVH4ac2nJJEYkc0+R89zMU9I2DmLD9KmcsKaHOl 0qBLFnuR5znnhjgtyvbvixW7RpVQTMaA7rMu3ASNhBjFMGlwGee9Tbp/HsnU6x6G gfTPbOeM8Hbd1A3dA0XDvysFOxEUGNwbvwNkwJQHbF0RsWFHcrkfXwOJlZAM8rUc TStHTFvlNZq6HeDAKgDlRtLC5CG/uIAHsVx2NjdXXe9qXQI3T6xDBqnhqxv43LrG kpjnfh5XqdmCXCwLk7PdwlfKhzALizLFS9prcMX5jAorhm2a2EHBzdgy24U8E/Zm twLXPAa98a58BA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:02 2026 by rpki-client