This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft File: cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json) Hash identifier: 1qEKhw4pSqPnjcYgoIr1f5GMrhHla1gSR1T/kBQc2OQ= Subject key identifier: AD:B8:C7:EF:C4:19:4E:F8:51:72:6F:C5:80:A3:58:9D:CA:22:7B:A9 Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 Certificate issuer: /CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Certificate serial: 019BF619CE7A179809275FBABA5FDC90EA99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft Manifest number: 0105 Signing time: Sun 25 Jan 2026 17:00:44 +0000 Manifest this update: Sun 25 Jan 2026 17:00:44 +0000 Manifest next update: Mon 26 Jan 2026 17:00:44 +0000 Files and hashes: 1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: tftDeCUzZfxqesyJIMrFtLy547BHru9HmzLMExob2CE=) 2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ce:7a:17:98:09:27:5f:ba:ba:5f:dc:90:ea:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4 Validity Not Before: Jan 25 17:00:44 2026 GMT Not After : Jan 26 17:00:44 2026 GMT Subject: CN=adb8c7efc4194ef851726fc580a3589dca227ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:4c:80:2f:39:6b:cf:ae:a9:29:47:8e:7d: 41:52:86:bb:f1:c0:0e:e4:49:80:8c:7b:78:39:f9: 37:2b:7d:58:56:18:77:72:6b:9f:39:ce:32:3d:c9: f8:b7:7d:93:31:46:18:cc:c3:11:79:35:e2:ca:4c: da:36:92:31:54:07:24:2f:a7:5a:ab:15:97:38:20: 78:4c:c2:b2:41:e1:b0:3b:9e:34:e9:8c:bc:1d:94: 68:c1:b5:56:10:f8:52:39:8e:bc:bf:9b:e5:24:1b: ce:bf:46:02:95:b8:00:48:ab:d7:c5:f4:c3:a7:df: 8f:d8:23:66:d8:e4:d6:0d:47:a4:15:18:02:72:0f: 39:2a:cb:dd:24:53:db:a3:99:65:6b:84:67:3c:44: 1a:85:e8:94:86:92:3a:ef:62:2a:66:54:88:fe:01: 95:b3:9a:93:af:fb:19:b2:d8:a5:9e:13:92:91:f0: 8c:31:9d:cc:f5:8a:94:b4:e9:21:ab:d3:63:bd:90: b4:64:20:5b:bf:9a:37:a2:fc:dc:98:59:eb:69:66: cb:0f:3c:c5:e5:70:6f:9f:de:79:d6:f0:69:f7:76: 09:e1:ee:28:08:da:bb:ab:fd:98:95:ca:ee:3b:a3: 00:9f:76:77:3e:86:fe:13:3d:6a:0b:5a:d9:52:2e: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:C7:EF:C4:19:4E:F8:51:72:6F:C5:80:A3:58:9D:CA:22:7B:A9 X509v3 Authority Key Identifier: keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e7:f5:47:86:8b:de:5a:04:41:09:04:50:97:e1:35:c0:ac: 9f:08:42:2b:ed:b4:52:14:f1:75:dc:a9:d4:bb:29:94:fe:57: 62:bf:8b:bd:43:b3:50:73:6c:33:85:c9:31:b3:e5:bf:c0:60: 1d:03:b0:42:3c:19:73:f8:ac:b8:13:5a:07:ab:75:af:7b:c3: 78:90:0a:6b:96:43:c3:3a:a6:dc:1e:0b:e7:0e:f7:72:5c:bc: aa:9e:5a:13:0d:98:9b:2a:9d:7d:a7:b6:66:08:92:04:24:ac: 36:f2:88:58:20:67:64:a9:8d:0b:bd:06:ab:4c:38:ff:a9:61: e9:34:95:f3:d5:45:79:9a:1e:ed:ed:36:4b:1f:66:5a:07:63: a8:0d:a0:27:03:ff:7a:1b:ad:01:ce:5a:a2:26:1b:15:4b:e3: 4e:20:dd:d2:bb:20:d6:40:76:0c:a8:50:9d:2f:ec:1a:ca:44: 93:c2:e6:28:27:ec:8e:8c:e4:4b:86:50:cf:f1:6d:79:ab:9e: 3e:63:10:6c:3e:a9:9a:ea:2f:15:97:4a:f3:98:a8:23:47:1b: f7:1a:ad:c7:b0:b1:af:d5:6d:f8:5c:d9:a3:17:43:b9:04:2f: cd:78:86:b5:86:b1:4b:02:d8:d8:fe:01:7f:0f:c7:d1:46:c5: 08:3d:01:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gc56F5gJJ1+6ul/ckOqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy N2E4YzQwHhcNMjYwMTI1MTcwMDQ0WhcNMjYwMTI2MTcwMDQ0WjAzMTEwLwYDVQQD EyhhZGI4YzdlZmM0MTk0ZWY4NTE3MjZmYzU4MGEzNTg5ZGNhMjI3YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05lMgC85a8+uqSlHjn1BUoa78cAO 5EmAjHt4Ofk3K31YVhh3cmufOc4yPcn4t32TMUYYzMMReTXiykzaNpIxVAckL6da qxWXOCB4TMKyQeGwO5406Yy8HZRowbVWEPhSOY68v5vlJBvOv0YClbgASKvXxfTD p9+P2CNm2OTWDUekFRgCcg85KsvdJFPbo5lla4RnPEQaheiUhpI672IqZlSI/gGV s5qTr/sZstilnhOSkfCMMZ3M9YqUtOkhq9NjvZC0ZCBbv5o3ovzcmFnraWbLDzzF 5XBvn9551vBp93YJ4e4oCNq7q/2YlcruO6MAn3Z3Pob+Ez1qC1rZUi7d9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK24x+/EGU74UXJvxYCjWJ3KInupMB8GA1UdIwQY MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOf1R4aL 3loEQQkEUJfhNcCsnwhCK+20UhTxddyp1LsplP5XYr+LvUOzUHNsM4XJMbPlv8Bg HQOwQjwZc/isuBNaB6t1r3vDeJAKa5ZDwzqm3B4L5w73cly8qp5aEw2Ymyqdfae2 ZgiSBCSsNvKIWCBnZKmNC70Gq0w4/6lh6TSV89VFeZoe7e02Sx9mWgdjqA2gJwP/ ehutAc5aoiYbFUvjTiDd0rsg1kB2DKhQnS/sGspEk8LmKCfsjozkS4ZQz/Fteaue PmMQbD6pmuovFZdK85ioI0cb9xqtx7Cxr9Vt+FzZoxdDuQQvzXiGtYaxSwLY2P4B fw/H0UbFCD0B8w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:27 2026 by rpki-client