This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json) Hash identifier: ajzHFSvGwU3OB8I6X7lf2+PyZ0GWmKQUOxmMRuGzkYk= Subject key identifier: 0F:2C:9D:25:1E:98:9F:C6:01:9D:3C:37:BA:25:6F:8A:F2:1A:0E:48 Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Certificate serial: 019BF687E637BBB111D5104665B55EA7956D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft Manifest number: 0A76 Signing time: Sun 25 Jan 2026 19:00:59 +0000 Manifest this update: Sun 25 Jan 2026 19:00:59 +0000 Manifest next update: Mon 26 Jan 2026 19:00:59 +0000 Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: EmHnBiP+aeCJVtilxRRb1DmsTRnqpFEFhcMBjvJA5eM=) 2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e6:37:bb:b1:11:d5:10:46:65:b5:5e:a7:95:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06 Validity Not Before: Jan 25 19:00:59 2026 GMT Not After : Jan 26 19:00:59 2026 GMT Subject: CN=0f2c9d251e989fc6019d3c37ba256f8af21a0e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:af:93:ba:12:74:a0:c9:83:a8:06:81:f7: 1a:13:05:90:da:87:dd:76:6f:87:8b:78:f3:79:b1: 50:21:e4:1a:20:90:11:08:32:9b:53:2b:f9:83:22: b5:2f:b4:8f:39:d9:09:ab:a3:b8:7c:c3:1d:61:f8: 52:49:43:7f:40:0d:7b:6c:e4:c5:18:72:11:f2:6c: 18:ae:0d:24:ba:72:f3:7b:a5:c0:de:49:f7:6a:ae: db:a1:dd:dd:e5:2d:83:d1:db:8a:a1:8b:96:bf:08: 04:6b:09:4f:69:b3:62:f9:11:e9:66:22:c0:f3:89: ab:03:4a:42:3e:49:73:3c:23:21:09:45:08:00:71: 71:1a:34:90:07:eb:f0:98:9c:e7:77:55:d4:ef:f0: 3d:f0:e8:46:f0:ca:9a:39:d4:a3:67:96:20:d8:b0: 87:9e:89:cf:b7:24:49:1f:47:96:ad:5a:32:73:42: c9:84:8d:72:3f:e9:7e:69:dc:79:b2:9f:48:7a:48: fa:b2:91:68:ad:60:7c:d7:47:01:51:c2:14:51:fc: b0:10:9d:47:80:b3:91:23:0e:d6:aa:9e:b9:e5:70: 86:69:f7:8c:80:49:de:94:34:89:16:c7:76:8d:6e: 58:3c:2b:f0:d4:6e:ea:d9:90:ac:14:25:fc:ac:ed: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2C:9D:25:1E:98:9F:C6:01:9D:3C:37:BA:25:6F:8A:F2:1A:0E:48 X509v3 Authority Key Identifier: keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c1:9e:cc:dc:41:ee:46:ca:8a:17:29:f8:d0:d6:ea:08:df: 3d:2e:44:e5:19:93:ce:b2:17:60:54:53:eb:02:a2:47:65:0c: ee:d7:45:32:e1:a2:7f:13:f9:d4:76:86:5d:95:6e:27:2c:82: 7c:57:34:48:51:3e:07:40:63:49:c1:44:c8:e5:bc:87:6d:c4: 9f:f5:6c:9d:f4:62:19:8b:4f:00:75:31:d3:19:5a:4c:63:3a: e5:f5:4e:e2:36:2b:b3:3a:1d:82:bf:bd:19:2d:af:b4:b7:ac: f6:5a:af:fe:2e:99:db:ac:71:c2:07:d7:72:37:1c:72:01:c1: e4:b6:95:fa:5d:0e:70:35:50:63:9b:bd:cb:9d:8b:c1:62:30: e8:b4:3a:0c:ee:af:fb:bc:6b:db:09:59:34:9d:7f:24:8e:da: 59:ad:35:7f:90:7b:84:3f:b4:c2:d0:16:09:5a:93:bc:37:5c: 5a:32:d5:5e:64:82:3d:d6:0a:e6:44:a1:e3:52:27:b6:b2:ef: 6d:92:5f:09:2a:77:d6:c1:6e:02:c6:08:db:d2:77:27:6b:04: 50:05:2d:e4:7e:6d:c9:90:d6:8b:c6:71:ea:39:c5:7c:df:f2: ce:71:8b:0e:56:87:fd:7c:a7:73:4a:f5:44:d8:c2:f2:45:e3: 0e:4a:3e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+Y3u7ER1RBGZbVep5VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMGE5NDBjZmQyZWVmZTgyZjU3MGZhZmM0ZmRjNWJkMDc5 NDFhMDYwHhcNMjYwMTI1MTkwMDU5WhcNMjYwMTI2MTkwMDU5WjAzMTEwLwYDVQQD EygwZjJjOWQyNTFlOTg5ZmM2MDE5ZDNjMzdiYTI1NmY4YWYyMWEwZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LKvk7oSdKDJg6gGgfcaEwWQ2ofd dm+Hi3jzebFQIeQaIJARCDKbUyv5gyK1L7SPOdkJq6O4fMMdYfhSSUN/QA17bOTF GHIR8mwYrg0kunLze6XA3kn3aq7bod3d5S2D0duKoYuWvwgEawlPabNi+RHpZiLA 84mrA0pCPklzPCMhCUUIAHFxGjSQB+vwmJznd1XU7/A98OhG8MqaOdSjZ5Yg2LCH nonPtyRJH0eWrVoyc0LJhI1yP+l+adx5sp9Iekj6spForWB810cBUcIUUfywEJ1H gLORIw7Wqp655XCGafeMgEnelDSJFsd2jW5YPCvw1G7q2ZCsFCX8rO28ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8snSUemJ/GAZ08N7olb4ryGg5IMB8GA1UdIwQY MBaAFAsKlAz9Lu/oL1cPr8T9xb0HlBoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUt NmU0Y2Q4MzZjN2NiLzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDU0NzUtYjIyNC00ZWE4LTkxYWUtNmU0Y2Q4MzZjN2Ni LzEvQ3dxVURQMHU3LWd2VnctdnhQM0Z2UWVVR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMGezNxB 7kbKihcp+NDW6gjfPS5E5RmTzrIXYFRT6wKiR2UM7tdFMuGifxP51HaGXZVuJyyC fFc0SFE+B0BjScFEyOW8h23En/VsnfRiGYtPAHUx0xlaTGM65fVO4jYrszodgr+9 GS2vtLes9lqv/i6Z26xxwgfXcjcccgHB5LaV+l0OcDVQY5u9y52LwWIw6LQ6DO6v +7xr2wlZNJ1/JI7aWa01f5B7hD+0wtAWCVqTvDdcWjLVXmSCPdYK5kSh41IntrLv bZJfCSp31sFuAsYI29J3J2sEUAUt5H5tyZDWi8Zx6jnFfN/yznGLDlaH/Xync0r1 RNjC8kXjDko+cA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:22 2026 by rpki-client