This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json) Hash identifier: AjXIMDzfjtkVt4hhFvEh2x6vIaVpSUriL5n15Rn+8xY= Subject key identifier: C4:9E:E1:C4:45:36:FD:7E:6D:BC:19:1B:DE:EC:38:24:EA:BE:04:DA Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Certificate serial: 019BF46264269AAF7B0827347AD95DC44DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft Manifest number: 0566 Signing time: Sun 25 Jan 2026 09:00:47 +0000 Manifest this update: Sun 25 Jan 2026 09:00:47 +0000 Manifest next update: Mon 26 Jan 2026 09:00:47 +0000 Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: LKbb2RzvacQxF9lsxCpx+twNMYSeGmGFQ22uu+eqv34=) 2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:64:26:9a:af:7b:08:27:34:7a:d9:5d:c4:4d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Validity Not Before: Jan 25 09:00:47 2026 GMT Not After : Jan 26 09:00:47 2026 GMT Subject: CN=c49ee1c44536fd7e6dbc191bdeec3824eabe04da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:ec:6f:9c:e9:15:09:8e:cd:13:79:36:14: d4:30:9e:8a:de:de:67:df:3e:11:d0:5a:45:40:17: 67:2d:4f:d7:4b:61:58:6d:d4:7a:18:38:1a:45:30: 29:91:84:08:2e:72:85:21:5d:46:d5:3e:2f:05:06: 49:71:f5:e1:48:94:22:95:32:58:25:8a:d0:ac:1d: 59:50:b4:5c:9e:4c:43:50:d6:df:b9:f7:ae:4b:53: 0c:1b:89:15:b5:14:24:f6:ac:06:e6:09:27:30:81: 31:80:95:a8:39:9d:f5:db:e3:93:f7:c9:5f:51:de: c1:0b:74:48:8c:d6:ff:fc:b6:3e:f6:a5:97:f2:f1: b7:ea:d1:21:a1:42:48:de:d1:4d:a8:33:62:4e:d5: d7:b1:b6:57:ae:30:0d:4c:da:7e:30:f4:f1:dd:51: f4:9f:00:85:77:f9:4e:6f:4d:4c:db:cc:e4:f3:d7: 93:ae:cc:42:64:ec:56:03:03:40:4b:d9:68:e6:af: fa:37:ab:b5:41:70:d6:4e:b7:58:d1:54:9f:67:61: 6a:1f:11:a1:92:77:bf:05:e7:eb:3b:e9:10:f7:da: 97:6d:d9:68:91:ba:fc:0b:3e:79:5a:e5:9b:f9:ee: 3e:fc:af:b2:d6:39:fa:f5:41:bd:90:31:85:47:5c: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:E1:C4:45:36:FD:7E:6D:BC:19:1B:DE:EC:38:24:EA:BE:04:DA X509v3 Authority Key Identifier: keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5b:91:d6:b3:f2:c3:7f:0c:b2:aa:92:63:1e:ff:aa:3f:bd: f6:74:64:59:a6:33:dc:b4:72:f3:d7:4c:24:bd:4c:f4:69:c4: 88:2c:db:f8:9d:09:bf:0b:c0:d5:7c:5c:36:3b:5b:e2:a2:ad: 55:5f:d5:ef:1d:52:95:52:78:eb:52:4d:06:5b:6d:4b:a9:81: aa:7f:a8:2d:66:8e:e8:31:a3:28:16:eb:6e:fc:4e:ef:e0:be: b5:08:2a:96:f0:40:b4:d9:d5:06:c6:ae:5a:3d:a2:78:b0:24: 7b:86:ed:80:f1:99:c2:73:da:84:0d:1e:44:cd:ef:be:c6:e9: 7b:e1:88:35:ee:11:8f:c1:35:a8:5b:fd:99:f4:f5:ab:b6:e9: e2:70:da:e0:81:ef:8d:66:40:a8:ed:fc:13:66:50:3d:4e:01: ee:0f:55:f5:6e:09:b7:3c:fd:90:08:8e:a0:cf:ef:45:92:ae: 7b:c4:ce:21:01:a3:d5:20:0e:9d:ee:0b:8b:98:ca:63:8b:6d: d6:75:26:7b:e4:82:2c:91:cb:17:7b:e0:50:a2:ac:03:c7:16: aa:49:dd:d2:39:c3:7a:82:21:3e:f8:c8:7b:9b:c2:c2:23:7b: 0d:2e:0f:56:4e:35:44:93:4f:cc:c2:dd:2e:78:cf:fd:15:c1: fb:c7:cc:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YmQmmq97CCc0etldxE3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi OWQzYWIwHhcNMjYwMTI1MDkwMDQ3WhcNMjYwMTI2MDkwMDQ3WjAzMTEwLwYDVQQD EyhjNDllZTFjNDQ1MzZmZDdlNmRiYzE5MWJkZWVjMzgyNGVhYmUwNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigzsb5zpFQmOzRN5NhTUMJ6K3t5n 3z4R0FpFQBdnLU/XS2FYbdR6GDgaRTApkYQILnKFIV1G1T4vBQZJcfXhSJQilTJY JYrQrB1ZULRcnkxDUNbfufeuS1MMG4kVtRQk9qwG5gknMIExgJWoOZ312+OT98lf Ud7BC3RIjNb//LY+9qWX8vG36tEhoUJI3tFNqDNiTtXXsbZXrjANTNp+MPTx3VH0 nwCFd/lOb01M28zk89eTrsxCZOxWAwNAS9lo5q/6N6u1QXDWTrdY0VSfZ2FqHxGh kne/BefrO+kQ99qXbdlokbr8Cz55WuWb+e4+/K+y1jn69UG9kDGFR1x8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSe4cRFNv1+bbwZG97sOCTqvgTaMB8GA1UdIwQY MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFuR1rPy w38MsqqSYx7/qj+99nRkWaYz3LRy89dMJL1M9GnEiCzb+J0JvwvA1XxcNjtb4qKt VV/V7x1SlVJ461JNBlttS6mBqn+oLWaO6DGjKBbrbvxO7+C+tQgqlvBAtNnVBsau Wj2ieLAke4btgPGZwnPahA0eRM3vvsbpe+GINe4Rj8E1qFv9mfT1q7bp4nDa4IHv jWZAqO38E2ZQPU4B7g9V9W4Jtzz9kAiOoM/vRZKue8TOIQGj1SAOne4Li5jKY4tt 1nUme+SCLJHLF3vgUKKsA8cWqknd0jnDeoIhPvjIe5vCwiN7DS4PVk41RJNPzMLd LnjP/RXB+8fMjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:33 2026 by rpki-client