This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: 134rI8GugyqfeXPqCEgNoIdQcKt2grL46H5ZEkfVXuQ= Subject key identifier: E6:02:D1:5C:FB:70:8A:B2:DD:0B:86:6F:3D:AD:69:36:EF:35:1B:57 Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019BF72D2E8D84B46431A9758B59BF608D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:31 +0000 Manifest this update: Sun 25 Jan 2026 22:01:31 +0000 Manifest next update: Mon 26 Jan 2026 22:01:31 +0000 Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=) 2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: F0g7pFQfSlNRwQGhVAsI+5/iiZid90sJ36xW9vCIfS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:2e:8d:84:b4:64:31:a9:75:8b:59:bf:60:8d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Jan 25 22:01:31 2026 GMT Not After : Jan 26 22:01:31 2026 GMT Subject: CN=e602d15cfb708ab2dd0b866f3dad6936ef351b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:d7:6a:8d:68:58:45:44:46:96:c5:b7:b5: dd:a2:69:62:f4:7e:4c:6d:d9:db:9a:6c:f6:cb:80: e3:7a:78:f9:30:ac:2a:d5:0e:ab:2d:1e:a0:d2:4e: 50:ec:14:cc:6b:35:1a:9b:c6:0d:ee:8c:ed:e1:86: 78:5c:94:d8:3e:48:89:40:b9:fe:d0:12:01:bd:b4: fa:7f:c9:5b:a2:86:22:22:2c:99:cf:84:e5:4e:8e: 29:93:2c:5f:f2:f9:92:61:79:40:ae:02:79:40:6b: c7:c6:95:f4:81:d0:df:bb:93:2a:34:9f:fc:f4:70: 71:fe:25:0d:ec:f1:96:a0:3e:f2:40:c8:52:42:26: 8b:c9:44:f2:b7:e2:91:06:da:1e:20:d2:1e:94:61: 30:5c:e0:cc:c4:c9:2a:76:83:4e:82:3c:ef:be:2b: f5:1f:87:b9:4a:82:43:40:a6:f6:bb:43:d8:1f:3a: 52:e4:b9:03:06:60:30:4e:5f:16:20:7c:9f:4f:0b: 27:1c:98:86:92:b6:11:dc:c8:80:c0:24:61:ee:55: 0f:e3:4c:79:da:57:f0:b1:80:51:19:dc:14:6b:be: fc:f6:bf:05:8a:a4:94:70:1f:95:60:49:24:c5:3b: 37:d9:eb:33:06:55:08:03:1d:25:8a:b8:e2:07:8d: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:02:D1:5C:FB:70:8A:B2:DD:0B:86:6F:3D:AD:69:36:EF:35:1B:57 X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f7:ed:53:58:48:f2:e4:95:69:b0:8f:70:a8:a5:52:2e:2a: 9d:dc:ad:7f:39:d0:e0:d6:22:ca:38:8f:6a:bc:2e:ab:24:a2: 54:6b:fa:03:f8:9f:80:35:0e:82:27:e6:3c:34:6f:d4:26:ae: e1:89:32:f3:e8:ab:17:c8:5b:69:e1:c7:d2:55:62:e9:28:6a: 3d:aa:64:ca:83:11:78:49:ed:75:14:81:f4:81:b1:89:ea:94: 5d:93:2c:10:9a:7f:b2:a7:c7:e3:6a:aa:cd:25:71:e5:a8:55: e5:f4:45:23:c6:1c:20:42:41:47:c0:9a:b4:b3:aa:69:66:c0: bd:64:7c:bb:4e:17:5c:00:94:f8:90:9d:28:83:29:c6:19:23: 28:a2:37:09:a8:aa:c7:01:dd:ba:30:b3:11:03:6e:28:a4:48: 74:cc:40:0d:15:81:c4:b4:4f:3c:f5:45:7e:a4:85:a5:e4:a5: 0f:1e:f2:83:dd:d7:9d:98:f8:c2:55:c3:5f:6a:62:55:ca:cc: c6:cb:a8:df:28:1e:e1:5b:23:6d:4b:d8:b9:32:d8:7f:87:6d: 9f:2f:48:01:2f:37:5d:f7:fa:a5:a8:df:49:d2:ad:15:a1:06: 65:e6:d2:e3:9a:2b:4d:d0:ed:2d:44:aa:fc:fb:dd:0e:e2:6d: 5f:23:09:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LS6NhLRkMal1i1m/YI1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjYwMTI1MjIwMTMxWhcNMjYwMTI2MjIwMTMxWjAzMTEwLwYDVQQD EyhlNjAyZDE1Y2ZiNzA4YWIyZGQwYjg2NmYzZGFkNjkzNmVmMzUxYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVDXao1oWEVERpbFt7Xdomli9H5M bdnbmmz2y4Djenj5MKwq1Q6rLR6g0k5Q7BTMazUam8YN7ozt4YZ4XJTYPkiJQLn+ 0BIBvbT6f8lbooYiIiyZz4TlTo4pkyxf8vmSYXlArgJ5QGvHxpX0gdDfu5MqNJ/8 9HBx/iUN7PGWoD7yQMhSQiaLyUTyt+KRBtoeINIelGEwXODMxMkqdoNOgjzvviv1 H4e5SoJDQKb2u0PYHzpS5LkDBmAwTl8WIHyfTwsnHJiGkrYR3MiAwCRh7lUP40x5 2lfwsYBRGdwUa7789r8FiqSUcB+VYEkkxTs32eszBlUIAx0lirjiB40bEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYC0Vz7cIqy3QuGbz2taTbvNRtXMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvftU1hI 8uSVabCPcKilUi4qndytfznQ4NYiyjiParwuqySiVGv6A/ifgDUOgifmPDRv1Cau 4Yky8+irF8hbaeHH0lVi6ShqPapkyoMReEntdRSB9IGxieqUXZMsEJp/sqfH42qq zSVx5ahV5fRFI8YcIEJBR8CatLOqaWbAvWR8u04XXACU+JCdKIMpxhkjKKI3Caiq xwHdujCzEQNuKKRIdMxADRWBxLRPPPVFfqSFpeSlDx7yg93XnZj4wlXDX2piVcrM xsuo3yge4VsjbUvYuTLYf4dtny9IAS83Xff6pajfSdKtFaEGZebS45orTdDtLUSq /PvdDuJtXyMJoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:31:37 2026 by rpki-client