This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json) Hash identifier: Lw9X9XtQ884WY6XovUdl2PJQqPAfGrZEaIJPaQ8g7MU= Subject key identifier: C6:A5:EE:BC:20:F3:58:CD:DF:42:2F:68:2B:42:CD:2F:CB:8A:67:29 Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef Certificate serial: 019BF8AD2721EAFECF0FA53FC53162CAC581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft Manifest number: 04E3 Signing time: Mon 26 Jan 2026 05:00:55 +0000 Manifest this update: Mon 26 Jan 2026 05:00:55 +0000 Manifest next update: Tue 27 Jan 2026 05:00:55 +0000 Files and hashes: 1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: YfXegZCukqsAULlSWvbj+7f4pil5m1x3adT5X5jA1Uw=) 2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:27:21:ea:fe:cf:0f:a5:3f:c5:31:62:ca:c5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef Validity Not Before: Jan 26 05:00:55 2026 GMT Not After : Jan 27 05:00:55 2026 GMT Subject: CN=c6a5eebc20f358cddf422f682b42cd2fcb8a6729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:38:dc:11:94:02:03:6c:73:c3:c0:e2:0f: a4:06:fa:f5:8b:3a:98:2c:77:b5:0b:80:93:d7:41: 1c:f2:cc:2d:4f:19:3f:88:89:58:72:b9:f2:0d:c3: fc:cb:e3:54:28:f3:cc:a7:ea:84:34:3f:61:84:ff: 50:e5:a0:9b:c6:0f:6e:9a:34:33:ba:9d:a1:14:68: 37:78:73:d9:32:1c:cb:1a:1f:87:9a:cc:16:30:a6: 05:d8:b5:e5:9c:08:a2:e9:da:16:25:eb:78:97:f8: 61:03:05:ca:12:61:de:6f:c4:0a:c1:ea:4d:63:57: 74:5a:a0:a4:8d:3d:52:95:c8:40:89:24:d2:f1:1a: 6a:eb:bb:c9:64:25:e6:3b:c1:ea:c5:6e:e2:a2:07: f8:d4:f6:e5:b4:d3:f0:dd:6b:d2:94:ec:6b:f2:39: 42:ad:97:95:56:1d:e7:a9:6f:dd:7f:15:be:27:6e: a4:e5:83:7b:38:bf:68:68:b4:e2:51:45:10:77:dc: 34:58:e2:3e:d3:f7:dc:f7:93:7e:82:ff:ef:a3:b7: 46:fc:c1:68:ca:46:8c:b2:f7:27:42:9c:c6:1f:c3: 38:04:9d:b7:81:a2:52:f3:7b:1b:fb:c0:2f:cc:c0: a9:bf:c7:f3:ed:2c:a0:eb:aa:9c:de:ff:72:93:e5: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:EE:BC:20:F3:58:CD:DF:42:2F:68:2B:42:CD:2F:CB:8A:67:29 X509v3 Authority Key Identifier: keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c9:41:d9:93:ee:fb:42:a9:a8:cd:9b:f3:7c:aa:89:69:04: 44:d3:71:c3:38:dd:20:c2:6a:f2:59:4e:ba:ab:32:ee:d7:d9: f8:a0:24:f8:0f:67:5e:76:04:33:1f:58:b5:57:db:39:de:9e: 52:11:a6:d8:60:4f:7b:6d:53:f6:e6:b2:3d:14:3f:ee:e4:28: 70:87:82:5d:24:bf:3b:34:e3:77:d9:85:53:7b:42:50:44:85: 91:10:77:2e:f3:1e:2a:d5:8d:1e:9e:75:17:1c:60:3e:06:d7: b6:dc:30:9e:6d:71:ee:1e:7b:c6:37:2c:bc:74:5f:b1:a4:05: 00:37:8c:b8:d0:47:d3:fc:83:e7:f7:e4:31:2e:d9:f4:9d:95: 5e:a6:52:09:e3:cd:96:2d:97:30:d5:23:fc:58:7f:82:b6:47: 80:8d:eb:4d:16:3c:92:10:bf:10:9c:45:6b:90:e5:59:1f:e8: 2b:ff:90:ce:71:13:2a:bf:4d:e0:a8:80:f6:bb:56:89:65:bd: 1f:1e:bd:fb:8e:bf:fd:56:fb:f0:ea:e1:a8:68:65:52:f2:d2: 60:4f:04:21:65:f2:39:d7:08:ba:d2:94:f8:b1:0d:cf:df:af: 01:b8:75:e2:5f:c6:14:83:cd:37:a4:f1:71:61:58:c9:e1:2d: 7a:74:0a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rSch6v7PD6U/xTFiysWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl MmQxZWYwHhcNMjYwMTI2MDUwMDU1WhcNMjYwMTI3MDUwMDU1WjAzMTEwLwYDVQQD EyhjNmE1ZWViYzIwZjM1OGNkZGY0MjJmNjgyYjQyY2QyZmNiOGE2NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1s43BGUAgNsc8PA4g+kBvr1izqY LHe1C4CT10Ec8swtTxk/iIlYcrnyDcP8y+NUKPPMp+qEND9hhP9Q5aCbxg9umjQz up2hFGg3eHPZMhzLGh+HmswWMKYF2LXlnAii6doWJet4l/hhAwXKEmHeb8QKwepN Y1d0WqCkjT1SlchAiSTS8Rpq67vJZCXmO8HqxW7iogf41PbltNPw3WvSlOxr8jlC rZeVVh3nqW/dfxW+J26k5YN7OL9oaLTiUUUQd9w0WOI+0/fc95N+gv/vo7dG/MFo ykaMsvcnQpzGH8M4BJ23gaJS83sb+8AvzMCpv8fz7Syg66qc3v9yk+VR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMal7rwg81jN30IvaCtCzS/LimcpMB8GA1UdIwQY MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0 LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMlB2ZPu +0KpqM2b83yqiWkERNNxwzjdIMJq8llOuqsy7tfZ+KAk+A9nXnYEMx9YtVfbOd6e UhGm2GBPe21T9uayPRQ/7uQocIeCXSS/OzTjd9mFU3tCUESFkRB3LvMeKtWNHp51 FxxgPgbXttwwnm1x7h57xjcsvHRfsaQFADeMuNBH0/yD5/fkMS7Z9J2VXqZSCePN li2XMNUj/Fh/grZHgI3rTRY8khC/EJxFa5DlWR/oK/+QznETKr9N4KiA9rtWiWW9 Hx69+46//Vb78OrhqGhlUvLSYE8EIWXyOdcIutKU+LENz9+vAbh14l/GFIPNN6Tx cWFYyeEtenQKhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:31 2026 by rpki-client