This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json) Hash identifier: XGQjcB6LFhRhni6M7M+RMZwjk6f46V3UxNalJ+wP8ds= Subject key identifier: 7A:A1:DD:36:95:59:53:F2:E1:CF:50:57:A9:EE:94:EA:32:54:74:DC Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019BF5AC5A6E96AD1A15457134A0AF597B26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft Manifest number: 1785 Signing time: Sun 25 Jan 2026 15:01:11 +0000 Manifest this update: Sun 25 Jan 2026 15:01:11 +0000 Manifest next update: Mon 26 Jan 2026 15:01:11 +0000 Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=) 2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: qTerM9W2gl8J6C+VW+dPmbU7OYYGlQ7Ko/YVZEhYEZ0=) 3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=) 4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:5a:6e:96:ad:1a:15:45:71:34:a0:af:59:7b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Jan 25 15:01:11 2026 GMT Not After : Jan 26 15:01:11 2026 GMT Subject: CN=7aa1dd36955953f2e1cf5057a9ee94ea325474dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c8:be:84:17:bf:3a:a7:06:7f:43:0e:ac:fd: 39:26:a6:24:57:5f:db:64:3c:af:e2:d0:85:81:60: 75:f9:3a:51:03:46:89:8e:a1:29:32:31:64:90:3c: d4:0d:3e:18:36:66:d2:9d:f9:b6:65:6d:6c:c5:b5: 6b:b8:cd:a2:e7:83:bc:35:f4:d4:48:a7:a3:8d:bc: 24:b0:30:4c:92:db:c5:95:53:14:a9:e8:2c:40:5d: 2b:ec:06:00:83:0f:ac:9f:f7:9e:c0:0a:6b:97:ef: 83:bd:e6:bf:a1:e2:6c:bb:8b:07:ea:ef:bb:b2:df: a2:28:26:99:45:e4:1a:9e:ff:a1:4c:c5:e5:3f:b0: 0e:5a:4c:6b:57:9e:2e:ef:7d:d6:c7:9a:27:c5:c3: 76:08:c7:c3:f7:30:bb:ad:f7:70:45:39:ca:d6:cc: e1:94:5f:03:18:96:e1:3c:03:d7:38:77:a1:b3:bb: 01:17:19:a4:33:b9:cb:0c:f3:80:e3:f5:45:8e:13: e2:a0:b6:ba:3f:dd:e6:b7:0b:12:6f:65:6e:a8:67: be:9e:0d:b9:2a:58:7b:cc:35:5a:e1:f4:81:1e:a8: 11:69:c9:86:06:6f:d6:df:5c:52:23:18:9f:0a:b1: ec:0c:bb:4d:51:d1:29:bc:6a:82:ca:24:41:06:e2: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:DD:36:95:59:53:F2:E1:CF:50:57:A9:EE:94:EA:32:54:74:DC X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:3d:23:7d:4d:c9:cd:9d:44:26:b1:e8:fb:e9:b7:28:7a: 7e:47:7f:97:2f:eb:77:6e:16:b2:2e:a0:e2:c1:d9:5c:e6:18: 70:64:e0:14:d4:e3:c6:54:ba:b4:46:3c:9d:7e:14:bc:28:37: 81:12:72:1f:5f:1c:b0:26:bd:8d:28:86:30:bc:47:62:64:0f: 71:46:4e:34:90:41:a7:70:b7:5b:b7:df:d5:14:e1:6c:5a:39: eb:08:f3:ad:a8:51:9f:1a:52:f4:73:8f:bf:db:a1:cd:97:28: 17:88:80:13:37:ed:c1:76:17:5c:bb:a6:e5:b7:a1:60:a3:44: 06:5c:11:64:30:7a:15:55:99:75:e3:36:c7:20:6d:a4:6b:c6: 26:68:22:9c:a9:ea:c5:77:ad:73:db:ab:28:46:96:53:21:03: 31:cb:42:d4:22:01:6e:c6:5c:56:36:fd:cf:a6:ec:37:19:04: 5b:31:e9:dc:75:2d:2c:15:34:1c:f5:7d:ee:40:59:db:80:eb: 48:60:05:1e:1f:35:db:e0:02:16:58:63:dc:f4:a1:e8:94:a9: 63:d2:fc:23:72:56:72:7b:6c:5f:29:8a:73:dc:36:4b:fd:62: 93:18:0d:ad:92:03:dd:08:59:e4:3e:18:4c:57:4c:92:33:9d: ae:a7:69:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFpulq0aFUVxNKCvWXsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjYwMTI1MTUwMTExWhcNMjYwMTI2MTUwMTExWjAzMTEwLwYDVQQD Eyg3YWExZGQzNjk1NTk1M2YyZTFjZjUwNTdhOWVlOTRlYTMyNTQ3NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6si+hBe/OqcGf0MOrP05JqYkV1/b ZDyv4tCFgWB1+TpRA0aJjqEpMjFkkDzUDT4YNmbSnfm2ZW1sxbVruM2i54O8NfTU SKejjbwksDBMktvFlVMUqegsQF0r7AYAgw+sn/eewAprl++Dvea/oeJsu4sH6u+7 st+iKCaZReQanv+hTMXlP7AOWkxrV54u733Wx5onxcN2CMfD9zC7rfdwRTnK1szh lF8DGJbhPAPXOHehs7sBFxmkM7nLDPOA4/VFjhPioLa6P93mtwsSb2VuqGe+ng25 Klh7zDVa4fSBHqgRacmGBm/W31xSIxifCrHsDLtNUdEpvGqCyiRBBuIK3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqh3TaVWVPy4c9QV6nulOoyVHTcMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+w9I31N yc2dRCax6Pvptyh6fkd/ly/rd24Wsi6g4sHZXOYYcGTgFNTjxlS6tEY8nX4UvCg3 gRJyH18csCa9jSiGMLxHYmQPcUZONJBBp3C3W7ff1RThbFo56wjzrahRnxpS9HOP v9uhzZcoF4iAEzftwXYXXLum5behYKNEBlwRZDB6FVWZdeM2xyBtpGvGJmginKnq xXetc9urKEaWUyEDMctC1CIBbsZcVjb9z6bsNxkEWzHp3HUtLBU0HPV97kBZ24Dr SGAFHh812+ACFlhj3PSh6JSpY9L8I3JWcntsXymKc9w2S/1ikxgNrZID3QhZ5D4Y TFdMkjOdrqdpLg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:58:26 2026 by rpki-client