This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json) Hash identifier: FB3ZAK+Jd9EiyuSpX5yIaxWNQmW4I4fHWW6Djis/f30= Subject key identifier: 7C:DC:10:7E:BB:CC:1C:CD:15:E2:61:B5:CD:FB:5A:EA:87:04:3A:23 Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Certificate serial: 019BF38701FA1DF73D23F801B43A14807992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft Manifest number: 096C Signing time: Sun 25 Jan 2026 05:01:09 +0000 Manifest this update: Sun 25 Jan 2026 05:01:09 +0000 Manifest next update: Mon 26 Jan 2026 05:01:09 +0000 Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: wOevX8K/8NBl6VEknQdA6Kaqz0YSxF6utT0i4A5Artg=) 2: JjNsdw31mkopTJEXLbd7F3jftjY.roa (hash: DFuBhTTsIvaSw7xpZBBqOn0fJhT7O4EMyfeXK8BYOr4=) 3: Z3vCIqOr8cFIHfCAG87UHRnj4gs.roa (hash: Nj8uppubigdG8cIGJW1LyHCqaPIHngDL7HFSlaeDITs=) 4: jN1MNJJzz6nkhurADJXEP9ytqmM.roa (hash: GRqEsDxhV3ugvj9OHpXpUsMc7ljdeWmRso4kAcjjsao=) 5: omXxQha0HM-pJ0TV0_0uSHRjPXE.roa (hash: Jj3CyBugiBkfT/V/5P2VA5GoJM48HMeye5aq9QG9uls=) 6: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (hash: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:01:fa:1d:f7:3d:23:f8:01:b4:3a:14:80:79:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Validity Not Before: Jan 25 05:01:09 2026 GMT Not After : Jan 26 05:01:09 2026 GMT Subject: CN=7cdc107ebbcc1ccd15e261b5cdfb5aea87043a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:14:7d:50:c7:47:ea:7f:fc:ef:48:1e:b2:d7: 5a:54:e1:32:b2:bd:4b:ce:c8:28:7a:9d:08:a8:ce: 03:b1:48:dc:45:93:9b:78:e1:1a:6f:4a:ea:d9:63: 44:ee:32:20:ce:82:36:58:27:53:14:9f:7d:1a:4e: 84:a8:6a:e6:eb:79:0a:47:ac:0e:2b:97:3b:01:d9: f9:f3:b4:55:a1:b7:03:fa:68:af:cc:9c:14:d6:44: 55:7d:ff:e4:64:30:96:9d:4a:8f:a2:53:00:ae:8f: ca:be:b5:76:7d:55:05:f4:fd:2a:61:0d:09:34:df: 1f:c9:1d:34:6d:cf:76:a0:8c:8e:d8:9f:ca:53:d7: 29:cb:cc:4c:df:ff:35:27:82:1f:57:24:47:89:35: c5:e2:20:0f:44:52:85:42:2f:a5:b9:34:dd:94:5b: eb:fe:37:7b:d9:b1:56:06:cc:a3:23:51:42:da:b0: 73:91:c0:35:2a:24:bc:c1:bc:da:2b:64:21:fd:bb: 08:50:0f:1b:08:c5:14:52:c3:49:ce:eb:57:f7:11: db:c1:32:61:f9:d8:fa:e8:b8:21:8b:91:13:bf:d6: 9d:58:5c:10:b1:13:80:93:cb:51:65:1e:3e:03:0d: 9f:bf:47:04:55:cc:9b:b1:af:7d:fa:b9:4e:74:d2: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:10:7E:BB:CC:1C:CD:15:E2:61:B5:CD:FB:5A:EA:87:04:3A:23 X509v3 Authority Key Identifier: keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:53:18:63:e3:8d:49:de:f2:4e:88:9d:bf:51:42:8a:be:b7: 63:0a:39:88:6d:a1:47:86:e2:5b:a4:fc:bf:39:a6:1e:74:a2: 26:44:92:db:5a:7c:a5:97:fa:c0:e0:52:94:82:a3:ad:d1:f8: 35:ad:80:1c:a1:8b:df:af:bc:5d:ae:47:13:02:4b:d4:ca:3d: c3:f2:75:5d:a8:dd:55:05:46:36:20:bc:12:39:bc:2d:6c:ce: b1:7d:c1:d3:ce:dd:e5:b6:8e:be:df:6a:ec:98:ad:a9:b4:45: 99:ed:e9:0d:90:97:78:87:0f:2c:24:e1:26:0b:a9:e8:fd:2a: 42:f2:25:3d:36:f5:ed:58:a5:5b:b6:8e:8a:14:05:3a:87:74: 4e:ae:e3:3e:79:4a:05:9c:5c:5d:6a:05:f9:78:d2:c2:52:2b: 22:97:67:9a:d8:1f:34:e1:ac:92:b0:2b:92:24:df:9f:51:53: 1f:e7:9d:d4:df:f3:51:25:ca:8f:ec:e1:fb:8e:e1:42:54:ac: 91:4f:39:ea:70:01:b3:fc:c4:3d:b6:83:dc:5d:cb:2c:6e:66: 5e:e4:90:93:94:fa:24:24:45:e3:e1:58:1b:5b:74:ac:e9:3b: 4d:66:7b:6c:a3:2e:ab:9b:41:cb:8a:b3:17:e1:4a:e5:a3:53: e2:63:a3:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhwH6Hfc9I/gBtDoUgHmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk MDc1YjEwHhcNMjYwMTI1MDUwMTA5WhcNMjYwMTI2MDUwMTA5WjAzMTEwLwYDVQQD Eyg3Y2RjMTA3ZWJiY2MxY2NkMTVlMjYxYjVjZGZiNWFlYTg3MDQzYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xR9UMdH6n/870gestdaVOEysr1L zsgoep0IqM4DsUjcRZObeOEab0rq2WNE7jIgzoI2WCdTFJ99Gk6EqGrm63kKR6wO K5c7Adn587RVobcD+mivzJwU1kRVff/kZDCWnUqPolMAro/KvrV2fVUF9P0qYQ0J NN8fyR00bc92oIyO2J/KU9cpy8xM3/81J4IfVyRHiTXF4iAPRFKFQi+luTTdlFvr /jd72bFWBsyjI1FC2rBzkcA1KiS8wbzaK2Qh/bsIUA8bCMUUUsNJzutX9xHbwTJh +dj66Lghi5ETv9adWFwQsROAk8tRZR4+Aw2fv0cEVcybsa99+rlOdNI0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzcEH67zBzNFeJhtc37WuqHBDojMB8GA1UdIwQY MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllMYY+ON Sd7yToidv1FCir63Ywo5iG2hR4biW6T8vzmmHnSiJkSS21p8pZf6wOBSlIKjrdH4 Na2AHKGL36+8Xa5HEwJL1Mo9w/J1XajdVQVGNiC8Ejm8LWzOsX3B087d5baOvt9q 7JitqbRFme3pDZCXeIcPLCThJgup6P0qQvIlPTb17VilW7aOihQFOod0Tq7jPnlK BZxcXWoF+XjSwlIrIpdnmtgfNOGskrArkiTfn1FTH+ed1N/zUSXKj+zh+47hQlSs kU856nABs/zEPbaD3F3LLG5mXuSQk5T6JCRF4+FYG1t0rOk7TWZ7bKMuq5tBy4qz F+FK5aNT4mOj5g== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:17 2026 by rpki-client