This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: WXKDP+aLICDty6puSwy5FNoEu/MPP1YtLIFryWLuM/c= Subject key identifier: DF:70:D6:9A:D0:81:8A:3A:86:F8:FB:FB:AD:07:5C:ED:A4:8F:54:18 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019BF4625879DB08FB8AB840A77B520B61B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 09:00:44 +0000 Manifest this update: Sun 25 Jan 2026 09:00:44 +0000 Manifest next update: Mon 26 Jan 2026 09:00:44 +0000 Files and hashes: 1: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=) 2: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=) 3: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=) 4: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=) 5: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=) 6: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: mzJOoisoQDBlvBf7QX6kKi0ahbW9cjc7h7hCyORrxno=) 7: hae0gayGe2g1D03nvSh_u0H2u2s.roa (hash: OF2Bvd/NPLRNkpIH3hrjKElY0WK9eslhWgO2CIxPJCw=) 8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=) 9: rgwz7iF3hHaUl5V19C4BKoY9OnE.roa (hash: ve1MCW6t2kzIlC3EVE/Neu+wkMeFHcsHuQFg1OD/guU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:58:79:db:08:fb:8a:b8:40:a7:7b:52:0b:61:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 25 09:00:44 2026 GMT Not After : Jan 26 09:00:44 2026 GMT Subject: CN=df70d69ad0818a3a86f8fbfbad075ceda48f5418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:82:4b:73:9e:8c:b5:28:66:43:fc:d6:fa:12: 64:49:c0:dd:7f:73:6d:e5:12:e0:c3:4e:e3:b1:30: 6e:d7:24:26:a9:f1:bd:2f:dd:63:5c:5e:ca:f9:1b: 83:7f:19:c0:e1:8e:11:21:a7:f4:1a:a2:88:dd:15: e8:37:9e:e7:9a:6a:56:81:9c:43:a6:a9:3e:4e:2e: c5:a1:b2:32:98:50:23:73:05:ed:3a:2c:d8:32:73: a6:28:61:89:4b:c2:d0:4b:ad:fc:4b:e5:62:68:27: de:36:b9:58:22:80:b1:51:4d:b2:4a:47:d9:25:54: cc:a0:09:b7:fa:eb:dd:17:24:08:0b:52:67:d8:6e: 30:b6:a3:b9:bc:d8:24:42:0f:ab:8d:a2:4b:64:86: 6a:df:ee:01:1d:1f:7f:f2:c9:21:72:77:80:76:c0: e7:2e:ee:3a:80:22:30:26:4e:4a:fc:ed:00:75:f5: a0:5b:4b:be:6a:66:01:95:b7:16:d9:10:81:5e:ef: c9:fd:8e:df:dd:ad:0f:b4:cf:db:30:73:25:92:4f: 17:1c:ec:51:7f:1a:23:45:ef:dd:cd:6f:ee:64:e7: f5:03:cf:83:80:54:cd:20:af:2e:1f:35:ad:84:95: 6c:8f:60:d5:b7:6a:cb:18:fa:ae:b5:5f:a4:2b:90: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:D6:9A:D0:81:8A:3A:86:F8:FB:FB:AD:07:5C:ED:A4:8F:54:18 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0b:5a:11:e4:72:22:c3:2f:f5:72:6d:13:39:df:d0:35:c0: aa:ba:97:6e:65:6e:29:a1:11:9a:2f:d3:5a:a5:4d:e4:d6:f8: 21:93:f1:11:c7:45:13:8a:06:de:f8:ee:b5:eb:58:91:0e:88: 6f:35:88:53:9a:c4:bf:e5:5f:c2:2d:ea:1c:68:b8:75:86:00: 1f:d2:87:a7:43:78:10:98:59:46:4b:62:45:b3:7a:74:ed:23: 8a:50:db:97:e2:25:ad:b1:5c:66:4a:d4:ed:e4:5d:fe:f0:9f: 99:d5:ef:bf:e8:8f:70:0b:8c:9e:da:27:28:2f:19:63:f3:3e: 63:6e:1d:97:0b:8a:21:bb:ff:63:63:0b:56:73:26:0e:d4:b8: f0:5c:79:d0:76:f4:0e:4b:fc:b5:c2:ec:3f:73:59:b8:11:10: 03:3d:96:53:5b:f9:fd:f2:df:07:30:3b:e2:cc:a1:2f:dd:b7: f7:df:31:3c:2f:8d:73:55:62:82:db:5a:78:62:8c:e5:b9:12: 2a:cd:1b:53:9f:b6:81:c2:b1:72:b5:f7:3e:a6:06:2e:63:62: fd:a3:0b:79:ef:24:a7:8e:b3:b3:42:b2:ce:bf:19:c8:4c:1a: a0:81:67:8e:85:c5:0f:02:3e:0f:a2:63:e6:57:00:ee:b3:2c: f4:b1:dd:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ylh52wj7irhAp3tSC2G5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTI1MDkwMDQ0WhcNMjYwMTI2MDkwMDQ0WjAzMTEwLwYDVQQD EyhkZjcwZDY5YWQwODE4YTNhODZmOGZiZmJhZDA3NWNlZGE0OGY1NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YJLc56MtShmQ/zW+hJkScDdf3Nt 5RLgw07jsTBu1yQmqfG9L91jXF7K+RuDfxnA4Y4RIaf0GqKI3RXoN57nmmpWgZxD pqk+Ti7FobIymFAjcwXtOizYMnOmKGGJS8LQS638S+ViaCfeNrlYIoCxUU2ySkfZ JVTMoAm3+uvdFyQIC1Jn2G4wtqO5vNgkQg+rjaJLZIZq3+4BHR9/8skhcneAdsDn Lu46gCIwJk5K/O0AdfWgW0u+amYBlbcW2RCBXu/J/Y7f3a0PtM/bMHMlkk8XHOxR fxojRe/dzW/uZOf1A8+DgFTNIK8uHzWthJVsj2DVt2rLGPqutV+kK5CMOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9w1prQgYo6hvj7+60HXO2kj1QYMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwtaEeRy IsMv9XJtEznf0DXAqrqXbmVuKaERmi/TWqVN5Nb4IZPxEcdFE4oG3vjutetYkQ6I bzWIU5rEv+Vfwi3qHGi4dYYAH9KHp0N4EJhZRktiRbN6dO0jilDbl+IlrbFcZkrU 7eRd/vCfmdXvv+iPcAuMntonKC8ZY/M+Y24dlwuKIbv/Y2MLVnMmDtS48Fx50Hb0 Dkv8tcLsP3NZuBEQAz2WU1v5/fLfBzA74syhL923998xPC+Nc1VigttaeGKM5bkS Ks0bU5+2gcKxcrX3PqYGLmNi/aMLee8kp46zs0Kyzr8ZyEwaoIFnjoXFDwI+D6Jj 5lcA7rMs9LHd4g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:42 2026 by rpki-client