This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json) Hash identifier: rjkEKKlwKPISwZF2pD2X2tvvAVxBlWKUvwmWsNvb/6g= Subject key identifier: 32:79:85:91:6A:E1:5C:7E:52:DD:F3:41:1A:4E:58:C5:CF:39:30:9A Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b Certificate serial: 019BF7633C3AB4C1F971C6ADC39938092C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 23:00:34 +0000 Manifest this update: Sun 25 Jan 2026 23:00:34 +0000 Manifest next update: Mon 26 Jan 2026 23:00:34 +0000 Files and hashes: 1: Uo567tyscKKQ3DowdVwrO2rgRnk.roa (hash: 8NiKn7om8yJNgxOj/PU+Jf1HsBq9mHLW84RDCIVHBtY=) 2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: M2Ay3kb9HoExsBqNGOwfJXIdfrbaY5bOsbY4oOdwTgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:3c:3a:b4:c1:f9:71:c6:ad:c3:99:38:09:2c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b Validity Not Before: Jan 25 23:00:34 2026 GMT Not After : Jan 26 23:00:34 2026 GMT Subject: CN=327985916ae15c7e52ddf3411a4e58c5cf39309a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7b:13:9b:9b:55:d2:d4:01:47:b1:67:1d:64: 9f:cf:a7:0d:35:ef:79:c9:51:d7:4e:d5:3b:6f:1f: 16:bc:19:27:25:fc:99:92:50:a5:2f:82:cd:95:62: 6e:72:7a:ba:63:d2:6c:76:a7:8a:14:14:f1:ae:e7: 7e:20:65:56:cf:a3:60:bb:98:df:6d:da:de:27:2b: 0e:e9:97:a8:93:c6:ea:82:a4:5a:37:f2:1f:fc:6c: a8:d8:95:39:6e:b2:5a:52:22:87:4c:e7:19:13:38: 02:fe:2f:f8:05:70:d7:8f:7d:b9:ed:4d:e9:ed:a0: 26:03:bb:05:0f:f5:b8:f9:7f:e2:34:be:7d:d5:86: 13:e5:86:55:41:50:6e:d9:15:3e:c6:9b:9a:7e:de: 9f:5b:1a:cb:fb:fe:ae:27:0a:de:c4:b8:7f:2f:88: a6:ae:aa:7a:f0:d2:dc:79:0c:fb:6e:98:5a:7f:92: c2:62:93:ca:78:bb:86:10:98:36:49:cb:74:20:85: 96:1b:54:52:1c:7a:ad:a3:5c:ca:c3:4f:dd:6d:52: d2:aa:9e:0b:6b:f6:6b:34:3e:47:8c:22:8e:ba:f8: d1:f9:fd:be:94:36:51:5a:79:e0:a3:a3:16:84:4e: 14:8b:99:e5:4a:34:d1:ee:c1:41:4e:92:1e:7d:48: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:85:91:6A:E1:5C:7E:52:DD:F3:41:1A:4E:58:C5:CF:39:30:9A X509v3 Authority Key Identifier: keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:36:42:61:e7:67:d7:75:2f:53:49:15:3f:3d:e5:4d:1f:67: 92:2a:64:d0:4d:e4:e3:cf:b1:9f:81:e7:2f:b4:1d:4d:ba:fb: 33:43:78:ba:71:29:ee:d0:1d:a8:17:49:61:95:06:f9:15:04: b7:56:05:ee:09:7b:fa:9b:77:f3:79:db:a5:87:7a:72:17:50: e1:be:eb:05:65:1e:18:e7:1c:33:2d:9e:e4:c4:fd:fa:2a:b8: 72:4e:fd:15:db:15:d2:81:33:a5:57:a6:12:b7:1e:3c:54:5d: 75:32:92:85:b1:1f:82:a8:02:ed:72:8b:60:e1:17:a5:c8:14: a7:7b:14:87:1b:37:b5:1e:00:17:08:20:8b:15:a2:e0:3d:73: cf:78:92:29:6b:88:b8:13:18:61:8c:47:85:8c:84:23:65:ac: b2:84:5c:ed:3d:84:6f:b8:fc:0a:59:f8:aa:5f:fb:6f:a4:3b: ce:2c:8c:cb:97:c5:6c:1c:ec:7a:90:01:99:02:4e:55:08:4e: 71:b7:c2:5f:2f:84:e5:32:9b:5b:38:67:79:ca:b5:a7:da:95: f6:e6:97:bc:0d:65:76:48:87:3f:fc:01:05:de:70:af:18:74: f9:3f:06:d0:24:2f:98:09:a4:cf:31:2e:3f:52:73:2a:41:29: c9:f8:33:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Yzw6tMH5ccatw5k4CSxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk ZjM0MmIwHhcNMjYwMTI1MjMwMDM0WhcNMjYwMTI2MjMwMDM0WjAzMTEwLwYDVQQD EygzMjc5ODU5MTZhZTE1YzdlNTJkZGYzNDExYTRlNThjNWNmMzkzMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXsTm5tV0tQBR7FnHWSfz6cNNe95 yVHXTtU7bx8WvBknJfyZklClL4LNlWJucnq6Y9JsdqeKFBTxrud+IGVWz6Ngu5jf bdreJysO6Zeok8bqgqRaN/If/Gyo2JU5brJaUiKHTOcZEzgC/i/4BXDXj3257U3p 7aAmA7sFD/W4+X/iNL591YYT5YZVQVBu2RU+xpuaft6fWxrL+/6uJwrexLh/L4im rqp68NLceQz7bphaf5LCYpPKeLuGEJg2Sct0IIWWG1RSHHqto1zKw0/dbVLSqp4L a/ZrND5HjCKOuvjR+f2+lDZRWnngo6MWhE4Ui5nlSjTR7sFBTpIefUhiQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ5hZFq4Vx+Ut3zQRpOWMXPOTCaMB8GA1UdIwQY MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDZCYedn 13UvU0kVPz3lTR9nkipk0E3k48+xn4HnL7QdTbr7M0N4unEp7tAdqBdJYZUG+RUE t1YF7gl7+pt383nbpYd6chdQ4b7rBWUeGOccMy2e5MT9+iq4ck79FdsV0oEzpVem ErcePFRddTKShbEfgqgC7XKLYOEXpcgUp3sUhxs3tR4AFwggixWi4D1zz3iSKWuI uBMYYYxHhYyEI2WssoRc7T2Eb7j8Cln4ql/7b6Q7ziyMy5fFbBzsepABmQJOVQhO cbfCXy+E5TKbWzhnecq1p9qV9uaXvA1ldkiHP/wBBd5wrxh0+T8G0CQvmAmkzzEu P1JzKkEpyfgzcA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:33 2026 by rpki-client