This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json) Hash identifier: 6NLalFvN7+2GIlPkgdYk3wL10VfDBsAHOkz1Zn3iokM= Subject key identifier: 1B:4F:80:20:16:A1:6E:F5:7D:40:E0:06:8E:3A:05:4A:FF:B8:CD:32 Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Certificate serial: 019BF5ABC98EFA9065075F9F6BE8177BB5AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft Manifest number: 0D68 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: 8NaJ6CKoig6Tv+fg8Nbi9+nhr52QaGHW6iaD1VoKSF8=) 2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=) 3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c9:8e:fa:90:65:07:5f:9f:6b:e8:17:7b:b5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=1b4f802016a16ef57d40e0068e3a054affb8cd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:cf:2b:d9:49:0d:fa:8a:ed:b4:eb:a6:db: 0e:54:0c:6b:41:79:9e:c7:90:6c:ec:f0:64:f9:10: bb:3d:50:90:55:bb:84:1b:a6:0a:24:25:e0:2f:fd: 64:4b:c9:e6:b3:b4:9c:2b:fe:70:25:87:99:91:3b: 15:39:13:92:31:b0:02:95:d7:32:13:01:2d:d3:14: a3:de:c7:79:06:07:19:a1:1d:f7:63:28:b2:46:2b: 59:58:49:e9:3f:ec:10:63:b3:e6:0c:2e:96:ed:ec: 64:db:7d:3e:82:ee:b8:6e:db:37:ca:6f:f3:f5:91: 62:03:e6:ab:bd:c1:1a:4f:7b:29:80:cf:05:bd:5b: 83:03:5b:46:ea:9b:5f:12:56:bf:aa:0d:4e:93:13: 8d:01:44:59:12:b3:b5:c6:94:68:be:2e:70:ba:0f: 56:eb:50:65:e7:b1:3b:16:ef:f4:e3:98:94:9e:66: 3e:d4:8c:ba:4f:9c:7a:f1:c4:9f:e9:f0:29:2d:b6: ec:fc:22:aa:0f:a7:46:66:e5:ad:e0:21:e4:06:97: 46:fc:36:9e:68:ea:28:b3:e4:e3:ac:62:2e:7a:69: 52:39:2a:4a:51:a2:f0:67:e2:da:b8:c9:b8:95:2f: 6f:bc:2b:07:04:05:d5:fc:02:23:9c:69:91:a5:fb: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:80:20:16:A1:6E:F5:7D:40:E0:06:8E:3A:05:4A:FF:B8:CD:32 X509v3 Authority Key Identifier: keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ed:7e:56:23:62:1b:d6:3f:38:7f:45:7c:bb:78:d4:0c:45: 36:de:42:9d:41:9b:b6:0e:99:f2:ee:eb:87:c8:66:18:80:f3: 25:4b:04:c2:46:c9:a0:51:e2:9c:02:1e:96:2c:69:b7:21:13: 46:42:14:81:64:1e:da:5e:7e:42:49:c7:b3:7c:67:bb:1b:8e: 73:c0:40:70:c8:87:45:16:26:3d:fc:ae:b8:55:38:cd:5e:65: a4:6e:6e:ab:b8:1d:71:30:60:18:2d:54:d1:8c:b8:fe:6c:e2: e9:51:e0:f0:3d:8d:0b:8d:03:8c:f6:cc:74:54:ac:4a:d6:61: b9:77:00:a6:2e:c7:cb:d4:3b:2a:28:75:59:e6:98:39:56:b4: 3b:68:3b:48:bc:46:cf:85:ba:9b:9f:51:7d:28:7c:cf:9c:95: be:01:8a:36:7a:f4:5e:0a:f1:5e:6d:c4:4d:76:3a:09:46:55: 5f:25:3b:0b:6b:01:d8:79:fe:94:f0:41:c9:4b:02:8e:76:3d: e7:46:8a:1b:79:ac:17:62:84:b9:e0:1a:73:c9:de:9b:7e:f2: ab:35:92:0d:b2:f0:a5:84:bd:79:40:40:1e:40:41:9a:a7:82: cd:98:fd:2f:60:41:4c:2a:10:8d:3f:fc:81:1e:f6:45:f0:4e: 81:d7:74:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8mO+pBlB1+fa+gXe7WvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl NzU4MjAwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD EygxYjRmODAyMDE2YTE2ZWY1N2Q0MGUwMDY4ZTNhMDU0YWZmYjhjZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKbPK9lJDfqK7bTrptsOVAxrQXme x5Bs7PBk+RC7PVCQVbuEG6YKJCXgL/1kS8nms7ScK/5wJYeZkTsVOROSMbACldcy EwEt0xSj3sd5BgcZoR33YyiyRitZWEnpP+wQY7PmDC6W7exk230+gu64bts3ym/z 9ZFiA+arvcEaT3spgM8FvVuDA1tG6ptfEla/qg1OkxONAURZErO1xpRovi5wug9W 61Bl57E7Fu/045iUnmY+1Iy6T5x68cSf6fApLbbs/CKqD6dGZuWt4CHkBpdG/Dae aOoos+TjrGIuemlSOSpKUaLwZ+LauMm4lS9vvCsHBAXV/AIjnGmRpfuwhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtPgCAWoW71fUDgBo46BUr/uM0yMB8GA1UdIwQY MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4 LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+1+ViNi G9Y/OH9FfLt41AxFNt5CnUGbtg6Z8u7rh8hmGIDzJUsEwkbJoFHinAIelixptyET RkIUgWQe2l5+QknHs3xnuxuOc8BAcMiHRRYmPfyuuFU4zV5lpG5uq7gdcTBgGC1U 0Yy4/mzi6VHg8D2NC40DjPbMdFSsStZhuXcApi7Hy9Q7Kih1WeaYOVa0O2g7SLxG z4W6m59RfSh8z5yVvgGKNnr0XgrxXm3ETXY6CUZVXyU7C2sB2Hn+lPBByUsCjnY9 50aKG3msF2KEueAac8nem37yqzWSDbLwpYS9eUBAHkBBmqeCzZj9L2BBTCoQjT/8 gR72RfBOgdd0XQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:31 2026 by rpki-client