This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json) Hash identifier: zCpcYVYpXv7FLlF5XN1F4SEu/wOd1iHVTw3yDRO4WRs= Subject key identifier: 8C:E9:43:CA:33:75:B5:BE:79:2E:DB:E0:92:07:4E:8B:12:13:3D:DA Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c Certificate serial: 019BF79AD75EF6124361DD03BD548E5D8938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft Manifest number: 055F Signing time: Mon 26 Jan 2026 00:01:18 +0000 Manifest this update: Mon 26 Jan 2026 00:01:18 +0000 Manifest next update: Tue 27 Jan 2026 00:01:18 +0000 Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: lnfxza2gY0Krmy6vsBs8U8CW4EoGK3meRnv3JadwTp8=) 2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:d7:5e:f6:12:43:61:dd:03:bd:54:8e:5d:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c Validity Not Before: Jan 26 00:01:18 2026 GMT Not After : Jan 27 00:01:18 2026 GMT Subject: CN=8ce943ca3375b5be792edbe092074e8b12133dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:8a:04:89:70:48:2d:57:00:b7:cf:fa:dc: c4:85:68:b0:6e:52:c1:89:3d:e6:ab:ab:de:49:32: 43:7c:ca:2f:a2:50:d9:72:f9:45:5a:95:1f:44:fb: 69:6a:e5:8c:90:aa:70:1b:bb:cd:a5:b3:41:0a:f8: 45:aa:f0:25:47:e2:13:33:9a:54:85:fe:de:27:bc: 4d:6c:94:aa:e7:a3:9e:62:68:8d:a6:f9:86:17:0e: bd:c5:df:72:95:d5:9c:e1:d2:96:3e:75:68:97:8c: 23:6d:39:38:88:e6:ad:49:95:e6:82:cd:66:e9:61: 55:38:91:ec:c4:e1:73:d9:f5:38:4b:d8:51:88:e8: fd:42:4e:b6:ff:1a:94:24:00:8b:f7:9d:f8:c7:61: 38:f9:b6:81:a6:2e:f0:3e:b0:87:24:3b:e3:45:ae: ba:d7:2e:c3:f6:65:e6:2b:10:29:82:4f:d8:e3:5f: 98:d2:8b:48:71:0d:f3:01:b6:04:06:f2:14:a8:d6: 6f:eb:31:3b:8f:fa:22:ec:e6:23:b5:67:a0:41:86: e5:6b:c3:79:49:c7:63:7c:c6:3d:85:aa:72:5e:9c: 22:8f:50:57:b5:9e:c3:77:43:3e:dc:25:fe:ac:15: 36:cc:58:c4:6d:b1:99:07:04:25:85:e8:ed:8b:4e: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:43:CA:33:75:B5:BE:79:2E:DB:E0:92:07:4E:8B:12:13:3D:DA X509v3 Authority Key Identifier: keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c3:2e:c8:73:bd:66:61:ed:85:a3:dd:48:db:fe:9f:b5:68: 0d:2c:01:c9:ad:e4:9b:58:35:c9:4d:fb:75:31:ee:ea:7c:c5: d3:50:05:e9:25:f5:7c:d2:ed:92:64:24:4d:4c:f3:92:90:f4: ae:c9:27:3f:46:36:4b:59:2a:15:aa:dd:4b:26:57:f6:e8:f8: 81:8d:92:c8:1b:4c:cc:e2:c7:d4:c6:eb:65:ee:85:14:c7:a7: 2a:b7:e0:2d:b3:d6:78:a7:00:b3:4b:1f:36:e9:1f:ff:5c:54: 12:8c:28:a5:51:be:4b:fa:fc:e6:cc:84:0b:31:95:c1:50:c0: ce:1a:02:9b:d7:e8:a1:7c:46:99:69:42:2c:eb:4a:e7:f9:29: 87:9b:97:cd:ab:74:c0:19:8c:09:68:2c:14:28:65:85:09:cd: 6c:a9:0a:2e:50:de:ee:0c:a4:bc:d9:b9:6c:f4:3d:41:b1:8b: 1d:42:42:2e:cb:5e:79:b4:c7:30:ae:f5:b4:c3:e4:ab:ac:d1: fc:37:92:81:d1:74:ba:05:ed:2e:e1:7a:19:bc:5b:cc:06:9b: e1:d4:33:9d:5c:e0:37:33:74:f9:20:cc:a6:5a:7f:22:7e:46: d3:e2:be:f4:7e:87:28:1f:03:59:48:59:15:a0:87:0f:e0:eb: b5:6f:26:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mtde9hJDYd0DvVSOXYk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz MTFkOGMwHhcNMjYwMTI2MDAwMTE4WhcNMjYwMTI3MDAwMTE4WjAzMTEwLwYDVQQD Eyg4Y2U5NDNjYTMzNzViNWJlNzkyZWRiZTA5MjA3NGU4YjEyMTMzZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uKBIlwSC1XALfP+tzEhWiwblLB iT3mq6veSTJDfMovolDZcvlFWpUfRPtpauWMkKpwG7vNpbNBCvhFqvAlR+ITM5pU hf7eJ7xNbJSq56OeYmiNpvmGFw69xd9yldWc4dKWPnVol4wjbTk4iOatSZXmgs1m 6WFVOJHsxOFz2fU4S9hRiOj9Qk62/xqUJACL9534x2E4+baBpi7wPrCHJDvjRa66 1y7D9mXmKxApgk/Y41+Y0otIcQ3zAbYEBvIUqNZv6zE7j/oi7OYjtWegQYbla8N5 ScdjfMY9hapyXpwij1BXtZ7Dd0M+3CX+rBU2zFjEbbGZBwQlhejti058+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzpQ8ozdbW+eS7b4JIHTosSEz3aMB8GA1UdIwQY MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMMuyHO9 ZmHthaPdSNv+n7VoDSwBya3km1g1yU37dTHu6nzF01AF6SX1fNLtkmQkTUzzkpD0 rsknP0Y2S1kqFardSyZX9uj4gY2SyBtMzOLH1MbrZe6FFMenKrfgLbPWeKcAs0sf Nukf/1xUEowopVG+S/r85syECzGVwVDAzhoCm9fooXxGmWlCLOtK5/kph5uXzat0 wBmMCWgsFChlhQnNbKkKLlDe7gykvNm5bPQ9QbGLHUJCLsteebTHMK71tMPkq6zR /DeSgdF0ugXtLuF6GbxbzAab4dQznVzgNzN0+SDMplp/In5G0+K+9H6HKB8DWUhZ FaCHD+DrtW8moA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:09 2026 by rpki-client