This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: MNzp4kAmbwxu6JcOwxMJsp3hfz/z8f+1kWnOg5/r8f4= Subject key identifier: 28:7D:22:25:B7:65:B0:21:E6:10:7F:D6:BB:03:1E:38:F5:64:57:9F Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019BF5E2E194D351704F42543E91ED8567E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 124C Signing time: Sun 25 Jan 2026 16:00:45 +0000 Manifest this update: Sun 25 Jan 2026 16:00:45 +0000 Manifest next update: Mon 26 Jan 2026 16:00:45 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: j6BKvSRxFHE9wcXylE9IA8MmLNLkmkydQ0ZgdIKWUeA=) 2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:e1:94:d3:51:70:4f:42:54:3e:91:ed:85:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Jan 25 16:00:45 2026 GMT Not After : Jan 26 16:00:45 2026 GMT Subject: CN=287d2225b765b021e6107fd6bb031e38f564579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:df:06:59:38:14:8c:39:05:e7:de:81:e3: 3b:dd:ca:70:c5:c9:cf:15:4a:84:e5:e7:a1:a5:fa: d1:27:2e:1c:85:d8:02:a8:32:3a:0a:d0:4c:47:d8: 59:aa:da:b1:bd:0b:6e:fc:41:f4:df:bf:97:e6:2d: 9e:fe:d5:4f:e9:01:99:cd:32:49:bd:8e:69:6d:61: e7:be:be:11:88:2b:86:c3:b4:64:05:99:50:2a:25: cf:99:89:86:a5:7f:77:18:db:bc:55:39:e6:dc:71: 7a:2c:2e:46:59:fd:3e:41:4e:a0:f3:a9:ad:2f:e7: f5:ad:0b:ef:46:f9:34:84:c1:3f:52:84:59:9e:3b: 6c:92:8f:bb:a0:76:a5:2c:28:4e:ce:83:9e:7e:87: 72:49:a0:eb:dd:31:07:ff:63:a7:49:5d:49:f1:61: 0d:20:d2:99:c0:16:b5:fd:3f:d8:d1:ce:71:af:55: 85:44:29:c8:2e:9e:54:4f:71:88:48:75:51:d3:ee: d2:6e:92:80:ba:ce:08:f7:56:f8:2f:6b:3a:a9:f9: 57:4b:29:a3:4f:cc:06:99:58:88:8a:c2:e3:e6:62: 4b:ce:ad:06:56:32:b1:2d:97:6f:22:fc:10:d4:98: 77:c5:9d:da:0d:a6:e5:7c:77:95:ba:22:8b:ab:65: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7D:22:25:B7:65:B0:21:E6:10:7F:D6:BB:03:1E:38:F5:64:57:9F X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:06:44:0e:cf:2c:f7:d0:a3:d8:6a:18:ed:84:2f:19:1b:d9: b1:2b:ea:90:60:24:4d:d2:3a:56:42:9b:83:10:80:b6:d1:e1: 2e:8f:1c:a8:c9:cd:2f:ac:55:3e:9c:68:4d:bc:42:45:4e:20: bc:43:20:5a:f5:9c:88:de:9f:7b:df:01:25:b3:65:c1:af:71: e3:6a:12:7a:88:f1:e8:fa:8f:ed:b5:8f:f3:14:f1:1a:f6:3d: 6e:9c:2b:0e:64:3c:19:79:54:16:e6:d7:b4:ce:af:e8:0a:48: a8:d2:9d:3e:33:79:62:25:ae:91:a0:b5:34:86:8c:74:1b:c2: bd:b0:25:bc:ee:a5:36:60:ab:2c:0e:95:3b:03:f8:06:ee:a8: 14:44:5a:8f:48:70:59:43:de:f1:e7:44:47:ab:38:9f:c8:87: dd:cf:d2:64:0c:55:00:33:5d:ff:42:00:fd:f4:50:39:75:a3: 21:2e:c2:5c:b1:60:f9:32:0c:81:a2:7f:03:fe:a8:7e:06:b9: 00:47:9b:50:62:8a:31:ba:0c:2e:5c:e1:96:ae:52:79:59:58: 6b:4b:0a:73:47:5c:14:db:4a:ec:43:b9:43:ab:ff:7a:88:9e: a7:01:80:fd:92:84:5f:dc:85:9a:4c:f2:4f:9c:4a:92:18:33: 52:28:ee:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14uGU01FwT0JUPpHthWfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjYwMTI1MTYwMDQ1WhcNMjYwMTI2MTYwMDQ1WjAzMTEwLwYDVQQD EygyODdkMjIyNWI3NjViMDIxZTYxMDdmZDZiYjAzMWUzOGY1NjQ1NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmLfBlk4FIw5BefegeM73cpwxcnP FUqE5eehpfrRJy4chdgCqDI6CtBMR9hZqtqxvQtu/EH037+X5i2e/tVP6QGZzTJJ vY5pbWHnvr4RiCuGw7RkBZlQKiXPmYmGpX93GNu8VTnm3HF6LC5GWf0+QU6g86mt L+f1rQvvRvk0hME/UoRZnjtsko+7oHalLChOzoOefodySaDr3TEH/2OnSV1J8WEN INKZwBa1/T/Y0c5xr1WFRCnILp5UT3GISHVR0+7SbpKAus4I91b4L2s6qflXSymj T8wGmViIisLj5mJLzq0GVjKxLZdvIvwQ1Jh3xZ3aDablfHeVuiKLq2XGjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh9IiW3ZbAh5hB/1rsDHjj1ZFefMB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAZEDs8s 99Cj2GoY7YQvGRvZsSvqkGAkTdI6VkKbgxCAttHhLo8cqMnNL6xVPpxoTbxCRU4g vEMgWvWciN6fe98BJbNlwa9x42oSeojx6PqP7bWP8xTxGvY9bpwrDmQ8GXlUFubX tM6v6ApIqNKdPjN5YiWukaC1NIaMdBvCvbAlvO6lNmCrLA6VOwP4Bu6oFERaj0hw WUPe8edER6s4n8iH3c/SZAxVADNd/0IA/fRQOXWjIS7CXLFg+TIMgaJ/A/6ofga5 AEebUGKKMboMLlzhlq5SeVlYa0sKc0dcFNtK7EO5Q6v/eoiepwGA/ZKEX9yFmkzy T5xKkhgzUijutw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:49 2026 by rpki-client