This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: OR5xzQr6nyDCzECbKggipraNCi9ILRYwtM1o1xu0G+k= Subject key identifier: B6:70:FD:6B:C6:E8:7F:DA:75:3C:B2:56:C3:6D:03:26:89:9E:DF:A3 Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019BF7D1682899BEB15B5FB547593E8A94DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 124D Signing time: Mon 26 Jan 2026 01:00:54 +0000 Manifest this update: Mon 26 Jan 2026 01:00:54 +0000 Manifest next update: Tue 27 Jan 2026 01:00:54 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: fCDM1bbzzn7XnR5q/hDY/cQesa8udE4cwkqejPnNbpc=) 2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:68:28:99:be:b1:5b:5f:b5:47:59:3e:8a:94:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Jan 26 01:00:54 2026 GMT Not After : Jan 27 01:00:54 2026 GMT Subject: CN=b670fd6bc6e87fda753cb256c36d0326899edfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e8:49:be:53:2c:87:e9:92:33:c1:a9:15:25: bb:7b:db:f8:08:ce:bf:c6:a3:55:31:87:af:62:d6: f6:38:49:a9:ad:50:65:dd:34:8d:e5:3c:4e:77:70: a8:5e:b5:0d:1e:30:43:19:93:2b:12:ca:07:c7:10: 45:72:67:e4:3e:4d:76:ba:5b:db:2b:d2:49:9c:64: 3a:a1:b3:71:83:3c:61:65:f2:90:7c:40:81:9d:0d: 1e:ba:ea:ed:2c:49:c1:11:ba:d4:e6:df:c7:c1:ae: 4d:15:51:e5:93:ee:d7:da:2f:19:55:b0:af:5b:92: e0:54:a4:89:07:5e:a9:cc:3f:22:5c:ec:4c:21:8f: 4f:4f:90:93:66:f5:75:50:b6:88:f0:63:f0:97:f2: 11:52:ee:b9:bc:48:e1:2d:68:65:07:c7:e4:cf:63: 1d:e6:8b:95:d5:48:53:0a:ae:53:b1:a9:1f:9d:45: 24:00:2a:79:61:3b:1c:6b:7e:51:f9:bd:51:9a:c0: 7f:4b:d5:0a:3c:6a:f1:5d:9a:3e:ce:8f:26:a6:cd: 06:b9:ec:fb:30:cf:a5:ab:77:b4:a5:f9:f1:f3:c4: 8b:e6:88:84:47:83:ec:13:03:31:cd:db:be:55:87: fa:2a:5f:a9:b0:ba:cd:9d:4d:c8:0c:36:69:95:bf: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:70:FD:6B:C6:E8:7F:DA:75:3C:B2:56:C3:6D:03:26:89:9E:DF:A3 X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:01:c5:69:ac:ad:8d:ad:8d:a4:76:8c:7a:32:00:5d:d1:1d: e7:40:40:9a:ab:64:4e:ca:e1:e7:cc:85:13:44:c5:d0:fb:40: 7a:04:ff:2b:2a:d6:5a:66:9e:f7:97:a1:d5:73:fc:79:ec:4a: 5c:df:cb:b3:33:c7:30:92:ea:1a:b7:44:a0:42:87:b0:fa:0a: 28:45:aa:9b:4e:4b:8f:a2:4b:1c:de:d8:59:ab:78:ed:25:b1: b3:df:e0:7f:5d:1e:50:d1:47:09:07:e3:bd:52:41:44:6e:b3: 2c:4c:f5:ec:d3:54:1c:4a:51:a9:a2:27:b2:80:cc:aa:87:33: 9b:d5:f5:58:e8:d7:39:60:6f:1e:6e:20:51:ba:72:2f:b2:ed: 62:83:cf:c2:76:53:84:78:9c:45:7b:c8:89:2c:94:98:7b:08: 46:bf:ed:dc:dc:3b:05:39:04:7d:61:16:b3:18:4b:89:fd:9b: f9:34:b5:32:25:44:b6:1b:60:3f:71:24:13:14:04:4a:35:ef: 1b:a9:54:56:bf:3a:45:50:c0:14:00:17:24:a1:2d:c7:71:83: 04:e0:ff:9f:7f:19:f9:de:17:67:ee:78:c8:10:d8:a5:6d:e4: b3:55:f9:36:50:66:03:af:a2:e4:6a:7e:28:ee:4f:34:bf:e8: 94:7f:ad:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30Wgomb6xW1+1R1k+ipTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjYwMTI2MDEwMDU0WhcNMjYwMTI3MDEwMDU0WjAzMTEwLwYDVQQD EyhiNjcwZmQ2YmM2ZTg3ZmRhNzUzY2IyNTZjMzZkMDMyNjg5OWVkZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ehJvlMsh+mSM8GpFSW7e9v4CM6/ xqNVMYevYtb2OEmprVBl3TSN5TxOd3CoXrUNHjBDGZMrEsoHxxBFcmfkPk12ulvb K9JJnGQ6obNxgzxhZfKQfECBnQ0euurtLEnBEbrU5t/Hwa5NFVHlk+7X2i8ZVbCv W5LgVKSJB16pzD8iXOxMIY9PT5CTZvV1ULaI8GPwl/IRUu65vEjhLWhlB8fkz2Md 5ouV1UhTCq5TsakfnUUkACp5YTsca35R+b1RmsB/S9UKPGrxXZo+zo8mps0Guez7 MM+lq3e0pfnx88SL5oiER4PsEwMxzdu+VYf6Kl+psLrNnU3IDDZplb8QFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZw/WvG6H/adTyyVsNtAyaJnt+jMB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwHFaayt ja2NpHaMejIAXdEd50BAmqtkTsrh58yFE0TF0PtAegT/KyrWWmae95eh1XP8eexK XN/LszPHMJLqGrdEoEKHsPoKKEWqm05Lj6JLHN7YWat47SWxs9/gf10eUNFHCQfj vVJBRG6zLEz17NNUHEpRqaInsoDMqoczm9X1WOjXOWBvHm4gUbpyL7LtYoPPwnZT hHicRXvIiSyUmHsIRr/t3Nw7BTkEfWEWsxhLif2b+TS1MiVEthtgP3EkExQESjXv G6lUVr86RVDAFAAXJKEtx3GDBOD/n38Z+d4XZ+54yBDYpW3ks1X5NlBmA6+i5Gp+ KO5PNL/olH+tAw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:13 2026 by rpki-client