This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json) Hash identifier: KlcrS5YtJEOprxHZ0Y06saZg9yKEdtDZmess0a0zBc4= Subject key identifier: 68:9D:9E:DB:E7:CF:B6:12:A8:7F:FD:9B:D8:90:26:61:87:9A:B5:A9 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019BF619D4E0173C2B51C6216F5ADFCE2662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft Manifest number: 023E Signing time: Sun 25 Jan 2026 17:00:46 +0000 Manifest this update: Sun 25 Jan 2026 17:00:46 +0000 Manifest next update: Mon 26 Jan 2026 17:00:46 +0000 Files and hashes: 1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=) 2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=) 3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=) 4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: b8uRJksv+7jNZ68SCXNUKYvUiEoeJrc/J4Y1+bG5vWM=) 5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:d4:e0:17:3c:2b:51:c6:21:6f:5a:df:ce:26:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Jan 25 17:00:46 2026 GMT Not After : Jan 26 17:00:46 2026 GMT Subject: CN=689d9edbe7cfb612a87ffd9bd8902661879ab5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:df:28:a0:1d:e5:f9:c3:b9:da:b6:8d:cb: 81:54:c7:73:7e:5a:73:40:67:96:f8:2a:15:68:92: 76:f6:1e:7d:63:b4:f6:72:5e:95:44:7f:55:c1:1c: 7e:7a:e6:37:11:bb:2d:db:5c:78:92:61:eb:34:de: 26:39:b9:cd:bf:b3:de:68:e1:f9:9c:56:67:b0:7f: 3f:ad:ce:ae:c5:ce:dd:b1:57:a1:0d:08:bd:48:01: 29:0a:fe:26:f2:53:8b:07:cb:38:34:eb:f1:3b:e5: 72:4a:a7:27:24:b3:b6:bc:ff:6f:9f:a5:b4:cc:de: d9:3b:48:16:1b:32:5e:45:86:54:73:3f:ca:19:74: d1:0c:98:f4:38:6d:36:0d:24:75:ac:ca:7b:d8:07: f6:d3:69:6f:84:c7:75:54:7f:10:dd:ee:a0:6a:e5: 3c:de:5b:1a:22:f1:31:1d:d1:7a:7c:0f:95:3b:47: c6:1c:03:c4:00:f2:13:96:a9:db:87:dd:08:24:c5: fe:6f:22:bb:ef:3d:03:a5:81:2d:81:66:9c:83:3f: e2:a3:5b:31:d8:01:6a:5c:a2:96:75:92:90:35:d5: eb:91:e5:3a:9f:37:1f:70:bc:59:8f:4d:65:c8:c1: dd:c2:cc:ad:24:57:77:e9:09:08:57:f0:e0:25:65: 26:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:9E:DB:E7:CF:B6:12:A8:7F:FD:9B:D8:90:26:61:87:9A:B5:A9 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a4:d0:f8:84:9b:e0:18:46:79:3a:84:a0:27:f6:d6:4a:66: 60:b3:1c:29:44:06:54:45:23:a0:d3:5e:2e:e5:f3:b0:e4:d8: 83:9a:e1:e0:bd:52:6d:9d:98:54:31:4e:20:b5:b8:1c:38:5c: 1a:ab:67:b1:1a:cb:7a:cb:ed:ea:f9:f3:06:93:66:e0:30:b5: a8:49:82:f5:1a:bd:dd:0d:28:47:0c:dc:44:b9:cd:92:e5:0c: dd:03:11:60:95:d5:84:92:1d:73:21:45:6e:26:5c:50:ff:39: 31:a2:07:4b:2a:48:b2:0b:20:46:f0:0c:bc:e2:8b:72:dc:a5: bb:4f:50:9d:a4:b8:98:56:f6:72:76:8c:2a:eb:ef:86:7d:68: 6d:03:f6:53:1c:55:e6:ae:90:73:ca:62:1f:22:ea:a3:92:d7: 0f:d9:10:9e:5e:39:45:0c:92:92:21:96:b5:89:cf:66:9f:c5: e5:af:ec:88:6c:20:00:a5:df:6b:79:4f:8b:7c:3e:80:da:2d: dc:0d:fa:1d:b3:57:85:51:68:58:c0:2f:88:fa:44:49:6c:e7: 3f:e6:88:b1:86:b8:e7:18:00:4c:b7:3d:e5:48:73:af:64:13: b9:d3:a5:93:6d:6c:89:6a:c9:5e:bd:e3:3b:59:bb:e7:82:e3: 10:9a:51:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GdTgFzwrUcYhb1rfziZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjYwMTI1MTcwMDQ2WhcNMjYwMTI2MTcwMDQ2WjAzMTEwLwYDVQQD Eyg2ODlkOWVkYmU3Y2ZiNjEyYTg3ZmZkOWJkODkwMjY2MTg3OWFiNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPnfKKAd5fnDudq2jcuBVMdzflpz QGeW+CoVaJJ29h59Y7T2cl6VRH9VwRx+euY3Ebst21x4kmHrNN4mObnNv7PeaOH5 nFZnsH8/rc6uxc7dsVehDQi9SAEpCv4m8lOLB8s4NOvxO+VySqcnJLO2vP9vn6W0 zN7ZO0gWGzJeRYZUcz/KGXTRDJj0OG02DSR1rMp72Af202lvhMd1VH8Q3e6gauU8 3lsaIvExHdF6fA+VO0fGHAPEAPITlqnbh90IJMX+byK77z0DpYEtgWacgz/io1sx 2AFqXKKWdZKQNdXrkeU6nzcfcLxZj01lyMHdwsytJFd36QkIV/DgJWUmowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGidntvnz7YSqH/9m9iQJmGHmrWpMB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqTQ+ISb 4BhGeTqEoCf21kpmYLMcKUQGVEUjoNNeLuXzsOTYg5rh4L1SbZ2YVDFOILW4HDhc GqtnsRrLesvt6vnzBpNm4DC1qEmC9Rq93Q0oRwzcRLnNkuUM3QMRYJXVhJIdcyFF biZcUP85MaIHSypIsgsgRvAMvOKLctylu09QnaS4mFb2cnaMKuvvhn1obQP2UxxV 5q6Qc8piHyLqo5LXD9kQnl45RQySkiGWtYnPZp/F5a/siGwgAKXfa3lPi3w+gNot 3A36HbNXhVFoWMAviPpESWznP+aIsYa45xgATLc95Uhzr2QTudOlk21siWrJXr3j O1m754LjEJpRmg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:23:11 2026 by rpki-client