This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json) Hash identifier: i36vj3jWCU85Ph+Vm7Jcuq3o2GzAG1QevN8NSb3gYJk= Subject key identifier: 3E:EC:F8:14:36:93:D1:5A:4D:C4:69:38:9E:1C:FA:B2:BA:10:4B:09 Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019BF4629AE457610C80A3E0E357D07AEBAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft Manifest number: 125D Signing time: Sun 25 Jan 2026 09:01:01 +0000 Manifest this update: Sun 25 Jan 2026 09:01:01 +0000 Manifest next update: Mon 26 Jan 2026 09:01:01 +0000 Files and hashes: 1: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=) 2: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: NhweAThQQ8wwdehW6llZwMmEKafj34D1qIYyig/Jf4o=) 3: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=) 4: qWMcoazuJWd0mzovPbjclSWnCpk.roa (hash: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q=) 5: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=) 6: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (hash: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:9a:e4:57:61:0c:80:a3:e0:e3:57:d0:7a:eb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Jan 25 09:01:01 2026 GMT Not After : Jan 26 09:01:01 2026 GMT Subject: CN=3eecf8143693d15a4dc469389e1cfab2ba104b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:78:ef:5f:94:f3:85:cb:33:87:f9:19:83: 63:5d:62:a9:13:6a:37:70:45:fc:55:07:5e:40:71: bd:2c:85:d7:8e:9e:f1:2f:29:7e:44:b5:57:b3:dd: c8:64:e0:76:99:9c:e2:b8:fc:99:80:06:ef:e9:8c: 0d:86:b4:f4:b4:85:82:d0:ee:3b:09:59:c3:06:65: 08:ab:13:ae:56:3b:5c:89:4d:e0:cd:e2:ed:61:e9: ba:d4:9d:38:32:b3:fd:85:bb:24:98:d1:62:3c:60: 8c:2c:f1:48:53:88:94:e0:ab:9c:c1:b0:1b:93:fa: 37:c4:da:cb:f7:dc:8d:45:05:21:ea:fa:70:28:6f: 91:20:52:84:02:bf:6b:b6:91:ba:c9:46:ed:d4:2b: 57:06:7d:06:77:00:ed:25:b0:76:f1:13:69:4a:4c: 93:e5:ef:cb:b4:6b:c8:67:f6:0d:f9:f8:13:31:17: a9:a2:68:31:6e:b8:24:a2:26:a1:4a:84:2f:57:0b: 17:a8:66:5a:80:98:98:97:f7:e2:94:37:ca:6b:1d: e3:13:92:03:f9:1e:bd:48:5a:36:c3:e2:de:e4:0d: 99:08:a8:42:9d:95:a8:93:e3:88:45:60:db:a6:06: fa:e8:01:c2:b2:7d:3d:1f:91:4a:32:f2:4a:5a:25: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EC:F8:14:36:93:D1:5A:4D:C4:69:38:9E:1C:FA:B2:BA:10:4B:09 X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:2e:7d:43:a0:9f:4d:1f:9e:7c:cf:a1:26:19:82:e8:83:d6: 1b:68:a0:4f:cd:32:42:d0:15:90:40:17:e8:85:74:2f:14:ef: 18:1c:13:e3:1c:e2:33:6c:d3:07:8a:52:ca:6b:cd:fb:e7:b1: a4:1b:e6:f4:e1:8a:d4:4a:83:35:87:28:e3:3a:82:7e:64:2f: 37:10:84:8a:5c:03:96:5f:ce:8b:4e:84:23:e1:a7:51:b4:05: 5f:23:e2:6b:31:fd:f4:f8:e1:3c:83:62:aa:0d:2d:01:c8:28: 24:d3:90:05:bc:56:47:bd:99:dc:e1:f4:37:d1:1e:ca:7b:5b: 09:fa:b0:bd:02:62:0f:c4:47:19:bc:b9:62:19:67:5d:95:8d: 5b:30:b9:17:42:5a:e5:ae:29:94:b6:35:e5:6a:04:f3:0c:a0: 4c:c3:df:a0:0d:f1:b4:92:15:c1:49:72:39:f3:4a:03:70:dd: 09:d1:eb:fa:9c:7b:39:39:93:6c:84:40:c0:ac:6e:52:93:b5: c5:bb:90:eb:aa:ef:85:66:ee:1c:4c:fc:34:7d:7d:a7:b4:76: bb:1b:9b:2b:a0:2a:c3:e0:a9:37:d4:7c:ba:dc:d1:96:d4:f3: 25:3d:e3:55:16:d1:4a:d7:31:fa:be:b7:71:a4:d1:0a:1a:b9: 98:ed:76:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YprkV2EMgKPg41fQeuurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjYwMTI1MDkwMTAxWhcNMjYwMTI2MDkwMTAxWjAzMTEwLwYDVQQD EygzZWVjZjgxNDM2OTNkMTVhNGRjNDY5Mzg5ZTFjZmFiMmJhMTA0YjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroZ471+U84XLM4f5GYNjXWKpE2o3 cEX8VQdeQHG9LIXXjp7xLyl+RLVXs93IZOB2mZziuPyZgAbv6YwNhrT0tIWC0O47 CVnDBmUIqxOuVjtciU3gzeLtYem61J04MrP9hbskmNFiPGCMLPFIU4iU4KucwbAb k/o3xNrL99yNRQUh6vpwKG+RIFKEAr9rtpG6yUbt1CtXBn0GdwDtJbB28RNpSkyT 5e/LtGvIZ/YN+fgTMRepomgxbrgkoiahSoQvVwsXqGZagJiYl/filDfKax3jE5ID +R69SFo2w+Le5A2ZCKhCnZWok+OIRWDbpgb66AHCsn09H5FKMvJKWiVvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7s+BQ2k9FaTcRpOJ4c+rK6EEsJMB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwC59Q6Cf TR+efM+hJhmC6IPWG2igT80yQtAVkEAX6IV0LxTvGBwT4xziM2zTB4pSymvN++ex pBvm9OGK1EqDNYco4zqCfmQvNxCEilwDll/Oi06EI+GnUbQFXyPiazH99PjhPINi qg0tAcgoJNOQBbxWR72Z3OH0N9EeyntbCfqwvQJiD8RHGby5YhlnXZWNWzC5F0Ja 5a4plLY15WoE8wygTMPfoA3xtJIVwUlyOfNKA3DdCdHr+px7OTmTbIRAwKxuUpO1 xbuQ66rvhWbuHEz8NH19p7R2uxubK6Aqw+CpN9R8utzRltTzJT3jVRbRStcx+r63 caTRChq5mO12lA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:19 2026 by rpki-client