This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: ATLOWQwuBVb0+zaXQVysYCvQsmL5J6GbnQwoiQWKu+w= Subject key identifier: 6A:73:93:9F:1E:90:B5:0F:70:47:4A:94:E5:17:46:0A:5F:39:7D:5E Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019BF6881931E4CB75C516EE3218B4EE3491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 04CD Signing time: Sun 25 Jan 2026 19:01:12 +0000 Manifest this update: Sun 25 Jan 2026 19:01:12 +0000 Manifest next update: Mon 26 Jan 2026 19:01:12 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: PvpubvSCSfhH1msbMlrgTIegzQaStrfSSgwqqToxkZU=) 2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:19:31:e4:cb:75:c5:16:ee:32:18:b4:ee:34:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Jan 25 19:01:12 2026 GMT Not After : Jan 26 19:01:12 2026 GMT Subject: CN=6a73939f1e90b50f70474a94e517460a5f397d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:57:41:de:ff:fb:0e:69:a1:99:06:6a:5b: 80:17:2a:4a:ca:27:67:5e:a1:d4:c4:b5:c7:7d:08: b7:80:9c:10:79:a4:4a:ee:cb:60:fb:dd:59:a6:9c: 89:51:6e:02:1d:64:b0:2b:38:29:1d:6e:ed:62:b6: 8a:b1:8c:af:d6:3f:d1:e2:a7:17:96:bf:45:dd:05: 06:bd:79:fb:4c:6e:31:ca:e4:6e:2f:8b:16:24:4d: cf:d9:0c:83:d3:48:94:e2:f0:55:c3:e3:e7:4a:92: 30:32:a5:1c:fa:e4:ca:b1:8d:3f:99:80:d1:c7:4b: 31:36:05:11:9b:58:74:bc:a5:ae:31:b4:6a:c2:ae: 77:91:d1:e3:1d:9d:dc:fb:a3:a1:6b:db:76:70:3f: f6:20:c3:a2:31:c5:16:77:a0:e4:a8:b8:30:be:a2: d8:42:27:85:bb:ce:6c:b7:da:0f:e5:22:42:df:89: 11:e3:86:b7:0d:64:17:b6:56:29:8e:eb:87:bb:26: a8:f3:e7:02:14:c2:98:0f:1b:52:18:c8:e3:d4:d8: ba:41:9c:38:43:6b:f7:01:f8:d1:f8:e1:ab:fe:a7: 4f:90:cc:f6:46:5b:41:c1:6c:c2:51:5b:21:e6:fe: 42:44:1d:ee:f3:b9:04:ba:6c:db:d7:8e:9f:10:df: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:73:93:9F:1E:90:B5:0F:70:47:4A:94:E5:17:46:0A:5F:39:7D:5E X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:a9:45:24:f8:ca:46:dd:01:d4:0f:7e:32:66:c6:2b:b2: 7c:f8:a3:fd:e5:b1:82:5b:89:0b:ee:c2:2b:3b:23:4a:81:53: 29:34:f1:83:89:23:e6:62:3b:3e:43:74:c1:14:e5:b8:cc:05: 67:3f:5f:b9:84:57:1f:dc:41:74:b8:c1:94:19:81:25:b5:29: bb:a8:d4:d5:8a:0c:c1:40:b3:72:c2:b4:94:45:a9:c2:c1:5c: 2e:a9:52:11:4d:34:18:af:6f:aa:cc:71:a2:3b:d0:dc:a0:12: fb:8d:26:93:75:b6:40:b8:6f:db:c7:4c:99:9f:8d:15:be:a8: 0b:84:56:ee:4b:43:48:65:7a:c2:01:5d:f4:f4:49:6c:4b:3c: 3d:49:57:ef:a4:b8:2f:bf:86:cc:0a:6d:c6:92:22:0c:93:a8: bb:63:17:9c:f9:3e:01:51:fa:6a:6d:7c:dc:26:c2:ed:8b:bf: d1:4b:1b:25:24:d0:4e:cd:37:55:7c:7b:14:98:19:70:b6:78: 71:8d:8d:16:bf:14:e9:74:f2:70:f2:4e:de:c9:73:41:3a:9d: 83:1c:c8:26:c3:b2:c3:57:92:de:16:03:8c:89:84:d9:39:14: 85:ec:60:ef:fa:a1:c7:8f:85:eb:ea:d4:51:bf:85:d6:11:a9: b3:88:b2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBkx5Mt1xRbuMhi07jSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjYwMTI1MTkwMTEyWhcNMjYwMTI2MTkwMTEyWjAzMTEwLwYDVQQD Eyg2YTczOTM5ZjFlOTBiNTBmNzA0NzRhOTRlNTE3NDYwYTVmMzk3ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjghXQd7/+w5poZkGaluAFypKyidn XqHUxLXHfQi3gJwQeaRK7stg+91ZppyJUW4CHWSwKzgpHW7tYraKsYyv1j/R4qcX lr9F3QUGvXn7TG4xyuRuL4sWJE3P2QyD00iU4vBVw+PnSpIwMqUc+uTKsY0/mYDR x0sxNgURm1h0vKWuMbRqwq53kdHjHZ3c+6Oha9t2cD/2IMOiMcUWd6DkqLgwvqLY QieFu85st9oP5SJC34kR44a3DWQXtlYpjuuHuyao8+cCFMKYDxtSGMjj1Ni6QZw4 Q2v3AfjR+OGr/qdPkMz2RltBwWzCUVsh5v5CRB3u87kEumzb146fEN8niwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpzk58ekLUPcEdKlOUXRgpfOX1eMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGM+pRST4 ykbdAdQPfjJmxiuyfPij/eWxgluJC+7CKzsjSoFTKTTxg4kj5mI7PkN0wRTluMwF Zz9fuYRXH9xBdLjBlBmBJbUpu6jU1YoMwUCzcsK0lEWpwsFcLqlSEU00GK9vqsxx ojvQ3KAS+40mk3W2QLhv28dMmZ+NFb6oC4RW7ktDSGV6wgFd9PRJbEs8PUlX76S4 L7+GzAptxpIiDJOou2MXnPk+AVH6am183CbC7Yu/0UsbJSTQTs03VXx7FJgZcLZ4 cY2NFr8U6XTycPJO3slzQTqdgxzIJsOyw1eS3hYDjImE2TkUhexg7/qhx4+F6+rU Ub+F1hGps4iyXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:56:51 2026 by rpki-client