This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json) Hash identifier: rAKp1iK/LWiCSwbNSXCZG55ulgmCfkBNpOpjLoIVpoE= Subject key identifier: 41:4B:1B:E2:04:B8:22:A2:4D:7D:DF:69:D7:58:47:BB:81:41:82:D9 Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Certificate serial: 019BF76399590F7EE5F29E01E13F46501963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft Manifest number: 1759 Signing time: Sun 25 Jan 2026 23:00:58 +0000 Manifest this update: Sun 25 Jan 2026 23:00:58 +0000 Manifest next update: Mon 26 Jan 2026 23:00:58 +0000 Files and hashes: 1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=) 2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: L1zDLcLDnKE8ML5SpNMOZOOPPY9e6TqQ+omUDB2/JTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:99:59:0f:7e:e5:f2:9e:01:e1:3f:46:50:19:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Validity Not Before: Jan 25 23:00:58 2026 GMT Not After : Jan 26 23:00:58 2026 GMT Subject: CN=414b1be204b822a24d7ddf69d75847bb814182d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:46:2a:01:4c:f8:aa:96:5d:3b:98:df:05: 87:fe:82:4c:7d:ea:da:5b:e6:ef:8f:43:5e:b1:22: c0:37:a3:85:75:e5:27:fd:9f:23:20:a5:b4:0c:c2: c2:1f:c4:d6:cd:54:54:77:8b:bd:fa:d4:42:b4:6a: dc:6e:49:4d:92:71:6c:7d:99:f2:70:f8:1f:d1:8d: 2e:30:0a:ce:ec:ba:99:d4:ff:f2:33:c3:00:6a:71: 74:7f:06:96:4d:9a:90:8f:d2:0b:af:f7:fe:3d:3b: 5c:81:4f:97:17:fb:47:1b:29:3a:54:a8:d9:3d:5a: 3c:c8:37:7d:1e:55:b3:b4:d6:df:f8:07:85:8c:a6: ed:bd:34:27:d4:e3:72:e6:8e:4c:01:66:49:70:c1: 3b:3c:db:40:93:24:10:0c:97:4d:3f:d6:c3:0f:c4: 1d:7a:f1:0d:9a:d9:15:50:7d:3b:85:ec:c3:3c:01: 8f:c6:cc:93:fa:a6:30:1d:f3:99:2a:ab:61:b1:7b: b8:16:be:d2:00:ef:ab:c6:a7:94:12:dc:9e:2c:26: 69:cb:10:a6:df:c6:fe:8a:9b:18:f8:78:04:cb:ea: cb:35:8f:d5:2b:53:e0:58:4a:c5:f7:c9:7a:f2:15: 05:32:fd:19:c7:88:90:40:36:8c:0c:d2:73:9c:a5: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4B:1B:E2:04:B8:22:A2:4D:7D:DF:69:D7:58:47:BB:81:41:82:D9 X509v3 Authority Key Identifier: keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:06:7b:20:04:98:50:41:8d:c1:79:d8:94:5a:93:f3:76:5b: 95:ea:40:69:3a:ae:68:a1:2f:a6:a4:5d:c8:03:d2:e1:eb:e7: fd:b2:cd:f1:9e:de:14:cf:4c:aa:37:a9:59:e0:fc:2d:b3:64: 0b:88:3d:c6:3b:4a:ae:90:bf:e2:00:1a:19:79:8d:1c:61:ef: 76:e8:06:5a:d8:fe:1e:ad:eb:8a:58:3d:ef:83:99:99:d5:f7: d7:7d:b7:84:04:e5:d2:47:db:aa:60:05:5a:3c:b0:d9:be:6e: f5:93:41:20:f1:1f:c0:47:27:ab:f0:59:f9:88:66:a2:77:27: 61:b0:e0:12:7b:e8:7f:64:d3:8f:05:ce:c4:ce:52:4d:4a:d5: 29:92:53:11:94:56:3f:77:69:e1:71:27:ff:10:29:7b:4a:49: 8a:73:ce:41:a6:7b:96:ed:16:8d:12:a5:7a:0e:e5:fe:21:1a: 96:01:8d:de:5f:80:f5:d3:32:b2:ab:04:17:9b:09:e2:ee:ea: 6f:d2:bb:aa:22:6f:cc:db:29:02:95:6f:d5:0d:b7:5a:a3:19: c9:06:6c:84:9d:5d:f2:f3:42:b3:90:04:22:7c:5d:83:29:90: b9:9b:51:bb:10:ec:74:b7:8b:a6:5f:54:f4:4a:1a:07:44:5c: 59:88:02:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5lZD37l8p4B4T9GUBljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzc4NDU5OTU3NzZjZjZmMmEwODM3ZjdhZDRjMWE5MWJj OTdkODIwHhcNMjYwMTI1MjMwMDU4WhcNMjYwMTI2MjMwMDU4WjAzMTEwLwYDVQQD Eyg0MTRiMWJlMjA0YjgyMmEyNGQ3ZGRmNjlkNzU4NDdiYjgxNDE4MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudGKgFM+KqWXTuY3wWH/oJMfera W+bvj0NesSLAN6OFdeUn/Z8jIKW0DMLCH8TWzVRUd4u9+tRCtGrcbklNknFsfZny cPgf0Y0uMArO7LqZ1P/yM8MAanF0fwaWTZqQj9ILr/f+PTtcgU+XF/tHGyk6VKjZ PVo8yDd9HlWztNbf+AeFjKbtvTQn1ONy5o5MAWZJcME7PNtAkyQQDJdNP9bDD8Qd evENmtkVUH07hezDPAGPxsyT+qYwHfOZKqthsXu4Fr7SAO+rxqeUEtyeLCZpyxCm 38b+ipsY+HgEy+rLNY/VK1PgWErF98l68hUFMv0Zx4iQQDaMDNJznKW8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFLG+IEuCKiTX3faddYR7uBQYLZMB8GA1UdIwQY MBaAFHJ3hFmVd2z28qCDf3rUwakbyX2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgt ZWVlNmJhMTgyOWI0LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgtZWVlNmJhMTgyOWI0 LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAZ7IASY UEGNwXnYlFqT83ZblepAaTquaKEvpqRdyAPS4evn/bLN8Z7eFM9MqjepWeD8LbNk C4g9xjtKrpC/4gAaGXmNHGHvdugGWtj+Hq3rilg974OZmdX31323hATl0kfbqmAF Wjyw2b5u9ZNBIPEfwEcnq/BZ+YhmoncnYbDgEnvof2TTjwXOxM5STUrVKZJTEZRW P3dp4XEn/xApe0pJinPOQaZ7lu0WjRKleg7l/iEalgGN3l+A9dMysqsEF5sJ4u7q b9K7qiJvzNspApVv1Q23WqMZyQZshJ1d8vNCs5AEInxdgymQuZtRuxDsdLeLpl9U 9EoaB0RcWYgCEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:42 2026 by rpki-client