This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json) Hash identifier: v+ByE03oF+H3DOPH7DrPP9sUrXYQqBLGKGw86L/zW0A= Subject key identifier: 19:E2:17:1F:7F:3A:D2:48:23:C2:18:60:F6:B4:CB:B4:7B:AF:7C:72 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019BF6510A4309EB4A7EB5D04022DD60E043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft Manifest number: 13B3 Signing time: Sun 25 Jan 2026 18:01:04 +0000 Manifest this update: Sun 25 Jan 2026 18:01:04 +0000 Manifest next update: Mon 26 Jan 2026 18:01:04 +0000 Files and hashes: 1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=) 2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=) 3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: WoRn9Knyq60O7UNiER3Zsnj64VbT2iU56peiUMqOF/U=) 4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=) 5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:0a:43:09:eb:4a:7e:b5:d0:40:22:dd:60:e0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Jan 25 18:01:04 2026 GMT Not After : Jan 26 18:01:04 2026 GMT Subject: CN=19e2171f7f3ad24823c21860f6b4cbb47baf7c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:44:b6:35:f2:12:19:88:35:94:8c:39:67: 76:0c:b7:ed:38:11:19:69:00:73:20:60:27:aa:43: 35:44:b2:e2:18:aa:b1:65:4f:77:67:7b:0b:af:97: 8e:21:56:54:34:03:17:be:4b:01:ff:b2:bf:cc:9b: ec:a6:80:2c:53:ba:e8:4d:ff:6a:b8:ee:80:16:2f: 39:6e:f2:90:8f:5b:8c:3e:7a:33:0e:3c:d7:9c:f7: 35:fe:dd:d1:9a:3f:78:8a:82:e1:cb:87:0e:a8:79: dd:3c:97:1a:ec:c0:56:4a:0d:f8:df:23:41:2d:e9: 84:20:e8:28:67:cf:55:08:57:76:3a:59:64:6c:d8: 84:33:98:ad:02:5c:80:a1:a5:70:2b:de:4a:e2:7b: 23:f0:3c:88:e8:4a:72:3e:6a:a3:97:8f:2d:ff:7c: f8:fa:a0:15:4b:d5:fe:13:02:fc:a3:e5:14:a0:85: b6:d8:fd:d2:63:4a:63:19:da:fa:72:01:b9:ba:22: 85:16:13:77:f6:56:7c:b0:2c:3a:bb:e4:17:1e:21: b8:c7:7e:3a:11:77:25:2a:a2:5e:cf:f6:ab:61:15: 47:13:86:07:d5:cf:15:b1:fa:38:dc:0e:5a:dd:47: d3:30:5a:33:28:63:53:f0:88:cf:34:86:c1:b4:0f: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E2:17:1F:7F:3A:D2:48:23:C2:18:60:F6:B4:CB:B4:7B:AF:7C:72 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:eb:a6:62:f3:bb:c4:d5:86:05:7b:22:15:1a:a2:a1:84:3f: cc:63:16:21:a0:ff:82:f9:19:11:03:c9:b2:38:84:2b:18:2d: ce:1d:a9:dd:0e:12:e0:d7:a9:0e:b4:df:53:7f:f3:60:47:63: 26:ad:b1:c8:d8:c6:52:92:c8:22:4a:7a:07:a9:36:0d:68:ba: 77:a0:c7:92:14:81:13:df:08:a9:97:2c:47:07:c5:ab:44:62: d4:b3:e6:34:74:67:3a:44:9d:21:7e:db:e5:9e:33:2c:4b:ca: e9:61:1e:06:ff:2e:79:77:c9:22:1c:bb:28:2a:ac:14:bb:28: fe:74:40:20:6f:7a:94:35:bf:18:9a:f3:f8:77:19:4a:b8:42: 33:51:ca:2f:5b:87:5d:9e:79:62:ab:89:4c:92:d4:7d:47:ad: a2:91:a6:b6:b3:e2:e6:5c:62:9f:f8:7b:ef:42:6d:41:b4:44: cd:2d:99:9b:7f:64:30:dc:e4:13:74:ab:ae:da:a1:30:ac:45: 73:8d:6a:a1:2b:40:04:96:54:90:57:a2:fb:13:3d:90:e1:e8: 24:6d:c3:74:30:a4:46:b6:24:a2:48:4f:a2:70:0b:7a:f3:7b: 27:e5:8e:60:c0:5e:c0:1f:94:d6:22:19:e2:c9:cc:62:fc:a7: 4a:16:55:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQpDCetKfrXQQCLdYOBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjYwMTI1MTgwMTA0WhcNMjYwMTI2MTgwMTA0WjAzMTEwLwYDVQQD EygxOWUyMTcxZjdmM2FkMjQ4MjNjMjE4NjBmNmI0Y2JiNDdiYWY3YzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgpEtjXyEhmINZSMOWd2DLftOBEZ aQBzIGAnqkM1RLLiGKqxZU93Z3sLr5eOIVZUNAMXvksB/7K/zJvspoAsU7roTf9q uO6AFi85bvKQj1uMPnozDjzXnPc1/t3Rmj94ioLhy4cOqHndPJca7MBWSg343yNB LemEIOgoZ89VCFd2OllkbNiEM5itAlyAoaVwK95K4nsj8DyI6EpyPmqjl48t/3z4 +qAVS9X+EwL8o+UUoIW22P3SY0pjGdr6cgG5uiKFFhN39lZ8sCw6u+QXHiG4x346 EXclKqJez/arYRVHE4YH1c8Vsfo43A5a3UfTMFozKGNT8IjPNIbBtA8oYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBniFx9/OtJII8IYYPa0y7R7r3xyMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuumYvO7 xNWGBXsiFRqioYQ/zGMWIaD/gvkZEQPJsjiEKxgtzh2p3Q4S4NepDrTfU3/zYEdj Jq2xyNjGUpLIIkp6B6k2DWi6d6DHkhSBE98IqZcsRwfFq0Ri1LPmNHRnOkSdIX7b 5Z4zLEvK6WEeBv8ueXfJIhy7KCqsFLso/nRAIG96lDW/GJrz+HcZSrhCM1HKL1uH XZ55YquJTJLUfUetopGmtrPi5lxin/h770JtQbREzS2Zm39kMNzkE3SrrtqhMKxF c41qoStABJZUkFei+xM9kOHoJG3DdDCkRrYkokhPonALevN7J+WOYMBewB+U1iIZ 4snMYvynShZVtw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:04 2026 by rpki-client