This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json) Hash identifier: fZhe+dF9S05sdMO4SMbpGdbjB4CAvLI73iCUIIm5oq0= Subject key identifier: B4:8A:FA:7E:8C:1F:90:93:BE:01:BC:5E:38:25:5D:1A:3B:4A:66:7C Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Certificate serial: 019BF5ABECEBA2B854DCCAAC7E7FF18F20C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft Manifest number: 13EC Signing time: Sun 25 Jan 2026 15:00:43 +0000 Manifest this update: Sun 25 Jan 2026 15:00:43 +0000 Manifest next update: Mon 26 Jan 2026 15:00:43 +0000 Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: ww5oiThUJ5DaW/oBitTx9LU1eRJkqasQD/sYzFUAt9E=) 2: t_3KExq4t288IjtqVXAOQe_Eba8.roa (hash: ChTQhqA/DHUVGryflG/Am/U8Pp4mklmr4RiBocThAjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:ec:eb:a2:b8:54:dc:ca:ac:7e:7f:f1:8f:20:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Validity Not Before: Jan 25 15:00:43 2026 GMT Not After : Jan 26 15:00:43 2026 GMT Subject: CN=b48afa7e8c1f9093be01bc5e38255d1a3b4a667c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:61:ec:49:7a:69:ea:75:98:a3:bc:12:ac: 72:06:71:e2:d6:c9:00:27:20:2b:e9:5e:68:8e:b5: ae:a1:ab:cb:19:19:cb:2f:c9:c4:0e:5d:55:fa:0a: 24:d2:d8:75:2e:7d:6a:90:a2:b4:a2:5e:56:bb:e0: 23:49:9a:9f:d2:4a:a1:f4:06:eb:b7:9e:33:f4:73: 76:ff:9a:00:2d:19:82:fd:81:00:ec:76:12:e8:ed: 61:32:83:3e:b2:93:5b:85:73:5c:29:df:d3:e3:99: f5:7c:28:cf:d0:0e:76:d8:65:27:bc:29:b7:c7:3c: fb:78:ff:10:2f:49:11:89:99:bf:f6:e2:0b:bc:ae: 50:8a:db:3b:2f:d6:b0:d6:93:a7:4c:14:d4:93:f1: 8f:a1:7d:64:67:80:04:20:e7:44:a9:19:d6:18:69: 19:08:47:8e:8d:c1:57:c9:0f:c5:3d:2f:af:ca:f0: 34:4b:3e:c3:32:63:a8:02:9a:cd:a1:72:69:a4:62: fb:21:43:1c:76:0c:0c:37:64:e5:3b:c2:f0:71:03: e3:fa:a7:60:38:1c:cd:32:5c:82:52:c4:5e:1d:43: ad:d7:70:dd:f3:6c:d7:15:17:80:b5:2a:2b:62:bf: af:0e:17:8b:68:17:ea:5c:bf:41:b9:69:32:2c:e0: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:FA:7E:8C:1F:90:93:BE:01:BC:5E:38:25:5D:1A:3B:4A:66:7C X509v3 Authority Key Identifier: keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:d9:a1:34:81:bc:f8:1c:a3:10:5f:c6:4b:87:e9:2a:df: 8f:70:da:60:18:1c:a2:f6:0c:d7:1c:2b:59:fe:06:55:8c:14: 86:fb:43:ca:a8:0a:7f:1b:9e:88:39:3c:30:c3:2f:5a:be:78: 0d:ec:e8:02:21:56:16:e1:72:77:4a:79:36:e9:30:22:aa:d8: 5e:85:30:24:28:48:9f:3e:86:63:74:9f:14:d9:43:99:bd:88: c8:1e:f0:38:1e:be:a4:5c:32:07:69:fd:c0:63:a1:6a:ba:6a: 8f:48:28:ad:35:51:45:18:e1:ed:45:a5:e9:59:72:d3:b3:67: 0e:9a:9e:9e:51:38:29:35:80:10:cc:3b:95:aa:1a:4b:f5:c5: 67:12:ba:79:62:f7:33:66:31:54:e9:60:34:fe:51:1a:ef:b4: 2d:2b:28:b8:56:40:f0:50:5a:e7:5b:d0:6a:f3:99:47:38:32: 36:a7:bf:15:d8:12:3f:58:81:40:a5:81:2c:c9:be:44:a5:e8: 5b:35:95:81:9d:b9:69:4a:75:7a:42:38:61:41:50:bb:4f:21: 25:cb:d3:41:53:09:45:70:35:d0:7e:3c:b8:62:c8:d4:61:6c: 13:5c:5b:46:53:a4:2a:94:94:e9:3c:9a:c6:3d:b7:f7:13:fa: 74:af:d9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+zrorhU3Mqsfn/xjyDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw MjcxMDgwHhcNMjYwMTI1MTUwMDQzWhcNMjYwMTI2MTUwMDQzWjAzMTEwLwYDVQQD EyhiNDhhZmE3ZThjMWY5MDkzYmUwMWJjNWUzODI1NWQxYTNiNGE2NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0th7El6aep1mKO8EqxyBnHi1skA JyAr6V5ojrWuoavLGRnLL8nEDl1V+gok0th1Ln1qkKK0ol5Wu+AjSZqf0kqh9Abr t54z9HN2/5oALRmC/YEA7HYS6O1hMoM+spNbhXNcKd/T45n1fCjP0A522GUnvCm3 xzz7eP8QL0kRiZm/9uILvK5Qits7L9aw1pOnTBTUk/GPoX1kZ4AEIOdEqRnWGGkZ CEeOjcFXyQ/FPS+vyvA0Sz7DMmOoAprNoXJppGL7IUMcdgwMN2TlO8LwcQPj+qdg OBzNMlyCUsReHUOt13Dd82zXFReAtSorYr+vDheLaBfqXL9BuWkyLOAdHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSK+n6MH5CTvgG8XjglXRo7SmZ8MB8GA1UdIwQY MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt ZGY1Y2I5ZjBlM2E0LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0 LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS3ZoTSB vPgcoxBfxkuH6Srfj3DaYBgcovYM1xwrWf4GVYwUhvtDyqgKfxueiDk8MMMvWr54 DezoAiFWFuFyd0p5NukwIqrYXoUwJChInz6GY3SfFNlDmb2IyB7wOB6+pFwyB2n9 wGOharpqj0gorTVRRRjh7UWl6Vly07NnDpqenlE4KTWAEMw7laoaS/XFZxK6eWL3 M2YxVOlgNP5RGu+0LSsouFZA8FBa51vQavOZRzgyNqe/FdgSP1iBQKWBLMm+RKXo WzWVgZ25aUp1ekI4YUFQu08hJcvTQVMJRXA10H48uGLI1GFsE1xbRlOkKpSU6Tya xj239xP6dK/ZXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:04 2026 by rpki-client