This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json) Hash identifier: Hi7zEWes58eboBq2yzisnKQd9xoVuIBZQ2uNmLdbTOk= Subject key identifier: 9A:19:A3:2F:49:6D:6A:9B:D0:39:11:5F:B1:B3:E0:9A:12:8B:25:C9 Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Certificate serial: 019BFA9BFD6377CC8070B3824217100EE074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft Manifest number: 0579 Signing time: Mon 26 Jan 2026 14:01:25 +0000 Manifest this update: Mon 26 Jan 2026 14:01:25 +0000 Manifest next update: Tue 27 Jan 2026 14:01:25 +0000 Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: 5eBurFZuaXrb/PvKJV4l4wgpcnMz+dQ1kqz4RNr/ljY=) 2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:fd:63:77:cc:80:70:b3:82:42:17:10:0e:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Validity Not Before: Jan 26 14:01:25 2026 GMT Not After : Jan 27 14:01:25 2026 GMT Subject: CN=9a19a32f496d6a9bd039115fb1b3e09a128b25c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:e2:05:05:ce:0b:6d:d0:2d:94:d6:62:30: e4:c6:1e:ab:51:36:57:77:2f:a4:33:28:8e:41:8e: 2f:58:02:9c:fa:0d:6e:b8:e5:6e:e5:9f:04:c8:48: 36:d0:e4:5b:a1:d8:77:8a:20:6a:21:15:42:64:99: 20:e0:7d:71:85:55:07:50:9a:ee:7e:b4:6f:50:18: 2a:82:e0:8e:ee:a4:00:01:b9:e9:a8:30:16:8f:9a: f4:7c:4d:44:0a:25:7f:f0:28:ab:99:7d:e8:13:63: 9d:95:ff:85:84:b2:c4:79:6b:eb:3a:d3:73:1d:10: 8b:7d:bb:c7:44:7b:15:5e:78:ce:75:ee:b4:94:ae: 22:63:89:1f:9b:28:2f:45:79:af:70:a1:12:ff:7c: 39:6e:62:f0:95:ce:a9:06:ba:dc:6b:18:78:5d:6b: 6d:f0:87:38:56:f6:80:98:b5:36:4a:ff:6f:2e:b1: d1:a9:ad:a9:6e:c6:ff:0b:21:cf:33:b1:f0:3a:c2: 65:bd:61:2c:23:ef:2e:3e:9c:cb:95:7c:e4:d9:10: 70:93:64:b9:eb:27:eb:79:5d:43:a9:15:1d:05:65: d7:04:05:da:4a:74:d9:78:1f:88:5b:79:8a:77:b3: 19:33:3c:8e:13:87:af:e7:36:2e:1c:97:e2:45:1a: 46:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:A3:2F:49:6D:6A:9B:D0:39:11:5F:B1:B3:E0:9A:12:8B:25:C9 X509v3 Authority Key Identifier: keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:4a:dc:b9:2f:be:f2:5d:34:a2:0a:93:93:92:3b:46:96: 07:f5:f0:7a:5d:85:b4:f2:a0:fd:26:d7:e7:bc:7d:ab:c9:a0: 18:4b:c7:35:18:66:ce:0d:90:22:c6:17:53:df:13:1e:b3:97: f7:93:92:91:3e:d0:0f:66:1e:67:1e:54:eb:95:bf:73:ed:5f: f1:81:6c:db:df:dc:44:e2:57:82:47:85:75:e7:95:11:25:42: 74:58:c4:8f:f8:e8:27:15:54:92:a4:bc:46:e3:5a:38:f5:a7: ac:1b:99:59:87:67:7a:40:75:b7:20:0b:6d:84:fb:85:d6:f0: 21:c2:94:6b:31:fc:5b:0f:cc:21:e3:0d:d0:4e:0e:f4:cb:d8: ab:0c:fa:8c:57:e1:84:1b:39:c6:4c:78:70:33:40:72:73:ec: b1:be:1d:fd:59:10:80:bb:8d:c4:4d:e7:a5:76:28:ca:82:af: f4:06:16:f0:e5:f5:8f:ca:be:30:ab:7e:09:bb:33:27:5b:f5: e7:b5:0f:62:ce:2b:aa:2c:12:49:33:96:31:ee:49:92:f4:ab: aa:41:78:b3:c8:70:d7:b3:c2:5f:d7:3b:06:8b:e7:ea:c2:7b: 77:12:3d:5e:39:40:03:1f:3d:4b:f7:e2:4f:8f:fd:4b:bc:96: 24:50:84:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/1jd8yAcLOCQhcQDuB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1 ZjkyNjgwHhcNMjYwMTI2MTQwMTI1WhcNMjYwMTI3MTQwMTI1WjAzMTEwLwYDVQQD Eyg5YTE5YTMyZjQ5NmQ2YTliZDAzOTExNWZiMWIzZTA5YTEyOGIyNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmjiBQXOC23QLZTWYjDkxh6rUTZX dy+kMyiOQY4vWAKc+g1uuOVu5Z8EyEg20ORbodh3iiBqIRVCZJkg4H1xhVUHUJru frRvUBgqguCO7qQAAbnpqDAWj5r0fE1ECiV/8CirmX3oE2Odlf+FhLLEeWvrOtNz HRCLfbvHRHsVXnjOde60lK4iY4kfmygvRXmvcKES/3w5bmLwlc6pBrrcaxh4XWtt 8Ic4VvaAmLU2Sv9vLrHRqa2pbsb/CyHPM7HwOsJlvWEsI+8uPpzLlXzk2RBwk2S5 6yfreV1DqRUdBWXXBAXaSnTZeB+IW3mKd7MZMzyOE4ev5zYuHJfiRRpGTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoZoy9JbWqb0DkRX7Gz4JoSiyXJMB8GA1UdIwQY MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4FK3Lkv vvJdNKIKk5OSO0aWB/Xwel2FtPKg/SbX57x9q8mgGEvHNRhmzg2QIsYXU98THrOX 95OSkT7QD2YeZx5U65W/c+1f8YFs29/cROJXgkeFdeeVESVCdFjEj/joJxVUkqS8 RuNaOPWnrBuZWYdnekB1tyALbYT7hdbwIcKUazH8Ww/MIeMN0E4O9MvYqwz6jFfh hBs5xkx4cDNAcnPssb4d/VkQgLuNxE3npXYoyoKv9AYW8OX1j8q+MKt+CbszJ1v1 57UPYs4rqiwSSTOWMe5JkvSrqkF4s8hw17PCX9c7Bovn6sJ7dxI9XjlAAx89S/fi T4/9S7yWJFCEdA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:24 2026 by rpki-client