This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json) Hash identifier: kgcBLEqPomXWTi1iCLXnCg7Hfkq+v3qToTb3HAcdqQs= Subject key identifier: 74:15:80:E6:CC:78:AA:A3:92:60:AB:AA:7C:C9:41:F2:70:5A:EC:16 Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Certificate serial: 019BF6BF3A4386402007FD62DB5D1CF0317D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 20:01:25 +0000 Manifest this update: Sun 25 Jan 2026 20:01:25 +0000 Manifest next update: Mon 26 Jan 2026 20:01:25 +0000 Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=) 2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: RAXyroD6exydc2PoUGpKIbu89JjJpt588LHFVOzM73Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3a:43:86:40:20:07:fd:62:db:5d:1c:f0:31:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Validity Not Before: Jan 25 20:01:25 2026 GMT Not After : Jan 26 20:01:25 2026 GMT Subject: CN=741580e6cc78aaa39260abaa7cc941f2705aec16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:5b:24:9c:0e:bd:36:ef:35:c3:0a:9f:a7: 64:a9:72:b2:23:66:c8:e1:7e:cc:dd:68:1d:1b:92: 22:17:30:d8:a3:60:9d:83:51:1d:28:5c:0f:26:28: 46:fd:2f:14:97:2e:45:21:41:f9:0c:0d:ce:d1:c1: 2c:08:e5:d3:eb:f5:38:b7:8c:94:4d:31:60:68:e8: 32:d2:74:68:88:10:b9:17:22:06:12:7f:b4:ec:1a: 22:c5:e5:04:77:f6:a6:5e:43:53:f4:63:14:2e:69: c6:f5:1a:de:21:d2:fb:db:e5:0d:cf:b8:b1:0f:2a: ac:40:90:5b:30:45:21:ea:4c:0d:14:f1:db:b7:53: 8b:90:98:2b:50:7f:1c:bd:d1:64:95:45:a4:cd:42: 73:7c:29:95:cd:c7:94:61:0a:08:5b:8b:93:37:19: 3c:09:72:46:df:cc:22:99:ac:02:f8:bc:4d:b6:0e: 30:b5:39:40:6d:d2:8b:d0:be:6e:15:24:5c:78:bb: c9:e8:f4:ba:e5:cb:e7:67:7b:ba:f4:67:ec:26:72: f0:17:e4:1e:d9:5a:79:b9:dd:f0:b8:17:24:83:d2: e9:ef:fa:12:71:6c:19:6c:1d:e2:ea:36:63:9c:e1: 7f:4e:9a:91:86:df:df:67:9b:69:3f:5c:95:88:7d: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:15:80:E6:CC:78:AA:A3:92:60:AB:AA:7C:C9:41:F2:70:5A:EC:16 X509v3 Authority Key Identifier: keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:74:e4:e2:37:ac:7a:40:5f:60:29:65:49:ca:08:40:ac:87: 3f:99:fc:ce:be:13:c7:26:2d:1a:2d:e2:ba:d4:a4:fd:57:53: ac:ff:38:33:40:95:7a:d5:09:6e:cc:df:68:84:46:cf:0f:c9: 59:f7:27:57:82:ba:7d:ba:39:1b:9d:4f:47:31:e9:ff:3a:f4: 5f:be:1d:ef:26:2c:b2:59:99:60:ab:36:5b:e3:31:97:75:d8: 1e:e2:15:ae:6b:42:70:5e:ee:67:03:bd:76:f3:12:8f:a0:a5: c5:3e:44:3a:bb:04:ed:82:8f:15:76:fc:59:29:b4:2c:0c:cb: 90:f7:35:74:86:bd:1e:f5:33:1f:46:d8:d2:c8:24:a7:68:81: 12:57:49:13:06:3a:d8:72:45:75:e3:3a:0d:de:40:45:be:26: ec:5f:be:ad:a2:66:42:19:f7:0b:fc:14:f9:91:3d:82:f6:83: 56:84:1e:d8:a9:b4:98:6f:03:53:da:d9:88:13:8b:dc:08:b0: 88:c1:de:fc:71:b9:77:21:09:c2:25:a0:3d:24:eb:ac:92:b9: 62:bc:7f:64:f0:37:b3:3c:5f:09:3d:ba:fd:a2:65:ef:d8:03: d3:75:94:97:aa:2d:c1:18:f0:3e:68:83:12:ef:5a:92:98:81: 30:c5:10:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vzpDhkAgB/1i210c8DF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz YWYxYWEwHhcNMjYwMTI1MjAwMTI1WhcNMjYwMTI2MjAwMTI1WjAzMTEwLwYDVQQD Eyg3NDE1ODBlNmNjNzhhYWEzOTI2MGFiYWE3Y2M5NDFmMjcwNWFlYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVxbJJwOvTbvNcMKn6dkqXKyI2bI 4X7M3WgdG5IiFzDYo2Cdg1EdKFwPJihG/S8Uly5FIUH5DA3O0cEsCOXT6/U4t4yU TTFgaOgy0nRoiBC5FyIGEn+07BoixeUEd/amXkNT9GMULmnG9RreIdL72+UNz7ix DyqsQJBbMEUh6kwNFPHbt1OLkJgrUH8cvdFklUWkzUJzfCmVzceUYQoIW4uTNxk8 CXJG38wimawC+LxNtg4wtTlAbdKL0L5uFSRceLvJ6PS65cvnZ3u69GfsJnLwF+Qe 2Vp5ud3wuBckg9Lp7/oScWwZbB3i6jZjnOF/TpqRht/fZ5tpP1yViH1boQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQVgObMeKqjkmCrqnzJQfJwWuwWMB8GA1UdIwQY MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0 LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3Tk4jes ekBfYCllScoIQKyHP5n8zr4TxyYtGi3iutSk/VdTrP84M0CVetUJbszfaIRGzw/J WfcnV4K6fbo5G51PRzHp/zr0X74d7yYsslmZYKs2W+Mxl3XYHuIVrmtCcF7uZwO9 dvMSj6ClxT5EOrsE7YKPFXb8WSm0LAzLkPc1dIa9HvUzH0bY0sgkp2iBEldJEwY6 2HJFdeM6Dd5ARb4m7F++raJmQhn3C/wU+ZE9gvaDVoQe2Km0mG8DU9rZiBOL3Aiw iMHe/HG5dyEJwiWgPSTrrJK5Yrx/ZPA3szxfCT26/aJl79gD03WUl6otwRjwPmiD Eu9akpiBMMUQ9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:59 2026 by rpki-client