This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json) Hash identifier: 121xMlWzol+XQ1lHe8Q/8fQtY4kohKqoKXnT408APuM= Subject key identifier: E4:6F:FC:44:1B:C0:55:53:35:C1:FA:B9:DB:0A:0D:3B:D6:89:5A:28 Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019BF72D863E8C306B224747EF33FBF45146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft Manifest number: 1717 Signing time: Sun 25 Jan 2026 22:01:54 +0000 Manifest this update: Sun 25 Jan 2026 22:01:54 +0000 Manifest next update: Mon 26 Jan 2026 22:01:54 +0000 Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: NHH5WpoJKvN3BAk40s06JXRYUdloZTxYsvHUU65Vsfs=) 2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:86:3e:8c:30:6b:22:47:47:ef:33:fb:f4:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Jan 25 22:01:54 2026 GMT Not After : Jan 26 22:01:54 2026 GMT Subject: CN=e46ffc441bc0555335c1fab9db0a0d3bd6895a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:df:85:02:98:f6:f2:cd:e0:24:4e:c4:24: 64:48:6d:60:68:62:0d:c8:e4:35:72:83:f0:82:29: 18:d2:77:d5:a9:5d:44:74:aa:d4:e0:d9:2e:25:02: 7d:e2:8a:e4:54:78:2a:98:54:48:f4:0b:b1:73:fe: 32:6c:04:18:23:e9:97:4c:ff:66:4e:88:e5:27:f5: 77:40:3a:91:f8:d6:da:de:72:43:0a:b6:e7:9a:62: 45:d1:9e:87:fb:2c:3b:35:de:3e:c7:ac:81:f7:d0: 56:b8:39:0e:12:f6:cd:b4:43:a5:0b:1d:b1:b0:58: 6c:0a:cd:bb:ee:08:49:7c:7a:3a:11:a9:21:cb:27: b0:00:73:98:f0:c3:b9:93:0e:0d:15:27:d4:f5:29: d6:61:8c:d5:dd:85:91:c2:cf:c5:65:3c:37:24:65: 3e:3e:1e:3f:27:a7:60:35:37:da:aa:58:16:48:b3: 7a:41:2a:0d:fc:55:7e:cf:21:55:9a:0f:d1:67:c0: 88:35:49:c1:11:11:dc:f7:05:36:e7:39:95:d5:4a: 9f:05:77:77:9a:36:f2:49:e3:07:43:c4:9c:ed:7d: a1:65:86:81:20:0a:36:5d:ec:14:fa:7c:66:94:5e: 86:7c:7d:48:62:6f:6d:a5:ee:76:0f:f8:c7:8f:ba: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:FC:44:1B:C0:55:53:35:C1:FA:B9:DB:0A:0D:3B:D6:89:5A:28 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3d:03:36:2d:8a:7a:8e:76:8e:35:e9:3d:5c:58:36:65:ec: 73:b9:9f:3c:22:81:20:cc:d4:f0:84:51:08:5d:0e:15:f8:b3: 59:b5:dd:44:0d:4f:dd:88:58:5e:77:29:be:df:a1:8a:13:54: e5:b4:c4:d7:a0:7e:ed:bb:ca:d4:29:db:d5:a0:83:20:88:01: c1:f6:e8:a9:79:9f:b0:6e:c8:93:98:7c:1c:9a:fd:4b:a1:e1: d5:e8:82:10:9a:45:d2:5d:a8:fa:ad:9a:9e:ed:4b:0b:12:b8: ff:1a:c6:3f:6e:fd:f0:43:c3:45:b4:0c:bf:2c:d9:36:8a:89: d7:b9:53:dc:d6:43:78:72:3c:80:f0:05:2c:57:30:70:2b:70: 34:ad:cf:dd:9e:1a:8e:61:66:d3:e8:a9:56:c4:b9:1a:08:fe: c5:6f:4d:4c:04:44:9b:8b:44:7f:c8:35:12:fc:09:f3:55:a4: 83:da:53:fc:57:de:e6:74:2d:47:fe:43:0a:d0:5a:01:b6:66: 3f:cd:e5:b9:f5:bd:9e:66:e7:88:ca:ff:ca:b4:92:eb:77:24: 93:ff:f7:3c:c6:3d:14:2c:1a:18:2d:29:30:3b:d7:f4:c3:42: e4:b5:87:7d:08:34:88:a1:4b:79:eb:28:41:3d:38:40:be:33: a1:a5:80:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LYY+jDBrIkdH7zP79FFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjYwMTI1MjIwMTU0WhcNMjYwMTI2MjIwMTU0WjAzMTEwLwYDVQQD EyhlNDZmZmM0NDFiYzA1NTUzMzVjMWZhYjlkYjBhMGQzYmQ2ODk1YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYrfhQKY9vLN4CROxCRkSG1gaGIN yOQ1coPwgikY0nfVqV1EdKrU4NkuJQJ94orkVHgqmFRI9Auxc/4ybAQYI+mXTP9m TojlJ/V3QDqR+Nba3nJDCrbnmmJF0Z6H+yw7Nd4+x6yB99BWuDkOEvbNtEOlCx2x sFhsCs277ghJfHo6EakhyyewAHOY8MO5kw4NFSfU9SnWYYzV3YWRws/FZTw3JGU+ Ph4/J6dgNTfaqlgWSLN6QSoN/FV+zyFVmg/RZ8CINUnBERHc9wU25zmV1UqfBXd3 mjbySeMHQ8Sc7X2hZYaBIAo2XewU+nxmlF6GfH1IYm9tpe52D/jHj7q9XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORv/EQbwFVTNcH6udsKDTvWiVooMB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD0DNi2K eo52jjXpPVxYNmXsc7mfPCKBIMzU8IRRCF0OFfizWbXdRA1P3YhYXncpvt+hihNU 5bTE16B+7bvK1Cnb1aCDIIgBwfboqXmfsG7Ik5h8HJr9S6Hh1eiCEJpF0l2o+q2a nu1LCxK4/xrGP2798EPDRbQMvyzZNoqJ17lT3NZDeHI8gPAFLFcwcCtwNK3P3Z4a jmFm0+ipVsS5Ggj+xW9NTAREm4tEf8g1EvwJ81Wkg9pT/Ffe5nQtR/5DCtBaAbZm P83lufW9nmbniMr/yrSS63ckk//3PMY9FCwaGC0pMDvX9MNC5LWHfQg0iKFLeeso QT04QL4zoaWA/g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:39:45 2026 by rpki-client