This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json) Hash identifier: 7K+kodg0WtDRiFkD1fo18R14uKEGNlKZed8y4KhfzFI= Subject key identifier: AB:7A:8A:EB:96:B4:EF:5B:29:BB:CE:35:0F:90:AB:53:A0:6C:24:21 Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c Certificate serial: 019BF91BA67C408F5E53C9679D235A0061C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft Manifest number: 1718 Signing time: Mon 26 Jan 2026 07:01:37 +0000 Manifest this update: Mon 26 Jan 2026 07:01:37 +0000 Manifest next update: Tue 27 Jan 2026 07:01:37 +0000 Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: JP79BxrRZCK9ytwXRf7TH33B2iIbVoEjysF4pIoty14=) 2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:a6:7c:40:8f:5e:53:c9:67:9d:23:5a:00:61:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c Validity Not Before: Jan 26 07:01:37 2026 GMT Not After : Jan 27 07:01:37 2026 GMT Subject: CN=ab7a8aeb96b4ef5b29bbce350f90ab53a06c2421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:88:db:58:da:df:21:c2:13:bc:c6:0b:c9: 5c:97:a7:59:7a:d5:7b:4d:98:1f:15:75:e6:57:64: f6:ef:db:05:51:9a:b8:7d:ac:e0:65:e4:29:c5:30: 10:f4:7d:93:79:45:8f:ce:d4:5f:3b:0e:d7:b5:78: 5b:32:35:c5:e9:80:c8:7e:a1:58:87:94:e2:5b:ff: 7b:47:34:07:4d:79:08:c3:ed:9a:2f:c7:83:2d:b8: 92:12:a1:3f:55:5f:cc:5d:bb:29:9b:28:c2:e4:57: ef:3a:7a:e0:03:d6:cd:34:dd:f8:b9:f5:47:d8:03: 4b:32:11:93:9b:92:24:c5:e2:3e:42:11:67:d8:5c: 68:27:af:95:79:9d:9e:af:65:dc:ee:c8:d6:9b:3d: 59:21:ed:f3:9d:80:2b:7a:67:1d:ca:d1:95:83:44: a0:c1:62:0c:c0:0a:3f:22:78:2d:22:5d:60:d7:4f: 41:97:1d:f7:a0:d2:ce:5e:4e:43:00:02:c8:fa:7f: 93:49:b7:eb:67:4f:af:e6:13:88:89:92:54:74:0b: ee:fb:8f:4e:58:98:5d:24:4e:c2:a5:16:fc:c4:02: 66:f7:95:04:a3:a8:d1:1b:8b:28:26:d1:66:83:79: a4:1b:20:b2:3a:c0:73:62:31:72:71:49:cc:b8:3b: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:8A:EB:96:B4:EF:5B:29:BB:CE:35:0F:90:AB:53:A0:6C:24:21 X509v3 Authority Key Identifier: keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:49:16:ac:35:1d:93:27:9b:c7:63:1f:e6:28:5e:f7:18:de: ed:eb:f2:72:a2:cc:56:43:ee:fc:0c:b6:a8:e3:8a:ac:1d:2e: 90:d2:35:43:87:8d:89:ad:17:27:83:f0:23:02:0c:33:5e:49: 3a:bc:cf:c6:b4:d3:85:48:bb:c3:cc:e6:15:b7:d6:cf:04:3f: ba:54:23:c7:85:e9:15:13:33:e8:ea:6d:23:96:e4:1c:f3:42: b5:47:fb:41:40:1f:c0:08:13:17:7e:13:16:9c:1b:c7:ca:3a: 3c:4a:0a:cd:77:6b:87:fe:32:d4:ce:8e:5c:7c:36:72:d9:ff: 47:07:e3:24:57:67:29:6a:1a:d2:fa:b7:b2:32:35:b1:2c:e2: 0d:56:b1:06:ed:9c:02:6c:30:67:47:9b:81:d0:5d:13:43:38: 7e:dc:04:f2:f2:79:37:3b:3f:12:b2:47:0e:10:a0:d5:38:2a: b4:c3:9d:7e:a2:03:35:a3:ab:8f:c2:b7:5b:7b:7f:80:5d:8b: e9:37:de:1e:6e:84:a2:06:55:63:45:58:99:56:6a:41:4e:89: d8:c9:7c:f8:60:8d:83:c1:02:f5:10:62:7e:e0:b8:d7:d8:98: 83:d8:61:7f:8b:99:33:d8:c2:eb:6f:85:6e:52:ac:a8:96:53: 68:43:6d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6Z8QI9eU8lnnSNaAGHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1 ZWRiMGMwHhcNMjYwMTI2MDcwMTM3WhcNMjYwMTI3MDcwMTM3WjAzMTEwLwYDVQQD EyhhYjdhOGFlYjk2YjRlZjViMjliYmNlMzUwZjkwYWI1M2EwNmMyNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOaI21ja3yHCE7zGC8lcl6dZetV7 TZgfFXXmV2T279sFUZq4fazgZeQpxTAQ9H2TeUWPztRfOw7XtXhbMjXF6YDIfqFY h5TiW/97RzQHTXkIw+2aL8eDLbiSEqE/VV/MXbspmyjC5FfvOnrgA9bNNN34ufVH 2ANLMhGTm5IkxeI+QhFn2FxoJ6+VeZ2er2Xc7sjWmz1ZIe3znYAremcdytGVg0Sg wWIMwAo/IngtIl1g109Blx33oNLOXk5DAALI+n+TSbfrZ0+v5hOIiZJUdAvu+49O WJhdJE7CpRb8xAJm95UEo6jRG4soJtFmg3mkGyCyOsBzYjFycUnMuDu1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt6iuuWtO9bKbvONQ+Qq1OgbCQhMB8GA1UdIwQY MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkkWrDUd kyebx2Mf5ihe9xje7evycqLMVkPu/Ay2qOOKrB0ukNI1Q4eNia0XJ4PwIwIMM15J OrzPxrTThUi7w8zmFbfWzwQ/ulQjx4XpFRMz6OptI5bkHPNCtUf7QUAfwAgTF34T Fpwbx8o6PEoKzXdrh/4y1M6OXHw2ctn/RwfjJFdnKWoa0vq3sjI1sSziDVaxBu2c AmwwZ0ebgdBdE0M4ftwE8vJ5Nzs/ErJHDhCg1TgqtMOdfqIDNaOrj8K3W3t/gF2L 6TfeHm6EogZVY0VYmVZqQU6J2Ml8+GCNg8EC9RBifuC419iYg9hhf4uZM9jC62+F blKsqJZTaENtXw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:04 2026 by rpki-client