This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json) Hash identifier: A6mUkdHUVtfaW6bzzuHu+XB9TtUDP2xVo5YU6sDe7e8= Subject key identifier: AF:6B:2B:9F:7C:4A:60:81:1C:93:7B:70:6C:68:73:6A:88:C6:1D:7A Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c Certificate serial: 019BF61A314598E93B67D5430F6B34DA87C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft Manifest number: 0C27 Signing time: Sun 25 Jan 2026 17:01:10 +0000 Manifest this update: Sun 25 Jan 2026 17:01:10 +0000 Manifest next update: Mon 26 Jan 2026 17:01:10 +0000 Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=) 2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: qpWaXWl6tuGtwbfPMrfEAYzCsbft0hpNMLydxGdmTD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:31:45:98:e9:3b:67:d5:43:0f:6b:34:da:87:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c Validity Not Before: Jan 25 17:01:10 2026 GMT Not After : Jan 26 17:01:10 2026 GMT Subject: CN=af6b2b9f7c4a60811c937b706c68736a88c61d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:a2:ff:f8:b3:be:80:7f:cb:1d:26:32:fd: 6f:3c:a9:cb:3e:24:bd:51:b1:54:88:09:99:92:4e: 63:29:10:31:0e:59:de:db:50:a4:f2:46:7d:cf:a0: 92:63:54:81:8a:d5:03:f2:40:81:d3:ab:49:f9:4a: 3c:e8:5a:08:1a:fe:0c:1f:30:d8:81:bd:16:5f:87: 3c:2f:27:98:47:38:3b:c6:4c:1a:6e:99:91:e2:c8: 69:2a:13:12:98:bb:aa:89:95:df:98:f1:93:05:9e: d4:0f:47:d2:ca:51:a7:70:af:4b:c2:bd:d6:86:42: be:a7:08:a6:a2:25:eb:e1:d5:d4:68:8b:35:50:5d: 55:ff:a7:d6:82:f3:6c:f2:aa:e3:8a:f0:aa:0b:a1: b4:a3:84:7d:89:65:d6:73:12:4d:68:53:81:83:8e: 8d:56:e5:ca:3b:8b:46:99:0e:e7:fe:61:f3:b0:fe: e7:fc:69:8a:bd:9e:26:67:b5:0a:a2:3f:55:59:41: cf:a6:f1:2c:92:eb:f8:7d:cf:19:b7:4d:1f:12:b4: 11:a9:9a:ff:9c:ee:b4:88:9f:85:88:d6:2f:c6:d4: 07:df:9e:0e:e4:3a:89:f3:0a:d2:04:64:30:a7:ac: cb:68:16:f9:85:c2:7c:f3:f8:25:4a:13:97:d2:ae: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:2B:9F:7C:4A:60:81:1C:93:7B:70:6C:68:73:6A:88:C6:1D:7A X509v3 Authority Key Identifier: keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3d:dd:f3:12:72:bd:0f:3a:b2:24:76:f6:af:e1:c6:3c:b2: 57:b5:98:82:97:bc:88:d1:18:aa:b7:f6:11:3c:7f:56:8d:a3: 38:6f:ac:03:fe:30:4e:71:59:2d:54:28:f5:5f:fc:ae:21:7f: ae:23:28:32:2a:45:44:14:86:45:35:22:ce:64:f0:c2:08:69: fa:31:0e:8d:f4:fb:47:50:b8:8f:f8:5a:a1:86:ac:35:f1:4d: 9c:1c:04:06:5f:56:03:7a:14:4b:93:25:6a:a3:9c:1f:00:aa: 8f:b7:fa:c4:6e:fd:25:c2:89:12:36:cc:43:08:d2:dd:42:30: c7:aa:eb:82:dc:20:af:99:29:2f:96:82:33:b5:57:5e:8e:fa: 84:eb:4c:b0:0c:4f:1d:56:4f:48:f4:2a:a6:27:44:39:3c:bc: 47:df:ac:d4:a6:4b:3c:66:3d:41:8a:3b:9e:b8:6c:5b:84:9b: 48:5d:db:9d:11:89:43:0c:7f:3c:1f:78:96:1b:26:ff:d4:84: 06:4e:78:8a:b3:aa:db:d5:ff:7f:24:45:f4:9b:27:31:df:33: ea:fa:af:a7:33:22:43:20:2d:45:43:c1:c0:25:4e:ff:d5:43: cb:74:4b:bd:c0:d0:df:82:5b:ee:84:91:c8:76:61:b4:fa:d6: 30:2b:33:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GjFFmOk7Z9VDD2s02ofHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl MzY2MmMwHhcNMjYwMTI1MTcwMTEwWhcNMjYwMTI2MTcwMTEwWjAzMTEwLwYDVQQD EyhhZjZiMmI5ZjdjNGE2MDgxMWM5MzdiNzA2YzY4NzM2YTg4YzYxZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVyi//izvoB/yx0mMv1vPKnLPiS9 UbFUiAmZkk5jKRAxDlne21Ck8kZ9z6CSY1SBitUD8kCB06tJ+Uo86FoIGv4MHzDY gb0WX4c8LyeYRzg7xkwabpmR4shpKhMSmLuqiZXfmPGTBZ7UD0fSylGncK9Lwr3W hkK+pwimoiXr4dXUaIs1UF1V/6fWgvNs8qrjivCqC6G0o4R9iWXWcxJNaFOBg46N VuXKO4tGmQ7n/mHzsP7n/GmKvZ4mZ7UKoj9VWUHPpvEskuv4fc8Zt00fErQRqZr/ nO60iJ+FiNYvxtQH354O5DqJ8wrSBGQwp6zLaBb5hcJ88/glShOX0q5ddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9rK598SmCBHJN7cGxoc2qIxh16MB8GA1UdIwQY MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2 LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmj3d8xJy vQ86siR29q/hxjyyV7WYgpe8iNEYqrf2ETx/Vo2jOG+sA/4wTnFZLVQo9V/8riF/ riMoMipFRBSGRTUizmTwwghp+jEOjfT7R1C4j/haoYasNfFNnBwEBl9WA3oUS5Ml aqOcHwCqj7f6xG79JcKJEjbMQwjS3UIwx6rrgtwgr5kpL5aCM7VXXo76hOtMsAxP HVZPSPQqpidEOTy8R9+s1KZLPGY9QYo7nrhsW4SbSF3bnRGJQwx/PB94lhsm/9SE Bk54irOq29X/fyRF9JsnMd8z6vqvpzMiQyAtRUPBwCVO/9VDy3RLvcDQ34Jb7oSR yHZhtPrWMCszZg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:04 2026 by rpki-client