This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json) Hash identifier: lfzVS/QZmWdojEJ38xn9kW5vrMdG6jiz3Z/bNDdMRlg= Subject key identifier: B5:B4:CE:B7:2B:A4:E8:1A:A6:AA:4B:41:25:F4:50:8A:C2:3A:58:41 Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Certificate serial: 019BF72D702468DE48951B2754FD6633A2A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft Manifest number: 147C Signing time: Sun 25 Jan 2026 22:01:48 +0000 Manifest this update: Sun 25 Jan 2026 22:01:48 +0000 Manifest next update: Mon 26 Jan 2026 22:01:48 +0000 Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=) 2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: uBg/onTuS+Gysp1SOw4tH/wOBK0QFu/H4pRjHecvdTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:70:24:68:de:48:95:1b:27:54:fd:66:33:a2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Validity Not Before: Jan 25 22:01:48 2026 GMT Not After : Jan 26 22:01:48 2026 GMT Subject: CN=b5b4ceb72ba4e81aa6aa4b4125f4508ac23a5841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:62:b6:33:15:e9:b9:32:18:3c:3f:f3:63: 43:3b:6a:d0:f8:86:bd:07:ad:ea:ac:48:0a:26:fe: f1:18:bc:9d:75:da:84:0f:1f:99:b5:5e:a2:e6:37: 8c:ab:80:8a:31:4c:f2:b7:fd:54:29:50:93:85:c3: 45:a8:0f:31:c1:b4:74:aa:d1:c5:d4:f5:61:f3:10: 79:5e:04:a9:0c:bd:f3:b9:58:5f:33:56:19:b3:b0: c1:b2:07:cc:5a:ff:af:d9:23:25:73:2f:90:13:1a: 43:a6:b8:46:0f:ac:0c:68:6b:94:23:90:dd:70:c7: 17:91:6a:cd:32:7f:0d:e9:77:c2:ff:a9:5a:50:c0: a3:0f:c6:fa:c4:e8:ee:6c:dd:7f:3a:09:2e:f2:67: 4f:c5:fa:a7:ec:93:23:ce:48:cf:61:e4:15:a3:c7: 5e:47:f4:0a:d8:05:70:9c:36:03:28:32:6f:a7:bd: 65:a9:06:65:b5:d9:32:3c:28:e8:b8:a1:04:27:0a: 11:d6:80:cf:07:cc:5e:11:3d:20:15:94:c4:ae:30: 09:ca:b4:e3:7f:ff:1b:0e:e0:10:13:85:7a:77:20: 24:62:23:f5:dd:27:47:67:ab:1c:b0:d8:04:c0:ee: 68:f6:27:24:24:3e:60:14:b0:09:2e:32:a9:e2:73: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:CE:B7:2B:A4:E8:1A:A6:AA:4B:41:25:F4:50:8A:C2:3A:58:41 X509v3 Authority Key Identifier: keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:8e:51:83:bb:e9:bf:aa:bd:5c:3c:2e:b3:08:5a:bb:f8: fa:9b:37:07:c8:34:00:20:19:99:24:ff:5f:d1:0d:c9:e4:68: 6a:24:fb:00:11:2b:3d:26:8a:22:82:96:a9:05:86:d2:cf:dd: d8:cc:bc:98:ca:3a:3e:6f:c6:51:20:15:65:5c:6c:26:d5:a1: 3e:9e:20:23:12:00:d9:bc:e7:3b:9d:1c:52:32:97:81:5f:7e: 3e:da:99:cc:ad:0f:30:d3:08:af:5f:cc:2c:a4:54:76:c9:80: 72:57:4e:c4:bd:b1:ef:94:34:14:f9:85:aa:9b:28:fa:57:e1: 6f:4b:6c:81:f4:67:27:1a:db:19:3e:1c:4c:8c:c2:d7:73:77: 3c:6c:84:e0:e9:1e:5b:67:63:d0:b5:fb:3a:8a:73:ca:24:3c: c2:89:2a:00:7f:a1:d2:03:4d:69:fc:b7:22:4f:b1:48:96:7f: da:b7:5f:2e:36:cb:c6:2a:ef:9e:62:0c:f9:5c:a8:36:11:21: 50:25:14:9d:01:77:2f:4e:12:85:3d:c3:6c:f8:b8:84:a6:14: d7:f5:32:60:42:09:be:15:88:a4:34:9b:4b:9c:3b:2a:1f:4d: c6:bd:b8:2f:17:80:1f:6e:a7:78:22:37:17:0c:be:bd:64:cf: a5:06:6a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LXAkaN5IlRsnVP1mM6KiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2I4OWExMTExNGVmYmUwZTFlMjU1MGVjZGEzMzZmZDc5 MmVjNWYwHhcNMjYwMTI1MjIwMTQ4WhcNMjYwMTI2MjIwMTQ4WjAzMTEwLwYDVQQD EyhiNWI0Y2ViNzJiYTRlODFhYTZhYTRiNDEyNWY0NTA4YWMyM2E1ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+xitjMV6bkyGDw/82NDO2rQ+Ia9 B63qrEgKJv7xGLydddqEDx+ZtV6i5jeMq4CKMUzyt/1UKVCThcNFqA8xwbR0qtHF 1PVh8xB5XgSpDL3zuVhfM1YZs7DBsgfMWv+v2SMlcy+QExpDprhGD6wMaGuUI5Dd cMcXkWrNMn8N6XfC/6laUMCjD8b6xOjubN1/Ogku8mdPxfqn7JMjzkjPYeQVo8de R/QK2AVwnDYDKDJvp71lqQZltdkyPCjouKEEJwoR1oDPB8xeET0gFZTErjAJyrTj f/8bDuAQE4V6dyAkYiP13SdHZ6scsNgEwO5o9ickJD5gFLAJLjKp4nNMyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW0zrcrpOgapqpLQSX0UIrCOlhBMB8GA1UdIwQY MBaAFAjLiaERFO++Dh4lUOzaM2/XkuxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEt NGFmMWZhMzZjZGI5LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEtNGFmMWZhMzZjZGI5 LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa6OUYO7 6b+qvVw8LrMIWrv4+ps3B8g0ACAZmST/X9ENyeRoaiT7ABErPSaKIoKWqQWG0s/d 2My8mMo6Pm/GUSAVZVxsJtWhPp4gIxIA2bznO50cUjKXgV9+PtqZzK0PMNMIr1/M LKRUdsmAcldOxL2x75Q0FPmFqpso+lfhb0tsgfRnJxrbGT4cTIzC13N3PGyE4Oke W2dj0LX7OopzyiQ8wokqAH+h0gNNafy3Ik+xSJZ/2rdfLjbLxirvnmIM+VyoNhEh UCUUnQF3L04ShT3DbPi4hKYU1/UyYEIJvhWIpDSbS5w7Kh9Nxr24LxeAH26neCI3 Fwy+vWTPpQZqGw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:57 2026 by rpki-client