This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: mmTGHGzfodp4hno2LZS9ZL6hrfAqee7ii5dgYj6qLnU= Subject key identifier: D1:9B:AD:C0:44:8D:1B:D5:C7:58:05:32:85:C6:C3:9C:96:69:22:04 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019BE0007E3A550098271BE259C264077C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 11C4 Signing time: Wed 21 Jan 2026 10:01:27 +0000 Manifest this update: Wed 21 Jan 2026 10:01:27 +0000 Manifest next update: Thu 22 Jan 2026 10:01:27 +0000 Files and hashes: 1: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=) 2: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=) 3: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=) 4: LYPFsLg-HHk-AH0q_znuAsebvZs.roa (hash: LQwpVZiG9LTd+JsGkTPK0EuyocYLkODDaDYcgGaoYoA=) 5: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=) 6: _sN8yzKDKHcnVU5p49CbRL2H3ig.roa (hash: kgkv7xILeg1lxV+k1BaZVXsKuUZT1LhEAwckSMdm8JQ=) 7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: BsmNJGiubAh4ClXVa0kmVDTexPj9/g6gijgm6nsgzv8=) 8: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=) 9: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=) 10: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:7e:3a:55:00:98:27:1b:e2:59:c2:64:07:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jan 21 10:01:27 2026 GMT Not After : Jan 22 10:01:27 2026 GMT Subject: CN=d19badc0448d1bd5c758053285c6c39c96692204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:9f:ca:dc:f4:ea:8e:36:95:ef:59:a3:9b: bc:b7:d9:ba:16:15:0f:2c:88:b4:71:f6:f3:1b:98: e8:e8:03:90:d5:4d:93:ea:66:e3:54:32:9f:8c:34: 86:27:9d:a6:e3:92:4f:84:73:87:da:eb:36:a2:f7: 05:af:5d:96:69:e8:84:8d:61:62:0f:f0:ec:fa:9e: 10:79:07:1f:ef:bc:e8:c1:ed:6a:25:c3:08:89:d4: 80:ee:57:ae:f5:c0:da:74:a6:39:d3:69:1e:2f:cf: e8:f9:2b:1a:e5:28:17:37:75:0d:cb:09:33:05:f2: 87:bf:5d:11:17:a6:7d:d0:45:d1:a2:8a:99:fd:6a: 06:38:0d:97:39:ba:9d:86:59:ad:0c:1d:f2:fb:ef: bc:e4:60:e1:b7:2f:11:f7:d7:26:55:32:e2:59:fd: ca:66:fa:9e:21:92:8c:e5:73:2e:d6:c6:0b:e5:af: c6:4c:b9:6d:d0:ac:c2:e0:b0:4b:8e:bd:6a:62:0b: dd:b8:ab:40:cd:6b:0d:21:13:bb:d6:a6:14:74:a6: 06:4d:24:71:28:34:f6:db:b0:02:8a:f7:d7:b7:f2: 34:97:43:43:81:bf:78:78:82:56:0c:57:9c:d7:7d: fa:94:83:7e:6e:2e:98:28:9f:40:42:36:8c:82:ff: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9B:AD:C0:44:8D:1B:D5:C7:58:05:32:85:C6:C3:9C:96:69:22:04 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:2e:3f:f3:a1:6a:6f:92:e7:b9:64:23:c7:3b:6e:97:3a: 98:89:08:1f:bb:e5:5c:83:45:cf:cb:92:56:c5:ee:ab:f8:08: 3f:05:67:c2:05:97:98:b0:8f:87:51:d3:05:b2:60:d2:d6:6e: cf:78:53:a0:9c:85:ef:98:4f:05:32:0b:78:d2:5a:b8:43:82: fc:f2:71:69:2f:ff:db:1b:11:7d:ce:b0:79:c8:da:a9:46:15: bd:8a:5c:f8:43:6d:b9:d4:5b:81:81:2a:02:b3:6b:f6:90:76: 2f:e5:fa:a4:fa:20:42:4d:98:48:3d:32:ec:25:81:a1:6b:be: 22:c3:92:32:5d:7e:5a:f8:75:4a:a4:43:97:2a:d8:3d:0d:b9: 0a:fe:25:50:cf:4d:1f:c8:d5:33:78:e0:a8:53:1a:bf:83:cd: 26:ad:f4:5e:d1:dd:32:ce:0f:8b:6e:a3:29:ff:81:07:d8:54: 40:b4:b3:ae:96:26:44:59:92:31:54:ff:f4:4d:76:c5:90:d2: df:b4:32:ed:8d:eb:bb:16:44:92:9a:34:32:46:d7:91:7b:83: 42:0e:d5:28:2e:28:45:7a:49:ff:dd:cb:6f:b6:ce:08:8e:5b: aa:7c:ec:5d:00:fd:d4:db:9e:6e:bc:11:78:fe:63:2d:5a:1a: c6:75:37:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAH46VQCYJxviWcJkB3x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwMTIxMTAwMTI3WhcNMjYwMTIyMTAwMTI3WjAzMTEwLwYDVQQD EyhkMTliYWRjMDQ0OGQxYmQ1Yzc1ODA1MzI4NWM2YzM5Yzk2NjkyMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjafytz06o42le9Zo5u8t9m6FhUP LIi0cfbzG5jo6AOQ1U2T6mbjVDKfjDSGJ52m45JPhHOH2us2ovcFr12WaeiEjWFi D/Ds+p4QeQcf77zowe1qJcMIidSA7leu9cDadKY502keL8/o+Ssa5SgXN3UNywkz BfKHv10RF6Z90EXRooqZ/WoGOA2XObqdhlmtDB3y+++85GDhty8R99cmVTLiWf3K ZvqeIZKM5XMu1sYL5a/GTLlt0KzC4LBLjr1qYgvduKtAzWsNIRO71qYUdKYGTSRx KDT227ACivfXt/I0l0NDgb94eIJWDFec1336lIN+bi6YKJ9AQjaMgv9O7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGbrcBEjRvVx1gFMoXGw5yWaSIEMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaksuP/Oh am+S57lkI8c7bpc6mIkIH7vlXINFz8uSVsXuq/gIPwVnwgWXmLCPh1HTBbJg0tZu z3hToJyF75hPBTILeNJauEOC/PJxaS//2xsRfc6wecjaqUYVvYpc+ENtudRbgYEq ArNr9pB2L+X6pPogQk2YSD0y7CWBoWu+IsOSMl1+Wvh1SqRDlyrYPQ25Cv4lUM9N H8jVM3jgqFMav4PNJq30XtHdMs4Pi26jKf+BB9hUQLSzrpYmRFmSMVT/9E12xZDS 37Qy7Y3ruxZEkpo0MkbXkXuDQg7VKC4oRXpJ/93Lb7bOCI5bqnzsXQD91NuebrwR eP5jLVoaxnU3GQ== -----END CERTIFICATE-----Generated at Wed Jan 21 16:18:33 2026 by rpki-client