This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json) Hash identifier: ARM+VN4uk+iY0LFuShCBNuc3OPNDZlh93gxWD39UT6E= Subject key identifier: 31:43:AD:79:17:A5:FE:91:8D:29:3F:46:29:57:DC:75:E3:3E:15:61 Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Certificate serial: 019BD7D90F6BF4D0F9E7A1204EA7D3881D8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft Manifest number: 1422 Signing time: Mon 19 Jan 2026 20:01:25 +0000 Manifest this update: Mon 19 Jan 2026 20:01:25 +0000 Manifest next update: Tue 20 Jan 2026 20:01:25 +0000 Files and hashes: 1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: HNNClLIJvX3FJj3WXcx6rQQ10PVomJspfSahanx7uSk=) 2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=) 3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=) 4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=) 5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d9:0f:6b:f4:d0:f9:e7:a1:20:4e:a7:d3:88:1d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Validity Not Before: Jan 19 20:01:25 2026 GMT Not After : Jan 20 20:01:25 2026 GMT Subject: CN=3143ad7917a5fe918d293f462957dc75e33e1561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:1f:52:f3:46:1f:0e:5e:a4:50:46:58:0a: e1:04:20:52:60:b4:44:6d:e0:fe:37:f6:58:94:22: 80:ee:29:d6:c4:ba:55:20:76:b9:5e:5d:64:d1:b2: 01:fc:e5:22:d7:4d:b8:26:64:ff:89:34:45:9e:3c: e1:1c:88:a4:1e:11:57:f8:77:c8:3e:e5:46:5b:76: 3b:56:0a:8c:6a:ae:1c:5d:0b:80:83:19:4e:18:b5: 90:57:0d:f7:2c:3c:29:78:10:5d:4d:95:a9:5c:e4: 0c:c2:9a:c9:38:be:28:c3:95:07:84:b5:c1:48:26: 85:e3:a2:fd:df:b8:d6:86:b3:90:8f:c4:56:49:6b: 7a:53:42:38:9b:d2:a4:e3:66:c9:ce:0d:9e:61:31: 32:2c:13:31:f7:f4:49:81:0e:81:d8:c4:c5:16:f7: 6d:1c:e7:e5:b6:7a:66:66:43:24:88:fe:96:ca:f0: 15:0a:a8:07:a6:8e:ad:f8:4f:0b:5e:bf:fd:b3:98: 86:4b:d5:f0:ac:78:cf:53:26:15:38:85:44:a9:81: 6f:49:37:ad:f9:60:63:b0:0e:15:ad:7f:f3:01:bf: d3:0f:8c:87:59:fd:27:ef:f4:d3:fd:d1:3e:99:59: 2c:4e:9c:32:24:f6:3b:36:8b:a8:13:89:af:dd:14: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:43:AD:79:17:A5:FE:91:8D:29:3F:46:29:57:DC:75:E3:3E:15:61 X509v3 Authority Key Identifier: keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7d:42:a7:5c:7d:80:13:99:76:ec:83:92:80:ef:c3:ba:80: 66:59:2f:35:22:ce:22:c5:6d:ed:c5:3b:b9:1a:66:9d:8b:74: d7:c6:16:09:cd:d7:0a:88:2b:5b:44:53:80:5b:fb:af:d2:f6: 14:8a:f1:d7:de:14:6e:44:c9:6f:b5:92:62:c2:ed:f9:b1:a1: 74:05:9f:37:b9:bc:12:fe:d6:c8:2d:e1:bd:74:9e:88:fb:8a: 43:fb:91:c1:e6:ee:64:3f:29:9c:4a:9b:1e:24:14:bc:73:5a: 3f:1c:92:c7:13:76:c2:5c:1b:4f:36:3b:40:25:5c:f8:af:ff: 24:9d:6e:6b:8b:3d:f3:05:8d:78:a6:60:35:3c:d7:fd:0e:61: 2b:e1:35:86:13:e5:1e:d6:b5:c3:ef:bd:82:93:b5:76:a2:e7: 40:58:97:f9:4e:b6:bb:f8:f5:ec:8b:4d:e4:f9:e1:8b:76:87: 35:4c:f1:17:4d:9e:b6:36:81:08:91:83:c5:19:58:25:90:dc: e6:a5:55:09:5b:3f:c7:17:23:6e:11:ea:b4:dc:b5:f7:5e:0c: 0e:8e:2e:10:91:cb:1a:ee:ae:02:12:e2:b3:f8:a7:2a:49:8d: ed:57:3b:38:65:4c:bd:a5:60:e9:93:ed:d6:30:12:6d:34:6e: e6:de:b3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvX2Q9r9ND556EgTqfTiB2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk ZWZiNTkwHhcNMjYwMTE5MjAwMTI1WhcNMjYwMTIwMjAwMTI1WjAzMTEwLwYDVQQD EygzMTQzYWQ3OTE3YTVmZTkxOGQyOTNmNDYyOTU3ZGM3NWUzM2UxNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbEfUvNGHw5epFBGWArhBCBSYLRE beD+N/ZYlCKA7inWxLpVIHa5Xl1k0bIB/OUi1024JmT/iTRFnjzhHIikHhFX+HfI PuVGW3Y7VgqMaq4cXQuAgxlOGLWQVw33LDwpeBBdTZWpXOQMwprJOL4ow5UHhLXB SCaF46L937jWhrOQj8RWSWt6U0I4m9Kk42bJzg2eYTEyLBMx9/RJgQ6B2MTFFvdt HOfltnpmZkMkiP6WyvAVCqgHpo6t+E8LXr/9s5iGS9XwrHjPUyYVOIVEqYFvSTet +WBjsA4VrX/zAb/TD4yHWf0n7/TT/dE+mVksTpwyJPY7NouoE4mv3RR7gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFDrXkXpf6RjSk/RilX3HXjPhVhMB8GA1UdIwQY MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt NDZiZDdkNzk0ZmI2LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2 LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn1Cp1x9 gBOZduyDkoDvw7qAZlkvNSLOIsVt7cU7uRpmnYt018YWCc3XCogrW0RTgFv7r9L2 FIrx194UbkTJb7WSYsLt+bGhdAWfN7m8Ev7WyC3hvXSeiPuKQ/uRwebuZD8pnEqb HiQUvHNaPxySxxN2wlwbTzY7QCVc+K//JJ1ua4s98wWNeKZgNTzX/Q5hK+E1hhPl Hta1w++9gpO1dqLnQFiX+U62u/j17ItN5Pnhi3aHNUzxF02etjaBCJGDxRlYJZDc 5qVVCVs/xxcjbhHqtNy1914MDo4uEJHLGu6uAhLis/inKkmN7Vc7OGVMvaVg6ZPt 1jASbTRu5t6zmA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:56 2026 by rpki-client