This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json) Hash identifier: V7R6SzKRqU0GWZYRu0soEnzEZBG7UkVOTjX83GiElCw= Subject key identifier: C3:A6:F5:B6:3A:55:7C:DD:CD:DF:E0:1F:63:A1:82:4C:A0:43:93:B0 Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2 Certificate serial: 019C1E03988CD088CE9B49BB9DAAEE60CBF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft Manifest number: 1341 Signing time: Mon 02 Feb 2026 11:01:17 +0000 Manifest this update: Mon 02 Feb 2026 11:01:17 +0000 Manifest next update: Tue 03 Feb 2026 11:01:17 +0000 Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: nZkL2PjA9qODdkofAeZKehgB0f6CY96eq1t3Cj8q3jc=) 2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:98:8c:d0:88:ce:9b:49:bb:9d:aa:ee:60:cb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Validity Not Before: Feb 2 11:01:17 2026 GMT Not After : Feb 3 11:01:17 2026 GMT Subject: CN=c3a6f5b63a557cddcddfe01f63a1824ca04393b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:de:c4:ff:34:ae:91:23:a9:41:6f:a7:19: e8:f2:af:31:a0:74:bc:35:f5:12:6d:3c:ed:01:32: 64:6c:44:80:28:40:29:82:46:20:75:55:dc:61:0c: a3:6e:6d:97:b3:fd:07:92:30:8e:a7:a5:23:b3:73: 31:de:81:0e:e6:05:82:b5:02:58:d3:b7:e6:44:8c: 08:16:a3:25:c4:93:6c:5c:e1:e2:86:50:18:a5:27: 0f:3d:4e:a4:d9:bc:a0:09:9c:40:d9:46:49:c5:8b: e6:cd:cb:d1:35:87:f2:81:50:e2:c1:9a:6d:7f:da: 9b:ce:4a:f2:15:79:0b:b9:50:76:b1:f3:e2:5e:60: 98:c6:57:7a:c7:8e:9d:3f:f3:69:3f:df:c9:d0:58: 78:56:93:c3:8b:26:cc:1f:3a:ac:dc:74:f5:82:55: d8:ea:2e:00:2a:10:b4:de:7f:b1:05:1c:30:83:f1: 7f:c8:04:ed:bd:de:f4:84:ac:2a:50:cb:d1:71:b3: 43:bc:a3:09:19:20:bd:50:55:e6:ad:47:6e:40:9b: d0:3e:1e:45:c3:bc:7c:78:23:44:a6:d3:64:c9:27: 53:f3:15:b6:2f:f2:cd:d1:b5:a0:61:d2:91:be:39: 0d:b1:c8:22:1b:80:16:36:e9:97:d7:b5:ae:83:03: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A6:F5:B6:3A:55:7C:DD:CD:DF:E0:1F:63:A1:82:4C:A0:43:93:B0 X509v3 Authority Key Identifier: keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:54:3d:9d:a9:27:8e:0f:4a:36:fb:e6:c8:6a:ec:3a:be:43: 95:86:0f:b5:3f:45:46:24:56:33:6e:a8:65:74:f9:0d:15:29: d2:67:d3:36:f5:7f:42:2d:1b:71:da:c8:3f:30:4a:c6:21:d8: 36:12:af:61:50:f7:76:d6:b4:ad:28:23:08:1d:50:a5:a8:cb: cb:1f:0c:18:c5:10:11:bd:df:e8:0c:cf:a9:74:81:16:4c:5d: 86:79:50:75:e8:88:2b:e6:ec:0e:20:23:45:19:a2:13:0a:88: 98:d0:05:1e:9a:c4:93:04:69:90:3d:80:e5:b2:30:4d:ea:c5: 61:8a:7a:96:3f:dd:90:cf:56:92:0e:ce:ee:6e:43:c9:e0:a4: 3c:93:ce:f4:4f:6a:c5:ab:78:3b:af:a2:47:8f:0c:bb:c7:7a: ba:30:91:ed:6c:24:b6:f6:91:fb:71:37:e9:93:5c:a1:00:56: a5:16:fa:83:4d:46:cd:43:3e:29:e3:e3:52:e2:30:42:8b:bd: fd:4c:26:70:b2:67:87:ed:64:02:5e:fe:c0:21:e2:50:c7:b4: db:e6:5a:dc:52:52:cf:8c:b7:2c:69:a7:74:4c:31:40:9f:e2: 79:6c:9f:17:4b:3c:6c:6a:ef:81:5e:df:43:28:b6:b5:1b:d5: d3:24:63:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA5iM0IjOm0m7naruYMv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy ZWZmZTIwHhcNMjYwMjAyMTEwMTE3WhcNMjYwMjAzMTEwMTE3WjAzMTEwLwYDVQQD EyhjM2E2ZjViNjNhNTU3Y2RkY2RkZmUwMWY2M2ExODI0Y2EwNDM5M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hTexP80rpEjqUFvpxno8q8xoHS8 NfUSbTztATJkbESAKEApgkYgdVXcYQyjbm2Xs/0HkjCOp6Ujs3Mx3oEO5gWCtQJY 07fmRIwIFqMlxJNsXOHihlAYpScPPU6k2bygCZxA2UZJxYvmzcvRNYfygVDiwZpt f9qbzkryFXkLuVB2sfPiXmCYxld6x46dP/NpP9/J0Fh4VpPDiybMHzqs3HT1glXY 6i4AKhC03n+xBRwwg/F/yATtvd70hKwqUMvRcbNDvKMJGSC9UFXmrUduQJvQPh5F w7x8eCNEptNkySdT8xW2L/LN0bWgYdKRvjkNscgiG4AWNumX17WugwOx9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOm9bY6VXzdzd/gH2OhgkygQ5OwMB8GA1UdIwQY MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlQ9nakn jg9KNvvmyGrsOr5DlYYPtT9FRiRWM26oZXT5DRUp0mfTNvV/Qi0bcdrIPzBKxiHY NhKvYVD3dta0rSgjCB1QpajLyx8MGMUQEb3f6AzPqXSBFkxdhnlQdeiIK+bsDiAj RRmiEwqImNAFHprEkwRpkD2A5bIwTerFYYp6lj/dkM9Wkg7O7m5DyeCkPJPO9E9q xat4O6+iR48Mu8d6ujCR7WwktvaR+3E36ZNcoQBWpRb6g01GzUM+KePjUuIwQou9 /UwmcLJnh+1kAl7+wCHiUMe02+Za3FJSz4y3LGmndEwxQJ/ieWyfF0s8bGrvgV7f Qyi2tRvV0yRj8w== -----END CERTIFICATE-----Generated at Mon Feb 2 20:55:03 2026 by rpki-client