This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json) Hash identifier: tZVv4jU19HwGQDc57CkjRdQjbvqd5moT0iMpMTAH4fo= Subject key identifier: 43:0B:69:DD:D0:AA:C3:2E:1D:F6:23:AA:DD:72:CE:68:91:77:8D:A8 Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2 Certificate serial: 019C1FF1D68C2DA4B1BE74252A4D964CCADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft Manifest number: 1342 Signing time: Mon 02 Feb 2026 20:01:08 +0000 Manifest this update: Mon 02 Feb 2026 20:01:08 +0000 Manifest next update: Tue 03 Feb 2026 20:01:08 +0000 Files and hashes: 1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: J1U9kexx49+4Eizh4/8Y8Y/Z2AnrIqjT4BESWmK7mMc=) 2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:f1:d6:8c:2d:a4:b1:be:74:25:2a:4d:96:4c:ca:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Validity Not Before: Feb 2 20:01:08 2026 GMT Not After : Feb 3 20:01:08 2026 GMT Subject: CN=430b69ddd0aac32e1df623aadd72ce6891778da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:77:d5:34:87:ce:22:8d:8d:08:88:ee:0b: da:8c:9b:33:4f:e8:29:66:2f:96:d5:1b:03:89:84: 4c:bb:83:cb:91:ce:d1:d6:2b:4c:55:cb:2a:b8:49: 02:95:37:42:b5:61:4c:a3:3a:e1:3f:aa:b3:57:cb: ec:3b:b3:01:b2:61:29:ba:91:ac:32:c5:51:ac:bf: cb:15:33:69:74:32:f4:01:0f:b8:e6:dd:09:22:9a: 04:83:af:0c:22:bf:f7:2c:02:7d:62:f2:76:a3:a9: b5:5d:e2:73:7e:1b:34:11:e4:c1:4b:eb:36:2c:6e: 76:08:31:75:4f:4f:2c:c2:74:fc:73:64:48:fa:50: 93:d6:51:3d:c2:55:ad:87:95:1f:d5:7c:3e:ab:6d: 50:5c:22:3d:c4:6c:26:c0:18:16:3e:a9:7a:00:fc: 23:e4:a9:b4:98:e4:22:68:f2:c9:01:90:c2:68:83: f0:dd:f8:9a:f8:bf:54:2c:97:43:43:ad:96:7f:b1: d9:2c:f1:04:b1:8a:ac:fb:0f:59:7f:b7:41:d2:9f: 80:2c:2f:1c:64:f8:16:99:5c:32:9e:ec:5a:de:f0: a4:d3:62:8e:9f:d3:36:41:25:71:6d:99:b7:10:31: 2d:a1:a6:7f:3e:71:c8:24:8e:c8:6e:61:ba:22:8a: 5b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:69:DD:D0:AA:C3:2E:1D:F6:23:AA:DD:72:CE:68:91:77:8D:A8 X509v3 Authority Key Identifier: keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f6:f1:47:a4:8c:05:51:a8:d9:97:9c:be:cf:43:f8:19:60: 44:50:7e:91:76:62:1f:7e:63:7a:30:05:04:70:fb:dd:6c:5e: 80:e1:3d:74:69:0d:01:7f:26:11:44:4a:66:ec:65:17:2b:0a: ce:64:4e:01:2e:5f:5a:72:1e:65:62:1d:a9:da:de:1b:45:04: 26:97:ec:0e:c8:1b:0a:cc:57:d2:e5:c1:e9:07:3e:51:82:7d: b0:86:54:99:c3:bd:83:42:96:80:73:18:02:57:0f:61:88:03: cd:1e:34:05:0e:a5:e5:d6:13:41:c5:0d:9a:24:2a:0c:8f:af: e2:9b:f3:4a:98:ba:4f:e1:50:09:6d:b7:19:c6:d5:b3:a0:48: 8a:7a:5f:cb:bf:c4:99:b0:dc:7b:6a:0d:e8:77:fd:f3:1e:4e: 43:a9:3c:0b:a2:5b:0f:5d:e3:60:8e:bd:09:8a:ed:31:2a:92: a6:f3:7d:3d:3d:0f:09:30:37:fe:8f:f4:d8:b0:67:b2:f4:c5: 10:0c:4b:92:34:21:e9:5b:39:aa:b0:39:54:21:c3:18:44:8c: 95:b2:02:10:ae:4f:51:96:66:92:fb:f0:52:eb:b5:71:ea:10: 31:4b:02:91:41:87:36:32:06:c7:32:94:91:8a:3e:05:ba:05: d3:67:ea:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwf8daMLaSxvnQlKk2WTMrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy ZWZmZTIwHhcNMjYwMjAyMjAwMTA4WhcNMjYwMjAzMjAwMTA4WjAzMTEwLwYDVQQD Eyg0MzBiNjlkZGQwYWFjMzJlMWRmNjIzYWFkZDcyY2U2ODkxNzc4ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3t31TSHziKNjQiI7gvajJszT+gp Zi+W1RsDiYRMu4PLkc7R1itMVcsquEkClTdCtWFMozrhP6qzV8vsO7MBsmEpupGs MsVRrL/LFTNpdDL0AQ+45t0JIpoEg68MIr/3LAJ9YvJ2o6m1XeJzfhs0EeTBS+s2 LG52CDF1T08swnT8c2RI+lCT1lE9wlWth5Uf1Xw+q21QXCI9xGwmwBgWPql6APwj 5Km0mOQiaPLJAZDCaIPw3fia+L9ULJdDQ62Wf7HZLPEEsYqs+w9Zf7dB0p+ALC8c ZPgWmVwynuxa3vCk02KOn9M2QSVxbZm3EDEtoaZ/PnHIJI7IbmG6IopbswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMLad3QqsMuHfYjqt1yzmiRd42oMB8GA1UdIwQY MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/bxR6SM BVGo2Zecvs9D+BlgRFB+kXZiH35jejAFBHD73WxegOE9dGkNAX8mEURKZuxlFysK zmROAS5fWnIeZWIdqdreG0UEJpfsDsgbCsxX0uXB6Qc+UYJ9sIZUmcO9g0KWgHMY AlcPYYgDzR40BQ6l5dYTQcUNmiQqDI+v4pvzSpi6T+FQCW23GcbVs6BIinpfy7/E mbDce2oN6Hf98x5OQ6k8C6JbD13jYI69CYrtMSqSpvN9PT0PCTA3/o/02LBnsvTF EAxLkjQh6Vs5qrA5VCHDGESMlbICEK5PUZZmkvvwUuu1ceoQMUsCkUGHNjIGxzKU kYo+BboF02fqkw== -----END CERTIFICATE-----Generated at Tue Feb 3 00:12:59 2026 by rpki-client