This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json) Hash identifier: 65IedhUX+eFm11+WcAa0bC6FzBD04IKWpRd5UTyR/8g= Subject key identifier: E4:F6:A1:78:3E:99:0B:FA:2B:1B:FB:32:0C:9E:E2:65:A9:5A:5E:A4 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019BFE0A81FC07283DAC75E4C60A9D6F3AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft Manifest number: 0F39 Signing time: Tue 27 Jan 2026 06:01:00 +0000 Manifest this update: Tue 27 Jan 2026 06:01:00 +0000 Manifest next update: Wed 28 Jan 2026 06:01:00 +0000 Files and hashes: 1: 5g8Srx2NA7txOPEeTGfez2xgZBU.roa (hash: HWA+sVXgg9d4BP39T3YyJLoaTybtYtWFwP5rgA+KK4Y=) 2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=) 3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: YD/KlzDewozXSycaS/1UAQaHUl8TCj7w1sY3/bf3Jsc=) 4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=) 5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=) 6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:81:fc:07:28:3d:ac:75:e4:c6:0a:9d:6f:3a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Jan 27 06:01:00 2026 GMT Not After : Jan 28 06:01:00 2026 GMT Subject: CN=e4f6a1783e990bfa2b1bfb320c9ee265a95a5ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:12:a9:4f:73:e6:6c:64:29:86:f1:be:b6: 04:d8:78:b9:7c:06:80:79:2b:42:f2:99:60:e7:9d: 93:59:87:58:9e:0a:8f:3d:30:02:9a:2d:72:46:74: ff:94:24:65:34:e8:76:0b:2e:86:a2:5e:71:93:ef: 82:28:98:64:6f:56:72:7b:aa:b3:cf:98:f9:0c:9d: ce:57:5a:b0:3d:ae:46:57:2b:2f:85:76:b7:6d:84: 31:6d:11:d1:cb:d6:d8:24:8b:6a:2f:52:02:fb:73: e2:71:a9:33:e2:7d:cc:8b:f8:75:a9:ba:1c:18:41: 4f:e8:6a:b5:12:f9:6f:e6:fe:fb:81:4b:49:f3:1f: c2:ff:47:c6:ab:49:7b:ea:51:58:50:fc:c4:ff:5b: f9:43:0d:4a:d6:26:6c:b9:62:0c:23:f7:c2:31:d9: 91:d3:1b:97:aa:4e:1c:17:19:78:32:77:a2:70:cb: 68:ce:85:6c:5d:f1:7d:3e:66:57:e6:96:1c:36:29: 78:b7:17:a8:f0:0a:75:e1:bf:ff:c8:86:2d:e1:01: 8c:a7:e4:14:d3:53:e8:89:94:34:a4:ea:95:aa:d0: c8:7d:ef:b9:82:95:70:a5:cf:f7:0e:30:6e:ab:a2: a1:3a:f0:d5:0a:63:2c:80:5c:7b:b1:f0:3b:9d:99: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F6:A1:78:3E:99:0B:FA:2B:1B:FB:32:0C:9E:E2:65:A9:5A:5E:A4 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ec:3b:50:33:06:5a:52:d5:aa:19:fa:9b:c1:a7:e9:93:8a: 77:bb:17:08:1b:de:1c:b9:6b:77:e8:cc:80:83:b5:86:cb:4f: df:ca:3a:f1:a2:a8:e9:ae:45:c6:b1:fa:06:7f:d2:ab:50:14: 0c:a2:ff:bd:43:b3:d4:05:1b:57:ec:a1:19:bc:30:1e:3f:99: 59:f0:e5:7c:16:27:ed:c5:66:6b:8e:c4:c9:0d:28:c9:f8:98: 19:25:da:aa:72:9a:ee:84:21:88:8c:8d:f4:99:01:7d:80:14: 86:4b:18:c7:3d:84:df:c7:d9:f1:9a:eb:7e:4d:6a:2e:54:c4: 7c:72:da:10:1f:6b:98:8b:bc:21:d8:ec:9a:1a:29:e6:09:f3: b9:3c:a2:79:d8:ac:be:3b:4c:03:21:d7:ed:49:96:0d:ae:b9: 4c:c7:d5:a8:8c:64:43:5a:cf:88:c5:92:69:47:3f:5a:0f:89: d1:ae:50:9a:dd:86:e3:76:de:19:7d:6c:c9:05:40:32:a2:37: 02:84:a8:77:24:bc:02:72:b3:98:c0:57:10:18:59:b1:4a:5a: 9f:28:e2:73:66:ed:1d:06:b8:b5:33:8a:7f:81:a1:8d:a4:0b: ef:8d:68:6c:a9:53:ce:26:ad:e9:3f:1a:16:84:3f:cd:3f:78: e2:bd:df:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CoH8Byg9rHXkxgqdbzqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjYwMTI3MDYwMTAwWhcNMjYwMTI4MDYwMTAwWjAzMTEwLwYDVQQD EyhlNGY2YTE3ODNlOTkwYmZhMmIxYmZiMzIwYzllZTI2NWE5NWE1ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5kSqU9z5mxkKYbxvrYE2Hi5fAaA eStC8plg552TWYdYngqPPTACmi1yRnT/lCRlNOh2Cy6Gol5xk++CKJhkb1Zye6qz z5j5DJ3OV1qwPa5GVysvhXa3bYQxbRHRy9bYJItqL1IC+3Picakz4n3Mi/h1qboc GEFP6Gq1Evlv5v77gUtJ8x/C/0fGq0l76lFYUPzE/1v5Qw1K1iZsuWIMI/fCMdmR 0xuXqk4cFxl4MneicMtozoVsXfF9PmZX5pYcNil4txeo8Ap14b//yIYt4QGMp+QU 01PoiZQ0pOqVqtDIfe+5gpVwpc/3DjBuq6KhOvDVCmMsgFx7sfA7nZlt1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOT2oXg+mQv6Kxv7Mgye4mWpWl6kMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+w7UDMG WlLVqhn6m8Gn6ZOKd7sXCBveHLlrd+jMgIO1hstP38o68aKo6a5FxrH6Bn/Sq1AU DKL/vUOz1AUbV+yhGbwwHj+ZWfDlfBYn7cVma47EyQ0oyfiYGSXaqnKa7oQhiIyN 9JkBfYAUhksYxz2E38fZ8Zrrfk1qLlTEfHLaEB9rmIu8Idjsmhop5gnzuTyiedis vjtMAyHX7UmWDa65TMfVqIxkQ1rPiMWSaUc/Wg+J0a5Qmt2G43beGX1syQVAMqI3 AoSodyS8AnKzmMBXEBhZsUpanyjic2btHQa4tTOKf4GhjaQL741obKlTziat6T8a FoQ/zT944r3fuA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:52 2026 by rpki-client