This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json) Hash identifier: fmyfxMIOBSfNL2nljaPvHFKPM5LlAyuRWgrtvw9sPeE= Subject key identifier: D8:88:81:CD:C2:2D:95:E8:20:74:71:5D:99:B4:96:28:B0:81:71:8A Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Certificate serial: 019BFEAF2D0F70E8EA2EEF00B516315B51A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft Manifest number: 0B25 Signing time: Tue 27 Jan 2026 09:00:51 +0000 Manifest this update: Tue 27 Jan 2026 09:00:51 +0000 Manifest next update: Wed 28 Jan 2026 09:00:51 +0000 Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: bOqBUKXOEdQ2Dd1O+q+F5ngz6svKq+/065X41NR7o2s=) 2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:2d:0f:70:e8:ea:2e:ef:00:b5:16:31:5b:51:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f Validity Not Before: Jan 27 09:00:51 2026 GMT Not After : Jan 28 09:00:51 2026 GMT Subject: CN=d88881cdc22d95e82074715d99b49628b081718a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:2a:5b:a8:ed:65:fc:de:d0:e5:41:3d:bf: 6a:f9:e2:fc:71:95:67:95:6e:b1:15:6e:28:6e:52: 35:69:77:b8:49:9f:b1:04:c8:90:5e:fb:9e:f3:01: ad:5c:ff:ea:eb:1f:ce:1a:17:1d:99:98:61:5f:2a: 97:7f:58:a5:0d:43:b3:34:02:a7:6f:42:55:46:19: 16:7d:75:73:6f:d1:77:4b:ae:97:b7:0f:ca:4f:f1: 80:4e:00:17:d8:62:29:91:08:a9:58:6f:a8:19:56: cd:78:ab:1f:1b:f9:ea:a3:c1:66:3d:b3:c9:14:a3: 2e:d5:25:22:e4:c1:06:6e:06:47:d5:00:c8:f7:eb: 28:12:39:a8:17:8f:eb:ec:75:7e:dc:09:11:40:c6: 91:f3:e5:f3:54:30:c2:a4:90:5d:f8:7e:03:44:60: 02:92:41:8b:06:73:38:d2:a8:ae:d1:e0:f1:17:df: fd:d7:19:5e:9e:c0:be:79:2a:5a:86:9c:ff:39:29: e9:38:59:d3:bd:32:94:45:77:68:e8:a7:09:6f:d7: 28:5b:67:00:a7:6c:2b:fe:bc:98:00:14:e9:ad:d1: 09:fc:b1:9a:ae:cf:8d:c5:ee:bf:9e:cd:b8:92:1a: b2:5d:c5:ee:a6:2f:e0:41:a1:61:ab:27:6d:46:1d: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:81:CD:C2:2D:95:E8:20:74:71:5D:99:B4:96:28:B0:81:71:8A X509v3 Authority Key Identifier: keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:df:57:6c:e4:e4:96:ec:43:7a:c0:ba:c1:bf:7a:51:5d: 63:ff:82:e4:20:55:d5:16:42:e7:16:23:8a:49:7a:d3:e0:ba: c7:3a:17:9b:ab:53:e5:81:67:4d:41:2f:4d:05:3c:d7:10:8b: c9:f9:cf:26:38:f4:ec:85:bd:7a:3f:6d:da:e8:d9:78:9e:1b: c9:01:91:9f:45:a3:38:a9:65:30:b0:47:f6:bf:5a:d0:7c:90: 92:1f:73:f5:88:8a:2a:43:c1:00:7d:cc:52:12:c4:16:ec:db: be:8d:d0:1f:d3:2b:1a:69:e2:2a:dc:a3:94:cc:4c:fe:bd:e0: f0:17:98:7a:e0:71:24:2b:0a:80:07:d1:c7:3c:48:33:51:f6: 57:28:a8:fe:9d:6b:23:71:2c:8f:3b:83:68:23:1a:c0:af:4c: f2:d1:67:b7:1d:22:a2:1f:cb:4e:32:6b:69:ca:1d:41:b3:96: 46:82:fb:0f:28:d0:e1:a7:ae:ef:77:58:f1:9a:3d:24:89:13: 98:89:ed:65:d7:f1:0b:86:b5:7e:95:c1:85:72:ed:7e:df:00: 9a:9c:b1:d1:e0:cf:a9:de:25:52:8a:43:c4:2a:4b:6b:a3:83: 32:86:4e:ef:ac:e3:97:67:af:87:51:bf:a7:ac:48:02:d2:14: e1:18:1c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ry0PcOjqLu8AtRYxW1GiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYTBiNWFjYTczMWVhNzFmMjZkNjNkMjNjMjJjMTIzYjJi YjEyMGYwHhcNMjYwMTI3MDkwMDUxWhcNMjYwMTI4MDkwMDUxWjAzMTEwLwYDVQQD EyhkODg4ODFjZGMyMmQ5NWU4MjA3NDcxNWQ5OWI0OTYyOGIwODE3MThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNQqW6jtZfze0OVBPb9q+eL8cZVn lW6xFW4oblI1aXe4SZ+xBMiQXvue8wGtXP/q6x/OGhcdmZhhXyqXf1ilDUOzNAKn b0JVRhkWfXVzb9F3S66Xtw/KT/GATgAX2GIpkQipWG+oGVbNeKsfG/nqo8FmPbPJ FKMu1SUi5MEGbgZH1QDI9+soEjmoF4/r7HV+3AkRQMaR8+XzVDDCpJBd+H4DRGAC kkGLBnM40qiu0eDxF9/91xlensC+eSpahpz/OSnpOFnTvTKURXdo6KcJb9coW2cA p2wr/ryYABTprdEJ/LGars+Nxe6/ns24khqyXcXupi/gQaFhqydtRh0jTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiIgc3CLZXoIHRxXZm0liiwgXGKMB8GA1UdIwQY MBaAFHCgtaynMepx8m1j0jwiwSOyuxIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAt NDNlMzE4MDBkZjBjLzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mNjQ5ZTUtYTdjYi00MjE4LTkzZTAtNDNlMzE4MDBkZjBj LzEvY0tDMXJLY3g2bkh5YldQU1BDTEJJN0s3RWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNLfV2zk 5JbsQ3rAusG/elFdY/+C5CBV1RZC5xYjikl60+C6xzoXm6tT5YFnTUEvTQU81xCL yfnPJjj07IW9ej9t2ujZeJ4byQGRn0WjOKllMLBH9r9a0HyQkh9z9YiKKkPBAH3M UhLEFuzbvo3QH9MrGmniKtyjlMxM/r3g8BeYeuBxJCsKgAfRxzxIM1H2Vyio/p1r I3EsjzuDaCMawK9M8tFntx0ioh/LTjJracodQbOWRoL7DyjQ4aeu73dY8Zo9JIkT mIntZdfxC4a1fpXBhXLtft8Ampyx0eDPqd4lUopDxCpLa6ODMoZO76zjl2evh1G/ p6xIAtIU4RgcMQ== -----END CERTIFICATE-----Generated at Tue Jan 27 14:58:35 2026 by rpki-client