This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json) Hash identifier: P/GR+lKUfU1LY0wTDRX2ySl+M7JUDc9iZuTyyJdpI8Y= Subject key identifier: BC:E5:EB:37:9D:DE:6E:60:01:7C:D0:86:6C:70:02:56:64:DF:66:4A Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Certificate serial: 019BFB7703694240DEAFF8F8C9409AD3A9DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft Manifest number: 0ECB Signing time: Mon 26 Jan 2026 18:00:39 +0000 Manifest this update: Mon 26 Jan 2026 18:00:39 +0000 Manifest next update: Tue 27 Jan 2026 18:00:39 +0000 Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: R0DIZSd004pPnYvQDD3Me55UpKG8s87CkSC1ABv07yg=) 2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:03:69:42:40:de:af:f8:f8:c9:40:9a:d3:a9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b Validity Not Before: Jan 26 18:00:39 2026 GMT Not After : Jan 27 18:00:39 2026 GMT Subject: CN=bce5eb379dde6e60017cd0866c70025664df664a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ea:b7:75:93:95:23:fd:c7:9a:27:7b:f2:7e: 22:76:72:bb:cf:22:f9:3e:2b:1f:77:9c:cc:8c:b3: 00:2c:9f:9a:65:c3:8b:f6:0f:88:ad:c7:a6:ab:10: b8:cf:bf:b7:a4:59:61:4b:45:77:7f:6d:ab:c9:a7: 06:ca:0a:d4:03:3c:0d:87:1a:ca:a5:7b:56:af:bf: 7c:45:fb:a0:93:4d:5c:9e:27:ba:bf:c9:04:d5:46: a5:12:48:1a:d5:34:55:0c:6f:57:43:32:89:38:9d: 8b:c4:b9:b3:fe:ff:9c:8f:d4:43:60:19:a9:42:fa: 1b:45:43:f4:67:a9:dd:2b:a9:0e:9f:9b:5b:ee:92: e1:38:2a:d3:a3:7a:09:52:05:e8:d2:7c:56:bd:49: f7:91:bf:8e:48:86:22:db:91:78:fe:51:c9:d2:4d: 28:5e:68:ce:f6:2b:e7:b4:43:13:15:5b:b9:59:72: a6:c8:67:78:52:73:b0:8b:7d:af:08:f4:c4:bc:58: 0f:23:74:a1:21:b0:a4:df:5f:30:dd:a3:a4:59:9a: 99:00:ca:e1:c8:0e:e7:88:e4:ce:af:15:d6:38:41: 84:65:85:b7:da:03:08:af:f8:f6:f6:0d:55:94:f0: 6d:d3:ae:20:07:78:d0:36:ae:7a:af:78:8b:f5:c7: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:EB:37:9D:DE:6E:60:01:7C:D0:86:6C:70:02:56:64:DF:66:4A X509v3 Authority Key Identifier: keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:59:9a:5e:a4:f1:9c:2d:9a:c7:d5:00:5c:30:ac:8b:77:09: f5:93:12:4f:14:55:12:10:24:8c:fc:a8:59:aa:f7:7b:eb:b2: d5:5d:7a:d7:31:12:70:04:4c:4a:ca:b6:93:65:7d:db:0b:f4: 9c:6b:05:70:ad:18:70:01:60:24:8f:30:80:21:79:10:9d:3a: 5a:b6:36:c5:23:6b:7b:3a:87:79:35:c5:48:43:e9:88:17:3b: 45:4b:ef:e6:dd:c7:67:3d:96:b4:b8:94:a7:ef:8d:28:78:a2: 2d:da:80:aa:0a:8f:05:d1:26:95:71:ae:41:6e:8f:ca:3d:08: 16:80:86:03:79:ad:4e:b9:37:b0:96:5d:d7:d8:2d:a7:56:78: 2f:f5:57:fe:89:ce:85:e9:71:40:9c:67:97:ee:03:c4:ad:72: 73:13:92:29:e4:c9:a8:67:49:cb:a6:f9:ec:09:cf:52:24:90: 8b:5f:5f:c2:c7:f9:df:fa:0b:b5:d6:05:21:72:90:20:b6:97: 96:a6:9b:27:fc:f1:93:91:53:7e:1b:de:59:3b:aa:5a:ce:d0: f2:2d:9f:39:66:5b:27:ab:b6:e5:18:7c:e0:1c:68:34:37:4d: 37:f1:14:ae:98:3d:18:19:a8:83:51:25:4f:b9:e2:bc:cb:97: e6:84:30:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dwNpQkDer/j4yUCa06neMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk YTA0NmIwHhcNMjYwMTI2MTgwMDM5WhcNMjYwMTI3MTgwMDM5WjAzMTEwLwYDVQQD EyhiY2U1ZWIzNzlkZGU2ZTYwMDE3Y2QwODY2YzcwMDI1NjY0ZGY2NjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+q3dZOVI/3Hmid78n4idnK7zyL5 Pisfd5zMjLMALJ+aZcOL9g+IrcemqxC4z7+3pFlhS0V3f22ryacGygrUAzwNhxrK pXtWr798Rfugk01cnie6v8kE1UalEkga1TRVDG9XQzKJOJ2LxLmz/v+cj9RDYBmp QvobRUP0Z6ndK6kOn5tb7pLhOCrTo3oJUgXo0nxWvUn3kb+OSIYi25F4/lHJ0k0o XmjO9ivntEMTFVu5WXKmyGd4UnOwi32vCPTEvFgPI3ShIbCk318w3aOkWZqZAMrh yA7niOTOrxXWOEGEZYW32gMIr/j29g1VlPBt064gB3jQNq56r3iL9cdjzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzl6zed3m5gAXzQhmxwAlZk32ZKMB8GA1UdIwQY MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFmaXqTx nC2ax9UAXDCsi3cJ9ZMSTxRVEhAkjPyoWar3e+uy1V161zEScARMSsq2k2V92wv0 nGsFcK0YcAFgJI8wgCF5EJ06WrY2xSNrezqHeTXFSEPpiBc7RUvv5t3HZz2WtLiU p++NKHiiLdqAqgqPBdEmlXGuQW6Pyj0IFoCGA3mtTrk3sJZd19gtp1Z4L/VX/onO helxQJxnl+4DxK1ycxOSKeTJqGdJy6b57AnPUiSQi19fwsf53/oLtdYFIXKQILaX lqabJ/zxk5FTfhveWTuqWs7Q8i2fOWZbJ6u25Rh84BxoNDdNN/EUrpg9GBmog1El T7nivMuX5oQwvw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:39 2026 by rpki-client