This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json) Hash identifier: G5tY2HzROJxqwwILAxHVsUb31hUmxXvh8l9CB+UjbUY= Subject key identifier: C2:16:D8:19:8B:EE:28:E8:74:0D:56:64:60:48:83:BA:65:8F:D9:DA Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c Certificate serial: 019BF951D68F2D464DBEDE6A59B1A4943C3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 08:00:48 +0000 Manifest this update: Mon 26 Jan 2026 08:00:48 +0000 Manifest next update: Tue 27 Jan 2026 08:00:48 +0000 Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: oZAUkpx0imIyr7PgIPDZNECxOuJXHcOgQIEWkKx3+9k=) 2: F7SCLIzy92KJ-NREaaVjODfHqik.roa (hash: BwWuIIlFuPQUtjh0Ydgc0I6ELzPNPwQINU9/s1qI1yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:d6:8f:2d:46:4d:be:de:6a:59:b1:a4:94:3c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c Validity Not Before: Jan 26 08:00:48 2026 GMT Not After : Jan 27 08:00:48 2026 GMT Subject: CN=c216d8198bee28e8740d5664604883ba658fd9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:22:42:f2:15:50:5c:d6:ac:f0:c6:82:71: 3d:9a:53:b4:14:2a:e4:1f:9b:71:96:e6:df:04:f5: 37:bb:d2:a6:b1:ab:b8:34:a3:06:dc:bd:00:ce:8c: 62:8b:0d:71:01:80:16:22:1b:e2:5b:83:a8:96:2d: 73:89:e3:bd:b9:40:e7:45:75:22:ad:44:2f:b9:84: c7:05:f0:cb:22:b7:17:9f:44:3d:de:1b:67:d8:d8: 0c:dc:02:1a:db:49:11:27:29:79:86:ac:c6:c0:e9: c8:23:6e:50:95:11:c0:ef:d9:18:a0:28:c3:f0:ee: 37:86:6d:77:ab:51:29:ab:69:b4:a2:8f:20:89:c3: 98:f5:03:54:98:06:1b:45:c9:d5:85:4a:7e:0d:c8: a6:4d:79:80:e7:45:a6:48:c0:33:4b:30:b7:3b:eb: 63:91:be:d4:df:4b:7c:dc:95:00:65:f0:68:f8:74: 05:91:d9:4d:fb:85:45:9b:df:0a:ce:e2:54:f3:14: f9:9f:98:e4:a6:d9:3b:bf:5f:b0:bf:2d:50:2a:ce: 3f:24:53:0a:35:96:36:f4:3f:79:f0:cb:b2:cd:f0: 54:f1:dc:8e:fc:1c:a3:86:82:1d:98:62:9f:e1:40: 1d:e3:75:ce:c0:95:c5:97:62:ac:48:9c:fc:8b:0c: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:16:D8:19:8B:EE:28:E8:74:0D:56:64:60:48:83:BA:65:8F:D9:DA X509v3 Authority Key Identifier: keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:86:4f:48:7c:89:89:bd:0b:35:ae:40:4e:48:56:77:5c: 7a:c6:2a:34:8c:70:5b:b6:d1:4f:01:a4:a2:48:5e:ec:38:59: 8d:1d:34:78:9c:de:59:66:fa:27:e1:2d:76:42:ca:77:3a:d2: a8:66:59:8e:c8:8a:40:a8:0f:b9:57:9c:73:0a:ad:fd:f5:3a: 80:b8:62:8c:39:50:97:88:f3:0b:67:6b:61:e2:99:e9:4c:70: 08:cc:81:71:b8:f4:70:50:c5:88:cb:62:13:5c:28:03:a4:08: 27:1b:0e:78:17:53:5d:33:52:1c:c1:39:9b:a4:f9:76:69:a4: 1c:bc:ac:15:cb:dc:23:1e:66:51:d5:5f:c1:19:33:0e:31:a4: 57:89:7e:8e:35:1d:a5:6a:7b:6f:e5:fd:12:e0:4b:d1:83:10: 61:9a:67:08:92:7d:f3:82:04:24:23:7f:d4:7d:01:ff:cc:4a: c3:75:42:77:13:fd:7e:a5:4a:5f:60:86:47:33:1e:c0:f4:4d: 9b:40:a5:28:31:79:57:5e:71:a0:cd:5e:bd:67:58:d7:10:7b: 28:10:63:35:d5:ff:31:8f:0a:81:ec:85:5c:18:42:1c:f7:a8: a0:17:cd:0d:25:af:73:5b:75:32:a8:3f:8a:ac:64:79:55:04: ff:82:51:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UdaPLUZNvt5qWbGklDw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj MjlmM2MwHhcNMjYwMTI2MDgwMDQ4WhcNMjYwMTI3MDgwMDQ4WjAzMTEwLwYDVQQD EyhjMjE2ZDgxOThiZWUyOGU4NzQwZDU2NjQ2MDQ4ODNiYTY1OGZkOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YiQvIVUFzWrPDGgnE9mlO0FCrk H5txlubfBPU3u9Kmsau4NKMG3L0Azoxiiw1xAYAWIhviW4Ooli1zieO9uUDnRXUi rUQvuYTHBfDLIrcXn0Q93htn2NgM3AIa20kRJyl5hqzGwOnII25QlRHA79kYoCjD 8O43hm13q1Epq2m0oo8gicOY9QNUmAYbRcnVhUp+DcimTXmA50WmSMAzSzC3O+tj kb7U30t83JUAZfBo+HQFkdlN+4VFm98KzuJU8xT5n5jkptk7v1+wvy1QKs4/JFMK NZY29D958MuyzfBU8dyO/ByjhoIdmGKf4UAd43XOwJXFl2KsSJz8iwzJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIW2BmL7ijodA1WZGBIg7plj9naMB8GA1UdIwQY MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaneGT0h8 iYm9CzWuQE5IVndcesYqNIxwW7bRTwGkokhe7DhZjR00eJzeWWb6J+EtdkLKdzrS qGZZjsiKQKgPuVeccwqt/fU6gLhijDlQl4jzC2drYeKZ6UxwCMyBcbj0cFDFiMti E1woA6QIJxsOeBdTXTNSHME5m6T5dmmkHLysFcvcIx5mUdVfwRkzDjGkV4l+jjUd pWp7b+X9EuBL0YMQYZpnCJJ984IEJCN/1H0B/8xKw3VCdxP9fqVKX2CGRzMewPRN m0ClKDF5V15xoM1evWdY1xB7KBBjNdX/MY8KgeyFXBhCHPeooBfNDSWvc1t1Mqg/ iqxkeVUE/4JRww== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:34 2026 by rpki-client