This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json) Hash identifier: 6sTbA/X5I+i0rAyWsZbXiygavo6KZiTbRdXLAC0XQb8= Subject key identifier: 60:08:09:CD:6B:B4:2D:C7:E0:9F:B8:E4:89:BC:A4:B4:F0:F1:64:BB Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Certificate serial: 019BF91B3C9A8F560D2CCA9E70BC32B29955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft Manifest number: 0AE3 Signing time: Mon 26 Jan 2026 07:01:10 +0000 Manifest this update: Mon 26 Jan 2026 07:01:10 +0000 Manifest next update: Tue 27 Jan 2026 07:01:10 +0000 Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=) 2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: 2f7Yrgql96JeEW/PKTc/On27lVqPAWcVh2RjKdUqGo0=) 3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:3c:9a:8f:56:0d:2c:ca:9e:70:bc:32:b2:99:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b Validity Not Before: Jan 26 07:01:10 2026 GMT Not After : Jan 27 07:01:10 2026 GMT Subject: CN=600809cd6bb42dc7e09fb8e489bca4b4f0f164bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:cc:a7:fa:ee:c2:20:a6:4f:c8:5c:05:37: 12:6b:94:64:2d:11:19:f7:d1:21:ca:90:4a:ca:51: 2b:04:26:00:ed:f8:32:50:a5:9f:30:ee:ae:3b:cc: 7d:cb:c1:97:58:e6:01:3d:66:3b:ce:d1:9e:53:f8: db:68:c2:4a:be:d7:af:4a:5c:f4:43:1b:f0:4c:28: e8:57:e1:a3:2c:26:83:1a:de:7d:39:6d:f3:f2:2c: 38:d1:39:06:0d:72:9d:6b:e6:7b:95:77:a6:09:84: 64:e4:c1:33:5e:1d:91:bf:bd:92:3b:b9:3e:1f:ac: 37:1c:0a:59:30:50:ad:7a:a1:b1:d3:f0:5b:1a:0e: 9a:ae:76:66:08:2b:9e:ec:9d:68:72:bd:9b:80:9c: 76:4e:46:f4:ca:dc:ad:51:6e:98:69:85:08:03:df: 81:7f:e4:dd:3e:fd:05:04:29:fb:14:be:e0:e5:2b: ad:9e:1b:b6:db:7c:21:cd:7e:ff:a6:01:d4:39:c7: 2e:4f:1b:f5:46:34:6f:12:6a:2a:5e:50:c8:05:fe: c0:00:38:2f:fa:48:81:f3:2f:4f:92:01:7f:ff:62: ff:df:db:92:3b:46:df:40:69:2f:64:52:84:98:bf: 2c:cf:05:21:dd:b3:e6:cb:41:4f:83:4c:2f:09:94: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:09:CD:6B:B4:2D:C7:E0:9F:B8:E4:89:BC:A4:B4:F0:F1:64:BB X509v3 Authority Key Identifier: keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2b:c1:f4:88:74:ce:13:b8:e0:24:ef:40:d5:0a:53:8c:ca: 54:ed:66:51:19:77:ae:01:86:85:69:d2:a8:99:90:e7:20:85: c9:87:90:9a:6b:22:76:5e:79:d6:ca:cc:ce:12:9c:d4:39:6d: 70:7e:ef:f8:60:e0:05:bb:fb:83:5a:43:e5:51:0c:65:49:b5: 83:71:b9:e3:cc:9c:a5:00:75:af:71:95:24:0a:78:85:a0:45: 27:92:a6:50:0d:4c:e2:70:df:41:64:83:b8:27:e3:c9:ae:cc: 3a:a6:c3:c3:e3:2e:f6:68:39:84:97:58:21:b0:65:c8:00:57: 1d:68:35:e2:94:25:8c:e1:0e:dc:33:23:e4:df:b3:71:4b:d3: b2:c8:4d:01:13:8a:4f:7e:f1:2f:7c:ed:eb:e6:75:10:52:d5: bf:93:cd:72:2f:1c:39:b9:97:32:4b:30:3e:7e:e8:20:51:db: 38:07:a1:80:1f:07:c7:46:1b:e8:dd:b7:1f:02:5d:5a:96:e9: 13:87:41:59:8c:35:ed:e8:f4:a8:d0:0e:78:bf:62:45:d2:ef: a0:c6:c8:df:a3:43:5e:36:b6:19:a9:61:d0:13:6c:e4:c1:51: a9:bf:96:aa:73:4d:ef:ac:1b:e0:f7:55:98:d2:f1:10:b3:da: 1a:64:38:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gzyaj1YNLMqecLwysplVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4 NjIwNmIwHhcNMjYwMTI2MDcwMTEwWhcNMjYwMTI3MDcwMTEwWjAzMTEwLwYDVQQD Eyg2MDA4MDljZDZiYjQyZGM3ZTA5ZmI4ZTQ4OWJjYTRiNGYwZjE2NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy7Mp/ruwiCmT8hcBTcSa5RkLREZ 99EhypBKylErBCYA7fgyUKWfMO6uO8x9y8GXWOYBPWY7ztGeU/jbaMJKvtevSlz0 QxvwTCjoV+GjLCaDGt59OW3z8iw40TkGDXKda+Z7lXemCYRk5MEzXh2Rv72SO7k+ H6w3HApZMFCteqGx0/BbGg6arnZmCCue7J1ocr2bgJx2Tkb0ytytUW6YaYUIA9+B f+TdPv0FBCn7FL7g5Sutnhu223whzX7/pgHUOccuTxv1RjRvEmoqXlDIBf7AADgv +kiB8y9PkgF//2L/39uSO0bfQGkvZFKEmL8szwUh3bPmy0FPg0wvCZSE5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAICc1rtC3H4J+45Im8pLTw8WS7MB8GA1UdIwQY MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4 LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyvB9Ih0 zhO44CTvQNUKU4zKVO1mURl3rgGGhWnSqJmQ5yCFyYeQmmsidl551srMzhKc1Dlt cH7v+GDgBbv7g1pD5VEMZUm1g3G548ycpQB1r3GVJAp4haBFJ5KmUA1M4nDfQWSD uCfjya7MOqbDw+Mu9mg5hJdYIbBlyABXHWg14pQljOEO3DMj5N+zcUvTsshNAROK T37xL3zt6+Z1EFLVv5PNci8cObmXMkswPn7oIFHbOAehgB8Hx0Yb6N23HwJdWpbp E4dBWYw17ej0qNAOeL9iRdLvoMbI36NDXja2Galh0BNs5MFRqb+WqnNN76wb4PdV mNLxELPaGmQ4lw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:11 2026 by rpki-client