This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json) Hash identifier: uBrOKdvvPJ9H1SFyTGcJL10pVj2nAfyPomp+5PpT8bY= Subject key identifier: 35:00:28:2D:C7:7F:E2:0F:2E:F1:F2:96:9D:C8:5A:41:2F:60:B7:9F Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Certificate serial: 019BFB40B91BBBB02A6A12A8FA77BECB8109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft Manifest number: 03DC Signing time: Mon 26 Jan 2026 17:01:21 +0000 Manifest this update: Mon 26 Jan 2026 17:01:21 +0000 Manifest next update: Tue 27 Jan 2026 17:01:21 +0000 Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=) 2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: IZJUyapPC/Cb6LNcEKQlo6J9DkBm4cnEgujfTX6HJhw=) 3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=) 4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:b9:1b:bb:b0:2a:6a:12:a8:fa:77:be:cb:81:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930 Validity Not Before: Jan 26 17:01:21 2026 GMT Not After : Jan 27 17:01:21 2026 GMT Subject: CN=3500282dc77fe20f2ef1f2969dc85a412f60b79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:1f:14:0a:4d:64:dd:f0:94:07:66:02:95: 3a:41:bb:f1:a1:15:8b:d3:e2:58:b9:82:6f:7e:88: c3:a2:7b:2a:b3:de:a7:75:89:39:08:14:66:60:c8: 92:55:c9:56:fd:20:ee:b9:4b:e6:63:c4:d3:e1:2e: c1:d9:d3:bd:96:d6:da:35:64:e9:bf:48:82:8d:19: d1:3d:4d:2b:df:54:b9:68:29:3d:8b:21:c7:a9:de: ff:8d:41:60:8d:89:0e:0a:0c:2f:60:d8:bb:fa:dd: e2:8e:98:45:c4:18:7e:4f:6d:2e:0f:c1:ad:35:fb: 0d:9b:30:3b:22:96:89:ec:a0:84:f9:c6:73:e1:a1: 44:25:1c:c7:fa:6a:2c:57:99:6a:99:ce:ca:71:9e: 2d:11:fe:4d:90:b6:05:a5:3e:e0:9d:11:91:ba:b9: 37:ba:99:d8:1e:2d:54:d5:51:71:1e:2a:a2:b0:a7: 4e:c0:70:ee:19:87:f7:2b:37:5a:e7:a1:c2:b1:02: 74:15:0e:d7:16:70:a2:ef:ce:30:5e:de:7f:4d:3f: b0:66:e3:a6:3d:18:eb:2c:72:fd:11:a9:6f:29:82: c0:9c:52:03:f9:43:a6:b5:42:2d:e5:a2:d0:5a:44: 39:00:73:8a:0e:8a:6f:09:ae:3d:a2:6e:ff:7e:41: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:28:2D:C7:7F:E2:0F:2E:F1:F2:96:9D:C8:5A:41:2F:60:B7:9F X509v3 Authority Key Identifier: keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8a:a7:a1:eb:90:1a:aa:0e:ee:8b:c8:e9:06:56:4f:3f:c2: 3c:5f:2d:5c:8c:31:0a:76:31:ea:f0:0a:61:ee:65:be:f9:e6: e3:17:6d:89:39:a9:df:e1:05:da:7e:e9:2a:67:64:7e:35:f4: 25:13:a5:3d:f0:ab:7b:40:5e:85:4c:cb:26:d1:ec:84:7d:cb: c7:bf:24:1b:52:51:1b:78:24:08:81:66:9a:42:65:ff:11:a2: 0d:84:bc:79:4e:8b:5e:a0:b6:46:70:a0:f5:39:12:d4:1c:f4: bc:ac:59:0a:e7:62:72:71:3f:ce:96:2e:7a:f5:f5:81:88:e4: bf:a0:d2:a3:49:83:42:47:2e:a6:33:ba:e2:4f:43:69:1b:ed: 4b:2f:4b:51:dc:05:28:61:b7:f9:26:59:3d:5b:9c:d5:86:5f: 50:1d:88:71:2e:ed:8c:68:47:c1:37:f4:dc:20:3b:10:5b:66: bc:73:97:8d:ca:46:87:8d:54:ed:a4:51:da:95:3f:a9:91:2c: 45:a4:db:96:b3:c6:9b:ff:d0:61:24:6a:ff:32:ef:db:78:14: d5:be:91:7a:33:ce:0c:69:6d:d9:09:0e:e7:20:e1:c3:34:55: 74:95:40:7b:f5:44:de:f6:7a:01:86:e0:94:f9:25:96:89:14: a2:53:4e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QLkbu7AqahKo+ne+y4EJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1 YWM5MzAwHhcNMjYwMTI2MTcwMTIxWhcNMjYwMTI3MTcwMTIxWjAzMTEwLwYDVQQD EygzNTAwMjgyZGM3N2ZlMjBmMmVmMWYyOTY5ZGM4NWE0MTJmNjBiNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhwfFApNZN3wlAdmApU6QbvxoRWL 0+JYuYJvfojDonsqs96ndYk5CBRmYMiSVclW/SDuuUvmY8TT4S7B2dO9ltbaNWTp v0iCjRnRPU0r31S5aCk9iyHHqd7/jUFgjYkOCgwvYNi7+t3ijphFxBh+T20uD8Gt NfsNmzA7IpaJ7KCE+cZz4aFEJRzH+mosV5lqmc7KcZ4tEf5NkLYFpT7gnRGRurk3 upnYHi1U1VFxHiqisKdOwHDuGYf3Kzda56HCsQJ0FQ7XFnCi784wXt5/TT+wZuOm PRjrLHL9EalvKYLAnFID+UOmtUIt5aLQWkQ5AHOKDopvCa49om7/fkGJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUAKC3Hf+IPLvHylp3IWkEvYLefMB8GA1UdIwQY MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIqnoeuQ GqoO7ovI6QZWTz/CPF8tXIwxCnYx6vAKYe5lvvnm4xdtiTmp3+EF2n7pKmdkfjX0 JROlPfCre0BehUzLJtHshH3Lx78kG1JRG3gkCIFmmkJl/xGiDYS8eU6LXqC2RnCg 9TkS1Bz0vKxZCudicnE/zpYuevX1gYjkv6DSo0mDQkcupjO64k9DaRvtSy9LUdwF KGG3+SZZPVuc1YZfUB2IcS7tjGhHwTf03CA7EFtmvHOXjcpGh41U7aRR2pU/qZEs RaTblrPGm//QYSRq/zLv23gU1b6RejPODGlt2QkO5yDhwzRVdJVAe/VE3vZ6AYbg lPkllokUolNOBA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:41 2026 by rpki-client