This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json) Hash identifier: v+wApKKT70nqjNbH+ouDh09YFN6W9R5ZSVU3tnf9s4w= Subject key identifier: EF:45:D0:0F:78:A7:87:A1:47:06:69:FA:9B:EB:7B:FA:47:96:1B:55 Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Certificate serial: 019C0556F213F9E32F5AF6F53706EC0C82EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft Manifest number: 0659 Signing time: Wed 28 Jan 2026 16:01:49 +0000 Manifest this update: Wed 28 Jan 2026 16:01:49 +0000 Manifest next update: Thu 29 Jan 2026 16:01:49 +0000 Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: PzIUyGl/FoXotGHqWYdXfDmCrrWK5ZFdInVFzRsfgrc=) 2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:f2:13:f9:e3:2f:5a:f6:f5:37:06:ec:0c:82:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Validity Not Before: Jan 28 16:01:49 2026 GMT Not After : Jan 29 16:01:49 2026 GMT Subject: CN=ef45d00f78a787a1470669fa9beb7bfa47961b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:6d:e0:35:9e:81:d8:00:2e:e4:98:fb:c4: 18:38:29:dd:af:c3:bc:83:fe:03:3b:f6:0f:e9:a5: d7:c8:ba:82:fe:4a:31:e5:42:dd:32:ce:19:18:2a: e0:58:54:72:a9:eb:fd:fa:61:12:ec:40:d0:17:a1: 47:01:b3:60:63:0f:df:52:6a:21:c3:ed:cc:62:3a: 6e:66:86:bd:a4:c2:f2:3f:25:a3:9a:7e:d1:97:66: 3b:9c:e7:51:b0:47:43:ec:9f:89:2f:8f:ee:4e:c4: ec:65:16:ff:f8:50:48:37:0c:16:9e:0f:ca:70:c8: 38:90:19:59:ee:55:8b:15:3e:23:f1:fb:34:00:f5: a8:5d:59:54:2b:a0:f8:d8:0e:1f:80:87:7d:44:28: c8:68:7d:5f:6a:80:2d:f9:2e:bf:95:23:8e:36:7a: 25:e6:69:1b:10:12:55:4c:45:eb:ed:80:a4:72:a8: 15:d9:95:c7:af:cb:75:54:ea:81:98:d6:4b:d4:53: 3d:64:32:76:63:52:07:e4:30:41:a0:6f:85:18:0b: 50:aa:7f:1d:32:22:14:b3:c0:f7:b5:3a:32:c4:b3: 79:06:94:0e:c9:c4:7c:38:a2:94:4b:2f:e3:07:53: 45:aa:4a:ac:44:e2:9d:85:a3:87:b0:a4:8a:46:83: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:45:D0:0F:78:A7:87:A1:47:06:69:FA:9B:EB:7B:FA:47:96:1B:55 X509v3 Authority Key Identifier: keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:c1:2a:48:51:b9:e9:7a:e2:f1:8c:e7:06:15:3c:cb:af:b3: d2:ea:db:36:fc:dd:a0:3d:9a:66:a3:42:91:74:43:cd:ac:ea: 30:2e:21:16:cb:0e:c0:f9:55:5a:77:ad:34:91:36:d8:7d:83: 24:89:ba:5d:e2:53:d9:d0:ea:29:2b:a3:39:23:ab:f2:93:40: 12:99:90:a9:d6:95:e6:c7:90:7f:5b:88:08:a2:bf:1c:3b:6a: 3f:ed:b4:14:b3:94:6a:f3:3f:66:e7:2b:da:ca:29:84:49:77: d9:07:d2:f6:e5:a6:6b:2f:29:4d:09:64:83:8c:f2:d5:9d:a9: 94:96:de:8f:64:a8:03:e9:1a:c1:f5:fb:e2:0c:86:d5:25:7a: f5:8b:9e:aa:49:9e:5c:9f:53:e3:93:72:40:b4:54:55:ef:1a: ba:4e:a6:3c:c3:53:f4:50:8b:08:bb:20:97:fd:81:7b:63:ca: eb:07:10:57:61:ed:cc:a0:cb:26:c2:f7:f0:40:4b:ba:59:ed: 5c:bb:19:5f:ba:8e:4e:f1:d9:f1:f4:b7:87:c0:89:2b:a7:d0: 53:0d:90:06:be:01:c5:f1:84:d5:89:26:9a:af:97:6e:4e:c1: 40:4d:73:16:f5:fc:bc:96:74:4a:2e:4e:f2:44:c2:6d:e8:47: 69:41:3b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVvIT+eMvWvb1NwbsDILsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTUyNmY5YWIwZGQyNzY4MjNmYzFmMGViYWExZGU2M2I3 ZDY1NmMwHhcNMjYwMTI4MTYwMTQ5WhcNMjYwMTI5MTYwMTQ5WjAzMTEwLwYDVQQD EyhlZjQ1ZDAwZjc4YTc4N2ExNDcwNjY5ZmE5YmViN2JmYTQ3OTYxYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWtt4DWegdgALuSY+8QYOCndr8O8 g/4DO/YP6aXXyLqC/kox5ULdMs4ZGCrgWFRyqev9+mES7EDQF6FHAbNgYw/fUmoh w+3MYjpuZoa9pMLyPyWjmn7Rl2Y7nOdRsEdD7J+JL4/uTsTsZRb/+FBINwwWng/K cMg4kBlZ7lWLFT4j8fs0APWoXVlUK6D42A4fgId9RCjIaH1faoAt+S6/lSOONnol 5mkbEBJVTEXr7YCkcqgV2ZXHr8t1VOqBmNZL1FM9ZDJ2Y1IH5DBBoG+FGAtQqn8d MiIUs8D3tToyxLN5BpQOycR8OKKUSy/jB1NFqkqsROKdhaOHsKSKRoPo7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9F0A94p4ehRwZp+pvre/pHlhtVMB8GA1UdIwQY MBaAFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEt Njk5OGFiN2VkZjdhLzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEtNjk5OGFiN2VkZjdh LzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcEqSFG5 6Xri8YznBhU8y6+z0urbNvzdoD2aZqNCkXRDzazqMC4hFssOwPlVWnetNJE22H2D JIm6XeJT2dDqKSujOSOr8pNAEpmQqdaV5seQf1uICKK/HDtqP+20FLOUavM/Zucr 2sophEl32QfS9uWmay8pTQlkg4zy1Z2plJbej2SoA+kawfX74gyG1SV69Yueqkme XJ9T45NyQLRUVe8auk6mPMNT9FCLCLsgl/2Be2PK6wcQV2HtzKDLJsL38EBLulnt XLsZX7qOTvHZ8fS3h8CJK6fQUw2QBr4BxfGE1Ykmmq+Xbk7BQE1zFvX8vJZ0Si5O 8kTCbehHaUE7WA== -----END CERTIFICATE-----Generated at Wed Jan 28 18:34:48 2026 by rpki-client