This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft File: cjM1sFB1VK5sbMKUdQdkyv0L1og.mft (raw, json) Hash identifier: P93cSG3vw7eoMjxFlBsYWf41IILJ3aJdgGzbGiz/fAE= Subject key identifier: FC:E4:82:49:F0:A7:CB:DC:9E:43:F4:3F:BF:A7:69:5B:34:AA:7E:52 Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88 Certificate issuer: /CN=723335b0507554ae6c6cc294750764cafd0bd688 Certificate serial: 019BADCB69B8FB174AA6936781E8044C995E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft Manifest number: 29 Signing time: Sun 11 Jan 2026 16:02:27 +0000 Manifest this update: Sun 11 Jan 2026 16:02:27 +0000 Manifest next update: Mon 12 Jan 2026 16:02:27 +0000 Files and hashes: 1: cjM1sFB1VK5sbMKUdQdkyv0L1og.crl (hash: CqnKHW5o+WnIjuXNjKLXcwdx9KciBQT4jXcbJ8VMMr4=) 2: uZNRYtNgdrkbMaL48F7y4vbVE-w.asa (hash: YRlTGBMmfIx44h5T1EVsdcsZlEYB7YbNup0fSoBGzpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:69:b8:fb:17:4a:a6:93:67:81:e8:04:4c:99:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688 Validity Not Before: Jan 11 16:02:27 2026 GMT Not After : Jan 12 16:02:27 2026 GMT Subject: CN=fce48249f0a7cbdc9e43f43fbfa7695b34aa7e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:0c:29:c8:f3:4b:ce:72:2f:2f:fb:c4:80: 21:a2:eb:0f:a4:a4:a4:12:e2:5d:6d:98:49:9e:42: da:19:57:47:e4:2d:40:78:8a:b4:04:b2:83:3d:8c: 60:54:f7:71:bb:5e:6c:97:79:f4:db:fe:d1:77:94: 2b:89:e5:9d:3b:9f:0d:f6:6c:92:9c:14:c2:60:4e: e0:e1:83:79:16:ea:0c:b8:32:ba:6f:66:4a:33:51: 34:b1:4a:ca:4b:0e:3e:b0:d0:2b:0d:bc:19:d5:0f: 13:72:c3:e5:c3:36:ae:54:0e:00:02:29:4d:50:67: 47:c4:bb:14:8f:50:dc:a2:c9:06:59:8f:8f:63:f7: c2:f7:cb:a9:76:bc:ca:2c:53:29:42:77:7a:2e:b7: f8:71:b1:3b:62:fa:c1:d7:ba:3e:5f:71:0b:56:64: b5:5e:00:bd:da:6b:a6:f5:b7:4c:0b:1a:ea:12:52: fd:9a:42:aa:ae:7c:36:df:16:e2:f7:ea:fd:e8:87: 2a:09:19:ea:08:c3:c1:ff:49:00:f9:6a:c8:8e:83: 87:8e:70:c6:0b:d5:99:ca:38:8e:8d:87:ba:bf:48: f8:15:f7:df:a2:69:fc:c7:b5:39:08:89:63:c3:45: c0:f0:af:cf:ed:06:5e:51:ca:2b:2e:1c:81:a5:88: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:82:49:F0:A7:CB:DC:9E:43:F4:3F:BF:A7:69:5B:34:AA:7E:52 X509v3 Authority Key Identifier: keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e8:b2:86:3c:bb:97:e2:ec:f8:30:7c:97:e2:d8:17:42:e3: f1:26:b6:42:f0:6b:aa:b6:73:db:7d:d3:d9:77:de:9a:83:d8: fa:fe:ca:98:bc:07:4d:04:10:6a:c0:15:17:ce:d5:69:b4:a7: 2a:6d:c7:86:a4:87:49:5d:4b:89:f8:2c:1e:35:d9:29:36:dd: dc:0c:8d:0f:df:28:f7:b0:3f:86:6f:dd:1a:29:01:31:2f:5f: 81:ba:f3:5c:34:4b:1e:0d:0a:dc:f5:48:46:8e:07:72:26:a6: 28:fe:cf:cd:12:18:13:ac:0d:79:2d:bb:2f:b8:59:bf:84:e8: b7:00:b1:04:e6:77:8e:5a:d6:9d:6d:26:9c:43:9a:9e:8e:5e: 68:2a:0b:9e:1b:1b:41:19:c1:7c:4c:ef:11:bc:78:73:c9:ee: cc:50:44:ac:a1:81:04:26:f8:b0:5a:ed:63:ea:2a:40:4e:19: cd:41:6d:4c:8b:66:db:20:f0:1b:71:b1:0e:21:a6:b7:63:cc: 80:45:3d:8d:b3:fd:06:5e:e7:0e:9f:48:e5:cd:d9:76:63:0e: 0b:a9:c3:6a:88:94:b0:c5:a1:d7:87:8f:5a:12:7a:c8:4b:ae: b6:41:a1:7b:89:27:2f:f3:86:d4:ac:ac:13:4d:dd:7c:1f:c9: 35:bc:86:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuty2m4+xdKppNngegETJleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMzMzNWIwNTA3NTU0YWU2YzZjYzI5NDc1MDc2NGNhZmQw YmQ2ODgwHhcNMjYwMTExMTYwMjI3WhcNMjYwMTEyMTYwMjI3WjAzMTEwLwYDVQQD EyhmY2U0ODI0OWYwYTdjYmRjOWU0M2Y0M2ZiZmE3Njk1YjM0YWE3ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GoMKcjzS85yLy/7xIAhousPpKSk EuJdbZhJnkLaGVdH5C1AeIq0BLKDPYxgVPdxu15sl3n02/7Rd5QrieWdO58N9myS nBTCYE7g4YN5FuoMuDK6b2ZKM1E0sUrKSw4+sNArDbwZ1Q8TcsPlwzauVA4AAilN UGdHxLsUj1DcoskGWY+PY/fC98updrzKLFMpQnd6Lrf4cbE7YvrB17o+X3ELVmS1 XgC92mum9bdMCxrqElL9mkKqrnw23xbi9+r96IcqCRnqCMPB/0kA+WrIjoOHjnDG C9WZyjiOjYe6v0j4Ffffomn8x7U5CIljw0XA8K/P7QZeUcorLhyBpYgflwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzkgknwp8vcnkP0P7+naVs0qn5SMB8GA1UdIwQY MBaAFHIzNbBQdVSubGzClHUHZMr9C9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYTU1OGUtNjA3NS00NWQ2LWJkYjYt YzA4YjdiYjQ2MWE3LzEvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYTU1OGUtNjA3NS00NWQ2LWJkYjYtYzA4YjdiYjQ2MWE3 LzEvY2pNMXNGQjFWSzVzYk1LVWRRZGt5djBMMW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+iyhjy7 l+Ls+DB8l+LYF0Lj8Sa2QvBrqrZz233T2XfemoPY+v7KmLwHTQQQasAVF87VabSn Km3HhqSHSV1LifgsHjXZKTbd3AyND98o97A/hm/dGikBMS9fgbrzXDRLHg0K3PVI Ro4HciamKP7PzRIYE6wNeS27L7hZv4TotwCxBOZ3jlrWnW0mnEOano5eaCoLnhsb QRnBfEzvEbx4c8nuzFBErKGBBCb4sFrtY+oqQE4ZzUFtTItm2yDwG3GxDiGmt2PM gEU9jbP9Bl7nDp9I5c3ZdmMOC6nDaoiUsMWh14ePWhJ6yEuutkGhe4knL/OG1Kys E03dfB/JNbyGfQ== -----END CERTIFICATE-----Generated at Sun Jan 11 18:49:28 2026 by rpki-client