This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft File: _CIELXaLE__agpyz8dfSzz--ihU.mft (raw, json) Hash identifier: K93imQeXo5o4jh6jtlsq9n+1qMWU3/iNlbqvMoXx4A8= Subject key identifier: 8E:3A:DC:EA:EB:42:63:EA:96:8B:B6:50:BE:53:46:4E:F6:2B:A8:94 Authority key identifier: FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 Certificate issuer: /CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Certificate serial: 019BFA2E4605C9A038D6DB6FAC2959692BA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft Manifest number: B4 Signing time: Mon 26 Jan 2026 12:01:35 +0000 Manifest this update: Mon 26 Jan 2026 12:01:35 +0000 Manifest next update: Tue 27 Jan 2026 12:01:35 +0000 Files and hashes: 1: 4A6CcXXrSbIURymlP_OiEuUadzE.roa (hash: XB/aS0f5fLagh24RTymZ9tRIq1RWpYe8OmUQeqUA544=) 2: _CIELXaLE__agpyz8dfSzz--ihU.crl (hash: zGepMMftaE4BAMljWwC0cRMuUoDh3EHfq0wR5RZK8Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:46:05:c9:a0:38:d6:db:6f:ac:29:59:69:2b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc22042d768b13ffda829cb3f1d7d2cf3fbe8a15 Validity Not Before: Jan 26 12:01:35 2026 GMT Not After : Jan 27 12:01:35 2026 GMT Subject: CN=8e3adceaeb4263ea968bb650be53464ef62ba894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:c1:54:66:83:aa:7d:6d:f1:00:ec:d4:e3: f8:f7:52:e4:40:37:15:54:e9:02:88:78:3c:a4:1e: fc:df:8f:69:26:24:3c:00:c0:3b:9f:e7:fc:71:b8: 62:6d:c0:c3:0b:45:70:a2:0c:75:c5:31:7f:b6:5b: 1d:01:dd:9c:69:c0:26:59:fe:b0:d1:29:eb:30:29: cb:6d:3c:23:ee:da:49:34:0a:0d:87:3b:8f:0b:74: 11:eb:72:22:d0:6a:51:78:6e:7e:29:25:9d:fe:37: 2e:87:45:ff:f1:a1:78:6b:f5:1a:95:17:0f:93:a9: 13:c4:82:18:43:d2:16:ad:37:4d:62:fc:1d:13:16: 2d:02:ab:88:84:13:bb:68:9e:46:9b:1c:4c:5d:9e: 1c:06:42:b8:7e:6f:3f:00:43:3b:9e:15:1d:6b:6f: e9:54:5e:3c:9d:af:d2:49:ba:18:3f:6c:16:1d:e3: b4:e0:9b:e5:99:d2:4f:28:38:85:25:fd:01:a6:4c: 75:c5:ee:bc:d6:b9:b9:24:50:82:47:1b:a8:55:53: 45:dd:60:d5:90:fd:0a:b3:46:3c:9e:b3:56:3a:71: 4c:2e:c0:3d:bf:99:72:b6:38:3c:ed:1c:d8:9b:27: 5a:af:6b:ef:d6:9f:89:bc:d9:e6:c3:2e:78:8e:aa: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3A:DC:EA:EB:42:63:EA:96:8B:B6:50:BE:53:46:4E:F6:2B:A8:94 X509v3 Authority Key Identifier: keyid:FC:22:04:2D:76:8B:13:FF:DA:82:9C:B3:F1:D7:D2:CF:3F:BE:8A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CIELXaLE__agpyz8dfSzz--ihU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c30dce-156a-4af0-bb38-a1cc1f7c897f/1/_CIELXaLE__agpyz8dfSzz--ihU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:fd:dc:87:dd:c0:2a:1b:f7:ac:65:d6:a6:c9:d5:87:73: 0b:d3:73:46:cf:fb:a5:15:19:b1:8c:81:ad:a5:04:27:e4:7d: 0a:7d:52:c1:d2:b1:f0:13:82:40:e7:1c:c1:98:cc:85:e9:52: 2f:9e:f8:3b:41:23:75:f4:ab:bb:bc:d3:8e:27:c4:e8:70:87: f8:74:38:2a:70:44:d9:6a:ec:61:3c:25:d5:e8:52:6e:d1:02: cb:e5:60:57:00:37:6d:72:df:12:fb:0b:d9:b5:38:c5:fc:dc: 36:7b:e9:e9:7d:02:f2:5d:02:76:9f:a9:59:0a:a7:ec:7f:5f: 7b:fc:5a:a0:09:5f:b9:49:66:03:41:2d:1a:6e:ca:0f:2a:29: 47:16:02:df:a2:ca:b7:67:5f:63:e1:17:ae:c9:f4:e1:41:44: 26:7d:1e:b1:7a:aa:9b:5c:90:81:0a:5b:36:71:84:6d:d7:03: 05:78:81:74:9d:e9:10:e8:70:72:5c:95:1a:50:d7:42:89:06: e0:2b:02:e9:33:59:8f:e4:2c:b0:ac:8e:af:1c:49:0f:46:7c: ae:5e:06:c4:26:b3:98:d8:1f:30:6a:ed:4c:0f:74:8f:ca:55: 65:5f:15:64:2d:9a:07:f9:f1:07:ac:09:43:c8:c2:ec:e3:41: 93:d8:fa:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LkYFyaA41ttvrClZaSujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjIwNDJkNzY4YjEzZmZkYTgyOWNiM2YxZDdkMmNmM2Zi ZThhMTUwHhcNMjYwMTI2MTIwMTM1WhcNMjYwMTI3MTIwMTM1WjAzMTEwLwYDVQQD Eyg4ZTNhZGNlYWViNDI2M2VhOTY4YmI2NTBiZTUzNDY0ZWY2MmJhODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qvBVGaDqn1t8QDs1OP491LkQDcV VOkCiHg8pB78349pJiQ8AMA7n+f8cbhibcDDC0Vwogx1xTF/tlsdAd2cacAmWf6w 0SnrMCnLbTwj7tpJNAoNhzuPC3QR63Ii0GpReG5+KSWd/jcuh0X/8aF4a/UalRcP k6kTxIIYQ9IWrTdNYvwdExYtAquIhBO7aJ5GmxxMXZ4cBkK4fm8/AEM7nhUda2/p VF48na/SSboYP2wWHeO04JvlmdJPKDiFJf0Bpkx1xe681rm5JFCCRxuoVVNF3WDV kP0Ks0Y8nrNWOnFMLsA9v5lytjg87RzYmydar2vv1p+JvNnmwy54jqovbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI463OrrQmPqlou2UL5TRk72K6iUMB8GA1UdIwQY MBaAFPwiBC12ixP/2oKcs/HX0s8/vooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgt YTFjYzFmN2M4OTdmLzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jMzBkY2UtMTU2YS00YWYwLWJiMzgtYTFjYzFmN2M4OTdm LzEvX0NJRUxYYUxFX19hZ3B5ejhkZlN6ei0taWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXz93Ifd wCob96xl1qbJ1YdzC9NzRs/7pRUZsYyBraUEJ+R9Cn1SwdKx8BOCQOccwZjMhelS L574O0EjdfSru7zTjifE6HCH+HQ4KnBE2WrsYTwl1ehSbtECy+VgVwA3bXLfEvsL 2bU4xfzcNnvp6X0C8l0Cdp+pWQqn7H9fe/xaoAlfuUlmA0EtGm7KDyopRxYC36LK t2dfY+EXrsn04UFEJn0esXqqm1yQgQpbNnGEbdcDBXiBdJ3pEOhwclyVGlDXQokG 4CsC6TNZj+QssKyOrxxJD0Z8rl4GxCazmNgfMGrtTA90j8pVZV8VZC2aB/nxB6wJ Q8jC7ONBk9j6cA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:51 2026 by rpki-client