This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json) Hash identifier: RiDTQYf02c3sI5n6/1vqGkZWQVN03qIhZm957cyUNZo= Subject key identifier: BD:4F:D3:62:94:6C:86:61:F0:C3:15:EF:D4:BC:83:67:7F:91:CF:6C Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Certificate serial: 019C1BDDED12CD51FA524A0C30D0493B3DF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft Manifest number: 0C13 Signing time: Mon 02 Feb 2026 01:00:54 +0000 Manifest this update: Mon 02 Feb 2026 01:00:54 +0000 Manifest next update: Tue 03 Feb 2026 01:00:54 +0000 Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: tF2IezmKw5MgL6gfYCYGgQYn4Y7JXyAvqkApKsDohZs=) 2: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (hash: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY=) 3: v26IQtR4bPGmZEZAU7yCltTi890.roa (hash: eSDmBhj31pkpdCU5lxTyDVLvPFuiMLxtboUDwnqNf2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:dd:ed:12:cd:51:fa:52:4a:0c:30:d0:49:3b:3d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Validity Not Before: Feb 2 01:00:54 2026 GMT Not After : Feb 3 01:00:54 2026 GMT Subject: CN=bd4fd362946c8661f0c315efd4bc83677f91cf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:e3:d1:0e:c1:27:a7:2b:43:07:5f:10:a8: 63:d5:3d:cc:53:2d:8c:07:30:57:32:1d:30:17:06: a8:dc:5b:1d:8b:d7:17:e1:41:9e:e8:5b:aa:51:4d: 1d:b3:ae:d7:aa:04:8d:bf:92:c1:f2:99:75:b9:ee: d2:d8:cc:30:4d:4c:10:1f:d5:c9:00:29:94:62:2a: 57:20:ca:d6:8f:a2:2e:ff:ea:96:5d:f9:b3:4b:a9: f1:dd:fe:1f:c8:20:53:ea:06:c0:b2:77:3e:26:69: 98:54:9b:29:e9:ce:64:98:f6:d0:69:00:be:44:b4: a8:bc:2f:3d:1f:c9:de:d4:38:d4:d2:17:e8:e9:57: ab:53:d8:31:94:c9:70:cd:f7:76:78:a8:e2:40:49: bb:e8:c4:31:33:ee:8d:3f:45:11:e0:0f:90:b1:5f: 18:64:b5:9e:62:98:c4:75:e3:cc:bd:07:68:e1:b9: ae:b6:a4:43:be:62:79:23:2e:ac:ad:9e:b6:56:9f: 64:39:31:de:b2:27:3d:6d:bf:8c:7e:39:9c:6f:db: 51:07:07:e1:07:6e:df:80:58:57:e5:37:db:51:fd: 7c:08:ca:cf:86:6d:8c:da:27:1a:29:34:8d:30:5b: 74:73:f7:42:73:6b:bf:ae:93:6d:e0:90:47:c8:12: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:D3:62:94:6C:86:61:F0:C3:15:EF:D4:BC:83:67:7F:91:CF:6C X509v3 Authority Key Identifier: keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:63:21:92:bc:57:db:a8:40:4b:6c:26:64:63:47:b1:72:1d: 74:cf:96:c7:81:de:b2:05:e2:c4:e9:5a:4e:13:3a:92:c2:c2: c6:f8:31:88:95:d9:a8:e0:94:a0:0f:ee:b8:fc:21:f4:e9:00: ca:2e:41:03:88:2b:12:aa:e3:07:39:b3:fe:4d:de:4a:9e:d2: 26:a9:a1:20:f2:d1:be:46:22:c5:d6:33:3a:a6:ea:f8:fc:b7: 31:1e:34:76:eb:13:e7:8b:ff:72:96:8a:b1:63:59:d2:a7:f1: bf:f5:45:6f:53:14:7e:ea:b0:13:c8:e1:25:4b:db:30:ed:4a: 04:a4:9c:f7:6c:8b:45:60:0f:a2:a9:6e:56:d4:29:75:ba:6b: 69:d4:f6:e3:8b:ae:eb:f4:61:0d:01:f1:21:c7:a1:bd:3a:d9: 33:22:7a:b2:e4:3c:b4:e1:1c:dc:f8:65:1d:b8:ba:36:ab:bd: c0:b1:aa:a1:ae:3f:9a:fa:b1:33:97:1f:9b:46:26:2c:5a:80: 19:8d:15:f9:6f:a2:09:81:26:68:37:59:67:9c:fc:62:49:b3: fa:33:c4:77:43:2e:48:cc:2b:25:86:59:cb:74:d0:69:f7:32: a5:31:1c:7b:61:c5:45:de:02:60:73:d7:36:16:23:e0:a2:a1: 45:29:7f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3e0SzVH6UkoMMNBJOz31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm OTdhMjEwHhcNMjYwMjAyMDEwMDU0WhcNMjYwMjAzMDEwMDU0WjAzMTEwLwYDVQQD EyhiZDRmZDM2Mjk0NmM4NjYxZjBjMzE1ZWZkNGJjODM2NzdmOTFjZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEjj0Q7BJ6crQwdfEKhj1T3MUy2M BzBXMh0wFwao3Fsdi9cX4UGe6FuqUU0ds67XqgSNv5LB8pl1ue7S2MwwTUwQH9XJ ACmUYipXIMrWj6Iu/+qWXfmzS6nx3f4fyCBT6gbAsnc+JmmYVJsp6c5kmPbQaQC+ RLSovC89H8ne1DjU0hfo6VerU9gxlMlwzfd2eKjiQEm76MQxM+6NP0UR4A+QsV8Y ZLWeYpjEdePMvQdo4bmutqRDvmJ5Iy6srZ62Vp9kOTHesic9bb+Mfjmcb9tRBwfh B27fgFhX5TfbUf18CMrPhm2M2icaKTSNMFt0c/dCc2u/rpNt4JBHyBJNJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1P02KUbIZh8MMV79S8g2d/kc9sMB8GA1UdIwQY MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1 LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2MhkrxX 26hAS2wmZGNHsXIddM+Wx4HesgXixOlaThM6ksLCxvgxiJXZqOCUoA/uuPwh9OkA yi5BA4grEqrjBzmz/k3eSp7SJqmhIPLRvkYixdYzOqbq+Py3MR40dusT54v/cpaK sWNZ0qfxv/VFb1MUfuqwE8jhJUvbMO1KBKSc92yLRWAPoqluVtQpdbpradT244uu 6/RhDQHxIcehvTrZMyJ6suQ8tOEc3PhlHbi6Nqu9wLGqoa4/mvqxM5cfm0YmLFqA GY0V+W+iCYEmaDdZZ5z8Ykmz+jPEd0MuSMwrJYZZy3TQafcypTEce2HFRd4CYHPX NhYj4KKhRSl/qw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:42 2026 by rpki-client