This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft File: CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft (raw, json) Hash identifier: +S9xSDVrFsHLayoChHMkjQbaSOk9msEkwRtvfBxevow= Subject key identifier: FB:B3:A5:44:A1:F4:B1:B9:0B:D8:9D:60:B4:3B:FB:DF:0E:43:51:60 Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf Certificate serial: 019BDD36A0E3CB421EEB9299A92ABABDA429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft Manifest number: A9 Signing time: Tue 20 Jan 2026 21:01:43 +0000 Manifest this update: Tue 20 Jan 2026 21:01:43 +0000 Manifest next update: Wed 21 Jan 2026 21:01:43 +0000 Files and hashes: 1: 57ExRImlY_J1W0DiqCuzHtZc1-M.roa (hash: H/MP7YqHoUUdNXYELvg7nbZxJWneiFMYDH3qjOKnph8=) 2: CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl (hash: EPgfsql1BiQjow/0tHc4z1O5UWeKM18CY3rPl/rbX68=) 3: lnDM7sD_RAt_sM0f7QmBz4qOgYA.roa (hash: 1AImBJ5UNIT+sFRT9lpZkZKmyIOcl6ryDbLO+EP3i0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:36:a0:e3:cb:42:1e:eb:92:99:a9:2a:ba:bd:a4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf Validity Not Before: Jan 20 21:01:43 2026 GMT Not After : Jan 21 21:01:43 2026 GMT Subject: CN=fbb3a544a1f4b1b90bd89d60b43bfbdf0e435160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:5d:79:68:41:b6:3b:2a:b0:0a:59:fd:92: e7:d5:8a:d9:2b:27:b8:4d:7d:1c:c3:53:0a:a2:2c: a3:15:91:2b:61:88:e8:1f:85:61:c7:18:3a:91:14: 14:af:43:c1:ae:d8:c2:be:64:a6:6c:92:19:92:b8: 1f:52:4b:44:9e:c4:1d:bc:bc:b1:13:3d:24:19:fb: 73:b9:0f:b2:99:19:4c:98:99:0f:d5:71:15:5a:9b: 5d:39:69:bf:fc:f8:2e:e9:83:e0:5f:f0:24:ad:5c: 76:49:80:fb:8f:55:95:f5:6b:13:ee:3b:46:3c:29: 52:f3:3b:60:4b:1e:e2:3f:ea:23:92:3b:e7:3f:e2: d7:d7:97:3d:8f:31:bf:f2:12:a8:3f:ed:72:e1:db: 3b:65:8f:52:76:50:ca:ed:b4:26:bc:18:a4:5b:ae: e3:2e:f1:65:45:6b:ff:90:92:25:55:3f:b4:dd:04: cf:ba:e2:ea:be:a5:87:ea:d7:87:bb:b4:80:78:ca: e3:4f:4d:32:ab:96:c7:42:f5:5a:ef:01:dc:d7:6a: 94:a1:e0:28:4a:ac:05:f3:55:3a:a5:92:01:9a:7c: 19:f5:f1:a4:bd:77:46:c2:af:4f:58:b2:38:44:94: c3:d6:d9:e4:70:60:e3:8a:c7:ed:23:2c:0f:8a:dc: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B3:A5:44:A1:F4:B1:B9:0B:D8:9D:60:B4:3B:FB:DF:0E:43:51:60 X509v3 Authority Key Identifier: keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:06:12:b4:26:b1:34:12:f3:06:6f:f6:f2:bb:f2:d8:dd:ad: 9c:13:3c:e6:42:d8:a6:be:79:f7:cc:10:7e:ca:fa:25:14:19: e2:b1:87:3d:58:08:41:28:4e:5f:69:40:14:3d:32:3c:35:d8: 0f:5f:33:e2:53:77:1c:a4:3f:88:a6:c2:a0:d7:a2:bc:64:b1: d6:39:1a:e9:3e:12:ad:fe:13:d3:4f:9e:43:f1:cf:c9:2f:af: 0c:59:2b:96:15:0f:09:c7:0e:c5:18:75:c6:d3:23:76:83:56: f5:0c:c8:76:59:76:48:e2:9a:a7:9a:cb:30:53:8e:58:89:3e: 6d:04:5c:02:f5:b9:54:ee:ea:66:29:fb:d5:69:02:4e:d2:75: 58:00:58:17:46:29:93:86:48:2b:f9:e2:d3:73:d2:74:11:0b: 04:71:78:fa:1c:b1:d4:b8:8e:c0:9b:60:64:11:14:7e:92:56: c3:f4:53:11:78:34:da:f7:48:ad:9d:cf:c1:e3:a1:b1:72:19: b9:0d:78:00:58:07:97:e0:a3:e4:02:bf:c1:58:10:01:18:f9: 98:50:d8:1d:41:d1:f9:df:fc:ea:5f:71:cd:f5:da:61:c1:38: 68:51:ca:40:ae:17:81:14:0e:bf:5a:f7:b7:ce:ce:4c:45:36: 95:41:4d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdNqDjy0Ie65KZqSq6vaQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjcwZWQyYmM3MTE5MWNiNjBiZDk2NjAxNDg1MTBiMjM2 ZDNhY2YwHhcNMjYwMTIwMjEwMTQzWhcNMjYwMTIxMjEwMTQzWjAzMTEwLwYDVQQD EyhmYmIzYTU0NGExZjRiMWI5MGJkODlkNjBiNDNiZmJkZjBlNDM1MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K9deWhBtjsqsApZ/ZLn1YrZKye4 TX0cw1MKoiyjFZErYYjoH4Vhxxg6kRQUr0PBrtjCvmSmbJIZkrgfUktEnsQdvLyx Ez0kGftzuQ+ymRlMmJkP1XEVWptdOWm//Pgu6YPgX/AkrVx2SYD7j1WV9WsT7jtG PClS8ztgSx7iP+ojkjvnP+LX15c9jzG/8hKoP+1y4ds7ZY9SdlDK7bQmvBikW67j LvFlRWv/kJIlVT+03QTPuuLqvqWH6teHu7SAeMrjT00yq5bHQvVa7wHc12qUoeAo SqwF81U6pZIBmnwZ9fGkvXdGwq9PWLI4RJTD1tnkcGDjisftIywPitwvvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuzpUSh9LG5C9idYLQ7+98OQ1FgMB8GA1UdIwQY MBaAFApnDtK8cRkctgvZZgFIUQsjbTrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2It ZWUzNGFlNjE1NDlmLzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2ItZWUzNGFlNjE1NDlm LzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQYStCax NBLzBm/28rvy2N2tnBM85kLYpr5598wQfsr6JRQZ4rGHPVgIQShOX2lAFD0yPDXY D18z4lN3HKQ/iKbCoNeivGSx1jka6T4Srf4T00+eQ/HPyS+vDFkrlhUPCccOxRh1 xtMjdoNW9QzIdll2SOKap5rLMFOOWIk+bQRcAvW5VO7qZin71WkCTtJ1WABYF0Yp k4ZIK/ni03PSdBELBHF4+hyx1LiOwJtgZBEUfpJWw/RTEXg02vdIrZ3PweOhsXIZ uQ14AFgHl+Cj5AK/wVgQARj5mFDYHUHR+d/86l9xzfXaYcE4aFHKQK4XgRQOv1r3 t87OTEU2lUFNDg== -----END CERTIFICATE-----Generated at Wed Jan 21 00:20:03 2026 by rpki-client