This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json) Hash identifier: Ko3IR2pDXASX4Wf07ew5q+GQz2451f+F7PMpaFOjAPc= Subject key identifier: 83:93:3B:C1:D3:56:3C:A4:7F:E0:B2:6F:78:91:D4:C2:18:BD:AE:FC Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e Certificate serial: 019BFC1BC0EEC94557DD7CD668F1EA7BAA72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft Manifest number: 042D Signing time: Mon 26 Jan 2026 21:00:35 +0000 Manifest this update: Mon 26 Jan 2026 21:00:35 +0000 Manifest next update: Tue 27 Jan 2026 21:00:35 +0000 Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: otLJ8Qh3ZxzXR8cXv2yjipo1MVcTzojaRVzPvVYigjM=) 2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=) 3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=) 4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:c0:ee:c9:45:57:dd:7c:d6:68:f1:ea:7b:aa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Validity Not Before: Jan 26 21:00:35 2026 GMT Not After : Jan 27 21:00:35 2026 GMT Subject: CN=83933bc1d3563ca47fe0b26f7891d4c218bdaefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:fe:1b:79:50:7e:01:f6:46:cd:1d:7f:7a: 8a:04:56:f0:30:91:27:fd:19:24:a8:09:e9:73:1e: 43:df:05:09:72:c5:d4:d4:e2:23:8d:02:f4:89:cc: ac:9a:33:04:57:8a:60:99:ff:2f:b3:1b:9a:96:c2: 35:ac:33:0a:05:a3:43:df:7e:13:3a:a1:52:6b:e9: a9:c3:10:97:b2:2e:cc:45:d6:28:2f:49:32:a2:aa: 7e:7c:b1:5e:8a:8e:08:20:f9:b6:dd:c3:69:01:be: 39:c6:35:f9:f0:1c:b4:9e:0c:20:55:30:ca:be:03: a2:ec:bb:e1:fc:61:18:6e:3d:63:2e:c8:16:ab:c6: 9c:49:df:e6:82:73:8f:cb:e6:0f:7e:0f:d9:ec:ec: 24:f4:4b:85:09:a6:4f:29:04:ef:14:91:9c:32:c8: 8c:80:74:94:55:b6:4a:b4:75:a8:30:4e:9d:ca:70: 42:36:04:48:62:fb:9b:df:46:6e:da:f3:54:d1:db: 5a:41:cc:7a:82:69:53:7b:6c:40:51:a3:ec:e1:2b: de:bd:db:fd:75:de:87:44:74:d3:cc:1d:31:c8:fe: bf:87:8a:9e:43:ac:99:7d:b1:b8:5a:89:15:2c:98: 80:af:cc:c5:51:d9:76:4f:9d:86:e7:3f:97:2b:d8: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:93:3B:C1:D3:56:3C:A4:7F:E0:B2:6F:78:91:D4:C2:18:BD:AE:FC X509v3 Authority Key Identifier: keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:95:19:9f:e7:c7:3a:0d:10:7b:b5:6a:47:cc:61:27:06:fa: c5:0d:1b:6a:42:b3:fa:41:af:15:25:f8:42:6c:53:0d:aa:ed: df:0a:42:39:c4:a3:23:19:d4:dd:c9:e5:86:32:17:e0:6e:f9: 7b:38:1f:e6:6e:d4:91:06:8b:31:17:fd:5d:dd:f9:1a:41:16: 1f:7b:e2:2b:cc:30:4f:9b:93:40:c0:85:7c:d3:7f:f3:7b:e1: 52:09:44:0d:58:4f:86:a5:1b:a8:8b:11:e3:74:6c:7c:c1:90: a2:2b:5e:3c:1f:2d:bd:27:97:ed:fc:f9:81:c7:1a:73:38:0f: 2f:4a:ea:2b:f6:b9:d7:ef:e0:b3:49:d1:1a:9d:02:8b:45:52: a4:17:63:3b:d1:76:e4:0a:48:e2:e0:e0:db:31:e7:9b:c9:42: 86:3b:1f:93:a7:88:22:04:ab:c3:a8:9d:67:27:21:24:88:3d: 26:24:ec:7b:75:46:57:9a:b5:b1:b2:77:a9:01:83:9a:73:c9: e8:87:c0:80:c4:06:1d:b1:b6:a9:d1:72:ba:ad:61:07:a2:7b: a2:e5:78:fb:a5:3e:ae:27:55:43:eb:f4:e5:cf:b8:33:9f:87: 8c:b2:50:95:11:16:da:ea:15:f9:0a:91:1d:cf:59:15:8e:5f: 48:e8:41:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G8DuyUVX3XzWaPHqe6pyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0 MTIxMmUwHhcNMjYwMTI2MjEwMDM1WhcNMjYwMTI3MjEwMDM1WjAzMTEwLwYDVQQD Eyg4MzkzM2JjMWQzNTYzY2E0N2ZlMGIyNmY3ODkxZDRjMjE4YmRhZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzL+G3lQfgH2Rs0df3qKBFbwMJEn /RkkqAnpcx5D3wUJcsXU1OIjjQL0icysmjMEV4pgmf8vsxualsI1rDMKBaND334T OqFSa+mpwxCXsi7MRdYoL0kyoqp+fLFeio4IIPm23cNpAb45xjX58By0ngwgVTDK vgOi7Lvh/GEYbj1jLsgWq8acSd/mgnOPy+YPfg/Z7Owk9EuFCaZPKQTvFJGcMsiM gHSUVbZKtHWoME6dynBCNgRIYvub30Zu2vNU0dtaQcx6gmlTe2xAUaPs4Svevdv9 dd6HRHTTzB0xyP6/h4qeQ6yZfbG4WokVLJiAr8zFUdl2T52G5z+XK9gQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOTO8HTVjykf+Cyb3iR1MIYva78MB8GA1UdIwQY MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5UZn+fH Og0Qe7VqR8xhJwb6xQ0bakKz+kGvFSX4QmxTDart3wpCOcSjIxnU3cnlhjIX4G75 ezgf5m7UkQaLMRf9Xd35GkEWH3viK8wwT5uTQMCFfNN/83vhUglEDVhPhqUbqIsR 43RsfMGQoitePB8tvSeX7fz5gccaczgPL0rqK/a51+/gs0nRGp0Ci0VSpBdjO9F2 5ApI4uDg2zHnm8lChjsfk6eIIgSrw6idZychJIg9JiTse3VGV5q1sbJ3qQGDmnPJ 6IfAgMQGHbG2qdFyuq1hB6J7ouV4+6U+ridVQ+v05c+4M5+HjLJQlREW2uoV+QqR Hc9ZFY5fSOhBdQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:39:19 2026 by rpki-client