This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json) Hash identifier: vmBuZkWGKgIw5Nd1sTfnbTaNrvf2wBW3smwgXAss7RA= Subject key identifier: 9D:36:58:8E:16:2E:6A:26:29:21:56:D2:3E:18:D2:C2:3B:CA:FA:21 Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061 Certificate serial: 019BFC1CB8DA63015AE33DE439797E8C482E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft Manifest number: 11A5 Signing time: Mon 26 Jan 2026 21:01:39 +0000 Manifest this update: Mon 26 Jan 2026 21:01:39 +0000 Manifest next update: Tue 27 Jan 2026 21:01:39 +0000 Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: vozGmnrFTZyIKRRPUQJinxGiOzHrjCYahS7fF/gQnIM=) 2: icGaJ1G4-Kx4b91AHN628f20w6c.roa (hash: lvLQ8ljP1pitRiZpVSO/V/AQaLCXN+1NCmGOtDZL3q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:b8:da:63:01:5a:e3:3d:e4:39:79:7e:8c:48:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061 Validity Not Before: Jan 26 21:01:39 2026 GMT Not After : Jan 27 21:01:39 2026 GMT Subject: CN=9d36588e162e6a26292156d23e18d2c23bcafa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d9:dc:f5:df:1b:a9:07:12:ab:c5:c2:13: 9d:b3:a5:37:77:3c:88:2e:ec:7e:b1:bf:8e:6e:5f: 73:d1:d9:6d:9d:86:57:6d:bb:df:3c:da:f2:4f:39: 95:88:f0:72:60:66:da:0f:2c:eb:aa:74:96:f6:26: 1e:0e:67:ce:88:1f:2b:e8:13:71:42:c3:7f:13:2f: 26:cc:82:4e:4d:5a:3e:db:fb:34:2d:9e:e3:e5:5d: 21:42:08:fe:77:1f:4f:cf:d2:bb:5d:11:40:32:d1: fb:33:6e:81:53:06:4c:bc:4e:48:9d:47:cf:1e:50: 19:5f:52:50:ab:63:b5:dc:f5:da:e8:76:55:01:45: 1d:ce:61:52:e2:bd:7a:4c:bc:73:80:e4:42:f7:b9: 6c:10:72:9a:9c:ab:60:2b:af:6d:91:50:34:7a:10: 53:e7:73:ea:15:3a:c2:db:05:53:87:d1:72:03:25: dc:1b:b2:91:b2:4f:ee:5f:47:69:19:96:d1:8c:c9: 6e:86:50:b2:07:5e:6a:76:3b:90:1f:c7:ef:ac:d0: 4d:cb:2e:f7:15:b8:88:16:3d:7c:f7:05:3d:7f:50: 6c:26:7a:3f:96:79:3f:15:0e:14:84:60:45:77:ca: 2b:32:87:90:48:f5:bd:75:80:fa:68:86:59:37:42: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:58:8E:16:2E:6A:26:29:21:56:D2:3E:18:D2:C2:3B:CA:FA:21 X509v3 Authority Key Identifier: keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7a:e1:cb:fc:3e:a1:19:fd:09:f2:27:db:82:e8:93:bc:fa: 70:55:16:42:3a:37:03:38:a2:2d:8c:66:c1:27:31:5d:95:f6: e4:96:e0:b5:5e:61:b1:ae:a8:3a:c8:01:29:cb:8a:f8:c2:f9: 60:87:1d:e6:bf:4b:d3:d7:e9:bb:bf:e5:f1:e4:c8:17:a5:a8: 7b:24:9e:9e:b5:94:19:f9:e6:52:c9:f8:3c:41:3d:21:e4:8f: 95:c9:13:95:80:17:c0:23:d7:1a:09:3b:78:59:35:2b:23:99: 43:55:13:c8:bf:bd:d2:cc:1a:79:6d:f6:8d:55:f2:a7:75:0a: 26:55:ed:57:a4:b9:34:77:69:87:83:00:b2:21:8d:b6:92:64: 24:f9:a4:8b:e8:72:30:e7:8b:45:9a:03:15:a5:34:b6:f0:63: 26:c2:a2:11:62:23:a2:ab:7f:44:ce:6c:62:a2:1e:50:fb:44: c0:00:ee:cb:0d:19:99:80:2e:f9:27:a0:8b:9f:8e:04:5d:cd: 82:0e:ab:22:25:8a:ea:58:86:33:9e:1c:4f:36:29:7b:b6:02: 58:84:e2:68:9d:d8:71:40:d7:cd:31:93:52:fa:7b:85:71:04: 99:2e:5c:8d:02:ed:cf:ed:7c:27:0f:2d:6a:4a:da:ff:69:cd: 6d:1f:0a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HLjaYwFa4z3kOXl+jEguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2 OGIwNjEwHhcNMjYwMTI2MjEwMTM5WhcNMjYwMTI3MjEwMTM5WjAzMTEwLwYDVQQD Eyg5ZDM2NTg4ZTE2MmU2YTI2MjkyMTU2ZDIzZTE4ZDJjMjNiY2FmYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV3Z3PXfG6kHEqvFwhOds6U3dzyI Lux+sb+Obl9z0dltnYZXbbvfPNryTzmViPByYGbaDyzrqnSW9iYeDmfOiB8r6BNx QsN/Ey8mzIJOTVo+2/s0LZ7j5V0hQgj+dx9Pz9K7XRFAMtH7M26BUwZMvE5InUfP HlAZX1JQq2O13PXa6HZVAUUdzmFS4r16TLxzgORC97lsEHKanKtgK69tkVA0ehBT 53PqFTrC2wVTh9FyAyXcG7KRsk/uX0dpGZbRjMluhlCyB15qdjuQH8fvrNBNyy73 FbiIFj189wU9f1BsJno/lnk/FQ4UhGBFd8orMoeQSPW9dYD6aIZZN0LaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ02WI4WLmomKSFW0j4Y0sI7yvohMB8GA1UdIwQY MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3 LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHrhy/w+ oRn9CfIn24Lok7z6cFUWQjo3AziiLYxmwScxXZX25JbgtV5hsa6oOsgBKcuK+ML5 YIcd5r9L09fpu7/l8eTIF6WoeySenrWUGfnmUsn4PEE9IeSPlckTlYAXwCPXGgk7 eFk1KyOZQ1UTyL+90swaeW32jVXyp3UKJlXtV6S5NHdph4MAsiGNtpJkJPmki+hy MOeLRZoDFaU0tvBjJsKiEWIjoqt/RM5sYqIeUPtEwADuyw0ZmYAu+Segi5+OBF3N gg6rIiWK6liGM54cTzYpe7YCWITiaJ3YcUDXzTGTUvp7hXEEmS5cjQLtz+18Jw8t akra/2nNbR8K7A== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:58 2026 by rpki-client