This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: njKo3oe7qFcorjWvFpRszSZXb7v/umAIMy92A16T8go= Subject key identifier: 83:0A:AC:AA:A9:F4:61:02:84:20:F9:D6:FB:3A:C9:C4:A6:32:05:6C Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019C12DB4DDD5E3D917B8E2C041D675215EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1811 Signing time: Sat 31 Jan 2026 07:01:28 +0000 Manifest this update: Sat 31 Jan 2026 07:01:28 +0000 Manifest next update: Sun 01 Feb 2026 07:01:28 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: Yw0Hszli11ZSMk13mmiKcTmlyUS66wzIl0a/eRgNnIM=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: R3e8EP6U572NIEwLXcwI5IO-_Gc.roa (hash: IMUABkpJVknPlYeXsWWkw4ZBUgDiuzIM8ni8AxR0Udc=) 7: T9-vW3KXUqDV-hHkYIlU0h63B7k.roa (hash: GVI+BtriLywrqwYg8b8nOqyUDiKVbNRN2/cPik19wB8=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: quYwTy2Sx7ur2wpLvrH2k8ViBR0.roa (hash: CanNYtzvyyEfG5PGl0aRHd7fPV6d8E0XKcJaLB/U+p8=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:12:db:4d:dd:5e:3d:91:7b:8e:2c:04:1d:67:52:15:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 31 07:01:28 2026 GMT Not After : Feb 1 07:01:28 2026 GMT Subject: CN=830aacaaa9f461028420f9d6fb3ac9c4a632056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:ae:b4:a9:8c:f2:71:ec:a9:dc:8b:25:c1: cd:a4:9e:61:13:77:55:a7:27:28:bd:2a:cc:2e:4b: e2:db:c5:62:f1:08:80:bb:3d:7a:1a:31:c8:83:fc: 56:db:54:89:c4:e0:ff:f0:bd:03:7e:67:79:19:7c: eb:ef:4f:34:f2:f8:5d:04:78:02:ce:80:13:2b:88: b0:d8:18:ca:11:00:97:aa:53:a8:7f:64:9e:74:ee: 80:1a:b0:ac:50:18:a8:a3:91:3c:eb:0f:89:9a:c7: 6a:2d:e0:59:3c:4c:63:a1:2e:aa:53:bd:32:52:47: 5c:8f:1d:c3:99:da:7c:bd:73:82:45:c3:c9:e9:0b: 69:c8:9c:0e:dd:e4:dc:f4:f1:1e:2f:58:05:8a:99: ed:77:7a:1d:22:e4:e8:e6:29:fb:15:8c:9f:e6:d5: 3b:43:89:a0:06:f4:96:3c:25:b6:04:b8:e1:a2:a8: c7:09:96:da:bf:f6:9a:b7:5b:f6:1a:ab:7c:c0:dc: 03:f2:81:78:75:10:a2:f8:a4:a5:14:6f:e9:bb:b4: b0:24:37:d5:79:49:c2:96:c5:c5:64:ff:3f:3c:32: fc:5f:6b:95:ea:a6:65:b2:39:67:0d:a9:40:0a:fd: c7:c5:84:ae:f0:ac:64:43:92:52:22:ae:d2:aa:8a: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:AC:AA:A9:F4:61:02:84:20:F9:D6:FB:3A:C9:C4:A6:32:05:6C X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:18:b9:22:8d:ad:bc:88:32:07:46:36:6f:3f:47:a5:4d:2c: 91:da:3d:49:63:d0:1c:ba:92:51:03:c6:27:49:4f:62:e6:af: 1b:e9:5c:91:e8:2b:78:1e:85:35:8e:55:8e:93:17:33:c4:ce: 10:4a:fd:50:79:39:6a:8c:d0:31:59:de:df:11:ac:0c:27:44: 9e:78:3c:60:0c:b8:8e:1b:28:6e:d3:d1:dc:f7:4f:6f:43:15: 89:fc:26:8b:82:40:ff:fe:81:46:03:1f:51:f1:8b:c5:24:89: b0:43:cf:a6:3b:65:ce:07:26:c0:b7:46:34:b7:e3:d4:6e:87: 4d:b4:13:76:47:f8:b5:d6:28:8a:20:75:11:60:84:a5:49:3b: af:be:e6:6d:04:05:ff:fa:be:66:78:31:73:ae:1d:dc:72:28: 40:71:d5:57:34:ee:b0:68:92:62:f8:0b:90:32:d6:a5:63:28: a8:f6:55:a9:cd:07:76:20:f5:ed:5b:01:e1:a7:f9:95:09:47: 68:07:98:78:68:0c:f1:74:24:7b:b9:18:c9:85:05:68:29:6d: ea:74:d1:4a:d4:8b:a6:68:b8:25:88:ac:72:9f:00:ea:f0:2e: 04:b5:e5:05:f3:49:e8:b5:50:18:63:98:28:b1:fa:d5:81:a0: 07:cf:a5:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwS203dXj2Re44sBB1nUhXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTMxMDcwMTI4WhcNMjYwMjAxMDcwMTI4WjAzMTEwLwYDVQQD Eyg4MzBhYWNhYWE5ZjQ2MTAyODQyMGY5ZDZmYjNhYzljNGE2MzIwNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO2utKmM8nHsqdyLJcHNpJ5hE3dV pycovSrMLkvi28Vi8QiAuz16GjHIg/xW21SJxOD/8L0Dfmd5GXzr70808vhdBHgC zoATK4iw2BjKEQCXqlOof2SedO6AGrCsUBioo5E86w+JmsdqLeBZPExjoS6qU70y Ukdcjx3Dmdp8vXOCRcPJ6QtpyJwO3eTc9PEeL1gFipntd3odIuTo5in7FYyf5tU7 Q4mgBvSWPCW2BLjhoqjHCZbav/aat1v2Gqt8wNwD8oF4dRCi+KSlFG/pu7SwJDfV eUnClsXFZP8/PDL8X2uV6qZlsjlnDalACv3HxYSu8KxkQ5JSIq7SqopbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMKrKqp9GEChCD51vs6ycSmMgVsMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBi5Io2t vIgyB0Y2bz9HpU0skdo9SWPQHLqSUQPGJ0lPYuavG+lckegreB6FNY5VjpMXM8TO EEr9UHk5aozQMVne3xGsDCdEnng8YAy4jhsobtPR3PdPb0MVifwmi4JA//6BRgMf UfGLxSSJsEPPpjtlzgcmwLdGNLfj1G6HTbQTdkf4tdYoiiB1EWCEpUk7r77mbQQF //q+Zngxc64d3HIoQHHVVzTusGiSYvgLkDLWpWMoqPZVqc0HdiD17VsB4af5lQlH aAeYeGgM8XQke7kYyYUFaClt6nTRStSLpmi4JYiscp8A6vAuBLXlBfNJ6LVQGGOY KLH61YGgB8+liw== -----END CERTIFICATE-----Generated at Sat Jan 31 10:16:02 2026 by rpki-client