This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json) Hash identifier: cyXHwxplKf8x5MI9K8bq14BlnYMdth13CgjMk7SDLxs= Subject key identifier: 3A:2E:49:ED:11:CD:64:CC:A2:DF:FA:BC:02:DB:EF:0B:BA:9C:7B:74 Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09 Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409 Certificate serial: 019BF8E3C2F4CE05F8021C518424D73BEDE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 06:00:34 +0000 Manifest this update: Mon 26 Jan 2026 06:00:34 +0000 Manifest next update: Tue 27 Jan 2026 06:00:34 +0000 Files and hashes: 1: 1dAntoUY_lKvcd4wqrIidrPpdJg.roa (hash: aG4Tl+pFsfDnMfHPXHTxxAuL4y2EBkI4zHKRZFoH37Y=) 2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: JUXo+S7KkBrOuf1QwhdPVThDE4ftC0t7/syopqGJvPo=) 3: r4pNW_fmptxmkeytlc9oh8s9fZ4.roa (hash: hC4g0OtJOqxyMagzNmhC7wdgxSPE49jmeeJag/ecgt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:c2:f4:ce:05:f8:02:1c:51:84:24:d7:3b:ed:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409 Validity Not Before: Jan 26 06:00:34 2026 GMT Not After : Jan 27 06:00:34 2026 GMT Subject: CN=3a2e49ed11cd64cca2dffabc02dbef0bba9c7b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:4d:fe:d2:b9:8b:17:d5:be:2a:46:a4:21: 76:a3:ec:cb:5a:7d:78:c3:05:1b:e7:42:b0:ae:65: 17:86:b6:53:7a:82:55:9e:48:a6:20:ea:a5:d7:1f: 96:bb:fb:b6:1e:55:64:be:a0:14:63:d5:8a:f1:30: 01:ab:16:21:52:18:81:df:48:70:3d:a6:92:4f:fa: 1b:2c:33:5a:b4:04:53:55:ed:7f:62:c9:16:27:b7: 91:e9:1b:a0:ab:76:43:86:69:a3:2c:8e:66:44:cf: 0b:99:bc:30:da:19:a6:fb:d7:53:f9:38:41:b8:10: 72:e0:42:c7:41:1f:79:5e:c6:ae:82:2a:75:84:6b: 67:fc:92:54:a8:a3:3b:36:3c:04:1a:af:97:cd:5b: 5d:a5:bf:0c:74:cd:ed:04:08:e7:cc:49:cc:ad:e6: 3b:74:3b:c4:c4:44:20:f3:c0:08:fb:f8:f6:86:25: 0c:fe:04:66:51:6b:1d:ef:fc:1b:04:52:0f:2a:7b: 43:3d:22:a8:7b:94:24:88:64:36:2d:fb:85:d6:3b: f8:08:d3:b2:a7:97:64:29:93:5e:a4:3d:81:cc:86: ff:94:a7:07:20:f2:a7:ae:27:5d:c1:c1:be:39:2e: bc:be:8d:11:26:c4:21:64:ad:55:e7:be:0f:d5:f8: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2E:49:ED:11:CD:64:CC:A2:DF:FA:BC:02:DB:EF:0B:BA:9C:7B:74 X509v3 Authority Key Identifier: keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1d:af:2a:27:47:2b:74:eb:1c:63:d1:3a:de:80:1f:72:a6: eb:85:ac:5f:19:fd:b1:bd:48:88:1e:30:12:bc:fb:e1:f0:32: 9b:b5:4b:76:22:00:b2:ed:f5:7d:88:bc:12:30:73:69:d4:b2: 85:42:c0:4a:63:57:5d:d2:bb:59:1b:2c:68:ab:65:c5:33:80: ef:cf:29:be:15:15:40:bb:9c:4b:78:4b:95:ec:93:76:11:1b: 02:75:91:7d:85:b7:c4:4e:94:d0:18:ce:8a:68:f6:cf:80:e9: 71:8e:99:ed:72:32:d0:d1:dc:04:41:61:4b:e2:79:8f:44:9f: 34:f4:43:b5:70:28:3c:d0:c9:2f:26:58:4b:4c:b2:b7:da:0a: d5:63:e8:33:b4:6f:7d:5c:23:95:26:5c:8b:1b:c0:66:ba:45: fd:a6:0b:3e:4d:04:78:66:48:a4:f3:60:60:7e:80:08:f5:e7: de:94:40:cb:54:87:a0:4d:af:5c:e1:bd:4a:57:65:22:51:35: 85:ec:a2:5d:c7:ec:80:4f:a4:b4:8f:f0:60:83:bd:72:e6:72: 81:e6:49:2f:93:5e:fb:90:b6:09:f7:73:7a:cf:0f:91:ec:38: 80:5c:95:5e:6e:ee:c3:bb:69:90:f6:b1:43:87:46:00:89:a6: 8e:16:b7:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv448L0zgX4AhxRhCTXO+3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWExZDQ1MzFiMDcxZDY1NzQ2OTljMTJlNWFmYTQxZjg5 YmQ0MDkwHhcNMjYwMTI2MDYwMDM0WhcNMjYwMTI3MDYwMDM0WjAzMTEwLwYDVQQD EygzYTJlNDllZDExY2Q2NGNjYTJkZmZhYmMwMmRiZWYwYmJhOWM3Yjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKtN/tK5ixfVvipGpCF2o+zLWn14 wwUb50KwrmUXhrZTeoJVnkimIOql1x+Wu/u2HlVkvqAUY9WK8TABqxYhUhiB30hw PaaST/obLDNatARTVe1/YskWJ7eR6Rugq3ZDhmmjLI5mRM8Lmbww2hmm+9dT+ThB uBBy4ELHQR95Xsaugip1hGtn/JJUqKM7NjwEGq+XzVtdpb8MdM3tBAjnzEnMreY7 dDvExEQg88AI+/j2hiUM/gRmUWsd7/wbBFIPKntDPSKoe5QkiGQ2LfuF1jv4CNOy p5dkKZNepD2BzIb/lKcHIPKnriddwcG+OS68vo0RJsQhZK1V574P1fg9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDouSe0RzWTMot/6vALb7wu6nHt0MB8GA1UdIwQY MBaAFAnqHUUxsHHWV0aZwS5a+kH4m9QJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYt NGU2ZDEzMGJkYTBmLzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hN2NhNjEtMmU4ZC00YmJlLTljMzYtNGU2ZDEzMGJkYTBm LzEvQ2VvZFJUR3djZFpYUnBuQkxscjZRZmliMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR2vKidH K3TrHGPROt6AH3Km64WsXxn9sb1IiB4wErz74fAym7VLdiIAsu31fYi8EjBzadSy hULASmNXXdK7WRssaKtlxTOA788pvhUVQLucS3hLleyTdhEbAnWRfYW3xE6U0BjO imj2z4DpcY6Z7XIy0NHcBEFhS+J5j0SfNPRDtXAoPNDJLyZYS0yyt9oK1WPoM7Rv fVwjlSZcixvAZrpF/aYLPk0EeGZIpPNgYH6ACPXn3pRAy1SHoE2vXOG9SldlIlE1 heyiXcfsgE+ktI/wYIO9cuZygeZJL5Ne+5C2Cfdzes8Pkew4gFyVXm7uw7tpkPax Q4dGAImmjha3Cg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:40 2026 by rpki-client