This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json) Hash identifier: Cr6x1SNMPZfT5G+B0WJa39VSqynsDcAaEdRNMMWSCS0= Subject key identifier: A0:C6:8F:BF:21:EF:95:38:6D:16:6F:FB:43:7E:92:F8:B7:18:B9:17 Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019BE036DC63D08B4D77E729978DB02F56EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft Manifest number: 065E Signing time: Wed 21 Jan 2026 11:00:50 +0000 Manifest this update: Wed 21 Jan 2026 11:00:50 +0000 Manifest next update: Thu 22 Jan 2026 11:00:50 +0000 Files and hashes: 1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=) 2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: kNEyb17PJIGniK28odSRWlbGzLo0r1kX7NCnIMvxxmY=) 3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:36:dc:63:d0:8b:4d:77:e7:29:97:8d:b0:2f:56:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Jan 21 11:00:50 2026 GMT Not After : Jan 22 11:00:50 2026 GMT Subject: CN=a0c68fbf21ef95386d166ffb437e92f8b718b917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:b8:fd:70:d5:5c:62:f2:b8:cb:38:83:39: 0f:5a:d6:2c:6e:a5:d3:38:bf:c9:9c:0c:a4:aa:91: 21:25:13:23:86:31:de:99:54:16:52:fb:1b:fe:01: 66:18:d5:9b:8b:40:27:51:66:b9:48:15:73:d0:33: 7f:45:83:6f:0e:a8:01:76:42:72:eb:42:94:9f:fa: c3:a2:df:59:b7:ab:97:f1:b2:f5:89:6c:fa:2c:a5: a3:85:90:4f:b1:08:aa:1a:2e:0e:06:2a:7e:64:c3: 24:44:f0:f7:a3:52:f9:a1:d1:01:2a:26:34:45:e7: 45:22:60:95:b1:f3:42:b7:bc:6a:cb:6d:cd:34:57: d9:f8:c6:85:32:0b:b6:89:15:0c:22:1b:95:3c:4a: 5c:6c:a1:cd:62:35:23:f5:3d:f4:16:27:d3:e5:1f: 80:87:9e:e9:c4:71:af:10:5e:9a:9b:ba:50:a6:db: 96:32:47:de:61:24:b0:7c:21:40:b0:b7:81:af:d0: 64:fc:e3:a4:17:35:63:48:21:4f:ae:8d:93:d1:cd: 3b:5e:c8:50:e0:4c:db:77:ff:8e:52:67:be:37:ee: 54:0c:85:20:a0:59:6d:b2:05:54:53:0f:e9:d6:69: e8:54:4e:a3:2a:9d:9b:d5:10:d9:0d:7a:03:05:fb: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:8F:BF:21:EF:95:38:6D:16:6F:FB:43:7E:92:F8:B7:18:B9:17 X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:70:d7:f1:1e:ba:d6:61:57:a1:5a:c1:33:df:73:13:1f:fa: 71:0a:8b:67:79:1a:a8:7d:e0:cc:bf:bc:66:49:3d:b9:8a:7f: e2:7b:72:68:0f:98:2f:f2:db:57:54:68:1e:e8:10:13:28:81: 5f:af:0d:b2:ca:51:5f:d6:8d:09:28:15:0a:e1:b6:f2:ef:d1: 50:78:b4:7a:a7:09:bf:23:9f:90:31:bd:fb:7c:2d:d4:3d:c9: 63:74:ff:8d:73:18:9d:84:c3:a7:a9:39:04:8a:08:ad:40:ff: af:87:ff:85:f3:d2:cd:5f:b3:b3:90:f4:6b:89:28:01:c7:44: b9:99:d8:f2:6c:03:bb:99:ca:24:4c:46:ed:2e:b0:44:e7:e2: 8e:e4:85:bf:0a:af:a4:c0:44:4f:bc:ca:62:70:52:a0:14:6a: e9:2b:08:72:08:87:fb:b4:2e:28:83:18:16:d6:3a:4d:50:3d: 8f:f9:b7:76:c2:e9:08:47:80:05:b4:39:fd:db:68:0d:fe:7d: 6e:5f:3c:24:f0:8f:1b:72:7b:6b:d4:1b:37:a0:be:bd:a6:62: c3:a8:d2:0f:28:00:4c:e4:ad:32:5b:b4:18:b4:29:2c:a9:85: f9:1e:a8:d5:06:6a:a2:6a:0a:1b:a6:0f:e4:d5:aa:a9:b3:35: a4:2e:76:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNtxj0ItNd+cpl42wL1bvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjYwMTIxMTEwMDUwWhcNMjYwMTIyMTEwMDUwWjAzMTEwLwYDVQQD EyhhMGM2OGZiZjIxZWY5NTM4NmQxNjZmZmI0MzdlOTJmOGI3MThiOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMi4/XDVXGLyuMs4gzkPWtYsbqXT OL/JnAykqpEhJRMjhjHemVQWUvsb/gFmGNWbi0AnUWa5SBVz0DN/RYNvDqgBdkJy 60KUn/rDot9Zt6uX8bL1iWz6LKWjhZBPsQiqGi4OBip+ZMMkRPD3o1L5odEBKiY0 RedFImCVsfNCt7xqy23NNFfZ+MaFMgu2iRUMIhuVPEpcbKHNYjUj9T30FifT5R+A h57pxHGvEF6am7pQptuWMkfeYSSwfCFAsLeBr9Bk/OOkFzVjSCFPro2T0c07XshQ 4Ezbd/+OUme+N+5UDIUgoFltsgVUUw/p1mnoVE6jKp2b1RDZDXoDBfuAbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDGj78h75U4bRZv+0N+kvi3GLkXMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnDX8R66 1mFXoVrBM99zEx/6cQqLZ3kaqH3gzL+8Zkk9uYp/4ntyaA+YL/LbV1RoHugQEyiB X68NsspRX9aNCSgVCuG28u/RUHi0eqcJvyOfkDG9+3wt1D3JY3T/jXMYnYTDp6k5 BIoIrUD/r4f/hfPSzV+zs5D0a4koAcdEuZnY8mwDu5nKJExG7S6wROfijuSFvwqv pMBET7zKYnBSoBRq6SsIcgiH+7QuKIMYFtY6TVA9j/m3dsLpCEeABbQ5/dtoDf59 bl88JPCPG3J7a9QbN6C+vaZiw6jSDygATOStMlu0GLQpLKmF+R6o1QZqomoKG6YP 5NWqqbM1pC525g== -----END CERTIFICATE-----Generated at Wed Jan 21 18:47:59 2026 by rpki-client