This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json) Hash identifier: Vcz5OyPTHTQ6yiF9RjgAkt8f+5zz+2OINUT/SwcsfiQ= Subject key identifier: 1F:5E:E2:92:36:96:D6:95:B8:41:19:CD:40:3D:03:1C:4B:D8:DE:EE Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Certificate serial: 019BA5A2CFAD345BD3EBBFC81E3254314E7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft Manifest number: 0E26 Signing time: Sat 10 Jan 2026 02:01:09 +0000 Manifest this update: Sat 10 Jan 2026 02:01:09 +0000 Manifest next update: Sun 11 Jan 2026 02:01:09 +0000 Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=) 2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=) 3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: hmlcVJVbDaV7KmffDalgaqVBRSMBw3PowN1zScezQZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:a2:cf:ad:34:5b:d3:eb:bf:c8:1e:32:54:31:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918 Validity Not Before: Jan 10 02:01:09 2026 GMT Not After : Jan 11 02:01:09 2026 GMT Subject: CN=1f5ee2923696d695b84119cd403d031c4bd8deee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:05:1c:f1:65:ef:fd:a2:85:9f:81:f7:35: 1a:79:49:c4:ec:80:ae:96:60:5e:9f:ab:ec:fe:a6: f2:07:8a:ec:74:62:0d:3b:f8:e8:56:5c:da:41:f8: 99:20:98:0a:6b:46:8e:07:a6:8c:24:f4:7f:b9:a7: 10:a6:d5:af:6f:4b:7e:60:8a:83:f5:7f:ba:20:13: a9:a5:88:67:54:4e:6d:b7:d0:da:8c:cd:f3:84:72: db:31:02:f6:ca:c1:4b:31:2c:d5:ac:39:a3:07:98: bb:5d:06:fc:11:02:73:e7:4a:3a:92:5b:59:9f:bc: 5d:79:8b:f4:01:de:e8:c3:14:55:5d:aa:3a:74:50: ce:ee:0d:f9:00:fa:25:2f:67:99:53:df:73:4b:2d: 7a:6c:df:4a:a5:eb:dd:28:be:37:8e:b5:cf:e0:2f: 72:34:07:63:36:b2:8c:cc:f9:f3:70:ef:5b:19:42: 5e:07:82:f3:b7:68:22:6c:a9:f6:96:50:ff:e4:8c: d5:6e:c0:15:65:0f:e9:3a:8c:4e:87:92:88:a3:03: f8:71:a2:db:a4:d8:ac:94:18:78:cc:ee:59:6a:16: f4:ef:5a:97:10:4d:d7:d4:cc:4a:39:88:83:dd:ec: ab:be:a0:3b:94:f0:65:30:8e:dd:b6:d7:a4:d7:20: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5E:E2:92:36:96:D6:95:B8:41:19:CD:40:3D:03:1C:4B:D8:DE:EE X509v3 Authority Key Identifier: keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:ce:82:c8:8f:fa:18:37:87:a7:3e:3f:8a:93:0b:16:32: 12:e4:e5:5d:83:8a:0b:4d:1e:ea:b2:e3:1b:0f:06:7f:ed:f1: 09:89:09:a5:d5:7e:d0:d6:93:01:45:22:be:0e:b0:d1:d0:6c: d3:d7:bb:e9:84:81:1e:6c:4f:f2:69:0c:fc:52:ea:58:75:da: 75:b5:ed:a1:92:a7:aa:43:ca:12:46:92:ee:14:93:60:89:f3: 34:b5:b6:6f:3f:95:b0:27:85:4e:3c:ae:90:26:b1:47:2d:ad: a2:f2:8e:f8:fb:4d:76:c5:50:97:12:86:a2:4e:ef:48:d9:43: 79:52:a2:c3:58:2f:16:22:8d:b8:42:01:f6:2f:e7:ac:15:b6: ba:7a:94:27:55:ff:16:b0:d0:e6:8f:eb:48:c7:0c:f3:98:2a: 61:b6:2c:bb:16:eb:f5:96:c7:b5:72:0d:63:73:79:cd:d0:0b: 07:97:96:e4:59:8a:ab:5d:62:b7:7f:92:59:17:2f:25:4b:35: 70:1f:d8:ab:5d:9d:b2:50:43:af:65:71:2b:c5:27:01:5d:a0: 9d:52:33:f9:43:82:a9:26:e4:8b:72:17:c8:7d:5a:ab:e6:32: a5:78:3f:9b:69:ea:db:e4:35:17:28:8a:ad:a8:ba:33:63:8a: f2:23:22:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulos+tNFvT67/IHjJUMU5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliYzVjZWYzYWVhZGYzMjYxM2Y3ZDk1OWVjOGU0MGE3 NDI5MTgwHhcNMjYwMTEwMDIwMTA5WhcNMjYwMTExMDIwMTA5WjAzMTEwLwYDVQQD EygxZjVlZTI5MjM2OTZkNjk1Yjg0MTE5Y2Q0MDNkMDMxYzRiZDhkZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4EFHPFl7/2ihZ+B9zUaeUnE7ICu lmBen6vs/qbyB4rsdGINO/joVlzaQfiZIJgKa0aOB6aMJPR/uacQptWvb0t+YIqD 9X+6IBOppYhnVE5tt9DajM3zhHLbMQL2ysFLMSzVrDmjB5i7XQb8EQJz50o6kltZ n7xdeYv0Ad7owxRVXao6dFDO7g35APolL2eZU99zSy16bN9KpevdKL43jrXP4C9y NAdjNrKMzPnzcO9bGUJeB4Lzt2gibKn2llD/5IzVbsAVZQ/pOoxOh5KIowP4caLb pNislBh4zO5Zahb071qXEE3X1MxKOYiD3eyrvqA7lPBlMI7dttek1yB6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9e4pI2ltaVuEEZzUA9AxxL2N7uMB8GA1UdIwQY MBaAFHE5vFzvOurfMmE/fZWeyOQKdCkYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYt Nzk0YjI4ZWIxNmM1LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYWU2NTItYTIxOC00MmY2LTk3YWYtNzk0YjI4ZWIxNmM1 LzEvY1RtOFhPODY2dDh5WVQ5OWxaN0k1QXAwS1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/vOgsiP +hg3h6c+P4qTCxYyEuTlXYOKC00e6rLjGw8Gf+3xCYkJpdV+0NaTAUUivg6w0dBs 09e76YSBHmxP8mkM/FLqWHXadbXtoZKnqkPKEkaS7hSTYInzNLW2bz+VsCeFTjyu kCaxRy2tovKO+PtNdsVQlxKGok7vSNlDeVKiw1gvFiKNuEIB9i/nrBW2unqUJ1X/ FrDQ5o/rSMcM85gqYbYsuxbr9ZbHtXINY3N5zdALB5eW5FmKq11it3+SWRcvJUs1 cB/Yq12dslBDr2VxK8UnAV2gnVIz+UOCqSbki3IXyH1aq+YypXg/m2nq2+Q1FyiK rai6M2OK8iMizQ== -----END CERTIFICATE-----Generated at Sat Jan 10 06:51:14 2026 by rpki-client