This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File: ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier: lNwkCafoIe+XBjE0zOeuX/yO3/ko6CsflksmKTBYKCE=
Subject key identifier: 81:A9:F6:E3:7E:1C:85:BF:FE:73:AA:96:95:2F:F1:42:5A:74:32:38
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 019BFA6444B6C634EF1FC8960FED67741611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number: 173F
Signing time: Mon 26 Jan 2026 13:00:33 +0000
Manifest this update: Mon 26 Jan 2026 13:00:33 +0000
Manifest next update: Tue 27 Jan 2026 13:00:33 +0000
Files and hashes: 1: 6sfcsooGMCFXO1kWatFbvvr1zLA.roa (hash: QdFq68T0MyS7t2slIEEx1ooDTbclHUWKKj4eUylZI2c=)
2: NpiHnYFexffpXlY55BYzjfAHv4w.roa (hash: KMdyac6MZ5qBRRQr/k2XUi4yNROOCzI2aVOuefuG2aA=)
3: WrWzBEncYcxkc-a46XxrWRG30y4.roa (hash: 3BGfxi0WT8XUNNL8UKXsVqPQk7yH3Dfp1aLhOELVb1Q=)
4: XXFvo0LwN5fFxfFhs7wIa9afeec.roa (hash: SfaEqekBPYoxq/TIPc/MEtTssLDFzyVZM05mRJ5aA7A=)
5: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: kMRWYM1geQv7tAq38YVOjg+qUFd+xXG3P8YqrFPwh0I=)
6: vjwSSPjssAJWg17wdB8nOax9NPg.roa (hash: +Skus1QTMfLkZcv6BWomJpA4+khM7/pNQ8k90KcyWes=)
7: ywS_DWFhfGT_5zoyX1YZLjOr-0I.roa (hash: NiPKJPuTp/RkYFR2X2m2JVeorjDmkEEV8OJgWiusFQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:44:b6:c6:34:ef:1f:c8:96:0f:ed:67:74:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 26 13:00:33 2026 GMT
Not After : Jan 27 13:00:33 2026 GMT
Subject: CN=81a9f6e37e1c85bffe73aa96952ff1425a743238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:b0:f0:a5:1c:56:a0:97:15:e8:a8:13:52:
db:2a:55:ce:04:06:a4:8f:c1:21:51:81:c7:3d:9e:
ad:2a:96:66:ce:6f:d3:fc:70:a2:98:7c:68:27:f0:
c2:60:ae:e6:a8:55:f7:68:36:8e:be:54:99:fa:92:
f2:3a:cc:f6:89:cb:c2:99:19:f3:0e:10:82:a6:f3:
00:c0:8c:d9:0d:c1:1f:27:28:57:54:ed:f8:19:38:
71:2a:2c:52:77:8a:fa:2d:06:04:95:20:6b:a9:25:
a9:57:a3:d4:aa:2c:9e:45:af:15:36:f3:82:e8:47:
9e:1c:d1:23:8e:66:44:b7:ac:b3:09:75:92:74:6a:
f6:69:2b:9d:97:2b:3e:e6:81:d8:f2:a6:a3:fa:f2:
49:4c:69:8b:a9:8f:75:db:c5:9f:49:a2:d1:82:f1:
d4:14:8c:e0:c1:31:61:b0:65:b8:a3:fe:c4:2d:b1:
b7:3a:06:6f:9b:9d:6f:cd:f1:40:50:17:d3:a3:16:
d1:f1:e3:53:23:0f:d4:7f:1a:cb:9b:c3:7a:34:52:
a8:de:e5:09:05:40:4a:2a:12:ce:25:51:ac:ed:82:
41:40:73:6d:d1:9a:e2:9c:aa:e6:5f:e1:12:b4:a0:
a3:39:90:3e:c7:d7:7c:0a:ac:7a:2b:78:91:67:48:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A9:F6:E3:7E:1C:85:BF:FE:73:AA:96:95:2F:F1:42:5A:74:32:38
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6e:90:1d:e8:6d:d5:d1:b0:93:16:a3:78:bd:ba:77:95:cf:
fc:d4:13:38:e4:30:c8:a1:92:44:9c:c8:9d:ce:91:58:73:65:
a1:71:ef:8e:48:6b:8c:8b:62:8b:01:fe:d3:35:2e:2a:b1:6c:
ad:45:23:7a:da:d0:32:af:f1:5e:80:e4:7c:4a:db:e4:f3:9e:
54:f2:2f:d9:66:35:9a:ea:3a:6b:c6:11:b7:3a:08:9c:95:17:
ea:1d:08:a0:fd:be:b2:c9:d5:96:80:c1:36:68:51:83:66:f2:
7f:b3:56:bc:22:7d:25:3b:1b:f7:8c:22:f3:52:3e:2e:fc:4c:
a0:1e:66:2a:53:ab:3f:e4:3f:65:bd:83:e6:57:2d:c1:fe:3c:
e2:f8:29:f3:95:8f:86:75:aa:28:d5:7f:8b:85:1d:2f:27:d1:
2f:56:1f:9c:09:8d:ad:5c:9b:e4:17:6b:83:16:b6:02:03:d1:
34:30:87:72:e3:f8:1a:ea:b2:f6:85:8a:f5:e1:af:ff:ff:11:
3b:32:25:35:d9:e7:47:2b:64:a4:f2:32:6b:0f:69:d4:67:a0:
a0:39:b3:7a:5f:ae:88:39:d4:01:c4:de:a0:0a:1b:79:95:95:
a9:64:dc:15:b0:b8:c3:2f:1f:9c:bc:a5:09:be:b5:cb:a5:65:
56:90:59:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6ZES2xjTvH8iWD+1ndBYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw
ZWJiNjEwHhcNMjYwMTI2MTMwMDMzWhcNMjYwMTI3MTMwMDMzWjAzMTEwLwYDVQQD
Eyg4MWE5ZjZlMzdlMWM4NWJmZmU3M2FhOTY5NTJmZjE0MjVhNzQzMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu2w8KUcVqCXFeioE1LbKlXOBAak
j8EhUYHHPZ6tKpZmzm/T/HCimHxoJ/DCYK7mqFX3aDaOvlSZ+pLyOsz2icvCmRnz
DhCCpvMAwIzZDcEfJyhXVO34GThxKixSd4r6LQYElSBrqSWpV6PUqiyeRa8VNvOC
6EeeHNEjjmZEt6yzCXWSdGr2aSudlys+5oHY8qaj+vJJTGmLqY9128WfSaLRgvHU
FIzgwTFhsGW4o/7ELbG3OgZvm51vzfFAUBfToxbR8eNTIw/UfxrLm8N6NFKo3uUJ
BUBKKhLOJVGs7YJBQHNt0ZrinKrmX+EStKCjOZA+x9d8Cqx6K3iRZ0iWUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGp9uN+HIW//nOqlpUv8UJadDI4MB8GA1UdIwQY
MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt
MDA2ZTliYjhlZDU5LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5
LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG6QHeht
1dGwkxajeL26d5XP/NQTOOQwyKGSRJzInc6RWHNloXHvjkhrjItiiwH+0zUuKrFs
rUUjetrQMq/xXoDkfErb5POeVPIv2WY1muo6a8YRtzoInJUX6h0IoP2+ssnVloDB
NmhRg2byf7NWvCJ9JTsb94wi81I+LvxMoB5mKlOrP+Q/Zb2D5lctwf484vgp85WP
hnWqKNV/i4UdLyfRL1YfnAmNrVyb5Bdrgxa2AgPRNDCHcuP4Guqy9oWK9eGv//8R
OzIlNdnnRytkpPIyaw9p1GegoDmzel+uiDnUAcTeoAobeZWVqWTcFbC4wy8fnLyl
Cb61y6VlVpBZUQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:08 2026 by rpki-client