This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: Zv4OUG8RWir3isbuerLip0taRklAj7PGQuR43OjAf4c= Subject key identifier: 54:D6:22:8F:AE:7B:86:DF:BA:7D:04:18:CE:D3:C8:C1:11:45:97:E0 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019BD87D3A15D2EF29812D98BC3433796186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1580 Signing time: Mon 19 Jan 2026 23:00:44 +0000 Manifest this update: Mon 19 Jan 2026 23:00:44 +0000 Manifest next update: Tue 20 Jan 2026 23:00:44 +0000 Files and hashes: 1: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 4: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 5: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 6: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 7: KiLA-XCCVQ3hp6NK0nSvvdBkVaA.roa (hash: Wrbvgs04+OV9y9FcYP+1OM/PeyM8B8+/OgsBO82HfPE=) 8: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 9: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 10: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: ORQsixIORNAiqXkIKWRagmJV+IyAXU7YFo5JdFvdtgM=) 11: dZo66_L9wh2qbij7G3JOKCs449k.roa (hash: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko=) 12: hN8uqpJVGUVz_yoCMsK71ZeLMkw.roa (hash: yFRAlutdbfqI9DX9panTjVrB5bc9srd6cM00XqjPdl4=) 13: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 14: vNdkeRwM5csqt2VdDCeWXV5Lqcg.roa (hash: 8fLuiRSXi1wlRLB5+uM6MoQhKZD4VrD7fYAS5Z6UVgU=) 15: vR9E1xSnliRW9Usue4V0ADKHiho.roa (hash: S5rMh/OoVyLOT3VDLY9zfWdq9jorvnICYEBPJuWsM0s=) 16: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 17: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:7d:3a:15:d2:ef:29:81:2d:98:bc:34:33:79:61:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 19 23:00:44 2026 GMT Not After : Jan 20 23:00:44 2026 GMT Subject: CN=54d6228fae7b86dfba7d0418ced3c8c1114597e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:54:32:8b:53:2c:be:93:40:36:aa:b0:4b: 22:47:49:bc:99:71:96:12:af:79:89:5d:41:b0:28: 13:4b:19:76:c0:ed:64:fd:41:1b:81:c5:ba:52:64: 82:64:e9:b2:10:7f:cd:a7:f8:d4:01:b8:be:dd:41: a3:7f:f3:15:7b:06:d5:f0:a1:3b:83:d5:68:63:0c: 20:80:53:cf:76:ed:db:b1:36:70:66:f1:e5:47:28: 9c:dd:db:31:72:39:bf:2a:04:93:fd:0f:f9:fe:97: 12:74:c8:d8:1a:09:d5:22:ec:95:23:fa:3c:d6:31: e8:78:a7:87:ac:98:cf:6f:cf:3c:55:80:c5:88:53: 76:e9:dd:c9:31:dc:75:70:0d:f3:4a:76:ac:7f:3e: 5b:37:c0:77:50:ff:e9:ff:85:c5:da:e3:b8:0e:3f: 3e:86:ce:65:fd:87:c1:e8:81:b9:49:dc:d8:c3:3b: 2a:8b:9b:bb:30:39:70:bc:8e:79:67:2c:40:3c:d5: 2b:48:fb:e8:b7:09:ab:fe:f4:17:9a:e5:4d:93:29: 50:f3:77:92:39:25:29:cf:0f:3a:66:ad:d3:22:a9: 8c:10:70:a4:65:94:3e:93:82:34:a0:73:7f:71:71: eb:21:61:20:ca:fb:ee:7a:26:72:6d:33:1c:53:c1: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D6:22:8F:AE:7B:86:DF:BA:7D:04:18:CE:D3:C8:C1:11:45:97:E0 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2f:74:5d:92:a0:dc:b1:3b:09:d0:75:8d:4a:97:ed:2a:19: 9e:26:39:a7:15:0b:04:f8:14:a6:18:72:fc:f0:59:5a:c1:d5: d0:79:cd:d2:f9:d7:f2:4f:f3:d5:bf:ed:fb:19:07:2a:39:42: ea:03:f6:11:d0:b9:04:b6:24:76:cc:45:17:f4:27:81:a3:8c: c0:cd:0c:79:3f:c0:99:67:42:3d:b0:d6:30:b9:02:31:cb:2a: 09:90:72:74:6c:fa:bc:29:d7:0c:1a:86:07:78:58:e2:99:96: 01:bf:8d:1b:09:ff:3a:1c:3f:e3:29:1f:d1:73:b4:9f:dd:a9: 3a:d7:b4:a3:08:71:76:e2:18:89:4e:31:8f:8d:1d:d2:0a:9d: 93:ab:5e:ca:93:98:70:14:39:e5:8a:f0:8a:0f:16:47:9c:e7: fa:97:eb:bd:b7:82:3f:24:b7:df:02:8e:4f:08:9f:fc:dd:0e: 91:e3:5e:79:aa:84:65:85:af:a7:06:85:e0:78:f9:48:6c:8d: d7:cb:eb:5c:7d:50:38:ef:a1:42:45:63:0e:b2:87:16:7a:1c: 0a:7c:60:b3:ed:89:a2:99:21:60:b9:4a:57:79:9a:1e:d0:c3: 86:62:d2:c4:d0:fd:f0:06:b7:1a:22:cd:e2:24:96:5a:a5:2d: cd:fe:2f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYfToV0u8pgS2YvDQzeWGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTE5MjMwMDQ0WhcNMjYwMTIwMjMwMDQ0WjAzMTEwLwYDVQQD Eyg1NGQ2MjI4ZmFlN2I4NmRmYmE3ZDA0MThjZWQzYzhjMTExNDU5N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraBUMotTLL6TQDaqsEsiR0m8mXGW Eq95iV1BsCgTSxl2wO1k/UEbgcW6UmSCZOmyEH/Np/jUAbi+3UGjf/MVewbV8KE7 g9VoYwwggFPPdu3bsTZwZvHlRyic3dsxcjm/KgST/Q/5/pcSdMjYGgnVIuyVI/o8 1jHoeKeHrJjPb888VYDFiFN26d3JMdx1cA3zSnasfz5bN8B3UP/p/4XF2uO4Dj8+ hs5l/YfB6IG5SdzYwzsqi5u7MDlwvI55ZyxAPNUrSPvotwmr/vQXmuVNkylQ83eS OSUpzw86Zq3TIqmMEHCkZZQ+k4I0oHN/cXHrIWEgyvvueiZybTMcU8GCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTWIo+ue4bfun0EGM7TyMERRZfgMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy90XZKg 3LE7CdB1jUqX7SoZniY5pxULBPgUphhy/PBZWsHV0HnN0vnX8k/z1b/t+xkHKjlC 6gP2EdC5BLYkdsxFF/QngaOMwM0MeT/AmWdCPbDWMLkCMcsqCZBydGz6vCnXDBqG B3hY4pmWAb+NGwn/Ohw/4ykf0XO0n92pOte0owhxduIYiU4xj40d0gqdk6teypOY cBQ55Yrwig8WR5zn+pfrvbeCPyS33wKOTwif/N0OkeNeeaqEZYWvpwaF4Hj5SGyN 18vrXH1QOO+hQkVjDrKHFnocCnxgs+2JopkhYLlKV3maHtDDhmLSxND98Aa3GiLN 4iSWWqUtzf4v0A== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:59 2026 by rpki-client