This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json) Hash identifier: ZlPt70OQbyt60N5V+KGoHwdbGC8iLgzufAdvSsjktvo= Subject key identifier: B6:02:22:85:8A:5E:21:35:F3:1A:72:F6:99:27:26:DE:8B:DB:4A:8C Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2 Certificate serial: 019C002FBF958E81D3E9DEC967DBB346E978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 16:00:55 +0000 Manifest this update: Tue 27 Jan 2026 16:00:55 +0000 Manifest next update: Wed 28 Jan 2026 16:00:55 +0000 Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=) 2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=) 3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: 2fRLzYGUr3m7Zf5VRzdzbpNB5sF31ysO9uKGTJhRUPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:2f:bf:95:8e:81:d3:e9:de:c9:67:db:b3:46:e9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709d69957d333432accac810231e289388e302e2 Validity Not Before: Jan 27 16:00:55 2026 GMT Not After : Jan 28 16:00:55 2026 GMT Subject: CN=b60222858a5e2135f31a72f6992726de8bdb4a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:95:44:33:36:db:49:ac:e8:f1:5d:4a:ed:32: 32:db:58:2c:9f:77:7c:87:e2:82:a9:fc:08:bc:c7: 03:7c:15:b1:e6:b8:3e:33:01:83:21:6e:d9:36:08: ab:b5:9e:b9:52:d1:ff:68:fd:52:ad:c9:ad:ca:e4: 9d:ea:99:9b:54:8e:78:e1:87:dd:cd:0e:c3:d7:a9: 9c:1e:93:08:8e:80:ee:5d:49:a2:b7:e8:53:01:10: dc:d8:a3:0b:7c:7b:d7:3c:9f:e3:28:e3:3b:85:91: da:11:cd:9e:f9:07:1f:5a:5c:20:84:88:f8:b5:59: c5:8b:00:63:9a:79:30:ab:ff:d5:9e:08:ac:5f:5b: 31:33:0a:4e:10:3c:27:c6:8f:f1:a8:40:06:7f:21: 7c:fd:7d:1e:bd:4a:a2:d7:64:26:8c:e7:88:42:92: 8d:35:3e:b1:86:ea:7a:b3:7f:bb:ee:d7:fa:db:c9: 73:8b:06:9a:bf:81:94:42:f3:45:9f:56:cd:65:dc: 23:8a:bb:f4:f4:c8:46:59:9d:46:59:59:9b:17:0d: 7a:c8:a5:d5:94:65:03:2b:81:c2:98:e8:7d:92:9a: a3:22:b1:a0:1e:cd:ce:1a:9b:59:eb:fb:de:e9:e4: 4c:02:95:2d:bf:b2:e8:5e:82:4f:7b:ad:16:f1:0d: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:22:85:8A:5E:21:35:F3:1A:72:F6:99:27:26:DE:8B:DB:4A:8C X509v3 Authority Key Identifier: keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:79:fb:98:51:9c:c6:5a:d1:6e:bb:70:dc:0c:41:5b:41:12: 11:fd:46:17:27:cb:6f:fd:09:b9:89:25:40:18:74:4a:37:8b: 20:73:5a:01:4f:d8:f9:20:69:a9:92:86:8b:2a:bc:e2:6c:d2: 0d:f1:0b:4f:10:f8:81:37:20:0a:47:d1:ef:9f:d2:3f:84:c0: 4f:29:ad:47:7a:eb:d0:9f:00:a0:af:b5:c4:72:27:79:55:a8: fd:99:19:2d:59:47:cb:1d:ea:66:b6:c7:77:06:ce:48:3e:f8: ef:40:63:11:9e:b0:eb:ab:34:0f:8d:ed:3b:aa:bc:40:de:cb: 37:c8:65:34:60:8d:d4:e7:82:c1:be:f5:e8:40:b3:b8:db:7b: 8d:ac:fd:c1:12:6b:98:06:f1:88:df:f8:ee:d8:29:c2:e1:22: 52:24:99:f3:bd:5f:27:02:b4:25:24:99:69:9f:9b:22:e8:c1: 22:d1:76:1c:21:6b:35:82:27:37:4a:51:35:d3:2e:3d:0e:bc: d7:2a:23:c8:9f:60:50:ea:fc:43:ff:fa:8c:5b:eb:23:74:1a: 96:82:5c:4d:4b:c7:4c:c3:a4:40:1c:41:a7:09:03:e7:cc:cc: e6:68:ba:0a:f5:d7:c3:2b:2b:2a:e7:7f:9e:85:49:ec:e7:6c: 76:50:fe:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwAL7+VjoHT6d7JZ9uzRul4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl MzAyZTIwHhcNMjYwMTI3MTYwMDU1WhcNMjYwMTI4MTYwMDU1WjAzMTEwLwYDVQQD EyhiNjAyMjI4NThhNWUyMTM1ZjMxYTcyZjY5OTI3MjZkZThiZGI0YThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pVEMzbbSazo8V1K7TIy21gsn3d8 h+KCqfwIvMcDfBWx5rg+MwGDIW7ZNgirtZ65UtH/aP1SrcmtyuSd6pmbVI544Yfd zQ7D16mcHpMIjoDuXUmit+hTARDc2KMLfHvXPJ/jKOM7hZHaEc2e+QcfWlwghIj4 tVnFiwBjmnkwq//VngisX1sxMwpOEDwnxo/xqEAGfyF8/X0evUqi12QmjOeIQpKN NT6xhup6s3+77tf628lziwaav4GUQvNFn1bNZdwjirv09MhGWZ1GWVmbFw16yKXV lGUDK4HCmOh9kpqjIrGgHs3OGptZ6/ve6eRMApUtv7LoXoJPe60W8Q01vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYCIoWKXiE18xpy9pknJt6L20qMMB8GA1UdIwQY MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXn7mFGc xlrRbrtw3AxBW0ESEf1GFyfLb/0JuYklQBh0SjeLIHNaAU/Y+SBpqZKGiyq84mzS DfELTxD4gTcgCkfR75/SP4TATymtR3rr0J8AoK+1xHIneVWo/ZkZLVlHyx3qZrbH dwbOSD7470BjEZ6w66s0D43tO6q8QN7LN8hlNGCN1OeCwb716ECzuNt7jaz9wRJr mAbxiN/47tgpwuEiUiSZ871fJwK0JSSZaZ+bIujBItF2HCFrNYInN0pRNdMuPQ68 1yojyJ9gUOr8Q//6jFvrI3QaloJcTUvHTMOkQBxBpwkD58zM5mi6CvXXwysrKud/ noVJ7OdsdlD+qg== -----END CERTIFICATE-----Generated at Tue Jan 27 19:39:24 2026 by rpki-client