This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json) Hash identifier: QbtZThRdQg1UV9Aeg8Tqt1/UDbSp0rpGq5UNNbQaRIc= Subject key identifier: 86:EA:88:77:33:4E:A5:EA:FB:93:A2:B1:FA:D7:40:9C:DB:3C:22:A6 Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7 Certificate serial: 019BFA9B6BD3B9E75E46EE38EEB16EECBEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft Manifest number: 07F1 Signing time: Mon 26 Jan 2026 14:00:48 +0000 Manifest this update: Mon 26 Jan 2026 14:00:48 +0000 Manifest next update: Tue 27 Jan 2026 14:00:48 +0000 Files and hashes: 1: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (hash: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M=) 2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: Vlcje5z0RMLdJCkTXYDYylEnVjPlHbIBxXci/PWPRgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:6b:d3:b9:e7:5e:46:ee:38:ee:b1:6e:ec:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Validity Not Before: Jan 26 14:00:48 2026 GMT Not After : Jan 27 14:00:48 2026 GMT Subject: CN=86ea8877334ea5eafb93a2b1fad7409cdb3c22a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:6d:70:b9:04:42:e4:5b:6b:88:7b:48:8c: 9b:72:3e:e0:0d:29:17:5f:89:fd:ff:38:40:ba:11: f1:08:47:e4:b3:75:fd:a8:9d:b6:e7:ff:ed:3c:63: 20:5d:c1:74:05:70:3a:c1:55:05:96:16:69:a1:56: 9f:d8:2d:2b:03:af:8d:94:a6:41:e6:65:7b:8f:d9: 96:ef:fe:91:2f:d6:5d:a6:51:b7:27:2f:67:e6:ae: 65:af:d1:8a:21:4a:f4:f7:b3:28:a5:bf:8b:cf:32: 0e:41:7a:12:2e:61:41:cf:e4:d8:68:2c:96:e4:d5: 0a:51:f6:7d:81:ba:5e:65:0a:17:73:52:4c:8e:d3: fb:13:90:67:33:31:f5:22:ee:07:9b:bc:44:cf:27: 10:05:c1:52:7c:f2:27:59:0f:14:18:5a:d5:54:1c: 6c:03:2a:05:1b:aa:60:e9:81:9e:19:57:c6:a0:40: 9d:31:c7:44:d8:de:4e:27:e7:a3:00:32:f0:8e:69: f3:2a:25:f2:86:51:8b:e3:c3:9f:9c:38:bf:59:80: 70:84:55:09:e4:06:5e:e5:91:41:39:e8:61:f1:a4: c2:96:93:8d:71:89:39:37:cc:c8:c8:70:2b:83:c0: 9f:c2:a7:a4:66:9e:6d:1e:ba:15:8a:1a:06:67:c6: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:88:77:33:4E:A5:EA:FB:93:A2:B1:FA:D7:40:9C:DB:3C:22:A6 X509v3 Authority Key Identifier: keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:57:68:60:15:48:0c:cd:bf:52:72:b6:ac:87:75:e0:39:75: bc:12:4c:3a:d5:af:0d:9c:b5:2d:06:6a:39:87:18:a1:7a:e8: 49:b2:0a:39:5d:d7:69:82:3f:3b:eb:85:cd:ac:f3:ab:fa:47: 1b:d8:a1:4e:57:ab:9d:11:fb:ab:b3:97:16:cc:d3:7d:f9:ab: a2:74:05:34:f5:6c:28:3b:23:0d:e1:12:1f:d0:b4:e1:82:85: 35:fd:56:ce:df:40:36:ad:7f:fd:c5:65:2f:d4:d0:74:b0:d7: 9e:c2:63:9f:58:c5:01:ba:11:48:02:da:32:8f:66:f3:49:75: 5a:c4:a6:c3:54:cb:5c:fd:43:d2:b1:05:6e:a1:6b:c4:3f:42: 83:a2:63:57:65:36:c7:2a:a6:f3:aa:3c:92:97:b3:38:eb:8d: 02:e5:1b:a8:4d:7b:e3:1b:10:63:c1:75:2b:9f:79:c9:d9:75: 22:02:3c:c4:6f:00:63:ee:0b:71:9d:8b:d3:3f:b0:23:45:61: a2:f9:42:4e:c8:2d:28:58:81:6a:c4:6a:07:ff:b2:e1:46:eb: 6b:22:fc:0b:4d:d0:bb:b3:68:62:51:4e:9c:88:b6:9e:7e:5b: 17:24:48:2c:24:65:13:b1:aa:f0:f8:f3:af:0f:77:7b:27:0f: 4f:23:9f:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m2vTuedeRu447rFu7L6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk Y2VmZTcwHhcNMjYwMTI2MTQwMDQ4WhcNMjYwMTI3MTQwMDQ4WjAzMTEwLwYDVQQD Eyg4NmVhODg3NzMzNGVhNWVhZmI5M2EyYjFmYWQ3NDA5Y2RiM2MyMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGhtcLkEQuRba4h7SIybcj7gDSkX X4n9/zhAuhHxCEfks3X9qJ225//tPGMgXcF0BXA6wVUFlhZpoVaf2C0rA6+NlKZB 5mV7j9mW7/6RL9ZdplG3Jy9n5q5lr9GKIUr097Mopb+LzzIOQXoSLmFBz+TYaCyW 5NUKUfZ9gbpeZQoXc1JMjtP7E5BnMzH1Iu4Hm7xEzycQBcFSfPInWQ8UGFrVVBxs AyoFG6pg6YGeGVfGoECdMcdE2N5OJ+ejADLwjmnzKiXyhlGL48OfnDi/WYBwhFUJ 5AZe5ZFBOehh8aTClpONcYk5N8zIyHArg8CfwqekZp5tHroVihoGZ8aYpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbqiHczTqXq+5OisfrXQJzbPCKmMB8GA1UdIwQY MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuldoYBVI DM2/UnK2rId14Dl1vBJMOtWvDZy1LQZqOYcYoXroSbIKOV3XaYI/O+uFzazzq/pH G9ihTlernRH7q7OXFszTffmronQFNPVsKDsjDeESH9C04YKFNf1Wzt9ANq1//cVl L9TQdLDXnsJjn1jFAboRSALaMo9m80l1WsSmw1TLXP1D0rEFbqFrxD9Cg6JjV2U2 xyqm86o8kpezOOuNAuUbqE174xsQY8F1K595ydl1IgI8xG8AY+4LcZ2L0z+wI0Vh ovlCTsgtKFiBasRqB/+y4UbrayL8C03Qu7NoYlFOnIi2nn5bFyRILCRlE7Gq8Pjz rw93eycPTyOfxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:14 2026 by rpki-client