This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json) Hash identifier: fej+IH5mywp6MTFRWg4go5oT45/uKKnCdHYe8sACepQ= Subject key identifier: 05:3A:0E:AB:D6:4A:50:08:A6:03:C1:CC:0C:1A:57:CB:59:BB:F6:4C Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90 Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90 Certificate serial: 019BFBAEC293BA6DDFAD5ED2B5B5446305DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 19:01:32 +0000 Manifest this update: Mon 26 Jan 2026 19:01:32 +0000 Manifest next update: Tue 27 Jan 2026 19:01:32 +0000 Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: M/MoqaJykOuvfzJibgXGYFMLkWmZLLvxPgPAF0EdhiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:c2:93:ba:6d:df:ad:5e:d2:b5:b5:44:63:05:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90 Validity Not Before: Jan 26 19:01:32 2026 GMT Not After : Jan 27 19:01:32 2026 GMT Subject: CN=053a0eabd64a5008a603c1cc0c1a57cb59bbf64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:9f:cd:aa:5d:c0:30:d4:53:e2:a6:ad:20: 18:0e:e4:c7:e8:7a:7d:50:1e:b3:32:78:7d:09:ff: 28:81:5e:a4:79:3e:fc:0a:fb:46:45:e6:d6:49:0f: 05:57:42:40:90:30:62:ec:f5:4f:c0:19:a8:f8:c7: f8:56:5a:50:62:f1:b0:9e:0a:72:be:ea:8b:1d:3f: ba:f9:83:69:9e:1e:11:b7:27:44:39:ec:62:95:8a: a3:23:5f:ac:42:9c:4c:ec:65:20:9d:c0:fb:19:76: 89:ab:28:49:39:0b:34:9c:6f:e4:f5:30:d9:c8:9e: 84:39:c8:dc:ce:d9:ba:9d:ce:59:93:3f:3f:a8:59: c1:e8:96:51:81:6a:54:66:bc:97:0e:28:9a:9a:cb: 93:40:68:ee:f8:ad:f9:e2:9d:05:a8:33:76:42:05: 64:8f:eb:e9:da:79:e7:5f:b6:6a:49:cd:9e:cf:4b: 56:b7:5a:e9:db:6e:c0:63:07:81:da:ed:f9:e5:ad: d2:ae:7d:af:5e:f2:e6:f4:33:dc:16:4d:a0:10:16: 86:fd:b3:f1:ce:14:86:99:5a:05:a1:44:3e:66:a4: 43:9f:df:11:af:9a:75:1c:6d:8c:85:c7:03:20:64: 4d:3b:11:7f:99:34:9d:40:74:87:e6:92:6e:10:d1: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3A:0E:AB:D6:4A:50:08:A6:03:C1:CC:0C:1A:57:CB:59:BB:F6:4C X509v3 Authority Key Identifier: keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1b:43:e6:94:23:45:88:b0:54:65:17:66:4e:86:2c:88:cd: a5:82:76:b4:d1:9f:36:9c:8d:65:a1:cb:87:0b:26:8c:3a:60: 81:2c:44:18:44:bf:d4:8e:7b:f7:8f:b7:04:88:74:ce:4d:ff: 53:2d:30:97:fc:80:c5:9f:a0:2b:53:a1:af:52:18:dc:8f:a1: f6:5e:a5:14:76:58:60:6f:ac:73:c2:28:a3:73:d5:15:25:bd: 15:2d:4f:97:0e:2a:df:f6:28:0b:66:14:11:47:e9:7d:20:08: 6a:87:72:91:a3:cd:42:5e:47:d1:03:c9:b8:56:4d:16:3c:8f: 60:5e:25:98:01:ef:71:95:9a:f1:2f:77:ea:43:20:b8:4a:bf: dd:40:f4:83:b7:dc:f8:98:b7:27:1f:cc:15:59:02:a8:b1:2b: f1:64:40:c1:d0:54:c9:6f:53:32:47:55:2c:16:1d:a0:62:5c: ff:d0:fa:87:e6:fc:f0:de:b3:91:09:5a:04:83:77:2c:21:ee: 95:fb:15:f6:70:65:e8:04:dd:37:48:a9:91:d0:9c:0f:2a:e2: 02:57:d6:50:33:4d:be:b3:10:d3:d4:15:56:53:dc:36:59:85: a8:1c:f4:66:46:13:72:c5:0c:88:7f:85:bf:e0:a5:25:5d:88: c0:2f:6a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rsKTum3frV7StbVEYwXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODJiZDg4YmJhMWExN2QyYzhhZWY2MWRlYzFkYWM2NjE1 ZWVmOTAwHhcNMjYwMTI2MTkwMTMyWhcNMjYwMTI3MTkwMTMyWjAzMTEwLwYDVQQD EygwNTNhMGVhYmQ2NGE1MDA4YTYwM2MxY2MwYzFhNTdjYjU5YmJmNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CfzapdwDDUU+KmrSAYDuTH6Hp9 UB6zMnh9Cf8ogV6keT78CvtGRebWSQ8FV0JAkDBi7PVPwBmo+Mf4VlpQYvGwngpy vuqLHT+6+YNpnh4RtydEOexilYqjI1+sQpxM7GUgncD7GXaJqyhJOQs0nG/k9TDZ yJ6EOcjcztm6nc5Zkz8/qFnB6JZRgWpUZryXDiiamsuTQGju+K354p0FqDN2QgVk j+vp2nnnX7ZqSc2ez0tWt1rp227AYweB2u355a3Srn2vXvLm9DPcFk2gEBaG/bPx zhSGmVoFoUQ+ZqRDn98Rr5p1HG2MhccDIGRNOxF/mTSdQHSH5pJuENEngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU6DqvWSlAIpgPBzAwaV8tZu/ZMMB8GA1UdIwQY MBaAFAuCvYi7oaF9LIrvYd7B2sZhXu+QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgt MTU4ODFjN2RmMGI4LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgtMTU4ODFjN2RmMGI4 LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhtD5pQj RYiwVGUXZk6GLIjNpYJ2tNGfNpyNZaHLhwsmjDpggSxEGES/1I5794+3BIh0zk3/ Uy0wl/yAxZ+gK1Ohr1IY3I+h9l6lFHZYYG+sc8Ioo3PVFSW9FS1Plw4q3/YoC2YU EUfpfSAIaodykaPNQl5H0QPJuFZNFjyPYF4lmAHvcZWa8S936kMguEq/3UD0g7fc +Ji3Jx/MFVkCqLEr8WRAwdBUyW9TMkdVLBYdoGJc/9D6h+b88N6zkQlaBIN3LCHu lfsV9nBl6ATdN0ipkdCcDyriAlfWUDNNvrMQ09QVVlPcNlmFqBz0ZkYTcsUMiH+F v+ClJV2IwC9qng== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:18 2026 by rpki-client