This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft File: cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json) Hash identifier: A3R15DKwUU93DRW+VexMcBkprts91Oa60zw/HHFdyT8= Subject key identifier: CD:4A:12:D2:A5:9E:F3:A8:5A:F7:61:BC:BC:86:AD:B4:0D:D4:84:CD Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b Certificate serial: 019BFB0A250AD467FF3DC4E4CECAA6E67925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft Manifest number: 0EE7 Signing time: Mon 26 Jan 2026 16:01:44 +0000 Manifest this update: Mon 26 Jan 2026 16:01:44 +0000 Manifest next update: Tue 27 Jan 2026 16:01:44 +0000 Files and hashes: 1: JjXMuecgBzxuqyS3slTwiSnr5mE.roa (hash: wyze/y0gn9suGrltw+Ca8tC8dvYUzoHSpwIJPVVFCho=) 2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: wENiSEhrcF2t50lBHgddm7X/+JxWuNKOj7FRosjb0ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:25:0a:d4:67:ff:3d:c4:e4:ce:ca:a6:e6:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b Validity Not Before: Jan 26 16:01:44 2026 GMT Not After : Jan 27 16:01:44 2026 GMT Subject: CN=cd4a12d2a59ef3a85af761bcbc86adb40dd484cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:c1:46:bc:eb:0b:74:90:94:7c:d5:45:ee: 1a:15:05:eb:e1:c3:ba:ac:eb:36:d2:bf:0f:8d:3b: 60:19:1a:76:e0:cf:75:0d:1f:a6:5b:a4:de:70:bb: 94:a9:34:a3:da:97:00:a5:45:65:55:b6:15:74:ce: 18:e4:b5:e7:60:48:21:47:96:fe:84:96:41:d2:0e: d7:0f:06:b5:11:39:a5:c0:31:4b:58:d7:09:80:dc: 22:9e:db:32:76:43:a8:95:12:92:e5:85:44:e4:46: 64:a8:68:b3:43:93:13:a2:07:0e:db:12:d8:dc:16: bb:fe:30:91:9e:b6:a0:d5:d2:cf:f9:d0:e3:fe:1e: 98:f0:e2:49:f6:bb:8f:90:3e:ac:74:08:2b:64:48: b9:81:1d:ab:64:13:f9:11:4b:fe:5d:68:1d:34:f0: ad:59:a3:14:da:fa:7c:cc:b6:95:f4:b6:23:76:09: 58:88:8e:a3:3c:e3:90:d4:8d:35:d1:d8:e2:d9:e3: 55:40:93:7f:14:d2:3d:b3:f0:77:fe:96:94:0e:76: 72:9f:60:10:0b:da:93:78:ad:91:66:da:8c:37:2e: 1c:08:45:aa:f2:26:81:e5:9d:bb:69:77:93:43:29: f5:41:e6:3b:42:41:3a:bf:89:01:c0:a1:cd:9b:0c: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4A:12:D2:A5:9E:F3:A8:5A:F7:61:BC:BC:86:AD:B4:0D:D4:84:CD X509v3 Authority Key Identifier: keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5f:37:32:d7:30:cc:ce:df:9a:8a:0e:2f:81:e2:5e:af:8e: 2c:a7:6f:b8:f0:f5:c2:f3:05:cf:5f:af:32:55:2c:7a:25:d4: 1b:07:62:10:96:9d:4d:f4:63:9b:f6:17:58:32:31:5a:e8:2e: 9c:f7:1b:b2:96:c9:f5:ce:d4:6d:94:e3:ac:4a:02:9e:77:a0: bb:59:f7:48:57:46:0c:d6:ae:97:e6:ba:f9:4e:97:5b:63:81: 2a:24:78:14:1e:4e:c8:4e:21:c1:9b:8e:86:b9:26:b9:26:73: 25:e6:ad:4a:f5:42:09:e0:66:1a:75:bb:e4:97:62:31:1e:ce: 47:f9:b5:ff:cd:8d:e5:2f:b2:06:a1:46:00:0e:1e:d3:b6:b9: 68:fd:86:bf:2e:e5:89:44:2c:27:aa:8f:c3:43:62:97:05:3a: f8:bc:d8:eb:db:34:5a:c0:14:d5:b3:2b:7f:18:28:53:d2:2f: ad:65:4d:01:52:43:35:6b:1f:61:e2:3f:0a:2f:c7:aa:2d:8c: 9c:f5:c3:56:bc:77:63:d2:0b:e6:e7:09:e6:7b:bc:ee:04:c8: 61:f7:c5:f6:99:68:c3:dc:56:38:61:93:1c:72:e4:31:25:52: 0f:aa:32:cd:b6:c6:c7:47:78:ab:b6:2b:d4:d7:a4:ee:d3:94: 31:aa:58:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CiUK1Gf/PcTkzsqm5nklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2FmOGI3OTBhYzA5MjNiMjQzMDdlZTAwOGYyNjFkMTBk OTU2MGIwHhcNMjYwMTI2MTYwMTQ0WhcNMjYwMTI3MTYwMTQ0WjAzMTEwLwYDVQQD EyhjZDRhMTJkMmE1OWVmM2E4NWFmNzYxYmNiYzg2YWRiNDBkZDQ4NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzBRrzrC3SQlHzVRe4aFQXr4cO6 rOs20r8PjTtgGRp24M91DR+mW6TecLuUqTSj2pcApUVlVbYVdM4Y5LXnYEghR5b+ hJZB0g7XDwa1ETmlwDFLWNcJgNwintsydkOolRKS5YVE5EZkqGizQ5MTogcO2xLY 3Ba7/jCRnrag1dLP+dDj/h6Y8OJJ9ruPkD6sdAgrZEi5gR2rZBP5EUv+XWgdNPCt WaMU2vp8zLaV9LYjdglYiI6jPOOQ1I010dji2eNVQJN/FNI9s/B3/paUDnZyn2AQ C9qTeK2RZtqMNy4cCEWq8iaB5Z27aXeTQyn1QeY7QkE6v4kBwKHNmwycHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1KEtKlnvOoWvdhvLyGrbQN1ITNMB8GA1UdIwQY MBaAFHE6+LeQrAkjskMH7gCPJh0Q2VYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2Mt NDc0MTQ3NjZiNmJhLzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2MtNDc0MTQ3NjZiNmJh LzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANF83Mtcw zM7fmooOL4HiXq+OLKdvuPD1wvMFz1+vMlUseiXUGwdiEJadTfRjm/YXWDIxWugu nPcbspbJ9c7UbZTjrEoCnnegu1n3SFdGDNaul+a6+U6XW2OBKiR4FB5OyE4hwZuO hrkmuSZzJeatSvVCCeBmGnW75JdiMR7OR/m1/82N5S+yBqFGAA4e07a5aP2Gvy7l iUQsJ6qPw0NilwU6+LzY69s0WsAU1bMrfxgoU9IvrWVNAVJDNWsfYeI/Ci/Hqi2M nPXDVrx3Y9IL5ucJ5nu87gTIYffF9plow9xWOGGTHHLkMSVSD6oyzbbGx0d4q7Yr 1Nek7tOUMapYzA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:49 2026 by rpki-client