This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft File: CaaG43DW0GCBGe6wBsiq2qsHjSI.mft (raw, json) Hash identifier: 24CNss01yinGRyA1ZcOpkWUhB7Svx3VZTQYmyXKVJcM= Subject key identifier: F1:26:8A:29:2F:D8:21:17:37:93:80:F3:EA:A0:68:10:D7:44:7A:92 Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22 Certificate serial: 019BCE9E1FB15D8F7AC71C21043CC3BF9ADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft Manifest number: 37 Signing time: Sun 18 Jan 2026 01:00:27 +0000 Manifest this update: Sun 18 Jan 2026 01:00:27 +0000 Manifest next update: Mon 19 Jan 2026 01:00:27 +0000 Files and hashes: 1: 7uS7FJeJqfkBOKs7jAgs7VUqjPQ.roa (hash: AUrVVqZgFBpQPO1HYsXG2X9cKcmkyjTr27P1yB02VUc=) 2: CaaG43DW0GCBGe6wBsiq2qsHjSI.crl (hash: gBHX1x0veBNfRxOXp/70oZ9Mrn8VGHA49LwABgRXzVI=) 3: hkFUUvXkJB0QAxGYGwaJ2E3Lg-4.roa (hash: V5lSuLwVqv7sVkEIcuO0QRT4zQFnDDCFROXnnfbR9tA=) 4: mfFzFr77B7li1se7tJF6OJSoedY.roa (hash: qjnquC9Z4QaN1VXTnS5n6C6aJQ2XKB8MHhH5a5KucWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:9e:1f:b1:5d:8f:7a:c7:1c:21:04:3c:c3:bf:9a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22 Validity Not Before: Jan 18 01:00:27 2026 GMT Not After : Jan 19 01:00:27 2026 GMT Subject: CN=f1268a292fd82117379380f3eaa06810d7447a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:df:20:7c:6f:15:1d:07:4c:c5:44:ab:55: 08:fd:25:8b:1f:58:50:ef:1b:bc:dc:29:9f:cd:cd: ec:b5:82:30:ef:9f:63:6e:c2:93:bc:0d:78:d9:e2: 8b:44:99:36:96:9d:34:f4:6f:09:05:05:37:71:f3: 5d:d8:2d:f4:07:3c:ff:78:4e:95:74:16:82:97:01: 5e:1d:bf:51:f8:7c:b2:a7:47:4c:9b:c2:cf:ac:c4: b3:87:e8:0f:e4:c7:1c:b6:7c:ba:30:a0:17:15:ec: e3:67:9b:cc:03:83:ad:35:8a:f6:5e:8b:a0:f4:bf: 5e:05:5f:b3:30:60:fe:c2:12:48:8d:a7:9f:79:a7: dd:80:35:2c:c9:62:9a:90:8f:cc:10:40:d0:f7:53: 23:30:0a:d2:c2:88:d8:a2:1b:f8:8f:c2:56:c3:cf: 07:0e:cf:14:ca:01:ab:b8:57:3c:0f:8e:e3:48:52: 3d:98:4e:f6:42:d3:32:a8:26:a8:d7:49:9f:3d:47: 52:da:6f:92:13:e6:73:5d:5f:d2:9a:49:21:72:a7: 66:c7:9e:9c:b6:4f:0f:90:0c:24:75:6c:42:fe:b3: f8:a3:da:1d:ff:a9:15:9a:c2:d8:9d:4a:5e:db:4c: 4e:ac:b6:1c:d1:3a:5f:08:33:f4:5f:67:70:53:23: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:8A:29:2F:D8:21:17:37:93:80:F3:EA:A0:68:10:D7:44:7A:92 X509v3 Authority Key Identifier: keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:76:d6:16:a3:f3:7d:a6:4e:e5:5e:3e:17:0b:87:68:2d:8d: 8f:8a:94:10:6b:25:1b:de:65:77:af:44:9b:e9:70:69:d5:55: 52:ea:13:49:d4:c9:36:b9:b3:7d:a1:0c:fe:f2:5f:fb:1b:9c: 8e:ba:00:2d:f1:9d:11:e6:71:b5:90:02:6f:48:14:a6:09:51: a3:c8:79:03:0e:36:73:a9:b6:58:de:e1:9a:ca:a9:c1:ae:6b: f2:1c:30:9d:c1:99:f1:53:07:a8:53:ec:fc:49:aa:41:62:55: 07:9f:07:b7:6f:f4:a2:97:d9:3b:d8:f9:76:54:1c:63:fb:fa: f4:0b:4a:56:01:54:b3:0e:c2:20:1f:ed:32:84:ad:e3:60:5b: a8:4b:4a:22:03:f0:37:ff:21:ce:1b:2f:06:22:c7:8c:98:2d: 89:09:c7:28:14:c0:5e:b0:ab:fd:c1:85:1d:90:4a:14:9a:1c: 0a:d6:71:03:d5:59:da:f1:bb:f5:34:0f:e4:f2:6b:ea:62:7d: de:0d:3d:f8:48:56:ee:eb:f4:0f:5d:91:52:23:02:25:24:4f: f8:78:bf:a0:a5:1e:44:05:78:62:ad:16:bd:46:f3:ca:cf:d3: 39:3a:53:39:21:f6:ea:8a:b4:bf:3f:61:e3:8e:91:0b:86:16: 4b:ee:60:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvOnh+xXY96xxwhBDzDv5raMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTY4NmUzNzBkNmQwNjA4MTE5ZWViMDA2YzhhYWRhYWIw NzhkMjIwHhcNMjYwMTE4MDEwMDI3WhcNMjYwMTE5MDEwMDI3WjAzMTEwLwYDVQQD EyhmMTI2OGEyOTJmZDgyMTE3Mzc5MzgwZjNlYWEwNjgxMGQ3NDQ3YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfbfIHxvFR0HTMVEq1UI/SWLH1hQ 7xu83Cmfzc3stYIw759jbsKTvA142eKLRJk2lp009G8JBQU3cfNd2C30Bzz/eE6V dBaClwFeHb9R+Hyyp0dMm8LPrMSzh+gP5Mcctny6MKAXFezjZ5vMA4OtNYr2Xoug 9L9eBV+zMGD+whJIjaefeafdgDUsyWKakI/MEEDQ91MjMArSwojYohv4j8JWw88H Ds8UygGruFc8D47jSFI9mE72QtMyqCao10mfPUdS2m+SE+ZzXV/Smkkhcqdmx56c tk8PkAwkdWxC/rP4o9od/6kVmsLYnUpe20xOrLYc0TpfCDP0X2dwUyM74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEmiikv2CEXN5OA8+qgaBDXRHqSMB8GA1UdIwQY MBaAFAmmhuNw1tBggRnusAbIqtqrB40iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQt ODE3NjhjNjBlZTA4LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9kNDI5YjktMzg1ZS00MzBmLWIyYzQtODE3NjhjNjBlZTA4 LzEvQ2FhRzQzRFcwR0NCR2U2d0JzaXEycXNIalNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHbWFqPz faZO5V4+FwuHaC2Nj4qUEGslG95ld69Em+lwadVVUuoTSdTJNrmzfaEM/vJf+xuc jroALfGdEeZxtZACb0gUpglRo8h5Aw42c6m2WN7hmsqpwa5r8hwwncGZ8VMHqFPs /EmqQWJVB58Ht2/0opfZO9j5dlQcY/v69AtKVgFUsw7CIB/tMoSt42BbqEtKIgPw N/8hzhsvBiLHjJgtiQnHKBTAXrCr/cGFHZBKFJocCtZxA9VZ2vG79TQP5PJr6mJ9 3g09+EhW7uv0D12RUiMCJSRP+Hi/oKUeRAV4Yq0WvUbzys/TOTpTOSH26oq0vz9h 446RC4YWS+5gWg== -----END CERTIFICATE-----Generated at Sun Jan 18 09:48:39 2026 by rpki-client