This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json) Hash identifier: 5b6iAkg6CkWQeGzB8Zd4Fs/FkoCfdLXdq/i6YqMQ1eU= Subject key identifier: BE:D8:FA:B7:86:70:61:40:FB:4E:78:C1:6D:B7:BF:F4:74:D7:BE:7A Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Certificate serial: 019BFA650163A9E7FC323DCA0E095EB732E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 13:01:22 +0000 Manifest this update: Mon 26 Jan 2026 13:01:22 +0000 Manifest next update: Tue 27 Jan 2026 13:01:22 +0000 Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=) 2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=) 3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: bzzJgpqUllwg6/Ede3Rf13f46caM1mu+FP/cAH2CQhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:65:01:63:a9:e7:fc:32:3d:ca:0e:09:5e:b7:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Validity Not Before: Jan 26 13:01:22 2026 GMT Not After : Jan 27 13:01:22 2026 GMT Subject: CN=bed8fab786706140fb4e78c16db7bff474d7be7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:86:7b:cc:2a:ac:1a:df:63:23:02:6d:19: df:ac:9b:d3:da:71:7e:8c:94:27:02:09:30:b1:42: 02:b3:d6:83:76:a6:b6:0f:85:57:30:e0:7c:e1:f0: 26:36:cf:28:15:ac:1c:54:21:51:05:3d:e6:64:20: 9d:07:d8:b9:f1:76:a5:1b:27:90:85:f4:67:dd:b4: d3:fd:37:d2:5f:21:ab:a4:da:de:05:32:35:d6:ea: a2:2e:6e:56:ad:8f:48:2e:21:08:55:93:02:c9:be: 5b:1f:b7:85:c1:52:af:06:3c:63:1e:c4:5d:45:57: 5c:40:15:8b:89:8d:6f:05:c6:29:65:cc:c5:8f:79: f6:4b:25:8d:d1:e2:11:00:c4:9a:3a:47:4d:f0:45: 17:89:4c:c5:77:45:14:1b:54:a7:89:52:d1:32:54: 59:1e:a5:4d:4b:bd:68:f0:b4:34:1a:a2:89:e0:c3: 67:0c:54:cf:77:1c:7e:34:27:aa:3e:87:c2:eb:cc: 94:6a:a7:89:26:d3:60:a5:50:e9:ef:97:54:5b:d4: fd:b0:5a:7d:1a:61:96:81:bb:1b:d5:45:cd:d3:f9: e9:69:cf:3f:73:ee:2a:04:ec:f2:1e:b4:96:bc:ea: c4:a1:2e:eb:9a:c2:e3:45:97:61:c6:83:de:a6:68: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D8:FA:B7:86:70:61:40:FB:4E:78:C1:6D:B7:BF:F4:74:D7:BE:7A X509v3 Authority Key Identifier: keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:2f:fd:d2:c3:2d:a2:43:ae:0e:c4:f1:e3:bb:5e:51:9e:b8: ad:28:34:ba:ed:3c:a5:0c:4f:a9:7f:e8:c4:c8:da:32:17:a5: 10:2e:58:8c:81:3b:62:d3:b4:13:39:f9:87:62:0f:6c:74:e6: 45:f6:7a:c9:03:79:33:f8:69:c2:55:a4:04:58:c7:5d:eb:57: 1e:5b:5e:6d:49:77:ad:19:29:53:c6:6f:db:89:50:4f:5d:ff: af:ca:b5:1e:38:1c:66:71:66:1b:d1:b3:7b:22:d7:63:45:a3: b9:b0:0b:41:e2:f2:e9:10:ca:ae:fc:72:28:96:4b:32:2e:d9: 5d:c3:02:d3:22:e9:09:c0:ce:a1:ba:14:ca:2a:a1:80:1b:1c: 04:16:f7:95:73:10:78:98:2f:24:49:75:f9:7a:3b:ee:e7:f7: 39:92:39:31:aa:b0:9c:2f:50:9f:09:bd:78:07:e2:fb:d1:d7: 96:5e:26:b3:0e:c6:2d:4b:77:8c:ea:a8:a4:45:b0:7b:68:63: a5:19:66:86:e5:d4:d3:e5:18:39:d6:97:19:2f:fc:72:19:76: c9:10:28:29:11:b9:93:ea:39:e1:2c:0e:c1:c6:4c:ba:0a:10: f6:5d:ad:61:19:9b:9b:1e:da:64:57:96:94:00:f1:59:da:8b: c3:00:09:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZQFjqef8Mj3KDgletzLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3 YTJhMDEwHhcNMjYwMTI2MTMwMTIyWhcNMjYwMTI3MTMwMTIyWjAzMTEwLwYDVQQD EyhiZWQ4ZmFiNzg2NzA2MTQwZmI0ZTc4YzE2ZGI3YmZmNDc0ZDdiZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1amGe8wqrBrfYyMCbRnfrJvT2nF+ jJQnAgkwsUICs9aDdqa2D4VXMOB84fAmNs8oFawcVCFRBT3mZCCdB9i58XalGyeQ hfRn3bTT/TfSXyGrpNreBTI11uqiLm5WrY9ILiEIVZMCyb5bH7eFwVKvBjxjHsRd RVdcQBWLiY1vBcYpZczFj3n2SyWN0eIRAMSaOkdN8EUXiUzFd0UUG1SniVLRMlRZ HqVNS71o8LQ0GqKJ4MNnDFTPdxx+NCeqPofC68yUaqeJJtNgpVDp75dUW9T9sFp9 GmGWgbsb1UXN0/npac8/c+4qBOzyHrSWvOrEoS7rmsLjRZdhxoPepmj0TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Y+reGcGFA+054wW23v/R01756MB8GA1UdIwQY MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3 LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3S/90sMt okOuDsTx47teUZ64rSg0uu08pQxPqX/oxMjaMhelEC5YjIE7YtO0Ezn5h2IPbHTm RfZ6yQN5M/hpwlWkBFjHXetXHltebUl3rRkpU8Zv24lQT13/r8q1HjgcZnFmG9Gz eyLXY0WjubALQeLy6RDKrvxyKJZLMi7ZXcMC0yLpCcDOoboUyiqhgBscBBb3lXMQ eJgvJEl1+Xo77uf3OZI5MaqwnC9Qnwm9eAfi+9HXll4msw7GLUt3jOqopEWwe2hj pRlmhuXU0+UYOdaXGS/8chl2yRAoKRG5k+o54SwOwcZMugoQ9l2tYRmbmx7aZFeW lADxWdqLwwAJLA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:59:32 2026 by rpki-client