This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json) Hash identifier: m3ug/KyPPqNXtgz5Z+niFyIzV7kXaWgzPfKCnEkDBlw= Subject key identifier: 65:E1:29:AE:93:AD:C7:EA:59:9F:0C:D8:50:C9:7B:3F:CF:EE:2D:49 Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Certificate serial: 019C1F165D6B3FF33036AA4571B5BC7992D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 16:01:25 +0000 Manifest this update: Mon 02 Feb 2026 16:01:25 +0000 Manifest next update: Tue 03 Feb 2026 16:01:25 +0000 Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: SGZ7Njuio2IFoPt2jQLXawzxpt6Vly9Efm8Nb0xUw8M=) 2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:16:5d:6b:3f:f3:30:36:aa:45:71:b5:bc:79:92:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Validity Not Before: Feb 2 16:01:25 2026 GMT Not After : Feb 3 16:01:25 2026 GMT Subject: CN=65e129ae93adc7ea599f0cd850c97b3fcfee2d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:ea:08:88:34:e7:13:f4:88:1e:66:17:e1: 61:b6:32:1f:36:53:6f:80:b3:27:6b:43:39:d7:07: 0d:d8:5d:6d:ce:d6:50:80:49:2c:93:af:24:bb:d4: a5:23:c7:fd:33:2d:65:af:86:43:f7:f2:94:7d:4c: 05:e6:de:59:98:4a:c7:9b:95:a1:5f:e9:f9:9f:6d: 20:97:88:e0:df:f5:7a:4a:47:94:3a:14:97:81:a8: 1b:a1:5b:e4:81:d0:af:a6:86:e9:90:ec:74:0e:33: 54:8f:ce:0d:fb:07:68:2f:5c:15:78:23:68:1f:36: a2:c3:bc:38:82:53:0d:bd:4e:cc:2a:ce:38:ed:36: 53:a3:87:3a:37:cf:f6:fb:92:85:03:74:23:ad:a6: 6a:94:0e:75:73:c2:ab:2b:a9:1c:0a:7c:9d:65:bd: 09:df:b8:93:8f:26:a1:b3:cc:1a:22:fe:09:c7:f4: 25:73:a4:90:94:7b:f5:d0:61:d4:06:2b:51:28:71: c4:f2:61:79:22:86:88:57:06:8a:dc:5c:77:50:81: aa:02:24:47:e3:44:4c:fa:1c:92:e6:24:b1:e6:fb: 49:d9:e4:c5:f4:e9:52:7f:61:c6:ea:7e:12:18:89: 76:4b:ad:5b:39:75:aa:91:29:22:c6:71:8a:e7:c0: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:29:AE:93:AD:C7:EA:59:9F:0C:D8:50:C9:7B:3F:CF:EE:2D:49 X509v3 Authority Key Identifier: keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:34:db:14:75:4d:7b:e7:9e:54:6c:8d:53:cf:00:11:22: bc:0c:f1:7d:84:ee:14:80:ca:13:ba:f7:e9:e8:00:ba:46:67: 61:d6:2d:b5:52:c4:c3:4b:66:90:b7:3b:b9:10:17:6f:c1:43: f8:87:e2:8f:b3:d7:b8:d8:37:dc:74:79:6d:55:a4:bf:d0:70: 22:36:c4:8c:44:01:c7:ff:1f:23:94:cb:8e:5d:0f:fe:70:e7: 45:39:0a:1e:da:54:78:3b:11:44:85:09:c1:e9:9c:94:46:a5: 29:ac:10:41:58:d2:70:05:d8:56:15:90:55:87:6d:2f:70:fc: 6a:f5:70:81:f0:09:15:37:76:c1:e6:d9:3a:d5:7a:e1:d2:91: 0d:a5:25:05:85:73:d1:b6:77:70:0f:78:07:d9:a6:2b:af:4d: 2e:95:78:d7:81:f0:c1:b6:07:23:bf:5e:d6:75:dd:b6:58:5a: e2:69:77:a8:e1:5c:28:a4:56:1f:ca:2d:d4:04:e0:65:b9:a4: 3f:76:d2:c7:40:1d:53:48:fc:29:63:1a:1b:47:f6:4b:66:ed: 29:6d:0f:57:57:ca:8d:12:9b:0c:65:01:7c:8b:5f:ed:2b:b0: ab:29:62:90:86:d3:bb:ae:04:d1:b6:b8:59:12:4a:c0:64:23: 23:cc:cf:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfFl1rP/MwNqpFcbW8eZLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0 NDVmYmUwHhcNMjYwMjAyMTYwMTI1WhcNMjYwMjAzMTYwMTI1WjAzMTEwLwYDVQQD Eyg2NWUxMjlhZTkzYWRjN2VhNTk5ZjBjZDg1MGM5N2IzZmNmZWUyZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwnqCIg05xP0iB5mF+FhtjIfNlNv gLMna0M51wcN2F1tztZQgEksk68ku9SlI8f9My1lr4ZD9/KUfUwF5t5ZmErHm5Wh X+n5n20gl4jg3/V6SkeUOhSXgagboVvkgdCvpobpkOx0DjNUj84N+wdoL1wVeCNo Hzaiw7w4glMNvU7MKs447TZTo4c6N8/2+5KFA3QjraZqlA51c8KrK6kcCnydZb0J 37iTjyahs8waIv4Jx/Qlc6SQlHv10GHUBitRKHHE8mF5IoaIVwaK3Fx3UIGqAiRH 40RM+hyS5iSx5vtJ2eTF9OlSf2HG6n4SGIl2S61bOXWqkSkixnGK58DkDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXhKa6TrcfqWZ8M2FDJez/P7i1JMB8GA1UdIwQY MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5 LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVs02xR1 TXvnnlRsjVPPABEivAzxfYTuFIDKE7r36egAukZnYdYttVLEw0tmkLc7uRAXb8FD +Ifij7PXuNg33HR5bVWkv9BwIjbEjEQBx/8fI5TLjl0P/nDnRTkKHtpUeDsRRIUJ wemclEalKawQQVjScAXYVhWQVYdtL3D8avVwgfAJFTd2webZOtV64dKRDaUlBYVz 0bZ3cA94B9mmK69NLpV414HwwbYHI79e1nXdtlha4ml3qOFcKKRWH8ot1ATgZbmk P3bSx0AdU0j8KWMaG0f2S2btKW0PV1fKjRKbDGUBfItf7SuwqylikIbTu64E0ba4 WRJKwGQjI8zPxw== -----END CERTIFICATE-----Generated at Mon Feb 2 21:03:43 2026 by rpki-client