This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json) Hash identifier: WPJjApL71XUmWXpUhWxWMQMV89kBIn9+xnBc5PDKLjY= Subject key identifier: 20:3B:96:FE:FC:DF:F4:39:7D:73:79:65:D6:43:DC:C5:FF:81:37:8F Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Certificate serial: 019BFBAF224B2B6E0BEFF4079EC4AA6C6656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 19:01:57 +0000 Manifest this update: Mon 26 Jan 2026 19:01:57 +0000 Manifest next update: Tue 27 Jan 2026 19:01:57 +0000 Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: WFgkyuVewfedLZNiAIUnQb7GO1/qBwG9xpGwy7nsvEQ=) 2: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (hash: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:22:4b:2b:6e:0b:ef:f4:07:9e:c4:aa:6c:66:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Validity Not Before: Jan 26 19:01:57 2026 GMT Not After : Jan 27 19:01:57 2026 GMT Subject: CN=203b96fefcdff4397d737965d643dcc5ff81378f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:1a:7f:5b:bc:0d:c0:b2:18:a2:5a:6a:26: ff:08:63:ab:0c:a4:4c:a3:6b:78:00:7e:78:68:b7: a1:aa:50:4d:a5:e6:e5:73:6c:89:e8:97:a5:86:73: a2:28:0e:6d:67:96:b4:61:6c:2e:16:2f:2f:b3:57: eb:21:74:42:09:15:6b:cd:9b:a4:ae:10:31:c3:cd: 76:dd:18:b8:c2:ee:a4:08:9a:89:a5:fe:a3:82:77: 6a:6e:14:f5:90:f3:83:c3:e8:7d:24:f9:2f:29:df: 0c:4b:b1:10:d7:8a:c0:ea:28:d9:fc:23:b4:49:47: 92:26:21:ed:11:2a:36:8d:d9:c3:bd:06:d8:0b:4a: 63:4b:a4:8a:27:67:aa:59:2e:aa:93:e3:39:dc:fe: d2:bc:2d:34:ad:3f:19:d1:83:be:d9:5e:d3:e0:f0: 86:90:99:9b:2b:54:1a:4d:fd:78:96:0f:7c:94:38: 2d:46:a4:4b:2e:f0:72:3f:d7:73:ad:c7:b0:f3:e2: bf:26:37:de:20:49:29:a2:5b:fe:4e:d2:88:4a:09: 7c:88:f8:9d:02:7a:ba:c9:dd:2a:7b:31:93:76:7c: 74:48:a9:0f:f5:23:d3:80:f0:0a:91:6a:ad:19:b3: 40:ae:5b:57:36:03:94:64:4c:b1:59:b7:91:b5:1a: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:96:FE:FC:DF:F4:39:7D:73:79:65:D6:43:DC:C5:FF:81:37:8F X509v3 Authority Key Identifier: keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:c7:f1:0b:37:79:87:49:5c:33:c5:a8:a6:40:ab:25:82: 87:b6:64:c3:2f:4a:75:d4:65:7d:cc:d5:2d:3a:3a:3f:5c:44: ab:9b:68:35:b4:19:87:80:d1:1b:d3:6d:95:83:9c:14:8a:1b: 80:2d:7b:53:41:8c:d0:fe:bc:63:70:d0:c5:a6:3e:41:0d:d9: d3:87:09:a7:4d:c6:75:58:01:b7:27:1e:17:59:b2:c8:db:cf: eb:04:ad:51:26:14:34:08:1d:c6:43:69:cc:9b:7f:71:db:2f: b8:f1:aa:70:79:08:fe:93:6b:ae:00:12:87:f1:cd:c9:b2:bb: 91:33:44:10:6e:a7:da:19:26:98:7b:85:cf:c6:bf:fb:89:d7: a9:5b:5d:18:9d:fe:12:3a:49:63:0f:3a:af:bd:df:f1:56:e7: 45:f8:d3:9f:60:aa:7a:37:7d:bd:4b:d9:14:73:31:24:c1:80: c4:01:1c:c7:f2:d0:0d:ed:0a:94:b7:61:79:1d:8f:9b:12:69: ba:de:9c:a5:88:98:d0:49:a5:a1:3f:93:83:4d:06:3b:a4:c7: 1e:d1:5d:8c:15:bc:19:35:85:9b:48:8c:d7:64:2b:2e:bc:56: 4d:74:a8:ef:26:54:6e:95:dc:e7:5c:3e:83:d6:d7:f2:cf:6a: 67:4a:a6:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ryJLK24L7/QHnsSqbGZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl MGY2NDEwHhcNMjYwMTI2MTkwMTU3WhcNMjYwMTI3MTkwMTU3WjAzMTEwLwYDVQQD EygyMDNiOTZmZWZjZGZmNDM5N2Q3Mzc5NjVkNjQzZGNjNWZmODEzNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCoaf1u8DcCyGKJaaib/CGOrDKRM o2t4AH54aLehqlBNpeblc2yJ6JelhnOiKA5tZ5a0YWwuFi8vs1frIXRCCRVrzZuk rhAxw8123Ri4wu6kCJqJpf6jgndqbhT1kPODw+h9JPkvKd8MS7EQ14rA6ijZ/CO0 SUeSJiHtESo2jdnDvQbYC0pjS6SKJ2eqWS6qk+M53P7SvC00rT8Z0YO+2V7T4PCG kJmbK1QaTf14lg98lDgtRqRLLvByP9dzrcew8+K/JjfeIEkpolv+TtKISgl8iPid Anq6yd0qezGTdnx0SKkP9SPTgPAKkWqtGbNArltXNgOUZEyxWbeRtRq7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA7lv783/Q5fXN5ZdZD3MX/gTePMB8GA1UdIwQY MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt ZWY0NmRkZWVhYmY0LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0 LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBfH8Qs3 eYdJXDPFqKZAqyWCh7Zkwy9KddRlfczVLTo6P1xEq5toNbQZh4DRG9NtlYOcFIob gC17U0GM0P68Y3DQxaY+QQ3Z04cJp03GdVgBtyceF1myyNvP6wStUSYUNAgdxkNp zJt/cdsvuPGqcHkI/pNrrgASh/HNybK7kTNEEG6n2hkmmHuFz8a/+4nXqVtdGJ3+ EjpJYw86r73f8VbnRfjTn2Cqejd9vUvZFHMxJMGAxAEcx/LQDe0KlLdheR2PmxJp ut6cpYiY0EmloT+Tg00GO6THHtFdjBW8GTWFm0iM12QrLrxWTXSo7yZUbpXc51w+ g9bX8s9qZ0qm2w== -----END CERTIFICATE-----Generated at Tue Jan 27 04:17:03 2026 by rpki-client