This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json) Hash identifier: QnbagQdEI49VBmPTA536LHidVSJaCAhpWyEAbZGDfMs= Subject key identifier: 6B:F6:A9:C7:60:6C:D2:51:0B:24:D8:82:3C:31:A2:EA:B2:65:8B:CA Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec Certificate serial: 019BFD2F17E514801C3B891C3AC5056EF3BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 02:01:20 +0000 Manifest this update: Tue 27 Jan 2026 02:01:20 +0000 Manifest next update: Wed 28 Jan 2026 02:01:20 +0000 Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=) 2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: GEMcfAM3xHDARlQt0LhF9Wb727wIHE3wLCcujq1Cnaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2f:17:e5:14:80:1c:3b:89:1c:3a:c5:05:6e:f3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec Validity Not Before: Jan 27 02:01:20 2026 GMT Not After : Jan 28 02:01:20 2026 GMT Subject: CN=6bf6a9c7606cd2510b24d8823c31a2eab2658bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:5b:db:48:4c:18:b5:57:90:0e:df:c7:2c: 3d:85:ad:db:83:5f:66:75:ae:f2:76:57:2d:8e:e7: 80:cb:bf:b0:d9:31:6f:c8:1a:cf:c1:d4:b4:de:8b: ad:f1:4e:ac:4d:ff:bb:9b:50:c9:2c:a8:4e:7d:b4: a4:09:8e:c7:ea:26:73:1c:2c:c9:1f:ff:ee:0c:77: 7b:9e:bb:8e:64:28:d8:07:41:c1:ec:38:0a:3f:65: 84:6f:19:e1:ef:85:e4:f9:86:70:b8:95:0b:d0:d4: a3:db:b8:b9:ef:6f:8f:fb:72:4a:ae:89:a6:5d:ad: 41:f2:03:02:b1:00:36:62:40:3f:03:fc:54:be:af: 3e:d9:42:38:dc:3d:34:0c:3d:e5:ad:d1:65:74:c8: 0e:1c:48:95:de:44:e0:bb:66:51:a6:9c:18:d2:48: 31:68:87:8b:a4:8d:b5:bb:24:60:92:26:0f:5e:26: 0d:fd:36:8f:18:7d:37:fc:c1:90:12:45:6d:6b:fd: 9f:1d:d5:fb:c8:f4:b1:4a:ab:1b:79:54:ff:34:c3: 7a:74:d0:a1:b7:24:44:c9:d5:a2:32:f6:4c:a4:87: 9e:66:4f:4d:a3:bf:07:cf:ad:1f:4d:89:66:16:fc: 80:05:a5:85:2f:5c:1d:06:86:8a:4d:c6:a5:63:3d: 30:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:A9:C7:60:6C:D2:51:0B:24:D8:82:3C:31:A2:EA:B2:65:8B:CA X509v3 Authority Key Identifier: keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:97:0f:cf:3e:49:a9:62:e5:b5:56:d8:66:98:62:28:49:57: d0:74:69:0f:c4:61:59:fa:3d:b9:3b:ec:20:62:08:19:d9:62: 7b:5a:ba:14:e5:56:53:a0:dc:f2:1d:80:13:9f:e2:4a:d9:e9: 80:e3:34:29:6d:9b:c0:38:4c:2e:83:fc:48:97:a3:63:ef:54: 45:36:08:6a:b2:84:a0:62:29:89:00:86:22:07:73:e8:2f:44: a1:c0:c3:12:69:2d:73:ad:dc:0c:43:e1:51:16:78:19:a9:eb: 25:cc:3a:2e:d9:ae:50:b7:8e:7e:46:05:d3:b3:5c:8d:4b:ee: 0d:98:b9:f7:ba:c7:b5:63:2a:c6:1c:03:d2:84:a1:f8:f9:5a: 94:80:5d:ef:93:ef:16:54:ba:58:fb:b8:d5:12:7a:4a:ed:ad: 42:f5:4a:6e:88:39:d1:fd:c7:8f:c1:09:1d:cf:70:96:62:b8: 8e:0d:03:d7:6f:12:47:f2:77:a6:1c:15:ca:c2:70:57:4f:2f: ff:20:10:e7:49:e2:d0:5b:61:08:7d:20:f4:43:85:d1:06:01: e5:d1:0a:c3:6e:c5:99:fd:cc:59:e4:eb:62:61:48:4d:53:04: 35:70:2f:23:b9:2e:c0:de:37:39:52:00:1b:4a:e9:19:48:28: 4f:6a:f8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LxflFIAcO4kcOsUFbvO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjRkYTBmMTAxM2FjZGI2MWMyZjdhMjZkMTRjNGYwZGU4 MjIyZWMwHhcNMjYwMTI3MDIwMTIwWhcNMjYwMTI4MDIwMTIwWjAzMTEwLwYDVQQD Eyg2YmY2YTljNzYwNmNkMjUxMGIyNGQ4ODIzYzMxYTJlYWIyNjU4YmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ONb20hMGLVXkA7fxyw9ha3bg19m da7ydlctjueAy7+w2TFvyBrPwdS03out8U6sTf+7m1DJLKhOfbSkCY7H6iZzHCzJ H//uDHd7nruOZCjYB0HB7DgKP2WEbxnh74Xk+YZwuJUL0NSj27i572+P+3JKromm Xa1B8gMCsQA2YkA/A/xUvq8+2UI43D00DD3lrdFldMgOHEiV3kTgu2ZRppwY0kgx aIeLpI21uyRgkiYPXiYN/TaPGH03/MGQEkVta/2fHdX7yPSxSqsbeVT/NMN6dNCh tyREydWiMvZMpIeeZk9No78Hz60fTYlmFvyABaWFL1wdBoaKTcalYz0wDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGv2qcdgbNJRCyTYgjwxouqyZYvKMB8GA1UdIwQY MBaAFHC02g8QE6zbYcL3om0UxPDegiLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODct ZjMwNjllZTU5MGRhLzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODctZjMwNjllZTU5MGRh LzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJcPzz5J qWLltVbYZphiKElX0HRpD8RhWfo9uTvsIGIIGdlie1q6FOVWU6Dc8h2AE5/iStnp gOM0KW2bwDhMLoP8SJejY+9URTYIarKEoGIpiQCGIgdz6C9EocDDEmktc63cDEPh URZ4GanrJcw6LtmuULeOfkYF07NcjUvuDZi597rHtWMqxhwD0oSh+PlalIBd75Pv FlS6WPu41RJ6Su2tQvVKbog50f3Hj8EJHc9wlmK4jg0D128SR/J3phwVysJwV08v /yAQ50ni0FthCH0g9EOF0QYB5dEKw27Fmf3MWeTrYmFITVMENXAvI7kuwN43OVIA G0rpGUgoT2r4fQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:50 2026 by rpki-client