This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json) Hash identifier: wVXjCLEON8Xi4fCnhht35IRm9yXnRaDPTK1F7LAuVU4= Subject key identifier: DE:E1:7D:93:F5:02:29:60:9E:2E:14:19:C3:1A:E2:0B:1D:73:2D:28 Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019BFF53B44C2E71C2979D09667363470572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft Manifest number: 1636 Signing time: Tue 27 Jan 2026 12:00:34 +0000 Manifest this update: Tue 27 Jan 2026 12:00:34 +0000 Manifest next update: Wed 28 Jan 2026 12:00:34 +0000 Files and hashes: 1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=) 2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=) 3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: TqmLAT3orosc3bKDlVqnbWeiVb5VQvjuvawLRZXeEIA=) 4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=) 5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:53:b4:4c:2e:71:c2:97:9d:09:66:73:63:47:05:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Jan 27 12:00:34 2026 GMT Not After : Jan 28 12:00:34 2026 GMT Subject: CN=dee17d93f50229609e2e1419c31ae20b1d732d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:e8:f4:69:78:75:b9:da:e0:64:87:c6:78: b5:ba:8b:69:09:e6:7c:65:14:bc:20:51:c8:06:60: 19:0e:81:9c:62:46:c3:39:b8:54:58:9f:91:ff:a4: 45:89:48:34:55:0c:61:23:53:0c:92:62:d5:44:6c: 8c:a8:30:c6:a0:be:ff:f7:b3:e0:10:bb:92:c2:8b: f2:64:69:ce:ae:4e:b3:57:0c:c3:04:05:5b:c7:8c: ae:5f:b8:fa:a5:23:78:e3:ef:a7:93:e1:c1:f5:78: 93:76:b4:07:65:78:4c:5d:41:20:f1:50:f7:f4:65: 90:45:32:9d:ff:ae:8f:b3:b8:9d:02:a2:e1:e3:ad: 65:dd:f0:b5:1e:3c:58:a7:29:71:05:0d:36:09:9a: fb:97:12:f3:e3:35:23:28:45:63:41:72:ff:25:2c: b1:f5:e9:09:c0:27:5c:d9:68:18:3b:15:16:e6:e2: 15:fe:41:8b:77:b3:73:da:4c:21:01:d6:1b:51:02: be:09:dc:e8:7d:e5:ad:10:d2:3b:cc:33:d2:98:43: d0:89:50:e5:15:7d:ba:50:7e:78:b0:ed:cc:9e:46: db:a5:90:fb:e9:58:58:57:b3:f9:8f:d4:cb:72:1c: 61:1b:5b:38:9e:52:cb:9b:56:dd:7d:c0:13:8b:36: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:7D:93:F5:02:29:60:9E:2E:14:19:C3:1A:E2:0B:1D:73:2D:28 X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6e:61:9d:57:ea:d3:34:e0:60:97:b7:f3:0f:b6:7f:27:02: de:bc:fa:3a:bd:8a:e4:39:67:b0:26:ba:db:fc:c1:54:e6:ac: f4:4f:01:a0:a2:3b:2b:d8:4b:ed:ae:32:88:20:71:14:d7:a1: d2:42:26:f3:99:7b:58:82:1c:c4:ef:c4:3f:d3:b4:81:df:3d: 32:ad:51:ef:cf:0f:cd:5c:25:b4:53:05:76:ba:1e:0a:17:16: 17:17:60:e9:2e:ee:1a:15:c2:77:0b:c7:2d:21:af:0d:8c:f7: c1:f0:a3:e0:b6:ad:e3:0a:db:0d:62:87:fc:b3:a5:ff:64:5b: f3:e9:9b:d0:ca:08:00:2d:c2:9d:c2:ee:59:d7:bf:87:c2:a1: 41:15:c2:51:0e:12:be:5c:ea:41:f9:19:43:ba:a3:29:58:e3: c5:42:e3:79:27:f5:9d:2f:c0:fc:49:87:73:01:2f:5a:a4:a2: aa:79:ab:9b:39:10:3a:37:64:75:13:8b:6a:0b:16:59:62:7a: 7a:5e:4d:fa:43:5e:64:e4:7f:0c:a3:2d:72:4e:d8:a2:86:e8: 50:94:2a:22:b1:2c:f7:7e:2b:65:47:5d:8d:a4:fd:59:7b:52: a7:58:63:f5:61:63:83:2b:3c:a0:3d:75:34:8e:a0:3c:37:1c: 08:fe:44:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/U7RMLnHCl50JZnNjRwVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjYwMTI3MTIwMDM0WhcNMjYwMTI4MTIwMDM0WjAzMTEwLwYDVQQD EyhkZWUxN2Q5M2Y1MDIyOTYwOWUyZTE0MTljMzFhZTIwYjFkNzMyZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eHo9Gl4dbna4GSHxni1uotpCeZ8 ZRS8IFHIBmAZDoGcYkbDObhUWJ+R/6RFiUg0VQxhI1MMkmLVRGyMqDDGoL7/97Pg ELuSwovyZGnOrk6zVwzDBAVbx4yuX7j6pSN44++nk+HB9XiTdrQHZXhMXUEg8VD3 9GWQRTKd/66Ps7idAqLh461l3fC1HjxYpylxBQ02CZr7lxLz4zUjKEVjQXL/JSyx 9ekJwCdc2WgYOxUW5uIV/kGLd7Nz2kwhAdYbUQK+CdzofeWtENI7zDPSmEPQiVDl FX26UH54sO3MnkbbpZD76VhYV7P5j9TLchxhG1s4nlLLm1bdfcATizb6HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7hfZP1Ailgni4UGcMa4gsdcy0oMB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW5hnVfq 0zTgYJe38w+2fycC3rz6Or2K5DlnsCa62/zBVOas9E8BoKI7K9hL7a4yiCBxFNeh 0kIm85l7WIIcxO/EP9O0gd89Mq1R788PzVwltFMFdroeChcWFxdg6S7uGhXCdwvH LSGvDYz3wfCj4Lat4wrbDWKH/LOl/2Rb8+mb0MoIAC3CncLuWde/h8KhQRXCUQ4S vlzqQfkZQ7qjKVjjxULjeSf1nS/A/EmHcwEvWqSiqnmrmzkQOjdkdROLagsWWWJ6 el5N+kNeZOR/DKMtck7YooboUJQqIrEs934rZUddjaT9WXtSp1hj9WFjgys8oD11 NI6gPDccCP5EgQ== -----END CERTIFICATE-----Generated at Tue Jan 27 21:58:09 2026 by rpki-client