This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json) Hash identifier: HMqTENL0WwxHRUczFxk7jcJj7eolX+38RrmRKBB5pCk= Subject key identifier: DB:95:EF:A7:CE:91:3C:06:FB:C0:6C:6C:D8:65:44:F3:01:0B:00:F2 Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Certificate serial: 019BD5B40E014BD887F98409563DE1801C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft Manifest number: 04DD Signing time: Mon 19 Jan 2026 10:01:45 +0000 Manifest this update: Mon 19 Jan 2026 10:01:45 +0000 Manifest next update: Tue 20 Jan 2026 10:01:45 +0000 Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: h3IxrkEc7IgVoJ7iti5VkfDM+RWEVtCXe0ciKv/oHk0=) 2: aXRWeaKRfz8xctBkOcAjTiqqUyc.roa (hash: 1GTiSvFGIEqbWdGzrD6YYk/YH+B3NyH6shZKFsYxvxU=) 3: pKs45C6f1fQLKakV-zJPgC3zh1Y.roa (hash: 0A0sNeWwxD3U95a3mQVF0PVW66p+HwNWwu64xGKD15I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:0e:01:4b:d8:87:f9:84:09:56:3d:e1:80:1c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab Validity Not Before: Jan 19 10:01:45 2026 GMT Not After : Jan 20 10:01:45 2026 GMT Subject: CN=db95efa7ce913c06fbc06c6cd86544f3010b00f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:1d:11:31:59:5e:1f:cd:93:1d:bf:5b:ce: 97:2b:0d:94:98:bc:2a:d8:13:cf:0b:1d:ed:06:82: ad:30:d9:98:7e:4f:bd:e2:9a:b6:f7:7b:40:29:74: 3c:d1:68:20:d7:2e:05:a4:d4:0a:d7:16:73:16:a2: 58:82:b1:3e:d8:fc:3a:6d:28:ee:da:86:e8:be:a6: 50:12:65:c5:35:a6:7a:54:14:2a:23:77:15:29:9b: d1:8b:96:d4:a0:66:76:38:97:d9:75:21:4a:d8:f7: d7:f0:7b:a0:32:80:af:1d:a5:24:54:af:66:05:12: 35:60:b0:3b:85:75:c3:30:97:97:9d:3d:79:d8:ad: f9:8c:ed:ed:c3:9d:3d:3c:bd:3b:bd:af:c1:80:ee: cc:c4:8a:3a:28:d9:5a:7b:7d:cb:5e:19:8a:6b:78: d6:31:77:12:c2:ea:f5:cf:ee:3e:51:7d:58:66:de: 16:cb:d3:90:cb:f5:f9:a7:80:55:de:6c:73:40:60: b5:40:46:1f:03:b3:ac:61:08:f9:a4:61:f6:8a:2f: e9:37:02:b8:eb:d1:d8:fe:52:ff:40:9e:a2:a3:23: 30:60:ba:bb:a3:e9:84:db:2f:4d:d9:2c:bf:dd:07: b4:be:b5:ed:32:79:5a:24:f6:b1:7a:31:70:a0:3e: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:EF:A7:CE:91:3C:06:FB:C0:6C:6C:D8:65:44:F3:01:0B:00:F2 X509v3 Authority Key Identifier: keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:69:c1:cf:1d:2a:80:dd:39:e3:43:23:5f:ad:1c:2e:17:78: a8:f0:ae:84:12:c0:cc:97:27:0d:60:04:cf:fa:c9:28:24:80: cf:11:99:8d:38:de:e6:49:10:d2:03:72:e2:ce:fb:ab:d0:01: 1d:cb:e1:f6:71:d0:64:4e:75:8c:a1:5c:3a:7b:b9:fc:d7:0f: fc:39:7a:44:47:ab:fd:a4:f2:d1:de:20:54:d3:eb:2e:90:7e: 75:4b:0b:e9:89:c5:63:30:ff:5f:6c:fd:63:83:5d:d1:b9:1f: cf:55:eb:cc:14:e2:3c:e4:b8:e5:7f:f4:65:2e:0e:ea:1c:f6: 18:ea:b1:f1:71:a1:ff:f3:4e:6d:c3:e1:0d:d3:d4:dd:c5:0b: ce:7d:7e:13:4c:2e:33:b3:d7:c6:6d:b3:0c:28:01:36:b3:c8: 58:c3:dd:06:1a:49:51:c5:4c:82:d6:3a:a8:b9:d0:3a:58:0e: 96:a0:22:45:7c:12:dd:cb:10:28:68:f4:6d:27:f7:93:58:a8: 9f:07:2b:f3:35:0b:84:39:d4:3b:05:f9:f3:f4:20:51:eb:d0: 72:3a:68:04:57:88:ab:82:d6:71:1d:22:83:b8:83:ab:3c:1a: b1:8b:79:ab:17:c1:aa:98:d9:10:da:1f:db:3e:07:5e:d6:e4: 19:81:40:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVtA4BS9iH+YQJVj3hgByPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhOGU5M2YxOTYxYmViYzEwMDA5Y2IyNjVjMGJhZjM0NzAy YTNkYWIwHhcNMjYwMTE5MTAwMTQ1WhcNMjYwMTIwMTAwMTQ1WjAzMTEwLwYDVQQD EyhkYjk1ZWZhN2NlOTEzYzA2ZmJjMDZjNmNkODY1NDRmMzAxMGIwMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE8dETFZXh/Nkx2/W86XKw2UmLwq 2BPPCx3tBoKtMNmYfk+94pq293tAKXQ80Wgg1y4FpNQK1xZzFqJYgrE+2Pw6bSju 2obovqZQEmXFNaZ6VBQqI3cVKZvRi5bUoGZ2OJfZdSFK2PfX8HugMoCvHaUkVK9m BRI1YLA7hXXDMJeXnT152K35jO3tw509PL07va/BgO7MxIo6KNlae33LXhmKa3jW MXcSwur1z+4+UX1YZt4Wy9OQy/X5p4BV3mxzQGC1QEYfA7OsYQj5pGH2ii/pNwK4 69HY/lL/QJ6ioyMwYLq7o+mE2y9N2Sy/3Qe0vrXtMnlaJPaxejFwoD7aVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuV76fOkTwG+8BsbNhlRPMBCwDyMB8GA1UdIwQY MBaAFAqOk/GWG+vBAAnLJlwLrzRwKj2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODkt YjkzNTZlNjFmNzNhLzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8zOWZhNDMtOTc5NC00MjFhLWJhODktYjkzNTZlNjFmNzNh LzEvQ282VDhaWWI2OEVBQ2NzbVhBdXZOSEFxUGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmnBzx0q gN0540MjX60cLhd4qPCuhBLAzJcnDWAEz/rJKCSAzxGZjTje5kkQ0gNy4s77q9AB Hcvh9nHQZE51jKFcOnu5/NcP/Dl6REer/aTy0d4gVNPrLpB+dUsL6YnFYzD/X2z9 Y4Nd0bkfz1XrzBTiPOS45X/0ZS4O6hz2GOqx8XGh//NObcPhDdPU3cULzn1+E0wu M7PXxm2zDCgBNrPIWMPdBhpJUcVMgtY6qLnQOlgOlqAiRXwS3csQKGj0bSf3k1io nwcr8zULhDnUOwX58/QgUevQcjpoBFeIq4LWcR0ig7iDqzwasYt5qxfBqpjZENof 2z4HXtbkGYFAZg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:40:11 2026 by rpki-client