This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json) Hash identifier: 2EflUdxzUdhhQehK1FjIkm5byQkpKHEUqOkHYNdTkco= Subject key identifier: C8:04:1D:F6:27:27:96:32:A8:6F:5D:69:1A:68:1F:E9:0C:2C:F8:CD Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019BFCF83FC1140729A493FBE6671F7FB898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft Manifest number: 10F6 Signing time: Tue 27 Jan 2026 01:01:26 +0000 Manifest this update: Tue 27 Jan 2026 01:01:26 +0000 Manifest next update: Wed 28 Jan 2026 01:01:26 +0000 Files and hashes: 1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=) 2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=) 3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=) 4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=) 5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: d7cxbF+EWC46AHBT9N7HIeSmEeO8dQppeSslRbq2Bbo=) 6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=) 7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:3f:c1:14:07:29:a4:93:fb:e6:67:1f:7f:b8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 27 01:01:26 2026 GMT Not After : Jan 28 01:01:26 2026 GMT Subject: CN=c8041df627279632a86f5d691a681fe90c2cf8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:95:eb:15:04:f5:d9:44:65:2a:96:d6:10: 6c:60:5f:53:03:39:c4:51:0f:16:ea:e6:43:f6:fd: 7f:00:6d:8b:11:27:a7:d1:6b:02:3a:83:01:df:69: 69:64:80:e5:c7:d0:33:b8:79:36:b0:0f:7e:2a:8e: 87:80:c6:84:82:9d:bb:63:c8:da:da:4c:d4:e4:46: 4c:91:22:d7:52:8c:6f:6e:18:6f:25:aa:ed:39:b4: 13:44:a5:ec:73:40:27:cb:f2:cb:5b:bb:3c:44:d7: 93:39:4f:d6:83:9b:1b:d7:18:a5:5b:5e:43:64:0d: 8b:94:e1:56:ba:97:c3:eb:4d:77:28:a6:ab:85:8a: 8b:32:c5:ef:69:5c:9e:19:b0:18:70:11:33:87:37: 85:3d:b2:24:1b:c8:7d:5d:cb:0e:88:58:62:a9:77: 4b:91:ef:f5:2d:e5:8e:8d:2a:c7:c4:33:de:a2:3f: 20:64:7b:3e:76:c5:ba:4f:0b:bb:93:59:a4:5d:00: 82:b1:7a:8c:ed:53:85:22:47:de:63:f5:c0:aa:e4: 79:4a:8a:e4:bd:2e:50:37:fa:7d:85:ea:f4:95:eb: fd:98:05:b8:18:3b:27:d6:3b:47:e5:cd:29:2c:7f: b6:ff:1f:2c:0f:88:08:70:9f:66:0b:4e:da:61:02: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:1D:F6:27:27:96:32:A8:6F:5D:69:1A:68:1F:E9:0C:2C:F8:CD X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:39:2a:f9:e7:6f:31:1e:5a:7e:34:59:88:72:02:63:c5:da: f9:95:61:b3:87:29:af:3f:2d:4e:5c:86:e9:b6:4f:20:dd:9e: bd:18:64:6b:63:30:2b:85:96:e9:01:9d:b0:68:0a:af:b1:87: f6:39:29:71:fe:80:55:93:63:d6:81:28:36:48:d7:27:f4:3c: 33:68:4c:df:4f:50:97:f7:0c:c9:ce:ea:bf:93:0d:a4:f8:46: 4b:ee:9c:3a:e3:61:df:7c:38:50:b4:a2:eb:49:bf:79:f8:49: 91:5f:85:be:93:57:35:05:87:be:2d:a9:64:13:ba:19:ef:64: 83:f2:c8:5d:87:87:41:e8:97:a4:9c:ff:ca:be:f2:9d:e4:63: 51:9a:f7:2d:33:12:7d:19:32:f8:89:39:42:fe:d4:9d:c4:76: 75:0c:97:11:48:b1:87:c3:dd:8f:01:f7:4d:4f:8c:b9:79:ef: 80:10:3c:44:d5:a6:4d:6d:b7:44:be:d7:7f:5f:11:2c:5d:7b: 08:21:79:5e:a6:92:02:c2:c3:98:5a:46:5d:87:d3:66:15:92: f0:c9:59:33:94:0b:70:70:dc:6f:80:b0:71:2f:86:dc:cd:14: 6a:bf:8a:a7:55:46:22:59:58:e5:82:38:e8:e5:7b:71:51:7f: a5:b7:63:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+D/BFAcppJP75mcff7iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTI3MDEwMTI2WhcNMjYwMTI4MDEwMTI2WjAzMTEwLwYDVQQD EyhjODA0MWRmNjI3Mjc5NjMyYTg2ZjVkNjkxYTY4MWZlOTBjMmNmOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1GV6xUE9dlEZSqW1hBsYF9TAznE UQ8W6uZD9v1/AG2LESen0WsCOoMB32lpZIDlx9AzuHk2sA9+Ko6HgMaEgp27Y8ja 2kzU5EZMkSLXUoxvbhhvJartObQTRKXsc0Any/LLW7s8RNeTOU/Wg5sb1xilW15D ZA2LlOFWupfD6013KKarhYqLMsXvaVyeGbAYcBEzhzeFPbIkG8h9XcsOiFhiqXdL ke/1LeWOjSrHxDPeoj8gZHs+dsW6Twu7k1mkXQCCsXqM7VOFIkfeY/XAquR5Sork vS5QN/p9her0lev9mAW4GDsn1jtH5c0pLH+2/x8sD4gIcJ9mC07aYQIOvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgEHfYnJ5YyqG9daRpoH+kMLPjNMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjkq+edv MR5afjRZiHICY8Xa+ZVhs4cprz8tTlyG6bZPIN2evRhka2MwK4WW6QGdsGgKr7GH 9jkpcf6AVZNj1oEoNkjXJ/Q8M2hM309Ql/cMyc7qv5MNpPhGS+6cOuNh33w4ULSi 60m/efhJkV+FvpNXNQWHvi2pZBO6Ge9kg/LIXYeHQeiXpJz/yr7yneRjUZr3LTMS fRky+Ik5Qv7UncR2dQyXEUixh8PdjwH3TU+MuXnvgBA8RNWmTW23RL7Xf18RLF17 CCF5XqaSAsLDmFpGXYfTZhWS8MlZM5QLcHDcb4CwcS+G3M0Uar+Kp1VGIllY5YI4 6OV7cVF/pbdj4A== -----END CERTIFICATE-----Generated at Tue Jan 27 08:07:22 2026 by rpki-client