This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json) Hash identifier: A077HE6E39S5dh6+1pajZ3XT7X8wT+U6VZeqejcoHH4= Subject key identifier: C9:FB:EF:3D:0B:6D:B9:3A:83:B0:BF:35:BE:9D:6F:00:DC:40:44:FA Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Certificate serial: 019BDF24941BA688661B0B7183BB9661476E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft Manifest number: 0DF1 Signing time: Wed 21 Jan 2026 06:01:14 +0000 Manifest this update: Wed 21 Jan 2026 06:01:14 +0000 Manifest next update: Thu 22 Jan 2026 06:01:14 +0000 Files and hashes: 1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=) 2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: gN0gIXipm+5CE/yLWeJBQKYPP4z0cyYRvyOSpIv8A7Q=) 3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:94:1b:a6:88:66:1b:0b:71:83:bb:96:61:47:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Validity Not Before: Jan 21 06:01:14 2026 GMT Not After : Jan 22 06:01:14 2026 GMT Subject: CN=c9fbef3d0b6db93a83b0bf35be9d6f00dc4044fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:8b:28:08:f2:da:33:80:08:94:ab:02:bf: 98:25:ed:0c:8e:c1:09:3d:7c:a4:a6:b8:bf:e8:c0: f5:77:74:57:6a:e0:3a:07:41:4c:35:fa:ba:2d:8b: 66:53:14:7f:6f:ef:f0:71:8f:6c:68:64:ab:87:36: 93:c0:43:6b:24:2d:1f:15:2f:50:ad:36:e1:03:56: b1:80:40:94:c9:33:aa:e9:dd:bf:f6:ff:e3:52:f0: 58:59:11:be:73:f8:0c:26:78:87:25:08:1f:74:5e: 7c:7b:91:d5:ce:24:fe:08:e8:7d:de:1d:81:dc:ba: 57:69:7d:a0:28:5b:8c:84:12:73:0b:28:64:fd:92: f0:33:81:70:1b:2f:2c:b7:bc:2e:b8:e4:57:7e:28: 85:35:1b:4c:0a:ab:46:cd:52:e6:09:84:05:83:1a: e3:3a:cf:38:2f:a7:8e:72:22:f0:6b:87:48:ac:b4: 7d:cd:2a:92:99:1d:c3:bd:77:2c:e0:61:b6:d3:2b: ad:14:b5:71:2b:bb:46:22:fb:d4:6e:8c:30:7a:39: c9:d4:7a:14:b9:71:e6:f4:dd:72:bb:1c:fd:66:88: f3:8f:62:74:b0:17:c4:c3:b8:a5:ce:f9:d1:85:72: 3b:a6:32:6a:29:da:35:1d:70:2f:7e:b0:89:9e:47: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FB:EF:3D:0B:6D:B9:3A:83:B0:BF:35:BE:9D:6F:00:DC:40:44:FA X509v3 Authority Key Identifier: keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d9:c3:ab:50:48:17:ab:c3:c3:bd:c4:77:7b:28:8e:5d:6b: 6b:dd:45:5a:7c:72:73:52:c7:da:1d:fc:fc:57:35:9f:b0:84: cd:f7:48:f2:de:a8:92:ee:97:74:27:73:1d:fc:61:88:65:27: 82:2b:f4:15:11:05:24:56:9e:47:a8:fe:d2:26:ec:49:be:56: b3:35:c2:4b:0b:6e:31:dc:27:ea:b9:27:5a:14:72:67:8a:02: 8b:a1:27:94:17:3f:81:c9:00:a4:09:a6:fe:10:53:c8:23:3b: fe:41:6b:eb:d6:83:93:7b:cd:e0:6e:e1:c6:70:68:1c:3d:c3: aa:5f:ed:c5:70:18:6e:5b:30:8b:46:88:f1:ce:73:00:1e:b0: 86:b4:61:98:fb:94:bb:31:d1:ca:5d:ff:eb:f4:f1:70:23:ab: 8f:d3:44:61:2a:6a:ca:3e:6b:b1:0c:71:18:23:ae:bc:96:94: 55:02:8c:f7:ac:42:7f:a5:ae:3e:72:a6:b3:20:67:a5:49:9d: d3:d6:fd:64:b7:0c:b3:e6:9b:fa:44:21:18:f4:76:71:69:46: 99:33:3a:d1:18:aa:f7:07:d9:12:da:04:43:92:5b:f0:3a:7e: 3e:b4:33:27:fd:8a:60:5a:08:99:13:8b:4c:89:e3:ec:25:d0: 7b:48:58:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJJQbpohmGwtxg7uWYUduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy YmI4MzIwHhcNMjYwMTIxMDYwMTE0WhcNMjYwMTIyMDYwMTE0WjAzMTEwLwYDVQQD EyhjOWZiZWYzZDBiNmRiOTNhODNiMGJmMzViZTlkNmYwMGRjNDA0NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzISLKAjy2jOACJSrAr+YJe0MjsEJ PXykpri/6MD1d3RXauA6B0FMNfq6LYtmUxR/b+/wcY9saGSrhzaTwENrJC0fFS9Q rTbhA1axgECUyTOq6d2/9v/jUvBYWRG+c/gMJniHJQgfdF58e5HVziT+COh93h2B 3LpXaX2gKFuMhBJzCyhk/ZLwM4FwGy8st7wuuORXfiiFNRtMCqtGzVLmCYQFgxrj Os84L6eOciLwa4dIrLR9zSqSmR3DvXcs4GG20yutFLVxK7tGIvvUbowwejnJ1HoU uXHm9N1yuxz9Zojzj2J0sBfEw7ilzvnRhXI7pjJqKdo1HXAvfrCJnkc2bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn77z0Lbbk6g7C/Nb6dbwDcQET6MB8GA1UdIwQY MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdnDq1BI F6vDw73Ed3sojl1ra91FWnxyc1LH2h38/Fc1n7CEzfdI8t6oku6XdCdzHfxhiGUn giv0FREFJFaeR6j+0ibsSb5WszXCSwtuMdwn6rknWhRyZ4oCi6EnlBc/gckApAmm /hBTyCM7/kFr69aDk3vN4G7hxnBoHD3Dql/txXAYblswi0aI8c5zAB6whrRhmPuU uzHRyl3/6/TxcCOrj9NEYSpqyj5rsQxxGCOuvJaUVQKM96xCf6WuPnKmsyBnpUmd 09b9ZLcMs+ab+kQhGPR2cWlGmTM60Riq9wfZEtoEQ5Jb8Dp+PrQzJ/2KYFoImROL TInj7CXQe0hY3A== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:28 2026 by rpki-client