This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json) Hash identifier: jDoXE4SSc61Bcf0i0T4HWPzILink4ZduMfImf/aq1/I= Subject key identifier: 86:1F:EE:AA:ED:41:F8:32:81:05:76:71:A2:EF:19:5D:0E:80:34:73 Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Certificate serial: 019BFDD3D92A58170BA3E97EE2C5CE6E649A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft Manifest number: 01EC Signing time: Tue 27 Jan 2026 05:01:17 +0000 Manifest this update: Tue 27 Jan 2026 05:01:17 +0000 Manifest next update: Wed 28 Jan 2026 05:01:17 +0000 Files and hashes: 1: U2gb-EjyRMt7fV8m-vDaXptr02U.roa (hash: o3dQkZyaFtK7POh0P6n77n6F8iCQXMX1VAPnE+jPMDM=) 2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: agOV5DK51RY9j2VUS/440Gka/uZVcbXR/8ewdwD9izQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:d9:2a:58:17:0b:a3:e9:7e:e2:c5:ce:6e:64:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45 Validity Not Before: Jan 27 05:01:17 2026 GMT Not After : Jan 28 05:01:17 2026 GMT Subject: CN=861feeaaed41f83281057671a2ef195d0e803473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:24:2d:04:95:38:a9:34:94:1a:5a:11:66: 06:4e:a6:d7:8c:28:5f:e1:45:de:ce:97:f6:bd:25: d9:a9:f6:9d:fb:2c:39:bf:7c:a5:15:84:10:14:81: c8:54:94:b3:65:03:31:9d:5f:55:e3:e7:32:21:4f: 62:6c:f0:d4:4f:8f:e7:c0:a3:05:ae:d4:10:6f:e4: 76:f5:f8:13:6f:e1:a8:a9:3b:ac:05:eb:24:8d:d2: ea:77:c5:76:6e:b1:b0:12:b4:47:fb:ea:00:d9:ba: 3b:bd:a5:a0:26:b4:a0:38:c7:f9:08:b7:23:6d:83: f0:ba:d3:e1:97:08:8d:ff:d9:c2:6d:c5:e1:71:7e: 26:42:15:e2:20:9b:85:9d:02:ca:82:24:01:28:25: 22:46:14:4e:f0:6e:f3:8b:12:b0:ae:15:31:b7:9f: e2:68:5a:47:6f:fd:7d:54:24:8d:e0:1c:03:04:ab: 7d:cc:07:a1:cb:3c:6c:f8:81:29:ee:95:59:f9:f4: f3:41:c4:a2:2d:39:50:da:f3:ba:f9:85:12:41:cd: d9:4b:85:27:f9:1f:aa:98:21:c6:71:8c:c2:38:ec: 34:37:9f:4c:02:8a:63:cf:7f:0a:d6:f0:3f:63:c6: 9e:b2:eb:01:fc:b6:39:55:fd:a5:16:f1:b9:a8:3e: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:EE:AA:ED:41:F8:32:81:05:76:71:A2:EF:19:5D:0E:80:34:73 X509v3 Authority Key Identifier: keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:49:a6:57:21:68:97:f3:47:28:52:c8:55:91:ed:48:d6:b7: d1:19:e9:9d:2e:5e:e7:d0:6a:38:ab:f5:dd:20:93:5d:fe:63: e0:27:00:e4:e6:a9:05:49:06:fc:c8:34:1f:94:3b:6c:ff:50: 93:32:5b:d0:04:51:d6:8c:b6:73:e9:10:6b:d9:a3:c4:17:99: 14:5c:ca:67:a3:54:69:2a:11:19:91:e5:6c:c2:77:0a:64:29: bd:ce:38:33:95:6c:9b:4e:bd:e8:1f:6e:dd:fb:e1:73:d8:bb: e7:49:0b:9d:dd:68:3f:71:38:22:ee:7c:9e:36:c1:ab:e0:12: 79:32:92:fd:59:fd:95:1b:ad:a7:b3:27:8c:3e:04:45:ea:4e: 68:d1:85:1f:17:6e:1e:5c:a0:2d:7c:59:f5:99:56:67:8b:85: c6:5f:45:bc:24:2d:56:7e:8c:0a:60:9a:f0:f8:d5:f7:2d:be: fd:28:d1:9a:9f:45:c5:27:e8:91:d8:f1:26:ae:0b:c1:a0:81: 6e:88:bf:d0:47:c7:4b:46:a1:28:45:46:38:b4:23:5d:28:cb: b6:0a:71:21:1b:cc:d8:eb:6f:f2:16:cb:91:d9:02:36:26:dc: 09:d0:64:25:c4:2f:7f:a3:91:5e:67:49:73:e7:21:11:ca:85: 92:52:8d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv909kqWBcLo+l+4sXObmSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOWNhNjNlNmQyYjUwNDQ0OTIxN2RjMDc4OGM5ZDM3NDg5 YjRjNDUwHhcNMjYwMTI3MDUwMTE3WhcNMjYwMTI4MDUwMTE3WjAzMTEwLwYDVQQD Eyg4NjFmZWVhYWVkNDFmODMyODEwNTc2NzFhMmVmMTk1ZDBlODAzNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+EkLQSVOKk0lBpaEWYGTqbXjChf 4UXezpf2vSXZqfad+yw5v3ylFYQQFIHIVJSzZQMxnV9V4+cyIU9ibPDUT4/nwKMF rtQQb+R29fgTb+GoqTusBeskjdLqd8V2brGwErRH++oA2bo7vaWgJrSgOMf5CLcj bYPwutPhlwiN/9nCbcXhcX4mQhXiIJuFnQLKgiQBKCUiRhRO8G7zixKwrhUxt5/i aFpHb/19VCSN4BwDBKt9zAehyzxs+IEp7pVZ+fTzQcSiLTlQ2vO6+YUSQc3ZS4Un +R+qmCHGcYzCOOw0N59MAopjz38K1vA/Y8aesusB/LY5Vf2lFvG5qD6JnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYf7qrtQfgygQV2caLvGV0OgDRzMB8GA1UdIwQY MBaAFHKcpj5tK1BESSF9wHiMnTdIm0xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2Ut NTU5ZTNkNzZjNWI2LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81OWVhMjktZjI4OC00NjhlLWEzM2UtNTU5ZTNkNzZjNWI2 LzEvY3B5bVBtMHJVRVJKSVgzQWVJeWROMGliVEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0mmVyFo l/NHKFLIVZHtSNa30RnpnS5e59BqOKv13SCTXf5j4CcA5OapBUkG/Mg0H5Q7bP9Q kzJb0ARR1oy2c+kQa9mjxBeZFFzKZ6NUaSoRGZHlbMJ3CmQpvc44M5Vsm0696B9u 3fvhc9i750kLnd1oP3E4Iu58njbBq+ASeTKS/Vn9lRutp7MnjD4ERepOaNGFHxdu HlygLXxZ9ZlWZ4uFxl9FvCQtVn6MCmCa8PjV9y2+/SjRmp9FxSfokdjxJq4LwaCB boi/0EfHS0ahKEVGOLQjXSjLtgpxIRvM2Otv8hbLkdkCNibcCdBkJcQvf6ORXmdJ c+chEcqFklKN/w== -----END CERTIFICATE-----Generated at Tue Jan 27 06:42:39 2026 by rpki-client