This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft File: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft (raw, json) Hash identifier: tVjBbA0JcTd26bFYSPImiAx9fK639CRihzA6AhpaMQQ= Subject key identifier: 86:F2:A9:C0:CA:1B:F7:CD:85:CD:C1:03:FF:D1:42:77:C1:48:98:47 Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21 Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521 Certificate serial: 019C1B026A92615E6C10CBCB0AC3E64B690E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft Manifest number: 17 Signing time: Sun 01 Feb 2026 21:01:09 +0000 Manifest this update: Sun 01 Feb 2026 21:01:09 +0000 Manifest next update: Mon 02 Feb 2026 21:01:09 +0000 Files and hashes: 1: CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl (hash: Z30NXqdvTvi6kY3lcgBbrS+bgWW8NHDZhnERJ2mHFEI=) 2: u0rgq34g6knGKqNfLHS17PXXRWM.asa (hash: QeLh0G1yC5rQpsTeRt7y2uhBhEF8D1QtaAhHKAAQp1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:02:6a:92:61:5e:6c:10:cb:cb:0a:c3:e6:4b:69:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521 Validity Not Before: Feb 1 21:01:09 2026 GMT Not After : Feb 2 21:01:09 2026 GMT Subject: CN=86f2a9c0ca1bf7cd85cdc103ffd14277c1489847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bb:77:68:51:6e:8f:6a:4f:b1:cd:84:15:2e: a5:68:de:30:99:29:78:21:09:fe:0c:c9:96:64:0b: 43:4a:7a:bd:34:d6:2c:66:71:5d:a1:81:a3:e5:1d: 2f:b2:62:78:f7:8d:9f:f1:10:f7:93:17:fc:7b:6e: d2:70:ea:06:50:a7:c5:b2:19:43:ae:e5:43:59:1d: c7:35:ef:63:c2:83:11:96:4d:e2:fb:63:61:f1:d7: aa:6b:5d:b8:4e:c6:93:79:07:c8:16:63:a1:0b:12: 51:e8:92:b1:00:af:7d:26:0b:ae:bd:7a:42:19:3b: f5:c1:0a:9c:17:b6:80:5a:96:1b:06:a5:2a:cc:d4: 7c:2c:a6:4f:1f:43:63:9d:26:8c:cd:54:a1:4b:7c: 4c:0b:c5:7e:0c:4e:c9:f9:9a:a4:5b:23:85:d6:c3: 84:65:f1:67:ba:11:cf:7b:68:cc:e9:0e:2f:ff:e5: 89:b2:29:b2:ca:34:aa:cf:4a:5b:62:4d:03:c7:0f: a1:31:5e:fa:6c:3b:ce:5d:b8:8b:a9:a9:79:7c:be: a9:fa:98:37:b2:4d:db:c4:84:19:a5:bd:20:1f:7f: 28:25:55:9f:fb:2e:a7:ee:db:c8:c8:aa:e2:79:fe: 78:c0:9c:91:6e:da:6b:01:1d:ab:8b:ae:39:19:f6: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:A9:C0:CA:1B:F7:CD:85:CD:C1:03:FF:D1:42:77:C1:48:98:47 X509v3 Authority Key Identifier: keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:85:87:ec:fd:98:3e:96:fb:8b:d0:5c:50:1f:58:d3:9a: 4f:9b:47:c8:18:42:54:34:b9:1f:09:3d:a5:aa:54:eb:e8:4f: 70:e2:91:20:e7:93:08:6f:5c:80:3d:76:d4:c0:c4:74:26:fe: 71:b7:49:d3:0d:7d:40:15:85:32:e5:fb:f8:f4:24:c0:55:26: 69:cd:20:92:db:d6:d5:48:86:8d:59:82:77:c4:ca:05:1b:b6: d8:59:48:ad:f5:41:e7:32:b5:8f:a1:b6:80:d8:33:82:ba:a1: 05:da:61:0b:e3:6f:f1:c2:7c:37:95:d7:62:fa:d1:15:44:f0: 49:2d:44:4e:d1:a8:b7:b0:1c:77:d6:c0:5c:f6:94:af:a1:39: 7c:88:9a:01:c4:e4:f6:c5:ab:15:1c:09:2c:06:e8:89:df:86: ac:da:f1:25:e7:cf:da:e8:b8:95:63:43:8e:42:92:cf:6a:53: ba:9f:bc:80:5f:32:5c:73:14:b5:4f:20:37:11:80:5b:7f:45: 34:7a:ed:38:c7:06:e4:5e:a8:6e:80:32:14:f9:ca:5b:58:81: dc:32:1e:8f:07:fc:55:f8:a6:a9:f0:02:68:32:66:b3:9a:e9: 1e:87:b3:a1:b6:8f:4a:5d:94:71:ff:91:1b:cb:66:ec:b2:8d: 8f:24:ce:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAmqSYV5sEMvLCsPmS2kOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk OTY1MjEwHhcNMjYwMjAxMjEwMTA5WhcNMjYwMjAyMjEwMTA5WjAzMTEwLwYDVQQD Eyg4NmYyYTljMGNhMWJmN2NkODVjZGMxMDNmZmQxNDI3N2MxNDg5ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87t3aFFuj2pPsc2EFS6laN4wmSl4 IQn+DMmWZAtDSnq9NNYsZnFdoYGj5R0vsmJ4942f8RD3kxf8e27ScOoGUKfFshlD ruVDWR3HNe9jwoMRlk3i+2Nh8deqa124TsaTeQfIFmOhCxJR6JKxAK99JguuvXpC GTv1wQqcF7aAWpYbBqUqzNR8LKZPH0NjnSaMzVShS3xMC8V+DE7J+ZqkWyOF1sOE ZfFnuhHPe2jM6Q4v/+WJsimyyjSqz0pbYk0Dxw+hMV76bDvOXbiLqal5fL6p+pg3 sk3bxIQZpb0gH38oJVWf+y6n7tvIyKrief54wJyRbtprAR2ri645GfZ3dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbyqcDKG/fNhc3BA//RQnfBSJhHMB8GA1UdIwQY MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt YzUwMDlhYjFmZGFmLzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0KFh+z9 mD6W+4vQXFAfWNOaT5tHyBhCVDS5Hwk9papU6+hPcOKRIOeTCG9cgD121MDEdCb+ cbdJ0w19QBWFMuX7+PQkwFUmac0gktvW1UiGjVmCd8TKBRu22FlIrfVB5zK1j6G2 gNgzgrqhBdphC+Nv8cJ8N5XXYvrRFUTwSS1ETtGot7Acd9bAXPaUr6E5fIiaAcTk 9sWrFRwJLAboid+GrNrxJefP2ui4lWNDjkKSz2pTup+8gF8yXHMUtU8gNxGAW39F NHrtOMcG5F6oboAyFPnKW1iB3DIejwf8VfimqfACaDJms5rpHoezobaPSl2Ucf+R G8tm7LKNjyTOIA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:18 2026 by rpki-client