This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json) Hash identifier: 5CIbZ/nuwKXjq1mcwZU/FyPiGEXpysH5mhxynRrsW1c= Subject key identifier: C8:05:E0:86:D6:64:92:17:37:57:E4:2F:59:F8:6C:F7:9B:79:FD:77 Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019BFE0B441B7B9AFC19FA4C3CFC95C15A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft Manifest number: 17F5 Signing time: Tue 27 Jan 2026 06:01:49 +0000 Manifest this update: Tue 27 Jan 2026 06:01:49 +0000 Manifest next update: Wed 28 Jan 2026 06:01:49 +0000 Files and hashes: 1: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=) 2: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=) 3: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=) 4: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=) 5: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=) 6: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: PLbGtgaO5Cewkf5locoiRA6y4XVnONdBc5fqjinXIUs=) 7: hae0gayGe2g1D03nvSh_u0H2u2s.roa (hash: OF2Bvd/NPLRNkpIH3hrjKElY0WK9eslhWgO2CIxPJCw=) 8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=) 9: rgwz7iF3hHaUl5V19C4BKoY9OnE.roa (hash: ve1MCW6t2kzIlC3EVE/Neu+wkMeFHcsHuQFg1OD/guU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:44:1b:7b:9a:fc:19:fa:4c:3c:fc:95:c1:5a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 27 06:01:49 2026 GMT Not After : Jan 28 06:01:49 2026 GMT Subject: CN=c805e086d66492173757e42f59f86cf79b79fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:29:f2:8e:d5:0b:85:fa:22:d9:11:b5:97: e8:f9:58:3c:9b:63:02:60:48:88:f7:db:b7:ab:7c: 20:29:0c:b7:79:73:9e:09:2c:1d:af:20:e1:5c:18: ab:45:b6:4d:99:ef:52:0e:6d:6d:9b:89:43:ce:b5: a2:df:f4:59:c0:68:f6:37:08:07:ed:73:6a:07:0c: 0f:13:96:e8:69:f5:4b:36:76:4b:1b:14:8e:38:da: d5:65:6f:46:c6:49:f4:c2:ba:59:34:87:6b:cf:29: c7:41:22:a2:db:06:0b:28:ea:32:70:f8:93:20:c9: 37:a0:b7:cf:c3:5d:f3:49:13:3d:b8:ac:e8:f6:24: 46:92:08:c2:e0:54:73:fd:11:d3:d5:1a:d0:77:11: b1:d1:46:cc:8e:1c:dd:3d:8d:13:22:69:29:23:3c: d2:99:20:0d:90:a2:0b:8b:8e:41:ac:81:5d:9f:ce: f6:45:10:00:b8:70:3f:65:d5:28:a0:6b:c1:75:f3: 8b:43:5e:e5:0d:19:74:aa:1c:99:68:1b:9e:26:b9: 0e:f5:11:bb:3c:83:46:79:0f:51:53:e0:a1:f4:b9: 53:78:b0:d1:49:bf:f9:92:32:7b:14:f1:91:91:65: 3d:a5:e5:3e:ce:e6:79:6a:29:1e:31:54:54:0c:aa: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:05:E0:86:D6:64:92:17:37:57:E4:2F:59:F8:6C:F7:9B:79:FD:77 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:82:de:b5:2a:cf:e8:8d:27:db:ec:a5:4d:bb:c9:6a:95:42: a5:7f:de:06:9b:9c:64:0a:d9:c9:b7:17:8c:cd:02:f8:78:71: 01:cc:b2:2f:00:5b:be:f9:c4:b4:41:71:cf:54:0a:70:4f:fc: d2:44:ed:8d:2f:46:63:36:95:be:0c:00:36:61:5c:70:50:01: bd:d0:d8:71:b3:b0:b8:81:37:c1:76:be:e0:fe:1b:45:1f:24: 9e:9a:6f:b9:b1:a5:3d:bd:a3:8b:49:b4:9c:fb:dc:56:c3:e0: 8c:f9:6e:f6:be:ec:38:2e:e6:ba:19:4d:4f:0d:c3:d9:cc:11: 91:b7:cc:87:74:ec:bb:46:57:37:b3:94:50:f3:63:58:01:6d: 40:ac:dc:d1:96:e6:68:e5:53:41:34:ff:89:03:e9:17:b9:4e: 53:5f:60:22:47:11:ba:36:a6:63:6e:36:03:31:98:39:b1:c4: ec:7a:10:27:a5:09:0c:37:5c:dc:e6:18:e2:d8:08:39:fb:ff: a6:c2:1f:02:9d:27:0a:1c:fe:4f:44:48:43:ef:a2:17:2c:35: c6:90:f7:68:ca:70:76:13:7c:34:ee:8f:e5:8f:62:7b:c1:e7: b3:a8:02:e4:e2:1c:3f:07:1c:af:4b:12:ea:d3:ef:18:1f:82: 76:69:83:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+C0Qbe5r8GfpMPPyVwVooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTI3MDYwMTQ5WhcNMjYwMTI4MDYwMTQ5WjAzMTEwLwYDVQQD EyhjODA1ZTA4NmQ2NjQ5MjE3Mzc1N2U0MmY1OWY4NmNmNzliNzlmZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNwp8o7VC4X6ItkRtZfo+Vg8m2MC YEiI99u3q3wgKQy3eXOeCSwdryDhXBirRbZNme9SDm1tm4lDzrWi3/RZwGj2NwgH 7XNqBwwPE5boafVLNnZLGxSOONrVZW9Gxkn0wrpZNIdrzynHQSKi2wYLKOoycPiT IMk3oLfPw13zSRM9uKzo9iRGkgjC4FRz/RHT1RrQdxGx0UbMjhzdPY0TImkpIzzS mSANkKILi45BrIFdn872RRAAuHA/ZdUooGvBdfOLQ17lDRl0qhyZaBueJrkO9RG7 PINGeQ9RU+Ch9LlTeLDRSb/5kjJ7FPGRkWU9peU+zuZ5aikeMVRUDKq/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgF4IbWZJIXN1fkL1n4bPebef13MB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABILetSrP 6I0n2+ylTbvJapVCpX/eBpucZArZybcXjM0C+HhxAcyyLwBbvvnEtEFxz1QKcE/8 0kTtjS9GYzaVvgwANmFccFABvdDYcbOwuIE3wXa+4P4bRR8knppvubGlPb2ji0m0 nPvcVsPgjPlu9r7sOC7muhlNTw3D2cwRkbfMh3Tsu0ZXN7OUUPNjWAFtQKzc0Zbm aOVTQTT/iQPpF7lOU19gIkcRujamY242AzGYObHE7HoQJ6UJDDdc3OYY4tgIOfv/ psIfAp0nChz+T0RIQ++iFyw1xpD3aMpwdhN8NO6P5Y9ie8Hns6gC5OIcPwccr0sS 6tPvGB+CdmmDAA== -----END CERTIFICATE-----Generated at Tue Jan 27 10:00:36 2026 by rpki-client