This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json) Hash identifier: y0qSr6i/hfSFTvY2QO3okuVmUHZIYv2TnPRzbNDQO8k= Subject key identifier: 53:FF:18:5F:44:E9:80:5C:4D:71:98:BB:8A:BE:F2:04:62:98:1C:7A Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Certificate serial: 019BF9890AD9E2454EF725D941E00A6FF9FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft Manifest number: 0D6A Signing time: Mon 26 Jan 2026 09:01:06 +0000 Manifest this update: Mon 26 Jan 2026 09:01:06 +0000 Manifest next update: Tue 27 Jan 2026 09:01:06 +0000 Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: skHNwGoHC2ZBT7u3OBBCZmv6vmj6ZLCGkm5e7QbwGDk=) 2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=) 3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:0a:d9:e2:45:4e:f7:25:d9:41:e0:0a:6f:f9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820 Validity Not Before: Jan 26 09:01:06 2026 GMT Not After : Jan 27 09:01:06 2026 GMT Subject: CN=53ff185f44e9805c4d7198bb8abef20462981c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:a2:5b:b7:3d:3f:94:94:fb:49:c9:1f:5a: 77:c2:69:61:dd:6a:ad:09:4b:16:11:c5:9b:8e:4c: 2e:3d:7f:d1:f8:71:44:5e:95:b1:f3:45:be:ab:39: 76:10:82:06:37:f1:be:69:d3:c9:f2:7b:08:df:c1: 18:96:d1:be:6d:ac:2a:bd:13:aa:c3:7e:9c:7c:10: 2c:f8:f1:d0:86:15:d0:50:47:95:b2:1d:ee:ad:bb: f6:b6:e8:3a:ec:ce:64:af:45:ae:b9:57:e2:75:b9: 10:72:a6:f7:32:dd:7a:0e:fb:fa:ed:23:02:ba:d7: 94:1e:da:a6:a2:5b:be:c2:9c:01:c9:45:c3:9f:40: f7:2d:2b:de:ce:f2:93:65:7d:3a:9b:32:2c:fb:8a: 17:01:6e:51:06:8e:a4:6c:75:97:8a:3b:c6:f1:08: b0:88:e3:e7:e7:ac:df:1d:cf:54:4b:75:0f:fb:ac: 36:00:09:ae:cb:9f:94:d9:a4:ce:a5:d8:70:e0:5d: 15:ca:55:e4:b3:a3:b5:7f:73:27:ff:b7:c2:5d:64: 4a:6e:ef:90:22:1c:56:8b:f3:40:d4:d1:d6:5e:b6: 40:76:93:2f:7b:8a:df:42:a0:12:1a:f9:01:ed:b3: 06:87:46:ba:28:a7:76:46:28:b1:83:ac:ef:3b:2f: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:18:5F:44:E9:80:5C:4D:71:98:BB:8A:BE:F2:04:62:98:1C:7A X509v3 Authority Key Identifier: keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:02:5d:da:2e:28:0a:1b:d9:d0:29:1a:31:1a:96:4e:b4:b3: 0c:11:41:e1:37:50:a5:87:93:88:79:75:25:a6:9b:7c:ff:ca: 04:e8:ce:b4:f1:16:cb:98:7f:f5:61:78:7e:2d:9c:cf:80:bc: 6a:47:f9:44:31:dd:99:44:6f:fb:22:52:fc:9e:59:23:19:22: 10:1e:1c:5d:40:f7:b9:84:54:b2:f2:f4:23:26:df:e5:3d:99: 00:2e:6c:04:69:22:7e:82:0c:01:fb:bf:89:9c:9b:43:73:88: 4c:b9:5e:39:5e:dd:44:7c:0f:52:4a:23:84:34:72:8c:63:b0: c8:da:e2:0d:26:ee:1a:68:5e:c9:89:eb:6e:4e:5f:79:2e:9b: 78:05:79:02:fd:2e:35:62:bf:4c:f2:6d:83:ba:69:4b:bd:80: 8e:ed:f4:31:c9:10:15:d2:0e:49:06:92:68:df:84:e8:19:fe: 23:e4:7e:96:f6:f7:92:8b:b5:4c:14:36:b9:55:6b:ca:22:85: b9:0c:2e:2f:ff:0c:0f:3a:1c:59:a8:67:fa:b3:c3:d3:da:cf: 81:47:1a:0b:c5:55:af:6a:f7:64:3b:86:74:31:15:e1:e2:5d: c2:6b:3a:b1:de:ac:86:73:28:f1:92:9b:33:42:86:37:8f:69: 24:3b:fd:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iQrZ4kVO9yXZQeAKb/n7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl NzU4MjAwHhcNMjYwMTI2MDkwMTA2WhcNMjYwMTI3MDkwMTA2WjAzMTEwLwYDVQQD Eyg1M2ZmMTg1ZjQ0ZTk4MDVjNGQ3MTk4YmI4YWJlZjIwNDYyOTgxYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWCiW7c9P5SU+0nJH1p3wmlh3Wqt CUsWEcWbjkwuPX/R+HFEXpWx80W+qzl2EIIGN/G+adPJ8nsI38EYltG+bawqvROq w36cfBAs+PHQhhXQUEeVsh3urbv2tug67M5kr0WuuVfidbkQcqb3Mt16Dvv67SMC uteUHtqmolu+wpwByUXDn0D3LSvezvKTZX06mzIs+4oXAW5RBo6kbHWXijvG8Qiw iOPn56zfHc9US3UP+6w2AAmuy5+U2aTOpdhw4F0VylXks6O1f3Mn/7fCXWRKbu+Q IhxWi/NA1NHWXrZAdpMve4rfQqASGvkB7bMGh0a6KKd2Riixg6zvOy+W3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFP/GF9E6YBcTXGYu4q+8gRimBx6MB8GA1UdIwQY MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4 LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQJd2i4o ChvZ0CkaMRqWTrSzDBFB4TdQpYeTiHl1JaabfP/KBOjOtPEWy5h/9WF4fi2cz4C8 akf5RDHdmURv+yJS/J5ZIxkiEB4cXUD3uYRUsvL0Iybf5T2ZAC5sBGkifoIMAfu/ iZybQ3OITLleOV7dRHwPUkojhDRyjGOwyNriDSbuGmheyYnrbk5feS6beAV5Av0u NWK/TPJtg7ppS72Aju30MckQFdIOSQaSaN+E6Bn+I+R+lvb3kou1TBQ2uVVryiKF uQwuL/8MDzocWahn+rPD09rPgUcaC8VVr2r3ZDuGdDEV4eJdwms6sd6shnMo8ZKb M0KGN49pJDv9Rg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:26 2026 by rpki-client