This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: 3C9H4MTZYlbOyVPaX8mx2DNsgYQM5NdJ5TI3VSYZvEs= Subject key identifier: 4C:4D:50:20:37:E7:86:AD:06:78:9D:46:86:15:3A:DA:72:F3:4B:08 Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019BFE419E61C569D629A22210177FEEFD81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 04D1 Signing time: Tue 27 Jan 2026 07:01:11 +0000 Manifest this update: Tue 27 Jan 2026 07:01:11 +0000 Manifest next update: Wed 28 Jan 2026 07:01:11 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: WHCbJZkhey9lhVviozLFmS3NvW1q6IU50VWauJ+rjNU=) 2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:9e:61:c5:69:d6:29:a2:22:10:17:7f:ee:fd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Jan 27 07:01:11 2026 GMT Not After : Jan 28 07:01:11 2026 GMT Subject: CN=4c4d502037e786ad06789d4686153ada72f34b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:f8:25:9f:08:46:40:cb:7e:3e:a6:e7:c2: ab:71:f0:fe:36:e7:74:6b:f9:8e:8e:15:47:6c:00: 89:68:3d:de:ee:ce:df:ef:0a:e3:c1:85:59:e4:93: c9:51:6f:86:a4:82:1f:f9:38:99:27:98:f4:35:32: 3f:52:90:d6:e7:69:51:c2:3f:e6:ec:07:e9:b1:70: 30:ce:ec:3c:ae:98:51:ac:e9:bc:8a:0e:a0:d7:49: 1d:3c:25:a4:11:11:43:d1:db:58:87:bb:47:ae:ad: 0d:10:3c:23:e8:a0:79:d5:10:f0:9f:1a:84:ff:97: d3:41:c3:c8:52:5f:ea:b1:a8:46:8e:f9:5a:95:be: a8:7f:d3:36:a0:e9:ee:f7:9f:91:8b:3f:24:5f:cf: 6c:53:71:e8:69:a9:84:5f:4b:26:38:cb:fd:e0:4a: 52:d8:e3:1b:63:88:2b:ae:98:0e:6c:ea:27:cb:b0: 79:1c:83:69:1f:7b:73:56:4c:23:8d:0d:38:1f:32: 4d:7a:a9:24:78:3a:5a:e7:a6:b5:36:d4:8f:5e:f3: f9:63:cc:bd:56:8f:e6:7c:1e:0e:f6:71:92:d8:f4: ed:71:d6:63:78:00:9e:0e:fb:c5:9a:e2:64:e7:ac: 44:f8:95:ec:7e:a4:19:e8:83:f5:f1:1e:67:4a:b9: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:50:20:37:E7:86:AD:06:78:9D:46:86:15:3A:DA:72:F3:4B:08 X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:c3:32:8a:45:92:78:b1:69:d6:bc:7c:15:62:40:1c:72: 0d:e1:04:73:8a:72:d0:5a:92:32:dd:33:26:24:ef:e8:2a:bb: 51:7e:9a:88:bd:80:d3:41:6f:7f:96:95:5a:da:15:4e:41:d4: f0:0d:c4:26:5b:93:a0:4b:23:09:8e:dd:d5:a1:e0:74:8f:ca: ca:ad:3f:79:15:dd:96:16:a8:18:c4:bd:cd:9f:ef:f2:25:e4: 11:34:ee:23:0b:5d:52:39:47:7c:a2:7b:66:ce:8e:d7:d7:c0: c5:20:87:77:4e:40:5c:0b:df:4c:e2:ba:56:0b:6d:cb:8e:7a: d2:aa:e6:97:9e:03:1d:f0:2a:d5:e3:dc:d2:99:08:5c:86:de: 85:fc:b1:61:1f:b1:29:7c:e4:4e:89:30:a6:09:36:23:ee:38: 9c:74:8d:5c:ca:d2:3a:e6:93:fb:64:08:ba:3e:9b:78:fb:3b: b8:2b:6e:c8:79:cf:58:78:aa:fb:01:44:2f:54:32:7d:fc:f5: 3e:c6:33:47:c2:78:7d:1f:0c:1e:fb:55:72:ae:1a:8d:b0:0b: 58:ad:d2:0d:d9:2f:8e:48:c5:c6:c5:c2:06:3a:83:df:8d:8d: db:3b:0b:37:5b:0e:33:84:ec:85:d9:ec:2f:5f:94:e3:cc:f8: 5e:5a:46:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QZ5hxWnWKaIiEBd/7v2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjYwMTI3MDcwMTExWhcNMjYwMTI4MDcwMTExWjAzMTEwLwYDVQQD Eyg0YzRkNTAyMDM3ZTc4NmFkMDY3ODlkNDY4NjE1M2FkYTcyZjM0YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaP4JZ8IRkDLfj6m58KrcfD+Nud0 a/mOjhVHbACJaD3e7s7f7wrjwYVZ5JPJUW+GpIIf+TiZJ5j0NTI/UpDW52lRwj/m 7AfpsXAwzuw8rphRrOm8ig6g10kdPCWkERFD0dtYh7tHrq0NEDwj6KB51RDwnxqE /5fTQcPIUl/qsahGjvlalb6of9M2oOnu95+Riz8kX89sU3HoaamEX0smOMv94EpS 2OMbY4grrpgObOony7B5HINpH3tzVkwjjQ04HzJNeqkkeDpa56a1NtSPXvP5Y8y9 Vo/mfB4O9nGS2PTtcdZjeACeDvvFmuJk56xE+JXsfqQZ6IP18R5nSrkI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExNUCA354atBnidRoYVOtpy80sIMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed/DMopF knixada8fBViQBxyDeEEc4py0FqSMt0zJiTv6Cq7UX6aiL2A00Fvf5aVWtoVTkHU 8A3EJluToEsjCY7d1aHgdI/Kyq0/eRXdlhaoGMS9zZ/v8iXkETTuIwtdUjlHfKJ7 Zs6O19fAxSCHd05AXAvfTOK6Vgtty4560qrml54DHfAq1ePc0pkIXIbehfyxYR+x KXzkTokwpgk2I+44nHSNXMrSOuaT+2QIuj6bePs7uCtuyHnPWHiq+wFEL1Qyffz1 PsYzR8J4fR8MHvtVcq4ajbALWK3SDdkvjkjFxsXCBjqD342N2zsLN1sOM4Tshdns L1+U48z4XlpGzg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:30 2026 by rpki-client