This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json) Hash identifier: rmDrf/TXpa3vt+62Bm2kKqgdXuH6GlG00H5HuR52Bg0= Subject key identifier: C4:86:79:BA:B1:AF:20:7A:5A:4C:02:03:BE:92:68:75:A2:DE:B1:B6 Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Certificate serial: 019BFD2EC49C92E2CABD5E476C91F0FAD90B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft Manifest number: 175C Signing time: Tue 27 Jan 2026 02:00:59 +0000 Manifest this update: Tue 27 Jan 2026 02:00:59 +0000 Manifest next update: Wed 28 Jan 2026 02:00:59 +0000 Files and hashes: 1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=) 2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: Tk0m2mzu+Tzu03KPY0ViNEX9sG9WWApHxe0BiCzpxs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:c4:9c:92:e2:ca:bd:5e:47:6c:91:f0:fa:d9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82 Validity Not Before: Jan 27 02:00:59 2026 GMT Not After : Jan 28 02:00:59 2026 GMT Subject: CN=c48679bab1af207a5a4c0203be926875a2deb1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:92:c1:85:15:6e:fe:c6:87:8f:19:f3:88: c6:73:eb:dc:af:80:0b:5c:15:5a:5d:ec:78:61:b0: 2a:e6:21:ec:65:c9:f8:08:5b:f0:d7:85:b4:ec:59: f1:0e:83:77:69:d6:3a:59:2f:3c:47:8c:27:31:79: 29:10:e8:be:df:1d:15:f0:d3:70:dd:b6:e7:93:17: 9e:e4:c8:85:1d:7c:de:dd:ba:5d:a6:4a:95:d5:8a: e5:32:c1:54:71:f7:60:97:3b:b8:6a:9c:9b:e2:81: 5c:90:31:87:13:58:e7:66:5c:c2:56:62:8e:10:51: 45:a4:22:c0:a2:27:06:7a:0a:6a:31:c2:7c:53:20: 46:c5:e4:59:92:ed:5d:18:c4:5a:dd:e9:b0:f7:17: c1:83:5a:57:83:02:c2:e0:72:25:df:0a:63:b9:bd: e1:9f:3f:c1:3e:e2:8a:b3:1e:29:d3:04:05:ee:0e: 29:fa:13:52:17:3f:a1:6c:ca:35:d9:de:1a:08:96: 08:17:49:93:dd:84:48:bf:45:02:a8:3e:e7:25:82: 20:80:e1:72:bb:f3:85:bb:1f:8f:0f:c4:d7:a9:43: 1e:27:7d:f2:6a:ad:e6:65:16:c6:51:be:69:15:56: 18:2f:25:38:72:64:46:08:11:35:a2:e7:c7:b6:f1: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:79:BA:B1:AF:20:7A:5A:4C:02:03:BE:92:68:75:A2:DE:B1:B6 X509v3 Authority Key Identifier: keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:7e:06:69:91:46:e7:23:c0:d3:ec:61:87:d0:51:d3:8f: 3f:20:bd:b3:8f:a0:fb:98:8c:bb:95:b0:5d:59:73:62:34:10: a2:84:ca:20:01:2a:c5:f3:1e:d1:84:b7:4b:12:17:82:27:d4: 97:98:6d:13:5a:56:ca:b4:a5:5d:58:1a:99:6b:3e:02:34:7d: 10:2a:89:4e:75:3b:ed:28:fb:c9:d6:a3:76:2e:e0:eb:40:58: 55:cd:24:6a:8c:68:53:a7:4e:9c:ee:e8:de:be:c1:e6:d4:d5: 8f:79:84:ff:2d:01:1f:3d:44:df:1a:32:b6:13:30:a9:e1:44: 12:e1:ea:fc:75:3b:e9:e5:fc:ce:fe:27:bb:8d:8c:6f:e0:22: a1:e6:6d:46:4b:a4:25:0c:02:42:9c:3d:cc:d6:d3:a9:26:1c: c0:9e:7c:50:cf:46:da:98:18:c9:62:45:8c:17:4c:d2:bc:4c: 96:f2:d8:1b:76:00:a9:dd:96:d1:5b:eb:f2:99:e7:52:c5:cb: 2e:88:42:9a:f5:9b:ff:08:79:15:a9:0c:3e:49:80:7a:1a:bf: 92:ec:5e:54:97:b9:b7:70:53:66:ab:10:ed:c1:c1:8c:1f:f6: ed:02:0b:31:f2:3b:1a:d3:26:9d:c4:7b:f5:22:86:5d:ba:4d: 9f:eb:ea:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LsSckuLKvV5HbJHw+tkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzc4NDU5OTU3NzZjZjZmMmEwODM3ZjdhZDRjMWE5MWJj OTdkODIwHhcNMjYwMTI3MDIwMDU5WhcNMjYwMTI4MDIwMDU5WjAzMTEwLwYDVQQD EyhjNDg2NzliYWIxYWYyMDdhNWE0YzAyMDNiZTkyNjg3NWEyZGViMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxaSwYUVbv7Gh48Z84jGc+vcr4AL XBVaXex4YbAq5iHsZcn4CFvw14W07FnxDoN3adY6WS88R4wnMXkpEOi+3x0V8NNw 3bbnkxee5MiFHXze3bpdpkqV1YrlMsFUcfdglzu4apyb4oFckDGHE1jnZlzCVmKO EFFFpCLAoicGegpqMcJ8UyBGxeRZku1dGMRa3emw9xfBg1pXgwLC4HIl3wpjub3h nz/BPuKKsx4p0wQF7g4p+hNSFz+hbMo12d4aCJYIF0mT3YRIv0UCqD7nJYIggOFy u/OFux+PD8TXqUMeJ33yaq3mZRbGUb5pFVYYLyU4cmRGCBE1oufHtvEd/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSGebqxryB6WkwCA76SaHWi3rG2MB8GA1UdIwQY MBaAFHJ3hFmVd2z28qCDf3rUwakbyX2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgt ZWVlNmJhMTgyOWI0LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82ZTkwZDktOGNjZS00ZmY1LWFiZDgtZWVlNmJhMTgyOWI0 LzEvY25lRVdaVjNiUGJ5b0lOX2V0VEJxUnZKZllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL75+BmmR RucjwNPsYYfQUdOPPyC9s4+g+5iMu5WwXVlzYjQQooTKIAEqxfMe0YS3SxIXgifU l5htE1pWyrSlXVgamWs+AjR9ECqJTnU77Sj7ydajdi7g60BYVc0kaoxoU6dOnO7o 3r7B5tTVj3mE/y0BHz1E3xoythMwqeFEEuHq/HU76eX8zv4nu42Mb+AioeZtRkuk JQwCQpw9zNbTqSYcwJ58UM9G2pgYyWJFjBdM0rxMlvLYG3YAqd2W0Vvr8pnnUsXL LohCmvWb/wh5FakMPkmAehq/kuxeVJe5t3BTZqsQ7cHBjB/27QILMfI7GtMmncR7 9SKGXbpNn+vqog== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:41 2026 by rpki-client