This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json) Hash identifier: VKzlcA8oOy98yZXlAkq88OL1QeipaKIYwWEBX3wSGXE= Subject key identifier: 05:40:E9:89:31:8B:77:64:B1:14:AD:EC:43:AD:48:EB:C0:0E:C5:69 Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Certificate serial: 019BD0FA59E8F1B5B8C54C64000D0C1DE315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft Manifest number: 05CF Signing time: Sun 18 Jan 2026 12:00:26 +0000 Manifest this update: Sun 18 Jan 2026 12:00:26 +0000 Manifest next update: Mon 19 Jan 2026 12:00:26 +0000 Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: xHsv8RQBgK21SUG1UGdI8ZtD+5mhpoJBtCu22oGfmfc=) 2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:fa:59:e8:f1:b5:b8:c5:4c:64:00:0d:0c:1d:e3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69 Validity Not Before: Jan 18 12:00:26 2026 GMT Not After : Jan 19 12:00:26 2026 GMT Subject: CN=0540e989318b7764b114adec43ad48ebc00ec569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:13:d0:22:4d:07:e8:00:64:5b:40:c8:b6: 10:bc:e4:1a:70:a7:e9:2f:5e:74:64:21:c0:2c:dc: 00:95:64:63:62:ff:fa:1a:8a:99:72:d9:37:88:fc: 2f:00:3d:fd:82:13:91:54:b5:79:ce:b8:cd:2e:18: ff:a0:8a:de:0c:d5:ee:a8:fa:b2:b0:58:d3:6a:da: e4:4e:c6:23:e0:69:ac:bb:a4:da:60:c2:f8:08:9d: 89:b6:4a:85:11:83:0e:cd:29:33:bc:fd:bb:6c:c5: 18:24:a0:9f:96:26:71:14:15:81:f5:57:a2:ef:42: 21:9c:a0:c8:17:4e:50:96:a8:21:4d:76:63:bc:c8: 2e:ae:0b:da:e0:86:ea:01:fa:bc:2f:8f:e4:12:82: c3:23:0f:c5:7e:ff:0e:5b:00:f1:04:57:30:ea:f1: d8:12:b5:4a:a0:ce:c0:bd:0f:78:3a:f0:8c:f2:60: de:c9:2b:a0:3f:c8:98:e3:b9:67:56:46:e0:67:1d: 0f:dd:e3:42:20:dd:7f:73:aa:30:f1:be:47:de:25: 41:78:50:ab:c2:9c:5e:71:08:51:fd:59:0a:68:46: 69:5c:72:5f:a6:7a:d9:d3:6c:05:18:96:3b:f0:c9: c9:67:58:b4:33:1c:eb:53:9f:41:74:54:42:60:b1: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:E9:89:31:8B:77:64:B1:14:AD:EC:43:AD:48:EB:C0:0E:C5:69 X509v3 Authority Key Identifier: keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:83:8a:37:d0:5d:f8:ae:26:a2:26:da:ea:64:ad:54:cf:5f: c0:3f:33:07:cc:f4:75:82:29:44:8f:50:30:b0:d1:13:39:05: 8d:dd:84:51:47:93:b5:cc:47:19:19:01:64:65:41:32:16:a9: 89:03:4a:ae:01:09:de:e3:69:f6:4a:8b:63:21:24:0a:9a:cc: 51:01:d7:c2:dd:0d:5a:7c:41:a6:2f:cd:a1:c0:50:ed:f1:12: 06:ba:99:bf:52:ab:43:e5:24:72:8c:10:87:1b:22:68:31:9f: 36:27:d4:34:44:e9:2e:10:2e:45:5f:44:f6:59:7e:f5:55:4c: 54:f3:b6:fc:fa:d8:82:5d:95:bb:50:a4:cf:b9:fc:46:84:b5: 72:45:62:79:94:e4:a8:a7:11:69:21:42:45:25:99:e5:49:5e: a1:f0:25:48:26:ea:08:18:12:4c:a0:49:18:a5:c6:69:74:ba: d0:4e:26:c8:c5:2c:ec:95:ba:dd:9d:8e:77:09:ea:d7:5d:41: 75:5d:48:e7:29:88:96:6e:f7:fa:ed:3f:03:2e:a1:40:9d:46: 15:6b:be:e7:95:fc:98:69:59:c8:b0:60:ae:39:df:fe:7e:13: a9:73:8c:1d:49:58:1b:80:e9:3f:c7:0e:4d:3b:e2:ef:4a:6b: 76:e8:f0:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQ+lno8bW4xUxkAA0MHeMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0 OThiNjkwHhcNMjYwMTE4MTIwMDI2WhcNMjYwMTE5MTIwMDI2WjAzMTEwLwYDVQQD EygwNTQwZTk4OTMxOGI3NzY0YjExNGFkZWM0M2FkNDhlYmMwMGVjNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0T0CJNB+gAZFtAyLYQvOQacKfp L150ZCHALNwAlWRjYv/6GoqZctk3iPwvAD39ghORVLV5zrjNLhj/oIreDNXuqPqy sFjTatrkTsYj4Gmsu6TaYML4CJ2JtkqFEYMOzSkzvP27bMUYJKCfliZxFBWB9Vei 70IhnKDIF05QlqghTXZjvMgurgva4IbqAfq8L4/kEoLDIw/Ffv8OWwDxBFcw6vHY ErVKoM7AvQ94OvCM8mDeySugP8iY47lnVkbgZx0P3eNCIN1/c6ow8b5H3iVBeFCr wpxecQhR/VkKaEZpXHJfpnrZ02wFGJY78MnJZ1i0MxzrU59BdFRCYLGNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVA6Ykxi3dksRSt7EOtSOvADsVpMB8GA1UdIwQY MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0 LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoOKN9Bd +K4moiba6mStVM9fwD8zB8z0dYIpRI9QMLDREzkFjd2EUUeTtcxHGRkBZGVBMhap iQNKrgEJ3uNp9kqLYyEkCprMUQHXwt0NWnxBpi/NocBQ7fESBrqZv1KrQ+UkcowQ hxsiaDGfNifUNETpLhAuRV9E9ll+9VVMVPO2/PrYgl2Vu1Ckz7n8RoS1ckVieZTk qKcRaSFCRSWZ5UleofAlSCbqCBgSTKBJGKXGaXS60E4myMUs7JW63Z2Odwnq111B dV1I5ymIlm73+u0/Ay6hQJ1GFWu+55X8mGlZyLBgrjnf/n4TqXOMHUlYG4DpP8cO TTvi70prdujw0w== -----END CERTIFICATE-----Generated at Sun Jan 18 14:17:47 2026 by rpki-client