This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json) Hash identifier: uofhcEEY5rRtgbYSr+SxN5M8bR1993Cdo46w3q49i/k= Subject key identifier: CF:1F:6D:9D:DB:2F:5C:E9:74:65:38:CC:D0:66:B8:98:B3:DC:74:8F Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c Certificate serial: 019BF9F6A2DEDB425CDBE5BB4EFACFCF848B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft Manifest number: 0C29 Signing time: Mon 26 Jan 2026 11:00:48 +0000 Manifest this update: Mon 26 Jan 2026 11:00:48 +0000 Manifest next update: Tue 27 Jan 2026 11:00:48 +0000 Files and hashes: 1: SP1oOwp0hXl1L0PpjGJ2uhrOHbQ.roa (hash: VQoqVeb1sfiFZgtcNVlhBYDN5Dw/Su2w/ppnhIR9KAU=) 2: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: LkqUM+1DFWJxKDME/uKoSpP5NYlEfF08bRfVAHfNmgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:a2:de:db:42:5c:db:e5:bb:4e:fa:cf:cf:84:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c Validity Not Before: Jan 26 11:00:48 2026 GMT Not After : Jan 27 11:00:48 2026 GMT Subject: CN=cf1f6d9ddb2f5ce9746538ccd066b898b3dc748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:7b:84:34:57:95:17:6b:4d:0d:a3:a8:0d: ba:f7:b7:f7:06:21:01:77:f9:c8:31:db:09:1d:66: 8f:16:d5:aa:3d:f2:b5:46:85:08:d2:b3:bd:f4:fd: 32:60:23:53:1b:65:fc:bf:8f:4d:e7:98:1f:c1:66: 0e:31:d4:a3:3c:52:e6:14:1c:cc:28:e6:69:da:a9: 5a:19:57:20:06:9f:fa:c5:6f:19:33:77:98:29:42: 87:9c:5a:4f:74:fb:22:08:a0:88:94:77:06:e5:8b: de:61:a8:a1:93:a6:c9:34:2e:2e:e0:2f:74:3e:fb: 8b:a8:af:3a:a8:48:78:c3:6d:a5:93:f5:cc:12:9e: f1:16:91:2f:53:e0:47:09:4d:8b:d6:0e:94:e1:1f: 72:c6:cf:f9:a7:1a:a6:3e:d9:96:49:94:cb:ce:b2: c1:32:75:c3:35:54:af:6d:f7:6a:f8:8c:25:d0:85: e3:31:38:e5:60:48:e0:c1:9b:ac:db:f0:77:5f:72: 01:7b:10:a4:9d:0f:23:12:01:c7:bc:12:03:d0:2c: e1:b8:cf:73:04:27:f1:68:17:3d:db:4b:0b:b2:00: 69:1e:27:b2:4a:2a:5d:f1:fe:ee:53:99:90:fe:71: 6d:0a:d4:73:bf:e4:c2:8a:01:69:13:af:37:80:39: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:6D:9D:DB:2F:5C:E9:74:65:38:CC:D0:66:B8:98:B3:DC:74:8F X509v3 Authority Key Identifier: keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:94:09:f7:72:80:aa:4d:3e:5d:d7:23:af:4b:c2:f6:24:e0: 69:b6:81:ed:9d:cc:c2:7d:46:9a:c4:e9:b1:be:2f:96:b9:c5: 08:91:0d:8b:73:06:55:0a:6e:ad:be:b3:08:bf:60:03:ec:f5: dc:a0:3e:4f:04:18:9f:fe:02:c2:d9:4f:ac:53:7a:f0:0e:39: 2f:11:6a:63:f2:04:1e:e0:ab:9a:00:47:05:50:ba:0e:79:cb: 2b:9a:fd:48:38:79:b2:51:d9:49:0a:f2:cb:1f:7a:7d:79:cc: 94:0a:7e:08:d1:90:c2:6d:5b:c4:e4:c2:1c:2d:78:7e:5b:9a: b5:64:78:a6:c8:65:b5:1c:05:b7:51:f9:fd:a0:26:40:75:42: 0b:27:ab:20:ad:c8:6b:c7:cd:ac:fd:64:76:7c:d6:11:de:75: 55:f1:c9:8f:c6:f1:97:cd:4f:b8:be:6d:4b:9f:fd:d3:2c:cb: 22:28:7f:21:78:06:25:5d:ca:7c:52:7f:3a:09:31:ba:bc:f8: 84:d5:ad:4a:51:93:cf:bb:b0:5e:38:5b:1d:34:96:7d:10:d8: 7c:88:b7:51:9a:f9:a7:5e:82:34:e2:05:c4:e7:76:71:58:23: 97:9a:d8:f8:bf:69:ca:0e:87:71:9e:e5:a0:3d:e3:d7:ce:df: 4d:3a:dc:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59qLe20Jc2+W7TvrPz4SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl MzY2MmMwHhcNMjYwMTI2MTEwMDQ4WhcNMjYwMTI3MTEwMDQ4WjAzMTEwLwYDVQQD EyhjZjFmNmQ5ZGRiMmY1Y2U5NzQ2NTM4Y2NkMDY2Yjg5OGIzZGM3NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOR7hDRXlRdrTQ2jqA2697f3BiEB d/nIMdsJHWaPFtWqPfK1RoUI0rO99P0yYCNTG2X8v49N55gfwWYOMdSjPFLmFBzM KOZp2qlaGVcgBp/6xW8ZM3eYKUKHnFpPdPsiCKCIlHcG5YveYaihk6bJNC4u4C90 PvuLqK86qEh4w22lk/XMEp7xFpEvU+BHCU2L1g6U4R9yxs/5pxqmPtmWSZTLzrLB MnXDNVSvbfdq+Iwl0IXjMTjlYEjgwZus2/B3X3IBexCknQ8jEgHHvBID0CzhuM9z BCfxaBc920sLsgBpHieySipd8f7uU5mQ/nFtCtRzv+TCigFpE683gDnV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8fbZ3bL1zpdGU4zNBmuJiz3HSPMB8GA1UdIwQY MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt NTM4YjQ3NzA5OTU2LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2 LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupQJ93KA qk0+Xdcjr0vC9iTgabaB7Z3Mwn1GmsTpsb4vlrnFCJENi3MGVQpurb6zCL9gA+z1 3KA+TwQYn/4CwtlPrFN68A45LxFqY/IEHuCrmgBHBVC6DnnLK5r9SDh5slHZSQry yx96fXnMlAp+CNGQwm1bxOTCHC14fluatWR4pshltRwFt1H5/aAmQHVCCyerIK3I a8fNrP1kdnzWEd51VfHJj8bxl81PuL5tS5/90yzLIih/IXgGJV3KfFJ/Ogkxurz4 hNWtSlGTz7uwXjhbHTSWfRDYfIi3UZr5p16CNOIFxOd2cVgjl5rY+L9pyg6HcZ7l oD3j187fTTrcNQ== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:38 2026 by rpki-client