This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json) Hash identifier: AiczlncIqoACY2oysVcVFJF9GQQAVsvVbU6TXE5uUeM= Subject key identifier: 0A:EF:D9:95:BE:60:31:03:61:DA:0B:BC:C7:BA:F2:86:78:63:82:05 Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Certificate serial: 019BE0000990C5471D19463AD5F48E6EE463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft Manifest number: 1470 Signing time: Wed 21 Jan 2026 10:00:57 +0000 Manifest this update: Wed 21 Jan 2026 10:00:57 +0000 Manifest next update: Thu 22 Jan 2026 10:00:57 +0000 Files and hashes: 1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=) 2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: 41lvR/rusrD6I4s+bItU+Q0DXqiDTIKJO+YtiysCqc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:09:90:c5:47:1d:19:46:3a:d5:f4:8e:6e:e4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Validity Not Before: Jan 21 10:00:57 2026 GMT Not After : Jan 22 10:00:57 2026 GMT Subject: CN=0aefd995be60310361da0bbcc7baf28678638205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:2e:30:be:72:23:66:62:b5:b4:86:42:9c: 3f:3f:d5:53:a0:bf:67:4c:00:4c:86:a0:d3:04:53: c3:93:74:b7:32:50:41:7e:eb:7e:9d:47:0d:56:ea: ed:73:cd:71:74:41:e6:5c:56:09:f6:79:01:98:4a: 39:3c:f0:60:a6:29:d5:37:14:07:4e:e6:e6:15:05: 3a:59:32:e0:ad:15:1e:8e:ce:56:66:ac:c0:a8:f4: 37:1b:59:70:aa:7f:42:96:e5:38:ee:55:97:3d:c2: 3a:92:66:5e:93:97:aa:31:b3:1b:ba:d6:ad:2a:38: b3:29:9f:60:ba:66:5c:49:01:44:dc:1b:38:c4:a2: 7a:2e:1d:65:8d:02:dc:9e:7a:41:e9:0f:e8:fa:b4: a5:1b:c5:27:ea:dd:d8:11:a8:e3:bd:07:5c:50:14: b4:b2:55:92:c9:a2:ff:69:f6:31:ee:f6:9e:79:ee: 25:d8:5f:f2:44:46:b7:ab:67:a4:b3:7b:eb:78:45: 6c:cf:63:fc:8e:5b:ec:dd:23:df:00:33:df:ce:9c: 3e:0c:f6:12:09:0c:52:3a:27:14:34:40:67:c9:01: a9:3a:4c:98:94:86:b5:9d:c0:e4:96:1c:da:25:94: 28:4b:8c:ab:7e:c4:5e:1c:3b:39:27:bb:f2:68:e2: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EF:D9:95:BE:60:31:03:61:DA:0B:BC:C7:BA:F2:86:78:63:82:05 X509v3 Authority Key Identifier: keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6d:41:89:c5:e8:37:f0:93:74:68:d1:56:0f:d5:34:23:e1: 00:d3:1b:4f:83:50:4d:73:b3:8d:34:22:86:56:a8:98:c3:d4: 66:73:8b:ac:17:45:cb:26:2c:f8:5f:88:78:25:08:3b:cf:77: e0:c4:f0:fb:fd:94:63:5e:53:78:6b:79:71:b5:be:9f:1b:0b: 08:e9:1f:eb:23:91:00:8c:72:2e:4b:d5:c5:2e:a8:9d:45:59: 05:b5:22:69:8a:16:6b:eb:45:ed:08:7e:e3:01:22:b2:af:c3: aa:62:c2:37:e1:cc:0a:4e:bb:49:37:0a:c7:12:2e:cd:1a:69: dc:0a:de:0d:72:4b:8b:3b:5c:98:ca:46:75:81:f8:d0:c8:ef: 3b:9a:cd:b4:a9:38:d3:43:cb:e0:ba:61:48:97:e8:41:e1:4d: cd:35:34:f5:5d:7f:f5:50:1c:60:3f:8c:87:a2:25:72:ec:90: ab:98:36:47:a0:1e:83:7c:10:04:02:0e:5f:6a:26:04:db:27: 8c:e7:77:a6:fd:8d:b0:16:6e:07:4b:bc:59:d1:6d:93:37:4d: 65:59:eb:85:48:21:1a:ce:9a:ef:dc:17:6a:22:2f:58:40:76: 84:29:03:f1:c1:fb:72:1e:21:e4:88:3c:09:37:85:d8:e4:ba: db:8f:28:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAAmQxUcdGUY61fSObuRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2I4OWExMTExNGVmYmUwZTFlMjU1MGVjZGEzMzZmZDc5 MmVjNWYwHhcNMjYwMTIxMTAwMDU3WhcNMjYwMTIyMTAwMDU3WjAzMTEwLwYDVQQD EygwYWVmZDk5NWJlNjAzMTAzNjFkYTBiYmNjN2JhZjI4Njc4NjM4MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIguML5yI2ZitbSGQpw/P9VToL9n TABMhqDTBFPDk3S3MlBBfut+nUcNVurtc81xdEHmXFYJ9nkBmEo5PPBgpinVNxQH TubmFQU6WTLgrRUejs5WZqzAqPQ3G1lwqn9CluU47lWXPcI6kmZek5eqMbMbutat KjizKZ9gumZcSQFE3Bs4xKJ6Lh1ljQLcnnpB6Q/o+rSlG8Un6t3YEajjvQdcUBS0 slWSyaL/afYx7vaeee4l2F/yREa3q2eks3vreEVsz2P8jlvs3SPfADPfzpw+DPYS CQxSOicUNEBnyQGpOkyYlIa1ncDklhzaJZQoS4yrfsReHDs5J7vyaOIykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArv2ZW+YDEDYdoLvMe68oZ4Y4IFMB8GA1UdIwQY MBaAFAjLiaERFO++Dh4lUOzaM2/XkuxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEt NGFmMWZhMzZjZGI5LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEtNGFmMWZhMzZjZGI5 LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm1BicXo N/CTdGjRVg/VNCPhANMbT4NQTXOzjTQihlaomMPUZnOLrBdFyyYs+F+IeCUIO893 4MTw+/2UY15TeGt5cbW+nxsLCOkf6yORAIxyLkvVxS6onUVZBbUiaYoWa+tF7Qh+ 4wEisq/DqmLCN+HMCk67STcKxxIuzRpp3AreDXJLiztcmMpGdYH40MjvO5rNtKk4 00PL4LphSJfoQeFNzTU09V1/9VAcYD+Mh6IlcuyQq5g2R6Aeg3wQBAIOX2omBNsn jOd3pv2NsBZuB0u8WdFtkzdNZVnrhUghGs6a79wXaiIvWEB2hCkD8cH7ch4h5Ig8 CTeF2OS6248oiA== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:28 2026 by rpki-client