This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json) Hash identifier: EdIWN1HQ9A4rwcxP24DsFjo/Rubd+z21FTwRQzCkwVk= Subject key identifier: CC:B6:33:85:E0:C3:C6:6A:1D:D9:14:AB:2F:AC:D3:0B:66:82:87:EE Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b Certificate serial: 019BAFEFC48C961070EF01387F8C76BF834E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft Manifest number: 1344 Signing time: Mon 12 Jan 2026 02:01:24 +0000 Manifest this update: Mon 12 Jan 2026 02:01:24 +0000 Manifest next update: Tue 13 Jan 2026 02:01:24 +0000 Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 2LqWIehQQGQ9IvGrmvG3VfW4woVrWvzGOgGitDoY1sw=) 2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:ef:c4:8c:96:10:70:ef:01:38:7f:8c:76:bf:83:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b Validity Not Before: Jan 12 02:01:24 2026 GMT Not After : Jan 13 02:01:24 2026 GMT Subject: CN=ccb63385e0c3c66a1dd914ab2facd30b668287ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:89:f7:d4:28:48:82:eb:2f:55:47:f1:09: fc:ac:54:68:9d:e6:6f:e1:9c:c4:7d:e8:14:c3:fe: cb:f5:b6:e8:d5:f7:76:59:ef:45:77:bd:56:c0:0c: e2:80:26:b1:b7:ba:86:2d:b6:08:0b:e7:c8:38:ff: 6e:fe:8b:e3:62:b8:ac:03:f0:07:02:f3:25:e9:4b: 4c:46:6e:c5:a7:5c:cc:f9:e6:ba:4c:aa:c8:f8:a1: 32:6d:f3:e5:f0:4b:70:67:14:44:28:e8:6d:f0:72: d1:38:44:81:cd:04:8e:29:ab:fa:12:96:40:a3:58: e2:7c:d2:9d:50:e3:6a:fb:2a:cb:d9:76:09:31:48: 5b:c1:2c:9d:4e:13:8e:8a:f4:99:a5:44:09:f0:37: e6:bc:04:b5:19:79:58:7a:0f:52:11:c5:d9:97:ab: 32:65:f8:c3:35:21:2a:fd:37:9a:7e:41:04:fe:df: 1f:53:3a:76:fe:bf:78:a6:a5:6a:87:7d:d5:b5:bd: 95:a3:2a:0e:60:66:fe:6b:b9:65:aa:7e:7c:67:94: 33:93:19:e5:98:3a:29:4e:55:9a:f6:7a:6d:66:ad: 60:85:46:00:d5:3b:43:ab:7f:9e:3a:f8:8c:e2:04: 4f:b9:de:6c:48:09:be:11:c5:0d:d3:02:7a:a3:d0: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:33:85:E0:C3:C6:6A:1D:D9:14:AB:2F:AC:D3:0B:66:82:87:EE X509v3 Authority Key Identifier: keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:29:0a:c9:98:1f:6a:17:2c:03:0a:2c:c6:ec:cd:b5:79:ae: 66:7b:18:16:66:95:fc:ec:da:8f:6b:e6:a5:4c:c5:6c:ef:4a: 84:8b:a0:f4:51:4b:41:39:ae:e6:24:e4:fe:37:4f:72:5f:1e: 8c:b5:93:06:61:4d:ae:b3:0c:86:10:b8:75:ce:78:82:a6:c3: af:51:ed:52:a5:11:f0:1a:c1:c8:66:ce:d7:6e:39:80:7d:43: 9d:cd:f0:c3:2a:75:b9:4c:e4:1a:22:c5:a0:cc:97:c8:4a:57: 02:8c:f5:cd:c9:9e:2f:d0:f9:ed:8c:30:b9:f7:a6:90:23:4a: bf:8d:91:ce:3e:11:e8:a9:c1:60:68:2b:d9:de:0e:f0:71:15: ac:b1:89:b2:a0:6e:2b:35:cc:92:d8:6a:42:7d:53:d3:17:06: 82:bf:a0:61:ef:53:c5:b1:ff:49:5d:6c:7e:a0:5e:e4:ad:0d: d2:8a:71:62:2a:1f:c6:3f:8a:fd:ac:41:b6:ea:07:b9:56:59: 80:5b:0a:a3:bc:8a:bf:84:10:90:17:c5:ee:8f:40:6d:72:b5: 92:1f:c9:2f:0d:e7:4e:96:87:01:29:35:f2:89:93:ab:f7:1c: 44:24:df:b7:f6:7a:17:4f:ff:f4:d3:60:b0:cf:36:13:d7:be: 92:f8:21:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuv78SMlhBw7wE4f4x2v4NOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0 Njg5NGIwHhcNMjYwMTEyMDIwMTI0WhcNMjYwMTEzMDIwMTI0WjAzMTEwLwYDVQQD EyhjY2I2MzM4NWUwYzNjNjZhMWRkOTE0YWIyZmFjZDMwYjY2ODI4N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFuJ99QoSILrL1VH8Qn8rFRoneZv 4ZzEfegUw/7L9bbo1fd2We9Fd71WwAzigCaxt7qGLbYIC+fIOP9u/ovjYrisA/AH AvMl6UtMRm7Fp1zM+ea6TKrI+KEybfPl8EtwZxREKOht8HLROESBzQSOKav6EpZA o1jifNKdUONq+yrL2XYJMUhbwSydThOOivSZpUQJ8DfmvAS1GXlYeg9SEcXZl6sy ZfjDNSEq/TeafkEE/t8fUzp2/r94pqVqh33Vtb2VoyoOYGb+a7llqn58Z5Qzkxnl mDopTlWa9nptZq1ghUYA1TtDq3+eOviM4gRPud5sSAm+EcUN0wJ6o9DitwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy2M4Xgw8ZqHdkUqy+s0wtmgofuMB8GA1UdIwQY MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2 LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwCkKyZgf ahcsAwosxuzNtXmuZnsYFmaV/Ozaj2vmpUzFbO9KhIug9FFLQTmu5iTk/jdPcl8e jLWTBmFNrrMMhhC4dc54gqbDr1HtUqUR8BrByGbO1245gH1Dnc3wwyp1uUzkGiLF oMyXyEpXAoz1zcmeL9D57YwwufemkCNKv42Rzj4R6KnBYGgr2d4O8HEVrLGJsqBu KzXMkthqQn1T0xcGgr+gYe9TxbH/SV1sfqBe5K0N0opxYiofxj+K/axBtuoHuVZZ gFsKo7yKv4QQkBfF7o9AbXK1kh/JLw3nTpaHASk18omTq/ccRCTft/Z6F0//9NNg sM82E9e+kvgh8Q== -----END CERTIFICATE-----Generated at Mon Jan 12 04:09:34 2026 by rpki-client