This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json) Hash identifier: aGZtMMtxao00pXhi7WDNN3MB7ESKu42P/+CdDiCtaPI= Subject key identifier: CD:06:29:FB:3A:5B:E8:07:18:20:2F:65:E0:D4:96:CF:21:0C:D3:8D Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40 Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40 Certificate serial: 019BB65F76072656CAE720E0879D79E230AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft Manifest number: 17CA Signing time: Tue 13 Jan 2026 08:01:07 +0000 Manifest this update: Tue 13 Jan 2026 08:01:07 +0000 Manifest next update: Wed 14 Jan 2026 08:01:07 +0000 Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: X0XlSf0WqwC11ovUn9ektAYyTdYSOlc/WgdqAxjSOPU=) 2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:5f:76:07:26:56:ca:e7:20:e0:87:9d:79:e2:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40 Validity Not Before: Jan 13 08:01:07 2026 GMT Not After : Jan 14 08:01:07 2026 GMT Subject: CN=cd0629fb3a5be80718202f65e0d496cf210cd38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:22:e2:80:d8:d0:a4:b0:03:06:53:30:29: c8:d6:60:63:76:a2:a5:91:e9:6a:7a:67:a2:fc:af: c6:bb:09:1f:0a:16:3d:64:40:09:67:e7:ae:a7:cf: bc:a8:22:98:d2:7d:9a:c4:a8:26:d7:d9:21:2a:c2: ab:28:35:5a:7f:33:30:db:57:26:0e:b0:8b:3c:94: 68:12:89:21:73:8f:b7:c6:f9:25:2a:76:6d:89:43: 15:8a:8a:93:46:63:4b:68:c4:85:ee:67:5a:66:c7: c7:2a:26:9f:d1:46:df:9d:69:2a:5b:16:ea:fa:9e: df:97:e4:7e:0e:cd:3f:d3:8e:e4:f8:60:fc:8a:d5: 1b:47:b7:97:20:3c:14:30:43:0c:9d:d0:1f:c2:9b: 69:6d:b5:91:de:b1:da:e1:ef:ab:a6:8a:ac:fb:8b: 18:0f:97:cf:97:bf:ad:b3:a6:e9:28:cd:9e:94:89: 73:97:59:8c:4f:41:0d:ba:d1:48:80:bb:0c:1f:1a: 27:2a:ab:b7:31:2f:70:b7:86:f2:e6:9a:3b:fa:02: f2:7d:b1:26:32:29:ff:38:cf:98:17:2d:d7:1a:e9: 77:22:d4:37:e0:f3:eb:e6:a5:68:d6:1c:48:d0:f6: ad:84:7c:ad:26:b7:bf:76:47:77:1b:26:5f:f2:08: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:06:29:FB:3A:5B:E8:07:18:20:2F:65:E0:D4:96:CF:21:0C:D3:8D X509v3 Authority Key Identifier: keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:9a:89:f1:19:fa:b1:b2:41:4e:1c:a8:cf:64:b4:cf:a9: 90:1a:4e:07:75:9f:f5:f4:cc:87:2b:94:f8:22:8e:7f:44:b7: ee:0a:3a:60:c5:1f:fa:c8:a1:cb:f6:03:64:1b:d0:dc:99:d5: ba:ec:bf:9b:71:90:d7:e5:b1:f2:8f:a1:61:1a:c9:25:71:cb: d6:c3:1b:04:dd:9c:cd:92:b5:a4:e2:48:7e:1c:e5:79:7e:a9: 46:95:23:65:82:8a:56:7c:ac:bc:f1:89:a9:cb:a3:da:98:fb: 7e:5d:67:b4:d2:a2:09:32:2c:67:37:f8:d1:3c:46:43:a6:b3: 09:ff:5a:a2:3e:1b:70:62:48:cb:71:da:b4:41:6e:49:65:ec: a2:d3:4e:48:9e:c4:b3:2d:63:36:76:21:c9:52:82:4c:e6:0b: b4:78:eb:e3:bc:8b:58:43:ca:f7:c3:5f:d5:41:3a:18:34:7a: 7e:55:85:ad:a3:66:f5:ed:28:9b:7f:64:7a:bc:70:49:36:cf: cd:89:35:ec:5c:27:19:3e:2c:d9:d6:5f:3a:62:e3:af:c3:cc: a9:16:32:35:f6:f2:84:6c:86:c6:9f:5e:a7:54:b6:1f:5f:eb: 52:18:2c:b6:4c:bc:15:7a:dd:2f:f8:75:5f:f5:f2:ce:4b:6a: 77:4a:15:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2X3YHJlbK5yDgh5154jCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1 NjdhNDAwHhcNMjYwMTEzMDgwMTA3WhcNMjYwMTE0MDgwMTA3WjAzMTEwLwYDVQQD EyhjZDA2MjlmYjNhNWJlODA3MTgyMDJmNjVlMGQ0OTZjZjIxMGNkMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Ei4oDY0KSwAwZTMCnI1mBjdqKl kelqemei/K/GuwkfChY9ZEAJZ+eup8+8qCKY0n2axKgm19khKsKrKDVafzMw21cm DrCLPJRoEokhc4+3xvklKnZtiUMVioqTRmNLaMSF7mdaZsfHKiaf0UbfnWkqWxbq +p7fl+R+Ds0/047k+GD8itUbR7eXIDwUMEMMndAfwptpbbWR3rHa4e+rpoqs+4sY D5fPl7+ts6bpKM2elIlzl1mMT0ENutFIgLsMHxonKqu3MS9wt4by5po7+gLyfbEm Min/OM+YFy3XGul3ItQ34PPr5qVo1hxI0PathHytJre/dkd3GyZf8ghVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0GKfs6W+gHGCAvZeDUls8hDNONMB8GA1UdIwQY MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI6aifEZ +rGyQU4cqM9ktM+pkBpOB3Wf9fTMhyuU+CKOf0S37go6YMUf+sihy/YDZBvQ3JnV uuy/m3GQ1+Wx8o+hYRrJJXHL1sMbBN2czZK1pOJIfhzleX6pRpUjZYKKVnysvPGJ qcuj2pj7fl1ntNKiCTIsZzf40TxGQ6azCf9aoj4bcGJIy3HatEFuSWXsotNOSJ7E sy1jNnYhyVKCTOYLtHjr47yLWEPK98Nf1UE6GDR6flWFraNm9e0om39kerxwSTbP zYk17FwnGT4s2dZfOmLjr8PMqRYyNfbyhGyGxp9ep1S2H1/rUhgstky8FXrdL/h1 X/Xyzktqd0oVTQ== -----END CERTIFICATE-----Generated at Tue Jan 13 14:35:53 2026 by rpki-client