This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json) Hash identifier: ItPnUgTBVqytEq+I5aeZ5a0+1VRo1av0wYNIQE3vHto= Subject key identifier: B6:D9:B6:E3:4C:F7:28:5D:49:E8:37:90:63:25:05:4A:92:3E:6F:3B Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Certificate serial: 019BAB6F1CBFB171C7CD18DE9BEED49875D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft Manifest number: 1752 Signing time: Sun 11 Jan 2026 05:02:24 +0000 Manifest this update: Sun 11 Jan 2026 05:02:24 +0000 Manifest next update: Mon 12 Jan 2026 05:02:24 +0000 Files and hashes: 1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: dfba2ky4/4xi30dHsYdRHMECYBdHgXz3VGLHZSMNh0E=) 2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:6f:1c:bf:b1:71:c7:cd:18:de:9b:ee:d4:98:75:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f Validity Not Before: Jan 11 05:02:24 2026 GMT Not After : Jan 12 05:02:24 2026 GMT Subject: CN=b6d9b6e34cf7285d49e837906325054a923e6f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:ca:6d:40:eb:48:26:f2:52:52:8a:75:32: 2c:06:04:4d:66:ea:56:ba:5a:92:7e:49:72:2b:b4: d1:8f:e4:51:73:af:d5:2f:6a:04:ff:46:8b:cb:f3: 30:90:2f:4d:64:4e:96:3e:28:bc:51:26:7c:e5:2c: c4:11:e9:bc:7b:2f:39:c3:4b:45:cb:90:35:31:e7: ca:db:64:5f:ae:7f:d6:d1:db:96:be:60:4b:a7:07: 0d:41:30:d5:5f:d6:fb:21:81:cf:f7:c9:f0:96:93: 50:2b:a9:2d:cc:68:7f:01:02:4f:b6:fd:85:de:82: 0a:41:f5:33:46:49:46:e8:55:00:d4:ca:c7:07:a7: 97:a3:c1:f2:35:58:57:b5:a5:c1:bc:d1:a5:78:84: 14:7a:66:b0:46:81:05:90:50:16:9b:7e:57:ad:7d: 99:f4:dd:46:5b:ab:e8:eb:ff:e4:7e:0a:82:fe:92: f1:08:33:b6:85:f8:bc:44:72:be:55:a0:52:52:f1: fb:6e:33:6c:00:01:3f:62:52:8f:68:60:d1:e7:3c: fa:c3:7e:1a:b5:24:a8:a2:4c:40:90:7e:cf:ad:39: 8c:24:a3:98:68:d5:5a:d5:e7:5f:a3:e0:1d:7e:d5: ac:eb:10:e3:b8:aa:e6:42:a5:db:5c:ed:6d:e1:a4: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:B6:E3:4C:F7:28:5D:49:E8:37:90:63:25:05:4A:92:3E:6F:3B X509v3 Authority Key Identifier: keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:90:57:54:3c:6b:36:0a:db:37:d7:12:f6:5b:e0:b0:0c:99: 72:aa:f9:b4:71:2e:c7:55:90:04:82:fa:cb:a6:8b:9f:c5:6f: 92:e0:41:94:67:61:21:42:f4:7a:21:86:83:a1:3a:5c:4a:4a: a8:66:0f:df:45:57:dd:c9:cc:85:68:93:c9:d9:f1:c8:ac:95: 7b:5b:4e:99:ba:24:b3:c2:5d:5d:99:bf:d3:56:1b:56:b1:52: 80:55:ed:6a:d1:8a:02:4e:3d:66:20:15:18:a5:3f:f7:bc:23: f8:92:7f:59:d0:0e:a4:6f:53:e9:82:8f:cb:17:ed:5d:60:4b: fb:f7:9e:97:98:2f:d4:3e:69:a7:37:f9:df:0d:7c:9b:b9:63: 17:67:08:04:b9:41:cb:17:88:ac:e0:85:9e:fe:7a:d9:03:89: 2e:78:a6:33:4d:14:a1:ea:7c:d8:bc:c6:b8:7f:ee:77:b4:7c: bd:98:9b:4b:a3:41:f1:0a:60:0e:bc:1e:e3:69:70:a5:59:b6: b5:2f:ab:32:ba:a6:c7:0f:84:ca:cd:43:ac:96:ca:ea:20:48: dd:19:92:2e:32:1f:02:6e:82:33:82:48:23:42:26:ec:1e:87: 32:5d:51:48:47:17:02:a5:c8:d5:de:cb:4b:79:8c:8f:0d:98: 25:ae:77:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurbxy/sXHHzRjem+7UmHXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzcxNDYwZWE0MWQzZTY1NjVjNGI0MTBiMjZjOWU3OGNl MTZmOWYwHhcNMjYwMTExMDUwMjI0WhcNMjYwMTEyMDUwMjI0WjAzMTEwLwYDVQQD EyhiNmQ5YjZlMzRjZjcyODVkNDllODM3OTA2MzI1MDU0YTkyM2U2ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSTKbUDrSCbyUlKKdTIsBgRNZupW ulqSfklyK7TRj+RRc6/VL2oE/0aLy/MwkC9NZE6WPii8USZ85SzEEem8ey85w0tF y5A1MefK22Rfrn/W0duWvmBLpwcNQTDVX9b7IYHP98nwlpNQK6ktzGh/AQJPtv2F 3oIKQfUzRklG6FUA1MrHB6eXo8HyNVhXtaXBvNGleIQUemawRoEFkFAWm35XrX2Z 9N1GW6vo6//kfgqC/pLxCDO2hfi8RHK+VaBSUvH7bjNsAAE/YlKPaGDR5zz6w34a tSSookxAkH7PrTmMJKOYaNVa1edfo+AdftWs6xDjuKrmQqXbXO1t4aTHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbZtuNM9yhdSeg3kGMlBUqSPm87MB8GA1UdIwQY MBaAFAnHFGDqQdPmVlxLQQsmyeeM4W+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAt ODZjZjA2YWNiZjQxLzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xMTU3MDMtOTIwYi00YzUxLWIzNDAtODZjZjA2YWNiZjQx LzEvQ2NjVVlPcEIwLVpXWEV0QkN5Yko1NHpoYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpBXVDxr NgrbN9cS9lvgsAyZcqr5tHEux1WQBIL6y6aLn8VvkuBBlGdhIUL0eiGGg6E6XEpK qGYP30VX3cnMhWiTydnxyKyVe1tOmboks8JdXZm/01YbVrFSgFXtatGKAk49ZiAV GKU/97wj+JJ/WdAOpG9T6YKPyxftXWBL+/eel5gv1D5ppzf53w18m7ljF2cIBLlB yxeIrOCFnv562QOJLnimM00Uoep82LzGuH/ud7R8vZibS6NB8QpgDrwe42lwpVm2 tS+rMrqmxw+Eys1DrJbK6iBI3RmSLjIfAm6CM4JII0Im7B6HMl1RSEcXAqXI1d7L S3mMjw2YJa53rg== -----END CERTIFICATE-----Generated at Sun Jan 11 11:34:52 2026 by rpki-client