This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json) Hash identifier: SHBGqgoImzN1DG4mGV7iOyemQGLiW+y7JOgPzhAWgmw= Subject key identifier: 3B:FD:9E:85:B8:0B:19:04:2D:E8:C1:B6:03:FD:B9:4F:BC:5C:63:B8 Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Certificate serial: 019BAE38B4743F710D0AE9E286E57F2F2C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft Manifest number: 05FC Signing time: Sun 11 Jan 2026 18:01:50 +0000 Manifest this update: Sun 11 Jan 2026 18:01:50 +0000 Manifest next update: Mon 12 Jan 2026 18:01:50 +0000 Files and hashes: 1: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: TGlwfsMlPvhmPLSpUbusZtPFDdI8af5vrTop5j7UnlQ=) 2: mvCe3f9mkn2mitGHtGGloSB3nS8.roa (hash: 0bqyMFhS31D4KUaalrXamAweNa9OOdMZFGOzpiIcELU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:b4:74:3f:71:0d:0a:e9:e2:86:e5:7f:2f:2c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9 Validity Not Before: Jan 11 18:01:50 2026 GMT Not After : Jan 12 18:01:50 2026 GMT Subject: CN=3bfd9e85b80b19042de8c1b603fdb94fbc5c63b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:e7:ea:15:0c:9d:a5:1f:2b:f4:14:40:46: 0c:ac:7c:ad:31:a1:e7:8f:eb:a5:97:23:bb:99:6a: 66:4a:b8:2e:85:74:cb:1f:49:ee:fa:36:d8:37:a9: 4b:9f:0e:b1:df:98:60:bf:b2:80:0b:70:b4:41:d5: 41:4a:65:89:cd:73:b7:21:b5:99:ad:3a:88:8d:0b: 13:8e:27:24:ce:1f:04:b4:10:08:0f:62:07:a0:6e: 84:bd:71:fe:03:6e:da:fd:2d:73:59:4c:76:dd:be: 4d:11:52:e9:f9:92:21:96:39:11:4a:5a:96:70:5c: 73:56:8f:c7:ff:5c:eb:0b:59:bc:62:3c:c8:70:b7: 56:0a:24:76:93:2d:a8:9e:1d:b5:d9:82:07:ef:b9: 1c:d9:83:9c:bc:1b:2c:8a:09:4f:e0:a7:16:60:ca: ea:f3:e4:7b:bc:bc:d3:e8:8c:58:21:20:5f:a9:f0: 3f:85:6d:c5:c0:09:21:f3:c4:cc:35:2d:4e:00:52: 47:9d:0d:10:51:c8:5f:71:c4:8b:ef:73:fd:e2:e2: 94:fd:92:3c:38:2b:bc:d7:bd:32:22:2a:81:fa:e1: 5d:9e:68:5c:d1:eb:04:70:e0:76:f0:d1:6c:e6:f4: f0:b3:e6:a2:59:74:9c:d1:07:9c:da:10:65:71:0f: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FD:9E:85:B8:0B:19:04:2D:E8:C1:B6:03:FD:B9:4F:BC:5C:63:B8 X509v3 Authority Key Identifier: keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:e1:6a:05:09:5f:da:3f:60:74:6d:f5:16:bc:73:b9:e8: a5:0b:a5:fa:17:96:fc:e8:7d:0b:53:f6:7d:64:08:fb:23:f6: de:73:41:bd:aa:3a:d1:4b:db:64:16:4d:f6:c7:a0:82:fa:6b: 51:8d:0e:56:59:e3:8c:e1:d5:9a:93:11:ef:94:ae:9b:4e:e4: 5d:82:78:ef:07:52:3d:09:4e:ce:f8:86:04:ea:e2:18:9d:fb: dd:35:80:3b:6e:b4:4e:10:6a:04:85:ab:7a:75:42:3a:b4:74: 4c:65:ba:15:a9:41:1b:a5:f0:2b:82:73:64:03:49:ae:eb:b8: 2e:5b:57:13:cf:cf:81:b5:4f:81:5c:b6:a6:61:43:ac:64:be: 5c:f5:1e:d2:39:59:85:9c:2f:b1:12:49:5f:9b:89:2b:75:d4: c5:7f:e7:03:d1:f3:73:07:33:99:33:d5:c7:20:94:65:e9:fb: 48:42:d3:4f:78:d0:a5:a5:96:1b:01:c3:ac:a6:7d:a1:27:9a: 97:d9:f8:c8:70:06:93:e1:aa:1d:43:0b:48:35:ca:a1:79:d3: 0f:ab:22:0c:16:97:e6:5c:57:3b:9d:b3:2c:e1:68:4c:68:cf: 5b:0d:d8:96:ed:52:82:eb:c7:ea:1e:0e:bd:7c:aa:98:2c:82: b4:6c:8e:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOLR0P3ENCunihuV/LyxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjM5Y2NmMjZlYTM4MjU3YTA3ZDQwOTRmYTZkNzBiMjY5 NjlmYjkwHhcNMjYwMTExMTgwMTUwWhcNMjYwMTEyMTgwMTUwWjAzMTEwLwYDVQQD EygzYmZkOWU4NWI4MGIxOTA0MmRlOGMxYjYwM2ZkYjk0ZmJjNWM2M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAvn6hUMnaUfK/QUQEYMrHytMaHn j+ullyO7mWpmSrguhXTLH0nu+jbYN6lLnw6x35hgv7KAC3C0QdVBSmWJzXO3IbWZ rTqIjQsTjickzh8EtBAID2IHoG6EvXH+A27a/S1zWUx23b5NEVLp+ZIhljkRSlqW cFxzVo/H/1zrC1m8YjzIcLdWCiR2ky2onh212YIH77kc2YOcvBssiglP4KcWYMrq 8+R7vLzT6IxYISBfqfA/hW3FwAkh88TMNS1OAFJHnQ0QUchfccSL73P94uKU/ZI8 OCu8170yIiqB+uFdnmhc0esEcOB28NFs5vTws+aiWXSc0Qec2hBlcQ9kzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv9noW4CxkELejBtgP9uU+8XGO4MB8GA1UdIwQY MBaAFPwjnM8m6jglegfUCU+m1wsmlp+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAt YThhOTExYTNlMmUwLzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mMDZjNzktN2M3ZS00NTA0LTg4YzAtYThhOTExYTNlMmUw LzEvX0NPY3p5YnFPQ1Y2QjlRSlQ2YlhDeWFXbjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2PhagUJ X9o/YHRt9Ra8c7nopQul+heW/Oh9C1P2fWQI+yP23nNBvao60UvbZBZN9seggvpr UY0OVlnjjOHVmpMR75Sum07kXYJ47wdSPQlOzviGBOriGJ373TWAO260ThBqBIWr enVCOrR0TGW6FalBG6XwK4JzZANJruu4LltXE8/PgbVPgVy2pmFDrGS+XPUe0jlZ hZwvsRJJX5uJK3XUxX/nA9HzcwczmTPVxyCUZen7SELTT3jQpaWWGwHDrKZ9oSea l9n4yHAGk+GqHUMLSDXKoXnTD6siDBaX5lxXO52zLOFoTGjPWw3Ylu1SguvH6h4O vXyqmCyCtGyOnw== -----END CERTIFICATE-----Generated at Mon Jan 12 01:31:43 2026 by rpki-client