This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json) Hash identifier: QoT3bSH+p4YMr8u5oayCyo8ywvLWy1CqIDObdXnKtEY= Subject key identifier: 5F:AF:CD:71:39:03:CB:86:07:B1:D8:13:AD:A7:A6:19:FB:EC:FA:62 Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Certificate serial: 019BB102A4952391BB350246C7FF044B5D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft Manifest number: 04A9 Signing time: Mon 12 Jan 2026 07:01:38 +0000 Manifest this update: Mon 12 Jan 2026 07:01:38 +0000 Manifest next update: Tue 13 Jan 2026 07:01:38 +0000 Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: SdXo/Dy8bhNnnPAM9YyicDw7gaCPRoOM8AmS1NyTwQc=) 2: LNCbK6oFpSX7VrazVm0NKmkZQwE.roa (hash: 8I25wabiQRp4293K2/OnqVhvqWH+P1esMFI9OKX+Mkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:a4:95:23:91:bb:35:02:46:c7:ff:04:4b:5d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4 Validity Not Before: Jan 12 07:01:38 2026 GMT Not After : Jan 13 07:01:38 2026 GMT Subject: CN=5fafcd713903cb8607b1d813ada7a619fbecfa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:0f:3b:3e:33:0d:52:b8:e4:6a:71:9a:49: ad:d8:8a:e3:28:c3:4a:c6:74:3e:98:86:ba:9a:59: 02:8b:17:c9:85:c5:ef:19:85:7f:18:5a:12:6e:34: 3a:ce:9e:04:b2:04:00:6e:a4:4f:99:3f:0e:6b:72: 3e:b2:68:b0:78:52:d8:49:91:d7:d0:08:f5:d5:b0: b2:4a:87:f4:7f:be:90:a5:65:4f:0f:aa:1a:a0:92: b6:81:1c:a6:e9:58:fa:49:11:21:3b:de:e9:d2:dd: b3:45:42:20:71:f9:42:be:39:1b:bd:e2:68:0f:c1: 0e:89:b9:94:99:2d:31:58:97:65:9d:16:80:e0:4f: 6e:c6:3a:7e:bd:ef:66:1c:9a:47:db:3d:a7:7f:47: 51:a9:bc:86:3d:af:d9:73:2a:bb:e7:e0:ee:b1:74: 72:df:b1:71:03:10:b1:0a:2c:ae:76:b5:a4:6e:6d: 06:de:a0:bb:dd:cb:0b:d2:7f:75:27:86:fe:c5:9f: 80:1a:0e:f1:fb:af:c6:bc:1f:74:00:e0:1f:7c:0e: 40:c9:a3:40:09:97:ea:70:48:31:ac:16:41:8e:bb: 2b:cc:60:83:81:73:00:3a:94:6e:a3:a0:fa:b1:d3: 7b:b6:22:9b:fc:e4:5a:8f:69:4c:16:b6:b7:95:e9: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AF:CD:71:39:03:CB:86:07:B1:D8:13:AD:A7:A6:19:FB:EC:FA:62 X509v3 Authority Key Identifier: keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:80:b8:36:85:5c:c3:ad:20:89:5f:eb:70:77:7f:f2:6a:42: 16:60:58:8c:04:9b:d4:a8:e4:f8:f8:a9:45:6f:e4:a1:5d:8c: 73:06:de:b9:20:86:b6:0e:70:92:ae:e1:a7:de:eb:ea:8a:cd: 0d:24:f9:69:46:08:90:b7:89:1d:c0:2b:ef:e1:16:bc:96:b1: eb:dc:a4:a6:e5:1c:a7:b6:bc:45:31:75:9d:65:29:06:a6:c2: 23:8a:3e:5d:6c:76:c1:e2:02:fd:a2:01:c8:df:7c:da:d9:98: ce:4c:25:7e:4b:1e:2a:57:fc:01:5f:4e:d6:47:ff:89:c4:6c: 28:09:bd:6f:b2:e2:82:a3:e2:7b:93:b6:f4:07:69:b5:de:9c: 61:09:42:9c:75:1f:9f:90:ef:1e:42:48:3d:2b:27:1e:34:d6: b2:cc:ac:f5:5b:c9:e3:0c:8c:64:66:b5:8c:af:39:e0:e6:2f: 84:3c:4b:1a:5f:9b:de:95:2e:ec:a9:e3:88:81:c7:31:c1:60: 40:48:dc:15:e4:30:8b:f4:fe:64:62:4d:62:d4:7c:b5:5a:7d: 96:21:d2:06:b6:17:63:fa:12:63:05:ed:2c:99:75:48:0b:ff: f4:0d:ad:0b:bd:57:51:a8:ba:eb:f1:91:1b:e2:8e:95:9b:9d: 82:54:c4:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAqSVI5G7NQJGx/8ES11PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh NjUxZjQwHhcNMjYwMTEyMDcwMTM4WhcNMjYwMTEzMDcwMTM4WjAzMTEwLwYDVQQD Eyg1ZmFmY2Q3MTM5MDNjYjg2MDdiMWQ4MTNhZGE3YTYxOWZiZWNmYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07UPOz4zDVK45Gpxmkmt2IrjKMNK xnQ+mIa6mlkCixfJhcXvGYV/GFoSbjQ6zp4EsgQAbqRPmT8Oa3I+smiweFLYSZHX 0Aj11bCySof0f76QpWVPD6oaoJK2gRym6Vj6SREhO97p0t2zRUIgcflCvjkbveJo D8EOibmUmS0xWJdlnRaA4E9uxjp+ve9mHJpH2z2nf0dRqbyGPa/Zcyq75+DusXRy 37FxAxCxCiyudrWkbm0G3qC73csL0n91J4b+xZ+AGg7x+6/GvB90AOAffA5AyaNA CZfqcEgxrBZBjrsrzGCDgXMAOpRuo6D6sdN7tiKb/ORaj2lMFra3lenERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+vzXE5A8uGB7HYE62nphn77PpiMB8GA1UdIwQY MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYC4NoVc w60giV/rcHd/8mpCFmBYjASb1Kjk+PipRW/koV2McwbeuSCGtg5wkq7hp97r6orN DST5aUYIkLeJHcAr7+EWvJax69ykpuUcp7a8RTF1nWUpBqbCI4o+XWx2weIC/aIB yN982tmYzkwlfkseKlf8AV9O1kf/icRsKAm9b7LigqPie5O29Adptd6cYQlCnHUf n5DvHkJIPSsnHjTWssys9VvJ4wyMZGa1jK854OYvhDxLGl+b3pUu7KnjiIHHMcFg QEjcFeQwi/T+ZGJNYtR8tVp9liHSBrYXY/oSYwXtLJl1SAv/9A2tC71XUai66/GR G+KOlZudglTEbQ== -----END CERTIFICATE-----Generated at Mon Jan 12 13:46:38 2026 by rpki-client