This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json) Hash identifier: IIejNIcLS0C9aEuJPE0OpS2YGshYDffSPxuhjYuIZoM= Subject key identifier: CC:85:D8:7E:15:AC:6D:32:AE:64:64:7D:A5:C8:B1:1A:70:5F:68:A3 Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Certificate serial: 019BF6BF7DF316980D8A8702543AB5C3573B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft Manifest number: 050A Signing time: Sun 25 Jan 2026 20:01:43 +0000 Manifest this update: Sun 25 Jan 2026 20:01:43 +0000 Manifest next update: Mon 26 Jan 2026 20:01:43 +0000 Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=) 2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=) 3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 22xYvROy6ONI+cF3ZNQ88og2uqokv1VWTfHP8cD5B7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:7d:f3:16:98:0d:8a:87:02:54:3a:b5:c3:57:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Validity Not Before: Jan 25 20:01:43 2026 GMT Not After : Jan 26 20:01:43 2026 GMT Subject: CN=cc85d87e15ac6d32ae64647da5c8b11a705f68a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:0e:be:62:ae:d7:09:cd:07:e0:28:06:b1: be:48:be:c8:00:2c:5a:b6:1f:1c:7d:03:07:fd:5a: 8c:57:47:e5:39:1e:d4:6e:41:11:46:a6:31:96:db: 54:7d:a3:91:a5:42:7d:98:2c:1b:54:27:a4:5d:95: 28:85:1e:96:98:fc:4d:d2:c5:29:0f:46:94:14:35: c7:6c:3d:03:6c:e6:96:6b:05:0f:cf:4b:e1:94:ae: c7:eb:a3:1c:a2:5d:96:e9:27:6f:50:0a:e2:97:ee: 8c:2c:c7:4f:ac:dd:42:e2:37:8e:a8:7a:62:8e:96: b1:03:0f:50:2b:3a:87:f0:8e:4f:c8:12:0b:81:7f: c7:47:76:c2:2d:40:d8:09:5d:98:cd:d8:5a:07:f9: c5:b9:f7:14:38:3b:5e:13:0d:89:06:df:81:65:c9: d3:95:bb:5a:c2:3c:22:86:7e:1b:18:fd:ae:07:00: 93:ef:54:d4:f2:ea:a1:86:f2:7c:01:d0:90:18:f7: ee:59:04:c5:9d:fb:18:ab:b8:65:ad:64:86:da:1e: 12:3f:ae:22:56:43:1b:64:ec:dc:12:ab:89:f8:d4: 48:78:1b:83:d3:49:28:d9:05:73:13:7e:6c:32:e7: 56:6f:23:c4:0f:ff:96:33:5c:e5:f3:f2:e9:cc:6c: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:D8:7E:15:AC:6D:32:AE:64:64:7D:A5:C8:B1:1A:70:5F:68:A3 X509v3 Authority Key Identifier: keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:35:4a:f8:38:e1:d2:49:97:9b:45:a7:f6:a7:ab:aa:f9:00: 57:b3:18:4b:0b:30:2a:1d:20:e3:99:36:7a:d8:30:76:93:70: 07:33:ad:b9:9d:57:ce:a0:08:36:30:ac:5d:23:83:fd:69:37: ba:9c:58:8f:e8:b9:bf:9a:0c:ce:8c:30:63:19:5b:da:97:c1: 19:26:24:00:c3:7a:fb:95:87:f1:d4:44:61:15:60:4d:f9:14: 99:a1:6b:e0:c7:ec:59:c9:4b:b9:ac:40:48:2d:09:0d:24:ca: 9b:9c:90:36:ac:ab:fe:33:f6:d5:c1:ca:ff:3c:c2:09:8e:8f: 18:8f:96:ac:2d:9d:66:bb:5e:47:e2:c4:8c:94:82:85:e6:69: 97:40:1b:b4:c7:c2:5f:4a:d6:a6:28:31:db:ac:a6:2d:89:9f: 11:81:c6:93:ad:1a:dd:cc:f4:37:9d:f5:f2:c1:52:f6:5d:14: 71:5d:a3:57:eb:6a:fe:7a:30:8a:2c:9e:5a:c6:23:12:8e:cc: 1e:f3:40:71:35:aa:05:06:e1:9b:e8:52:46:54:b0:30:5f:ea: bf:54:96:04:96:80:37:26:33:1e:d4:95:e7:36:0f:c4:1a:c5: 35:aa:de:38:5b:2b:88:a5:77:9f:2a:e8:57:e8:84:bf:5e:a8: 1f:41:47:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v33zFpgNiocCVDq1w1c7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll NWQ0ZTIwHhcNMjYwMTI1MjAwMTQzWhcNMjYwMTI2MjAwMTQzWjAzMTEwLwYDVQQD EyhjYzg1ZDg3ZTE1YWM2ZDMyYWU2NDY0N2RhNWM4YjExYTcwNWY2OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymgOvmKu1wnNB+AoBrG+SL7IACxa th8cfQMH/VqMV0flOR7UbkERRqYxlttUfaORpUJ9mCwbVCekXZUohR6WmPxN0sUp D0aUFDXHbD0DbOaWawUPz0vhlK7H66Mcol2W6SdvUAril+6MLMdPrN1C4jeOqHpi jpaxAw9QKzqH8I5PyBILgX/HR3bCLUDYCV2YzdhaB/nFufcUODteEw2JBt+BZcnT lbtawjwihn4bGP2uBwCT71TU8uqhhvJ8AdCQGPfuWQTFnfsYq7hlrWSG2h4SP64i VkMbZOzcEquJ+NRIeBuD00ko2QVzE35sMudWbyPED/+WM1zl8/LpzGz7uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyF2H4VrG0yrmRkfaXIsRpwX2ijMB8GA1UdIwQY MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDVK+Djh 0kmXm0Wn9qerqvkAV7MYSwswKh0g45k2etgwdpNwBzOtuZ1XzqAINjCsXSOD/Wk3 upxYj+i5v5oMzowwYxlb2pfBGSYkAMN6+5WH8dREYRVgTfkUmaFr4MfsWclLuaxA SC0JDSTKm5yQNqyr/jP21cHK/zzCCY6PGI+WrC2dZrteR+LEjJSCheZpl0AbtMfC X0rWpigx26ymLYmfEYHGk60a3cz0N5318sFS9l0UcV2jV+tq/nowiiyeWsYjEo7M HvNAcTWqBQbhm+hSRlSwMF/qv1SWBJaANyYzHtSV5zYPxBrFNareOFsriKV3nyro V+iEv16oH0FHCw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:12:00 2026 by rpki-client