This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json) Hash identifier: KMgk2P8d5bxWyNrl07rZAxFhsS2/YQMuHl0yFq9R6i0= Subject key identifier: A2:7C:00:18:FD:E0:D8:9C:D1:76:3D:F7:2C:9C:89:93:B3:A1:11:93 Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e Certificate serial: 019BF6F575C0B7F36989BFBDF257C0C829D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft Manifest number: 10EA Signing time: Sun 25 Jan 2026 21:00:40 +0000 Manifest this update: Sun 25 Jan 2026 21:00:40 +0000 Manifest next update: Mon 26 Jan 2026 21:00:40 +0000 Files and hashes: 1: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (hash: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0=) 2: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: MAEJZhVl2Of2yuklByducQAu2fII7PXcTiqhtmza7vM=) 3: hJm1nDRsIFd4oM3IecS9DbzdQqA.roa (hash: qZGephqqhr8wfMf15paKbsU/Vh7J0ohAnvLexhyh6V8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:75:c0:b7:f3:69:89:bf:bd:f2:57:c0:c8:29:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e Validity Not Before: Jan 25 21:00:40 2026 GMT Not After : Jan 26 21:00:40 2026 GMT Subject: CN=a27c0018fde0d89cd1763df72c9c8993b3a11193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:70:ef:76:9c:ac:1e:5b:fd:1b:77:68:20: 20:16:0a:29:a0:f0:4d:f1:4a:27:f0:58:3a:b7:be: 70:1a:7d:42:5e:2d:fb:f9:24:8b:ec:bd:8e:ee:eb: 99:16:cc:cc:f9:2a:32:68:b6:07:bb:c8:f1:db:68: f5:9a:f9:5f:08:c3:43:2a:fe:16:d9:64:23:56:e5: cf:b6:c3:cd:ee:fc:96:85:52:9a:50:6e:80:5f:e3: d3:dc:67:5f:fe:bd:a6:7b:b8:c0:ad:c9:34:ed:a3: 2a:81:ad:6f:ec:7e:01:49:af:f3:ff:a5:d9:10:82: 70:cc:21:85:5a:df:43:4e:2d:3c:7c:4e:05:9f:66: 51:39:f5:5d:cc:0e:b1:15:df:45:68:cb:f4:9a:6d: 1f:c8:a3:31:f5:1e:08:2e:1e:96:db:8a:61:a8:cd: 2c:20:bb:50:cd:f1:b3:79:c3:6d:35:7a:40:a1:5f: 64:e0:07:13:aa:e3:99:a5:d8:75:bc:ec:e6:bc:a6: 79:91:e7:0c:fb:96:6a:5f:9d:26:62:41:58:ce:c7: 96:5e:e0:b6:30:12:0d:85:18:05:80:17:19:6e:7f: 99:c4:27:99:31:7f:93:d5:12:18:5e:c2:04:a9:67: 22:10:f4:a6:fd:78:30:68:02:7f:5e:55:8e:c7:23: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7C:00:18:FD:E0:D8:9C:D1:76:3D:F7:2C:9C:89:93:B3:A1:11:93 X509v3 Authority Key Identifier: keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dc:ee:89:38:b4:1c:a7:11:8a:d0:09:07:7e:a7:b9:52:37: ef:6c:cb:76:d6:f8:55:50:56:61:e6:cb:fc:64:f7:b2:04:4f: 77:9e:5e:ba:37:b0:34:3f:ea:a4:2b:7e:7d:32:47:c2:30:d4: 5b:a7:c9:80:20:67:58:ff:01:8e:19:09:3a:ac:85:a0:96:d5: 63:28:b5:45:7a:09:ff:70:80:3f:05:4e:14:6b:17:5b:75:f1: fe:78:9f:be:30:17:eb:8e:8d:94:8d:c6:2b:dc:51:8d:81:c9: 74:f8:3a:b0:89:10:90:26:68:24:22:02:b6:81:c1:74:87:bc: 80:3e:f7:73:73:09:8d:42:ce:aa:1a:f0:f2:48:7e:62:fa:82: 38:33:eb:09:ab:ea:78:5c:cf:8c:97:60:19:bd:f6:e0:b6:fd: 6a:b6:4a:cf:4e:02:9f:34:83:ae:ac:92:54:b6:63:5d:a9:02: 5e:e4:94:78:4a:80:bc:a7:4d:1a:bd:72:6f:3f:1b:51:5a:c0: 7f:24:a5:66:7c:e4:39:74:09:a1:24:80:7e:4a:56:8b:60:91: 0f:a2:ff:21:b9:f0:aa:c8:0e:7d:de:cc:24:bf:ce:78:65:9d: 08:6e:71:c0:65:a5:9f:59:af:5a:da:e1:54:c1:4c:27:d0:46: 53:b8:23:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29XXAt/Npib+98lfAyCnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj NTY5NGUwHhcNMjYwMTI1MjEwMDQwWhcNMjYwMTI2MjEwMDQwWjAzMTEwLwYDVQQD EyhhMjdjMDAxOGZkZTBkODljZDE3NjNkZjcyYzljODk5M2IzYTExMTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUpw73acrB5b/Rt3aCAgFgopoPBN 8Uon8Fg6t75wGn1CXi37+SSL7L2O7uuZFszM+SoyaLYHu8jx22j1mvlfCMNDKv4W 2WQjVuXPtsPN7vyWhVKaUG6AX+PT3Gdf/r2me7jArck07aMqga1v7H4BSa/z/6XZ EIJwzCGFWt9DTi08fE4Fn2ZROfVdzA6xFd9FaMv0mm0fyKMx9R4ILh6W24phqM0s ILtQzfGzecNtNXpAoV9k4AcTquOZpdh1vOzmvKZ5kecM+5ZqX50mYkFYzseWXuC2 MBINhRgFgBcZbn+ZxCeZMX+T1RIYXsIEqWciEPSm/XgwaAJ/XlWOxyPkkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ8ABj94Nic0XY99yyciZOzoRGTMB8GA1UdIwQY MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9zuiTi0 HKcRitAJB36nuVI372zLdtb4VVBWYebL/GT3sgRPd55eujewND/qpCt+fTJHwjDU W6fJgCBnWP8BjhkJOqyFoJbVYyi1RXoJ/3CAPwVOFGsXW3Xx/nifvjAX646NlI3G K9xRjYHJdPg6sIkQkCZoJCICtoHBdIe8gD73c3MJjULOqhrw8kh+YvqCODPrCavq eFzPjJdgGb324Lb9arZKz04CnzSDrqySVLZjXakCXuSUeEqAvKdNGr1ybz8bUVrA fySlZnzkOXQJoSSAfkpWi2CRD6L/IbnwqsgOfd7MJL/OeGWdCG5xwGWln1mvWtrh VMFMJ9BGU7gjUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:24 2026 by rpki-client