This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json) Hash identifier: QIiqlosbeqjIu7lNKd4GiVXjtSdOyxSclwMV0R5ALm4= Subject key identifier: C1:F6:81:35:8A:10:FB:2D:37:D3:D3:70:52:A4:54:08:29:CC:20:A2 Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Certificate serial: 019BF7637F6C4535BEFFA5FD77C78CB98DED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft Manifest number: 142A Signing time: Sun 25 Jan 2026 23:00:51 +0000 Manifest this update: Sun 25 Jan 2026 23:00:51 +0000 Manifest next update: Mon 26 Jan 2026 23:00:51 +0000 Files and hashes: 1: 505iyhrOOU2Q_fBeoqtfWv2GNho.roa (hash: yj3rWCbTMvNId63YkvUyXewgDeaSxoAASwUuP7aFbJE=) 2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: s1gUb5AB3yAPuqmcvdiTnjmAC1aOtk71EZzPxu/O4+4=) 3: jc2FVDogf_jnYkY28JwjbjPEtCY.roa (hash: moUuZDMz1G4ZG1cN9lqMYWv75YgN2qkJVtQUNQjqg+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7f:6c:45:35:be:ff:a5:fd:77:c7:8c:b9:8d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7 Validity Not Before: Jan 25 23:00:51 2026 GMT Not After : Jan 26 23:00:51 2026 GMT Subject: CN=c1f681358a10fb2d37d3d37052a4540829cc20a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:29:11:c7:bf:50:72:a8:89:17:f3:2e:17: 39:bd:84:2e:81:59:3a:04:a7:e2:0c:8a:b2:44:47: f4:3c:1c:3d:8a:13:68:3f:5e:b4:86:b6:a9:32:a7: 6c:90:56:a0:a6:cd:c3:23:a5:22:82:12:c2:bc:42: 19:42:40:f4:4c:57:02:b4:4b:ec:e6:e8:c8:e6:8e: bf:21:b2:d6:14:d3:08:a5:76:64:21:8e:b1:7e:5a: 55:b8:d2:d3:e9:a5:4e:db:34:ed:06:4e:fc:ed:3f: f9:ec:22:a2:59:ce:8d:92:64:dd:0d:d3:1f:6f:17: af:9d:04:61:cd:3a:57:1b:07:4d:aa:d3:a6:5a:1a: 43:c0:a1:90:c1:1f:cb:57:bc:7e:af:7e:83:60:5e: ec:8a:d1:d5:d3:00:1d:51:ce:89:2b:18:a1:bf:3d: af:37:c4:32:be:d4:db:66:64:49:b8:a6:36:47:6c: 2a:6a:3f:8d:3f:9a:56:4f:1f:ba:33:30:1e:c3:b2: 3f:4a:99:8e:8f:5a:5b:d5:ff:3f:3b:69:34:83:32: 28:ae:97:9a:ac:88:77:ae:5a:2f:5f:e1:d6:fd:ad: eb:b3:48:b7:05:14:f4:b0:7d:c1:04:5b:3e:68:79: c9:fb:92:00:42:5b:08:5c:93:b9:21:55:b1:fe:36: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:81:35:8A:10:FB:2D:37:D3:D3:70:52:A4:54:08:29:CC:20:A2 X509v3 Authority Key Identifier: keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:aa:5d:84:ce:ad:45:59:5f:94:2f:16:c9:4c:d9:35:8e:f4: a5:e4:b0:c4:9f:37:19:5f:ba:c3:5f:7f:3e:cd:f2:fc:d3:42: 97:77:e2:90:23:21:33:9e:c3:27:11:c6:da:d9:ed:8d:1a:35: 61:b0:c4:db:0a:07:0e:74:70:e9:86:c8:a7:a1:29:cd:67:1b: ad:fb:52:02:62:ec:5c:55:0e:a0:10:1e:bc:e4:6c:5e:53:ae: 97:7a:c0:75:4e:97:8c:a8:29:52:8d:13:2b:3e:5d:f6:0f:66: be:60:4d:14:de:a1:0f:a4:85:79:0e:4a:cb:c4:f7:1f:2c:e5: 47:59:8a:fd:88:61:0b:47:1f:1b:f9:51:8c:66:e0:99:74:5b: 68:48:7a:70:38:89:43:0d:32:f2:c0:f4:ca:f2:79:44:34:1f: 30:e4:29:77:c2:f9:6f:6a:2a:7f:fc:81:d1:0e:87:e6:90:65: b7:92:4d:03:1e:18:a6:39:62:11:27:4a:56:8b:16:11:58:66: 09:01:ca:cc:15:02:db:fe:b9:e0:83:04:06:37:76:76:b0:15: be:68:60:eb:44:e0:27:58:ad:55:53:49:d2:d5:a3:b5:d5:4b: 74:f4:65:2d:d3:3b:10:a7:b7:30:4d:fa:1b:9c:2e:60:db:84: fa:ad:c4:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y39sRTW+/6X9d8eMuY3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx MDQwZTcwHhcNMjYwMTI1MjMwMDUxWhcNMjYwMTI2MjMwMDUxWjAzMTEwLwYDVQQD EyhjMWY2ODEzNThhMTBmYjJkMzdkM2QzNzA1MmE0NTQwODI5Y2MyMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOspEce/UHKoiRfzLhc5vYQugVk6 BKfiDIqyREf0PBw9ihNoP160hrapMqdskFagps3DI6UighLCvEIZQkD0TFcCtEvs 5ujI5o6/IbLWFNMIpXZkIY6xflpVuNLT6aVO2zTtBk787T/57CKiWc6NkmTdDdMf bxevnQRhzTpXGwdNqtOmWhpDwKGQwR/LV7x+r36DYF7sitHV0wAdUc6JKxihvz2v N8QyvtTbZmRJuKY2R2wqaj+NP5pWTx+6MzAew7I/SpmOj1pb1f8/O2k0gzIorpea rIh3rlovX+HW/a3rs0i3BRT0sH3BBFs+aHnJ+5IAQlsIXJO5IVWx/jYtXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH2gTWKEPstN9PTcFKkVAgpzCCiMB8GA1UdIwQY MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1 LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6pdhM6t RVlflC8WyUzZNY70peSwxJ83GV+6w19/Ps3y/NNCl3fikCMhM57DJxHG2tntjRo1 YbDE2woHDnRw6YbIp6EpzWcbrftSAmLsXFUOoBAevORsXlOul3rAdU6XjKgpUo0T Kz5d9g9mvmBNFN6hD6SFeQ5Ky8T3HyzlR1mK/YhhC0cfG/lRjGbgmXRbaEh6cDiJ Qw0y8sD0yvJ5RDQfMOQpd8L5b2oqf/yB0Q6H5pBlt5JNAx4YpjliESdKVosWEVhm CQHKzBUC2/654IMEBjd2drAVvmhg60TgJ1itVVNJ0tWjtdVLdPRlLdM7EKe3ME36 G5wuYNuE+q3Elg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:23 2026 by rpki-client