This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json) Hash identifier: DydnGLMx29DOW9pZS6M9r4nCVgQ/xWA91dUP1xA1zWY= Subject key identifier: 19:04:69:0B:63:21:BC:2C:43:A8:65:6B:4B:F7:95:E5:28:02:80:05 Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Certificate serial: 019BF6F5C1046F7D3E04D25FCBD0FC250E67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft Manifest number: 12BE Signing time: Sun 25 Jan 2026 21:00:59 +0000 Manifest this update: Sun 25 Jan 2026 21:00:59 +0000 Manifest next update: Mon 26 Jan 2026 21:00:59 +0000 Files and hashes: 1: kvrpde2NkZn_MY5z8yP0kUJPKB0.roa (hash: nyyXOBMDEJmgos3/uP4abipU5IsMQkBb228KURVxjm8=) 2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: 5IOXg02hPNRc5XsnQ+caZwxu1IplhgxyPgswKILiFBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c1:04:6f:7d:3e:04:d2:5f:cb:d0:fc:25:0e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Validity Not Before: Jan 25 21:00:59 2026 GMT Not After : Jan 26 21:00:59 2026 GMT Subject: CN=1904690b6321bc2c43a8656b4bf795e528028005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:80:71:bc:11:14:6c:94:7a:01:49:8c:b5: 8b:d1:ae:6a:77:58:96:05:9d:5e:16:b8:30:34:43: 1b:f8:77:33:8c:c6:44:3d:8c:a1:3c:79:49:85:99: 6f:b2:c1:68:4c:6f:3c:d0:38:0b:36:52:6d:e4:8c: 93:07:48:ed:f0:bc:ff:c9:71:ab:76:0b:ae:82:0a: 2e:70:0e:4a:96:cb:d8:b8:4b:d6:49:44:d7:0c:b8: 24:b2:44:50:dc:53:ef:47:3d:6b:ca:be:22:f8:f3: de:2f:4d:f7:e4:d0:e6:77:3f:b2:e1:1c:04:b0:5c: b7:ef:8c:ff:65:90:0c:08:f0:91:71:b6:d8:29:d3: 27:a2:25:22:e5:61:63:5d:6b:99:f4:77:26:de:c4: 5a:f4:8a:a8:ec:fb:41:6a:6f:75:fe:48:e7:93:0b: 15:85:12:5c:1c:2d:a6:0c:60:2f:85:fd:15:c9:81: ac:b7:b4:a4:41:ca:42:5b:13:89:08:a3:1c:06:18: 03:3c:06:c2:58:ce:5a:50:60:23:18:fd:25:01:75: ba:95:11:2a:32:66:5e:95:be:0f:b0:e6:21:65:a0: 3c:91:cf:a1:91:92:be:b5:7b:2a:18:e2:94:ca:1b: b9:24:b4:9f:6c:4e:a6:36:50:0c:ee:46:d3:db:56: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:04:69:0B:63:21:BC:2C:43:A8:65:6B:4B:F7:95:E5:28:02:80:05 X509v3 Authority Key Identifier: keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:78:73:a9:5c:27:9b:fc:46:33:6d:77:0b:f7:84:22:17:92: fa:34:1b:09:47:cf:03:be:12:cd:b0:b3:ee:a4:b7:87:1f:50: a1:58:83:e4:26:2b:88:65:15:ce:03:54:ca:cb:bf:c4:d0:3a: 7e:30:a1:7f:2c:55:75:31:51:e0:c1:4f:91:d9:2c:06:c2:95: e4:f6:3c:6f:ee:22:ca:12:eb:c5:3d:7b:71:40:3d:ff:84:08: 69:ae:a0:8e:47:ee:76:c4:ee:f5:0f:33:fb:5a:a4:52:b7:b4: aa:37:c2:2e:01:d2:c6:00:68:77:b2:3f:47:a0:21:22:9d:8b: b1:7f:2e:c5:79:61:cb:28:93:72:00:26:85:07:7e:5e:9e:5a: 73:37:02:aa:52:bf:94:4c:2f:fb:a5:36:48:18:02:c5:61:75: 94:ae:52:e0:34:58:c2:d6:c7:08:3c:94:0d:9d:30:f9:22:1d: 4a:25:f9:eb:a7:39:c5:b1:19:2d:d2:1a:e9:1d:6a:7b:ee:8b: f5:1f:fd:b1:d6:eb:dc:4b:87:85:4a:5c:e2:e1:95:39:55:24: a1:ea:8c:44:b0:b5:b2:80:73:d3:6a:66:45:20:9b:f0:b6:44: 14:be:1b:12:6b:41:39:19:96:1c:4f:8b:bd:4e:f7:7d:97:34: a6:c4:a6:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cEEb30+BNJfy9D8JQ5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh NWZhZTAwHhcNMjYwMTI1MjEwMDU5WhcNMjYwMTI2MjEwMDU5WjAzMTEwLwYDVQQD EygxOTA0NjkwYjYzMjFiYzJjNDNhODY1NmI0YmY3OTVlNTI4MDI4MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ2AcbwRFGyUegFJjLWL0a5qd1iW BZ1eFrgwNEMb+HczjMZEPYyhPHlJhZlvssFoTG880DgLNlJt5IyTB0jt8Lz/yXGr dguuggoucA5KlsvYuEvWSUTXDLgkskRQ3FPvRz1ryr4i+PPeL0335NDmdz+y4RwE sFy374z/ZZAMCPCRcbbYKdMnoiUi5WFjXWuZ9Hcm3sRa9Iqo7PtBam91/kjnkwsV hRJcHC2mDGAvhf0VyYGst7SkQcpCWxOJCKMcBhgDPAbCWM5aUGAjGP0lAXW6lREq MmZelb4PsOYhZaA8kc+hkZK+tXsqGOKUyhu5JLSfbE6mNlAM7kbT21agGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkEaQtjIbwsQ6hla0v3leUoAoAFMB8GA1UdIwQY MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt YzBjYTgwYTA1ZTJhLzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHhzqVwn m/xGM213C/eEIheS+jQbCUfPA74SzbCz7qS3hx9QoViD5CYriGUVzgNUysu/xNA6 fjChfyxVdTFR4MFPkdksBsKV5PY8b+4iyhLrxT17cUA9/4QIaa6gjkfudsTu9Q8z +1qkUre0qjfCLgHSxgBod7I/R6AhIp2LsX8uxXlhyyiTcgAmhQd+Xp5aczcCqlK/ lEwv+6U2SBgCxWF1lK5S4DRYwtbHCDyUDZ0w+SIdSiX566c5xbEZLdIa6R1qe+6L 9R/9sdbr3EuHhUpc4uGVOVUkoeqMRLC1soBz02pmRSCb8LZEFL4bEmtBORmWHE+L vU73fZc0psSmIg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:11 2026 by rpki-client