This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 6+XUZ9UO2r+FW1VpgqMR0nh7xPyqYz7R5nxBy4TaDGM= Subject key identifier: 42:99:73:62:31:A7:C1:62:FA:E8:11:18:01:32:66:5E:7E:C9:86:2C Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019BF65097F70F461B61622A7331B4379F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1518 Signing time: Sun 25 Jan 2026 18:00:35 +0000 Manifest this update: Sun 25 Jan 2026 18:00:35 +0000 Manifest next update: Mon 26 Jan 2026 18:00:35 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 3aV_UzeZWkVLYdBcdJhGvghnl4c.roa (hash: zIZrgZNehbD7uBxLcLO/tdVtklU882uJK8x5m1rGUnw=) 4: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 5: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 6: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: NQoyJJsOlfBh3GOHUjZomEwburJaapIF/+HE0GgncSQ=) 7: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 8: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 9: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 10: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 11: j_Se_UUpvXzgFBHV0DKpPTUboes.roa (hash: NyS6Ky7kfRsPmVEkp6PDfLDSTRMbr7bwze8MtEAMXCc=) 12: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 13: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) 14: zVLW9HFt-3z2M7Ja19rIMJwG2_Y.roa (hash: /CaIYvptsHDUu9JqgaUmQ5T95opFTVpgVggOdpKaM0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:97:f7:0f:46:1b:61:62:2a:73:31:b4:37:9f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jan 25 18:00:35 2026 GMT Not After : Jan 26 18:00:35 2026 GMT Subject: CN=4299736231a7c162fae811180132665e7ec9862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:84:13:42:0e:73:9a:a3:59:07:8a:c2:80: 17:48:a0:d1:47:17:84:c0:bd:c4:35:83:c4:7e:34: b0:e1:f2:7a:88:fd:02:e7:d7:7e:06:a4:73:07:4f: 18:ba:7e:b3:ec:e5:96:b1:98:de:52:ce:35:63:b7: 48:51:ad:d7:0a:5f:11:82:62:dc:7f:bb:69:0a:fd: 25:ae:cc:a7:cd:85:52:2e:b1:5f:8b:9f:26:60:5b: fd:d7:44:32:03:04:ab:f5:23:27:7b:61:c3:f0:2a: a5:71:8d:52:54:84:d1:62:7a:db:2d:87:16:ef:17: a1:69:f0:1c:c7:f7:20:57:e5:71:6b:79:56:75:90: 68:58:39:26:ba:c6:59:41:db:61:50:26:6c:41:ca: 3f:af:c7:35:3f:5e:65:8f:03:8a:91:fe:05:ff:66: ed:52:56:51:b6:97:81:60:8e:8e:fc:15:c5:c4:dd: da:54:fb:ea:8a:27:db:9e:74:14:9c:ba:bb:db:45: cb:04:c8:84:99:00:52:2a:1b:9f:43:51:cf:30:28: 42:21:eb:a9:e6:73:9e:10:eb:5a:c5:3b:91:8d:91: ac:bb:7c:c4:5c:ac:dd:ec:43:a3:38:e5:7f:a2:89: f2:b1:0a:42:0a:d4:b6:fd:a5:99:42:c4:db:40:13: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:73:62:31:A7:C1:62:FA:E8:11:18:01:32:66:5E:7E:C9:86:2C X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:50:7e:30:bb:e6:23:fe:e4:e4:34:62:13:a8:95:79:62:9a: 19:84:76:61:ec:48:e8:94:fe:8c:a9:76:3d:ee:80:30:23:dc: 5d:5e:a2:17:22:11:c5:11:3e:37:de:dd:94:6b:09:80:71:4c: d3:e8:e8:11:9f:9a:d5:56:a6:2d:bf:4a:11:9d:41:84:dd:a2: 59:78:c6:4e:cc:fe:4a:15:ae:13:b6:77:54:0a:7e:ff:05:96: 15:36:66:7f:21:36:f6:ee:91:03:85:5c:39:99:62:3f:8e:01: 55:5c:17:de:26:73:1d:18:9c:04:26:06:fc:19:5c:13:0e:8e: 0f:31:5f:4f:32:73:cf:22:e5:78:c6:a0:c2:e6:43:9b:37:ef: 0b:69:21:ea:08:30:20:e3:a6:a0:19:d0:4f:ba:59:64:1c:c8: 72:8d:66:80:77:bd:2e:aa:48:19:6e:88:19:cc:35:49:be:1d: 4c:7b:de:65:f6:4e:45:1a:7f:e8:22:d6:22:9b:0e:98:59:bc: 97:73:54:54:64:af:c0:c4:44:b9:64:dc:ae:4b:1f:b9:11:b4: 0a:d0:f6:ba:f8:c8:ed:37:ed:66:4e:6e:11:51:2d:1f:c3:a0: f4:b6:4f:3e:65:e0:c5:88:53:54:8d:43:10:33:fd:00:8b:91: 0b:91:75:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UJf3D0YbYWIqczG0N5+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwMTI1MTgwMDM1WhcNMjYwMTI2MTgwMDM1WjAzMTEwLwYDVQQD Eyg0Mjk5NzM2MjMxYTdjMTYyZmFlODExMTgwMTMyNjY1ZTdlYzk4NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjiEE0IOc5qjWQeKwoAXSKDRRxeE wL3ENYPEfjSw4fJ6iP0C59d+BqRzB08Yun6z7OWWsZjeUs41Y7dIUa3XCl8RgmLc f7tpCv0lrsynzYVSLrFfi58mYFv910QyAwSr9SMne2HD8CqlcY1SVITRYnrbLYcW 7xehafAcx/cgV+Vxa3lWdZBoWDkmusZZQdthUCZsQco/r8c1P15ljwOKkf4F/2bt UlZRtpeBYI6O/BXFxN3aVPvqiifbnnQUnLq720XLBMiEmQBSKhufQ1HPMChCIeup 5nOeEOtaxTuRjZGsu3zEXKzd7EOjOOV/oonysQpCCtS2/aWZQsTbQBPTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKZc2Ixp8Fi+ugRGAEyZl5+yYYsMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1B+MLvm I/7k5DRiE6iVeWKaGYR2YexI6JT+jKl2Pe6AMCPcXV6iFyIRxRE+N97dlGsJgHFM 0+joEZ+a1VamLb9KEZ1BhN2iWXjGTsz+ShWuE7Z3VAp+/wWWFTZmfyE29u6RA4Vc OZliP44BVVwX3iZzHRicBCYG/BlcEw6ODzFfTzJzzyLleMagwuZDmzfvC2kh6ggw IOOmoBnQT7pZZBzIco1mgHe9LqpIGW6IGcw1Sb4dTHveZfZORRp/6CLWIpsOmFm8 l3NUVGSvwMREuWTcrksfuRG0CtD2uvjI7TftZk5uEVEtH8Og9LZPPmXgxYhTVI1D EDP9AIuRC5F1Fw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:18 2026 by rpki-client