This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: XpFn7XiEIDZlMQNixmQlXtLMSCEasyk0t2fRYGfcKaU= Subject key identifier: C3:92:4A:0D:B6:41:D9:A5:0A:A9:30:2B:39:0B:89:35:28:00:7B:2D Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019BF53EEC97762137492F43BE23F8BC77AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 1045 Signing time: Sun 25 Jan 2026 13:01:40 +0000 Manifest this update: Sun 25 Jan 2026 13:01:40 +0000 Manifest next update: Mon 26 Jan 2026 13:01:40 +0000 Files and hashes: 1: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 2: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 3: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 4: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 5: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 6: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 7: SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa (hash: 8h6EiTcPQ+f6ADvauTqpBDw5pOHgH7YO/aoHwMnqpio=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: W1K4BULbO2S6d1dBbrhnUa5rsZc.roa (hash: etCHZn/KTTLewWLJtVE8dVh2RZR6CliQzpqIzdYsBYc=) 10: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 11: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 12: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 13: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: HHDSiYH0NW6kZLanKSl1GqkoIiyyIvarfkGhx1OjIyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:ec:97:76:21:37:49:2f:43:be:23:f8:bc:77:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 25 13:01:40 2026 GMT Not After : Jan 26 13:01:40 2026 GMT Subject: CN=c3924a0db641d9a50aa9302b390b893528007b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:74:6f:06:6d:2f:a0:24:d2:c4:e8:89:e0: 43:db:4c:09:8f:4f:50:9e:29:4d:70:74:94:d9:a9: 6a:74:70:f4:38:49:e8:36:bc:52:a3:0a:4b:ec:98: 14:0e:74:17:3b:26:2e:6f:3b:d7:35:6c:56:4b:a2: 55:13:9d:f0:6c:d9:a6:df:0b:06:b3:18:f8:0b:79: 0c:58:b5:85:06:18:ba:82:3f:f6:08:01:59:bb:4d: 9a:0e:c5:90:ba:16:94:a2:a1:bf:2e:58:0f:7b:b0: 37:eb:f3:eb:d8:85:e7:7a:96:9c:ce:ea:dc:63:29: eb:9f:70:b0:7b:67:eb:40:c1:c6:85:20:0f:96:e8: 99:01:d6:42:74:d0:56:3a:97:c8:4f:47:01:8d:ee: f2:bb:4c:96:08:6c:b9:e5:37:d9:86:76:93:df:f2: 90:bf:bc:cb:e3:41:f7:0a:81:c7:79:7c:6e:2d:ec: 19:e3:62:33:a5:c6:2b:ea:bb:85:1f:4e:47:d4:a4: ac:7b:40:21:8f:67:9e:21:93:15:af:3b:06:5d:0f: e4:b7:5e:0c:8a:ea:6b:48:fc:e8:6d:f9:b3:a5:42: 6b:63:d2:c2:6d:42:8f:60:32:28:a5:cc:c9:a5:e9: 1f:a0:89:d8:43:1e:73:bc:e7:bc:d5:c6:f1:35:ac: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:4A:0D:B6:41:D9:A5:0A:A9:30:2B:39:0B:89:35:28:00:7B:2D X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:d9:d3:ba:22:54:90:d7:15:2b:77:1d:44:10:db:da:10: d2:77:cf:22:79:e8:05:8c:3d:13:00:74:05:27:cd:1f:4f:4f: b0:74:a7:34:c9:b1:00:17:90:b9:fa:a3:88:17:d8:e1:bd:19: 23:37:d2:03:1d:a2:53:cd:e5:26:21:dd:68:ec:79:cb:0b:c6: 61:dc:ff:d7:61:e4:d7:d6:3a:7f:51:54:d0:f0:92:5f:20:cb: 5c:68:63:52:15:28:58:54:0d:b7:f5:1f:80:ca:dc:0c:82:02: a8:10:3e:91:a2:7a:1f:5e:cd:53:44:6b:0d:0d:e7:c2:20:ca: e3:e2:b9:5d:76:fd:2f:38:45:e1:a4:84:65:db:07:b5:41:13: 17:f2:03:25:3b:a8:0d:49:e5:23:e5:ba:67:ae:aa:d3:58:68: ae:c9:88:9d:8e:7e:c8:9f:a8:9c:1b:32:e8:82:1f:00:83:4f: 0c:5c:2e:32:54:5c:c3:2b:f7:d7:e5:1c:d7:e4:d1:18:66:48: 6f:ae:17:b7:60:6d:55:13:12:d8:b0:b4:07:b0:8d:dd:fe:10: 3d:01:c6:b1:81:bb:35:d1:1d:53:31:0b:e5:a5:3b:df:c9:5f: 89:da:2d:59:9e:da:68:ca:2f:03:35:28:7c:b1:11:09:b4:a1: 19:49:28:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PuyXdiE3SS9DviP4vHesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTI1MTMwMTQwWhcNMjYwMTI2MTMwMTQwWjAzMTEwLwYDVQQD EyhjMzkyNGEwZGI2NDFkOWE1MGFhOTMwMmIzOTBiODkzNTI4MDA3YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvp0bwZtL6Ak0sToieBD20wJj09Q nilNcHSU2alqdHD0OEnoNrxSowpL7JgUDnQXOyYubzvXNWxWS6JVE53wbNmm3wsG sxj4C3kMWLWFBhi6gj/2CAFZu02aDsWQuhaUoqG/LlgPe7A36/Pr2IXnepaczurc Yynrn3Cwe2frQMHGhSAPluiZAdZCdNBWOpfIT0cBje7yu0yWCGy55TfZhnaT3/KQ v7zL40H3CoHHeXxuLewZ42IzpcYr6ruFH05H1KSse0Ahj2eeIZMVrzsGXQ/kt14M iuprSPzobfmzpUJrY9LCbUKPYDIopczJpekfoInYQx5zvOe81cbxNayV3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOSSg22QdmlCqkwKzkLiTUoAHstMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL7Z07oi VJDXFSt3HUQQ29oQ0nfPInnoBYw9EwB0BSfNH09PsHSnNMmxABeQufqjiBfY4b0Z IzfSAx2iU83lJiHdaOx5ywvGYdz/12Hk19Y6f1FU0PCSXyDLXGhjUhUoWFQNt/Uf gMrcDIICqBA+kaJ6H17NU0RrDQ3nwiDK4+K5XXb9LzhF4aSEZdsHtUETF/IDJTuo DUnlI+W6Z66q01horsmInY5+yJ+onBsy6IIfAINPDFwuMlRcwyv31+Uc1+TRGGZI b64Xt2BtVRMS2LC0B7CN3f4QPQHGsYG7NdEdUzEL5aU738lfidotWZ7aaMovAzUo fLERCbShGUkoLA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:06 2026 by rpki-client