This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: wTLBgS1kXm4NJn243NeMXdRLUIWOZjLx02ctFIpB0pg=
Subject key identifier: 7A:55:15:6D:20:39:0F:24:A3:D0:97:C5:6D:02:FB:E0:43:25:92:06
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019BF35080201C085DCD308C7D2BC232F02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 073F
Signing time: Sun 25 Jan 2026 04:01:37 +0000
Manifest this update: Sun 25 Jan 2026 04:01:37 +0000
Manifest next update: Mon 26 Jan 2026 04:01:37 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: uMWoyUiojVzYx5QPnR5FLjctxzghInYZ51VQ+l5tYNI=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:80:20:1c:08:5d:cd:30:8c:7d:2b:c2:32:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jan 25 04:01:37 2026 GMT
Not After : Jan 26 04:01:37 2026 GMT
Subject: CN=7a55156d20390f24a3d097c56d02fbe043259206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:6f:5a:80:3b:63:62:95:1e:40:dd:ef:4a:
b3:5a:2b:ad:c3:9a:36:2a:de:1b:3c:03:36:89:7e:
38:44:1b:05:4a:79:82:8a:ec:43:66:4b:8a:39:56:
8e:7f:fc:92:98:cd:59:17:97:e7:d5:37:cd:0a:82:
2f:cb:d0:94:96:ee:25:fc:4b:89:f4:49:40:01:20:
ff:b3:ec:91:24:e6:e0:21:0f:96:a1:bf:83:e5:ef:
ab:6f:fe:7d:a7:49:45:96:27:77:4a:83:69:d3:df:
b8:09:bf:1b:de:d5:8f:a2:75:fa:f8:83:75:af:5c:
d2:af:7b:cd:93:70:db:90:19:f5:1f:51:1a:1a:ae:
7c:6e:4d:52:1a:6d:fd:46:0a:80:21:02:05:68:ba:
af:15:aa:5a:b1:9a:41:93:3d:bb:72:d1:d2:84:49:
da:36:ac:1b:66:8b:7e:ed:97:00:fd:f0:2f:5f:91:
1c:32:70:8e:72:46:90:02:4f:84:bc:ad:8a:f0:88:
51:96:a6:f1:66:6c:16:74:07:b2:3b:6d:33:7a:5a:
67:1e:dc:17:17:c1:f6:ec:87:41:19:93:7b:fa:31:
b1:a6:fa:14:b9:fb:e0:53:22:21:ab:2f:44:9c:3c:
07:bd:bd:da:32:4e:28:ae:ef:c2:0c:22:c6:34:a2:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:15:6D:20:39:0F:24:A3:D0:97:C5:6D:02:FB:E0:43:25:92:06
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:c9:38:ac:33:3a:83:09:49:20:22:64:0c:aa:17:bf:03:
42:45:db:bd:4c:63:e5:de:8f:52:08:12:52:bb:5d:e9:25:4e:
de:4e:e0:12:c6:53:dd:2f:76:2b:5c:c2:a2:32:8a:d2:44:23:
c4:a0:0b:60:86:55:0d:e3:70:54:7d:d8:71:b2:a0:6e:07:12:
37:a9:76:9a:1c:a7:e7:1a:0c:e2:b8:1c:fc:6d:d9:e7:22:c2:
17:72:08:46:b6:d6:cd:fa:ab:73:cb:0c:fa:0b:b1:05:40:3d:
78:e9:c5:8f:cb:c4:75:9f:68:a1:05:c3:c5:a6:31:64:76:c7:
7f:1c:3d:47:d3:75:6a:1a:a3:24:8d:22:bd:a6:3f:12:36:30:
c0:35:b2:53:c4:66:2c:7e:d5:df:43:b0:27:eb:08:1c:12:04:
2c:f9:b9:a7:6d:4c:75:39:6f:17:9d:e7:3b:67:a5:b1:1d:66:
89:ae:3c:27:56:6f:f7:b5:db:2e:a2:f5:83:ef:5f:b8:3c:17:
46:9b:00:3d:6d:d8:42:b8:b2:cb:f4:c2:93:61:40:ee:98:09:
2a:d0:6e:09:a2:f9:70:e7:68:88:bb:14:8f:d8:10:8a:76:70:
58:40:c7:57:3b:7b:a2:8f:27:39:4a:27:19:04:52:70:fa:8f:
de:54:ff:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUIAgHAhdzTCMfSvCMvAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz
MjYwNjQwHhcNMjYwMTI1MDQwMTM3WhcNMjYwMTI2MDQwMTM3WjAzMTEwLwYDVQQD
Eyg3YTU1MTU2ZDIwMzkwZjI0YTNkMDk3YzU2ZDAyZmJlMDQzMjU5MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1RvWoA7Y2KVHkDd70qzWiutw5o2
Kt4bPAM2iX44RBsFSnmCiuxDZkuKOVaOf/ySmM1ZF5fn1TfNCoIvy9CUlu4l/EuJ
9ElAASD/s+yRJObgIQ+Wob+D5e+rb/59p0lFlid3SoNp09+4Cb8b3tWPonX6+IN1
r1zSr3vNk3DbkBn1H1EaGq58bk1SGm39RgqAIQIFaLqvFapasZpBkz27ctHShEna
NqwbZot+7ZcA/fAvX5EcMnCOckaQAk+EvK2K8IhRlqbxZmwWdAeyO20zelpnHtwX
F8H27IdBGZN7+jGxpvoUufvgUyIhqy9EnDwHvb3aMk4oru/CDCLGNKK0QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpVFW0gOQ8ko9CXxW0C++BDJZIGMB8GA1UdIwQY
MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt
OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3
LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV/JOKwz
OoMJSSAiZAyqF78DQkXbvUxj5d6PUggSUrtd6SVO3k7gEsZT3S92K1zCojKK0kQj
xKALYIZVDeNwVH3YcbKgbgcSN6l2mhyn5xoM4rgc/G3Z5yLCF3IIRrbWzfqrc8sM
+guxBUA9eOnFj8vEdZ9ooQXDxaYxZHbHfxw9R9N1ahqjJI0ivaY/EjYwwDWyU8Rm
LH7V30OwJ+sIHBIELPm5p21MdTlvF53nO2elsR1mia48J1Zv97XbLqL1g+9fuDwX
RpsAPW3YQriyy/TCk2FA7pgJKtBuCaL5cOdoiLsUj9gQinZwWEDHVzt7oo8nOUon
GQRScPqP3lT/sg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:12:35 2026 by rpki-client