This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json) Hash identifier: cW+u62ajcsVYcN4oD+jxyR2VOdjgZuae+rP8A8WFTJg= Subject key identifier: D0:FF:E0:36:A6:A7:43:0A:7F:24:29:64:7F:B8:CC:B1:FA:B4:E2:28 Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019BF5E3F984100A43A36B3BE94A04D34BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft Manifest number: 0468 Signing time: Sun 25 Jan 2026 16:01:56 +0000 Manifest this update: Sun 25 Jan 2026 16:01:56 +0000 Manifest next update: Mon 26 Jan 2026 16:01:56 +0000 Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=) 2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: dYuel4djeUw6UdC+1bksyf5+C1zyQ/EiKdtN1KvjbBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f9:84:10:0a:43:a3:6b:3b:e9:4a:04:d3:4b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Jan 25 16:01:56 2026 GMT Not After : Jan 26 16:01:56 2026 GMT Subject: CN=d0ffe036a6a7430a7f2429647fb8ccb1fab4e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:c5:c3:2f:da:3c:d9:e1:61:32:5a:e0:05: da:64:b9:3c:cb:9d:dc:c3:fc:c8:06:7f:6e:d2:1a: 87:53:7d:ca:41:99:8a:e1:53:16:7b:00:43:54:b0: e0:53:cd:d3:93:c5:b6:5a:35:3b:bb:ee:a8:49:c4: 9c:c9:e1:c7:7f:99:37:d0:72:f7:d1:79:d6:a8:ab: 84:30:52:89:e2:66:6f:44:3d:18:39:97:65:a2:9d: a1:da:f4:25:df:99:2b:a1:3e:92:02:0e:d2:44:28: e1:6f:79:d2:eb:dd:87:c1:84:46:f0:2b:d9:30:8d: 6b:e7:2e:d6:8c:b3:35:17:b9:17:04:88:36:39:b6: b8:16:17:b3:41:ae:5a:f6:6e:16:86:e4:37:03:ae: 60:66:00:13:2c:b9:19:11:70:45:76:3d:33:72:2e: 51:ae:fd:5f:74:93:df:af:9f:0d:99:bf:99:57:9d: e9:5f:55:29:2a:b1:da:56:00:4c:9e:60:6b:01:f7: bb:c2:02:b7:0b:06:00:b2:5e:76:69:87:a6:9d:e4: 6a:8f:94:bf:34:d4:23:ee:3c:d3:eb:94:93:08:c2: fe:48:45:0e:05:4e:1b:23:50:88:5d:c7:24:c3:0a: 12:80:ff:9a:ad:84:29:ee:f3:c8:73:7f:4b:fe:53: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FF:E0:36:A6:A7:43:0A:7F:24:29:64:7F:B8:CC:B1:FA:B4:E2:28 X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b5:94:ce:38:f1:a0:5c:4a:56:02:50:c8:61:29:cc:61:4d: ec:37:2c:ee:65:32:b3:06:e2:50:27:a3:6d:36:33:01:74:0c: 3d:2f:7f:53:03:03:88:6a:f2:82:cc:04:ab:19:bb:be:a6:4c: c9:c8:0c:bb:a8:95:96:61:1e:d1:f8:17:b5:c8:46:02:73:5f: 42:5e:e7:98:1a:45:0b:30:77:ef:0c:fa:8a:ee:18:7a:32:b0: 44:9b:a9:96:ca:08:64:7f:e9:24:c8:74:1c:f6:c0:33:17:bd: 21:da:57:a4:c3:bb:07:6d:cd:b8:e9:2c:f2:05:98:66:e2:c5: 1e:f3:ef:de:4e:67:ed:96:5a:ee:39:82:39:a0:f4:21:47:e9: 4c:46:97:0e:6f:a2:bf:37:5e:5b:e6:04:9a:eb:a9:d9:c0:0b: 0f:8a:25:64:8d:37:3e:0f:54:a5:60:11:a0:c8:0c:70:45:8b: bc:f2:73:89:53:58:d8:fb:3a:4c:5d:27:95:4d:a0:4d:19:65: a5:ba:96:a3:0b:1c:70:ad:69:e8:2b:59:b4:e2:85:22:f5:e2: 4d:ba:37:1b:15:9f:1b:94:f9:1f:dc:f0:9f:6d:3e:0a:5a:a0: 5a:80:f8:ce:54:73:8a:63:f0:8d:82:4d:b7:bb:b5:c0:b9:57: 5b:68:0b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/mEEApDo2s76UoE00vPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjYwMTI1MTYwMTU2WhcNMjYwMTI2MTYwMTU2WjAzMTEwLwYDVQQD EyhkMGZmZTAzNmE2YTc0MzBhN2YyNDI5NjQ3ZmI4Y2NiMWZhYjRlMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSvFwy/aPNnhYTJa4AXaZLk8y53c w/zIBn9u0hqHU33KQZmK4VMWewBDVLDgU83Tk8W2WjU7u+6oScScyeHHf5k30HL3 0XnWqKuEMFKJ4mZvRD0YOZdlop2h2vQl35kroT6SAg7SRCjhb3nS692HwYRG8CvZ MI1r5y7WjLM1F7kXBIg2Oba4FhezQa5a9m4WhuQ3A65gZgATLLkZEXBFdj0zci5R rv1fdJPfr58Nmb+ZV53pX1UpKrHaVgBMnmBrAfe7wgK3CwYAsl52aYemneRqj5S/ NNQj7jzT65STCML+SEUOBU4bI1CIXcckwwoSgP+arYQp7vPIc39L/lPRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND/4Damp0MKfyQpZH+4zLH6tOIoMB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLWUzjjx oFxKVgJQyGEpzGFN7Dcs7mUyswbiUCejbTYzAXQMPS9/UwMDiGrygswEqxm7vqZM ycgMu6iVlmEe0fgXtchGAnNfQl7nmBpFCzB37wz6iu4YejKwRJuplsoIZH/pJMh0 HPbAMxe9IdpXpMO7B23NuOks8gWYZuLFHvPv3k5n7ZZa7jmCOaD0IUfpTEaXDm+i vzdeW+YEmuup2cALD4olZI03Pg9UpWARoMgMcEWLvPJziVNY2Ps6TF0nlU2gTRll pbqWowsccK1p6CtZtOKFIvXiTbo3GxWfG5T5H9zwn20+ClqgWoD4zlRzimPwjYJN t7u1wLlXW2gLOA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:24 2026 by rpki-client