This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: 7eKn6d26uwDH4MjL1NEo17/x7vMIGe9q8uxOGjCwuM8= Subject key identifier: 65:F8:CD:43:D9:4F:78:AB:0C:85:2C:B4:C9:55:19:A2:1C:C7:CF:50 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019BF83FCFCC3F4CEA7017FB876121FAF9D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 17FE Signing time: Mon 26 Jan 2026 03:01:29 +0000 Manifest this update: Mon 26 Jan 2026 03:01:29 +0000 Manifest next update: Tue 27 Jan 2026 03:01:29 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: HOQgDGpmkekCim3x5F8I9zAUeqI.roa (hash: APa++J/yausGprAIdzd9v9TnFhQUsORY2w2EDIGBbfg=) 3: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 4: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 5: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 6: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: D8xCiTtlBWjTEU4gx5dHroUkqkfCUsYbO6AzHUc4xOE=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:cf:cc:3f:4c:ea:70:17:fb:87:61:21:fa:f9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jan 26 03:01:29 2026 GMT Not After : Jan 27 03:01:29 2026 GMT Subject: CN=65f8cd43d94f78ab0c852cb4c95519a21cc7cf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:66:df:86:eb:9f:b8:76:7d:79:bf:72:2c: ac:1a:11:41:ae:6f:e1:28:36:6b:2f:cc:81:30:9f: 7c:20:27:d5:23:ed:55:48:ee:68:56:a2:08:16:c8: f8:cb:c9:ee:c3:cf:2f:90:89:c6:05:2a:fe:55:f7: 54:37:b4:f2:ad:c0:64:fe:cb:c9:33:94:69:69:67: 2b:89:fb:46:c2:87:47:7d:81:bd:03:52:ff:da:4b: 30:82:1a:6b:19:13:9c:a2:06:3a:5a:af:de:64:7e: 7d:4b:bf:26:be:e3:2c:d4:4b:46:24:d4:dd:74:c6: 97:81:e1:5f:4e:e1:da:0b:07:45:87:3b:4a:59:8c: b1:84:2d:a3:0e:86:5d:b1:e1:bf:88:4d:ff:03:e2: f8:40:bc:bf:b9:55:12:23:cd:b0:17:d8:8f:54:41: 05:5b:31:0f:6f:33:2d:08:ee:1f:8b:61:5a:fd:78: 34:95:72:c4:86:f9:75:3b:b8:60:3b:3a:dc:37:52: 11:7b:0e:8e:e0:b2:ed:0b:cd:47:c4:90:69:77:8e: c4:c7:42:3c:22:25:8b:74:a5:e5:55:40:88:1b:ae: bc:91:c5:a8:bb:b7:59:f9:7b:9d:37:56:b1:f4:66: 54:76:f0:d9:9f:22:75:30:39:b7:6d:0a:34:5b:ed: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:CD:43:D9:4F:78:AB:0C:85:2C:B4:C9:55:19:A2:1C:C7:CF:50 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:0c:a8:17:8b:3d:b4:4e:44:37:d3:d4:99:38:dd:c7:14: fe:95:6c:83:82:c5:4c:c2:6a:33:ea:bf:da:65:a1:89:91:02: 1c:a9:03:db:05:b7:87:f1:c6:5f:b2:d3:71:85:10:87:ca:a6: c0:62:b0:06:74:45:f8:5b:79:70:c3:2c:2d:7b:59:24:01:6b: 68:f9:bf:5a:50:57:c3:06:4c:ba:aa:9f:aa:ec:0a:1f:18:b6: 40:c8:25:85:fc:37:e6:45:0b:6d:39:55:14:95:47:ad:10:72: da:f7:f6:47:eb:2a:94:c0:bf:09:fc:a2:71:3f:ad:fb:a3:10: b7:6f:62:57:ac:f5:08:27:66:bb:a2:4f:85:be:46:7b:95:7e: 71:7d:77:0f:3a:d9:e0:18:4b:ca:13:e7:e0:3b:14:2c:95:d8: d1:8f:aa:08:9d:e4:d0:d7:65:99:4a:d6:4b:e4:e7:29:59:27: d4:b3:0e:ff:a6:a9:fc:d0:ba:e7:c2:08:36:b7:9b:8f:8e:11: 8f:cb:fa:2a:6a:fa:1b:15:3b:23:08:d8:d3:7f:21:3b:09:2b: 5d:ab:47:7d:d5:2c:7b:8c:02:76:86:da:e1:7f:a3:85:40:5a: b0:5f:ac:88:9f:cb:f3:a9:78:cd:c1:4c:d9:07:06:4d:7b:f3: 60:16:9f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8/MP0zqcBf7h2Eh+vnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwMTI2MDMwMTI5WhcNMjYwMTI3MDMwMTI5WjAzMTEwLwYDVQQD Eyg2NWY4Y2Q0M2Q5NGY3OGFiMGM4NTJjYjRjOTU1MTlhMjFjYzdjZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WVm34brn7h2fXm/ciysGhFBrm/h KDZrL8yBMJ98ICfVI+1VSO5oVqIIFsj4y8nuw88vkInGBSr+VfdUN7TyrcBk/svJ M5RpaWcriftGwodHfYG9A1L/2kswghprGROcogY6Wq/eZH59S78mvuMs1EtGJNTd dMaXgeFfTuHaCwdFhztKWYyxhC2jDoZdseG/iE3/A+L4QLy/uVUSI82wF9iPVEEF WzEPbzMtCO4fi2Fa/Xg0lXLEhvl1O7hgOzrcN1IRew6O4LLtC81HxJBpd47Ex0I8 IiWLdKXlVUCIG668kcWou7dZ+XudN1ax9GZUdvDZnyJ1MDm3bQo0W+2hFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX4zUPZT3irDIUstMlVGaIcx89QMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasYMqBeL PbRORDfT1Jk43ccU/pVsg4LFTMJqM+q/2mWhiZECHKkD2wW3h/HGX7LTcYUQh8qm wGKwBnRF+Ft5cMMsLXtZJAFraPm/WlBXwwZMuqqfquwKHxi2QMglhfw35kULbTlV FJVHrRBy2vf2R+sqlMC/CfyicT+t+6MQt29iV6z1CCdmu6JPhb5Ge5V+cX13DzrZ 4BhLyhPn4DsULJXY0Y+qCJ3k0NdlmUrWS+TnKVkn1LMO/6ap/NC658IINrebj44R j8v6Kmr6GxU7IwjY038hOwkrXatHfdUse4wCdoba4X+jhUBasF+siJ/L86l4zcFM 2QcGTXvzYBafrA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:39 2026 by rpki-client