This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: wq5+FZClzQkXyipbmPgZjeovMMAM18qafBKGSE33is8= Subject key identifier: 76:80:6B:E8:90:92:C4:AB:95:8A:C2:5A:4F:3F:62:7E:2A:65:09:48 Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019BF5ABFFA570F33F6ADC1F1989BAD780D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0E46 Signing time: Sun 25 Jan 2026 15:00:48 +0000 Manifest this update: Sun 25 Jan 2026 15:00:48 +0000 Manifest next update: Mon 26 Jan 2026 15:00:48 +0000 Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: Xcuf9/ExCCgxY2DvUhdwU+lrNwmcjisFyQ/7x5tY+cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:ff:a5:70:f3:3f:6a:dc:1f:19:89:ba:d7:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Jan 25 15:00:48 2026 GMT Not After : Jan 26 15:00:48 2026 GMT Subject: CN=76806be89092c4ab958ac25a4f3f627e2a650948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:fe:16:68:48:15:7c:30:45:5f:37:73:4b: 93:2f:d5:e3:90:65:84:48:30:67:2f:c4:e3:0c:55: 71:a3:d2:ae:5a:9d:c7:d5:8e:27:ea:3a:f6:3d:0a: e7:b8:08:d1:41:c1:95:8f:82:e3:db:aa:1b:62:6f: 29:02:22:a4:a5:02:9c:15:33:60:5e:41:96:eb:b3: 01:b7:30:66:8b:a1:ec:3b:78:44:53:d9:72:42:03: a9:41:d2:27:4f:26:c2:6e:83:de:1a:09:01:d1:61: cd:cd:5e:48:31:35:94:c2:7e:f8:aa:c8:97:7d:e6: 37:fd:35:1b:44:02:8b:90:9a:ae:f0:4f:7c:57:27: b8:09:54:c8:7a:32:e1:96:7a:72:1a:cf:d4:3e:b9: 05:ad:bc:4a:20:88:ab:a1:fd:ba:cf:d3:c7:8c:2a: 4b:62:34:20:20:83:c3:c4:88:9b:31:44:85:de:89: 10:fe:a0:9a:d0:32:3f:5a:5e:b2:13:82:6f:5b:52: 3b:7e:4b:59:5d:86:e5:7f:86:5d:1b:77:e3:68:a4: ab:b4:87:a0:64:84:d4:d2:f5:ac:79:88:2f:34:34: 25:5d:87:00:58:d2:93:47:3c:ea:b8:ea:4c:35:d3: 89:63:6e:e0:39:56:97:ad:28:56:00:21:de:84:32: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:80:6B:E8:90:92:C4:AB:95:8A:C2:5A:4F:3F:62:7E:2A:65:09:48 X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bd:52:a8:d0:2f:32:cf:9c:95:f1:fd:8c:11:e7:51:f3:7e: ee:90:23:9b:88:47:5d:6a:8a:b4:ee:fc:49:60:8a:f0:ac:f4: 69:87:5c:23:65:ab:a3:e5:a8:e9:3c:06:14:4c:3d:27:c7:7b: 00:bd:4b:30:65:50:22:0d:4e:d6:06:6a:f4:0f:ee:56:1c:83: 63:22:ce:48:0f:13:a1:4e:1b:b3:8d:cb:24:b9:7c:e5:e6:02: 85:fa:c9:ae:7f:ef:97:5d:30:c9:fe:2a:a7:c7:92:b4:99:6b: fd:4b:fb:06:66:50:64:56:97:0c:03:af:e5:f7:2e:8d:ee:29: da:e2:c7:ab:8e:a6:0b:e4:92:5c:94:99:0f:67:78:10:6a:da: 29:2c:ed:70:c3:1d:93:d9:4c:80:d4:e1:8e:87:b5:e8:56:72: 46:66:f2:a8:cb:f5:1a:8b:c0:77:33:ea:a4:12:8c:07:7f:c6: a7:e1:56:06:25:b1:00:02:64:10:6e:ba:69:f1:db:12:47:5f: 07:ca:b1:19:72:ed:db:e0:29:55:b4:69:55:d3:53:79:27:e5: d4:2f:cd:23:da:32:0b:8b:91:45:3c:86:e7:a9:e9:3f:43:7a: 0e:aa:be:24:2d:12:81:24:54:76:37:10:de:48:75:5a:ac:98: bb:69:cd:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/+lcPM/atwfGYm614DQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjYwMTI1MTUwMDQ4WhcNMjYwMTI2MTUwMDQ4WjAzMTEwLwYDVQQD Eyg3NjgwNmJlODkwOTJjNGFiOTU4YWMyNWE0ZjNmNjI3ZTJhNjUwOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPL+FmhIFXwwRV83c0uTL9XjkGWE SDBnL8TjDFVxo9KuWp3H1Y4n6jr2PQrnuAjRQcGVj4Lj26obYm8pAiKkpQKcFTNg XkGW67MBtzBmi6HsO3hEU9lyQgOpQdInTybCboPeGgkB0WHNzV5IMTWUwn74qsiX feY3/TUbRAKLkJqu8E98Vye4CVTIejLhlnpyGs/UPrkFrbxKIIirof26z9PHjCpL YjQgIIPDxIibMUSF3okQ/qCa0DI/Wl6yE4JvW1I7fktZXYblf4ZdG3fjaKSrtIeg ZITU0vWseYgvNDQlXYcAWNKTRzzquOpMNdOJY27gOVaXrShWACHehDIXHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaAa+iQksSrlYrCWk8/Yn4qZQlIMB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD71SqNAv Ms+clfH9jBHnUfN+7pAjm4hHXWqKtO78SWCK8Kz0aYdcI2Wro+Wo6TwGFEw9J8d7 AL1LMGVQIg1O1gZq9A/uVhyDYyLOSA8ToU4bs43LJLl85eYChfrJrn/vl10wyf4q p8eStJlr/Uv7BmZQZFaXDAOv5fcuje4p2uLHq46mC+SSXJSZD2d4EGraKSztcMMd k9lMgNThjoe16FZyRmbyqMv1GovAdzPqpBKMB3/Gp+FWBiWxAAJkEG66afHbEkdf B8qxGXLt2+ApVbRpVdNTeSfl1C/NI9oyC4uRRTyG56npP0N6Dqq+JC0SgSRUdjcQ 3kh1WqyYu2nNrA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:06 2026 by rpki-client