This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json) Hash identifier: 4mIpHrQGsJ1R21Ggh4/Anq4hkz+ujkSWzbhDVtOuVCc= Subject key identifier: E2:AE:BC:75:6A:DE:5D:F9:F2:06:D8:E4:9B:FE:4C:DB:2F:7F:E4:D6 Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Certificate serial: 019BF5ABD1AD9BA8E63C511026F7E799D63B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft Manifest number: 01E0 Signing time: Sun 25 Jan 2026 15:00:36 +0000 Manifest this update: Sun 25 Jan 2026 15:00:36 +0000 Manifest next update: Mon 26 Jan 2026 15:00:36 +0000 Files and hashes: 1: 5Po2qtadpqTNf7p3MMLaT46C8vE.roa (hash: nFjym/eYekZGGRObI9fvHB7nvqlWQEguTM24IpDntwA=) 2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: UdwgI4MSu2NiebeT02oWvYu47bVm8T/bTudYiqi2oiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:d1:ad:9b:a8:e6:3c:51:10:26:f7:e7:99:d6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31 Validity Not Before: Jan 25 15:00:36 2026 GMT Not After : Jan 26 15:00:36 2026 GMT Subject: CN=e2aebc756ade5df9f206d8e49bfe4cdb2f7fe4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:76:cf:f0:23:9c:9b:91:0b:64:50:68:87: 75:93:71:88:49:dc:c2:e6:4c:f0:bb:24:10:28:c9: 56:f4:8b:ce:2a:71:75:8a:4d:16:96:77:1b:8a:c3: 81:5d:82:59:d7:06:14:88:6b:b9:6f:f8:f1:08:db: a4:59:65:c9:41:2c:9e:d0:2c:86:45:2b:c5:aa:e5: 5a:51:f6:45:03:df:cd:f7:70:65:55:8b:e9:a8:eb: 89:e2:c4:6f:f8:de:05:d3:a2:b3:6b:9e:9a:e5:bd: b0:c5:d3:b8:28:bb:67:ed:ba:62:9f:85:c2:15:87: e9:fb:3c:ca:63:1c:d6:d8:46:e7:bf:a6:77:90:8d: 4d:8b:3b:83:8f:08:f0:40:4c:23:1e:9c:45:59:3f: 42:99:50:85:2b:85:b7:11:99:00:0c:b8:2c:7f:e2: 8c:08:a8:96:8c:db:18:7e:ba:25:fd:61:0e:40:62: 91:f7:37:4d:f3:d9:db:2c:1c:e5:12:65:e0:5a:47: 8a:cf:8f:a0:fa:d6:57:c0:fb:73:62:3d:69:ad:01: 52:59:52:54:f3:ad:cb:7c:dc:9d:42:13:46:47:47: b6:ef:81:53:58:f4:c5:20:e9:a6:92:c0:df:63:a2: fa:d5:61:1b:45:22:3f:8c:b7:9e:36:a9:1a:5d:dc: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:BC:75:6A:DE:5D:F9:F2:06:D8:E4:9B:FE:4C:DB:2F:7F:E4:D6 X509v3 Authority Key Identifier: keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:05:ad:78:5d:64:94:e0:9a:5c:27:b4:f5:a9:de:a1:89:41: 3a:f9:3b:dc:c4:e4:d9:e2:46:dc:54:2d:38:85:d6:49:e7:71: b8:fc:54:6d:37:87:b1:65:9f:b0:27:d2:68:08:4f:02:b3:3b: a9:05:55:6b:69:9e:cc:f2:4b:e9:64:45:45:ce:8a:0e:b1:25: 38:28:90:81:9c:47:d6:ba:b1:7e:ac:a9:74:44:1e:ce:88:9c: 0a:af:8a:f8:ce:fd:62:2e:df:b3:51:cc:ed:96:00:cd:be:ab: 45:73:7d:a4:37:f5:17:a0:77:69:68:03:5b:c8:4a:e2:89:26: b8:70:f8:4b:58:53:ad:22:bd:74:13:38:03:8b:1f:a6:e8:61: 47:53:6c:39:68:3c:e5:89:42:e2:28:cf:fd:86:67:b6:3b:ae: 47:29:c9:bb:6d:c7:c1:e0:d5:8c:f2:33:5b:fb:e3:bb:42:7e: 91:88:ed:f9:d7:d3:24:d3:f4:11:d3:85:c3:d9:67:30:c4:40: fb:8b:9e:76:46:dd:ea:77:d8:b3:61:09:23:01:d5:ce:ec:92: 37:5c:0d:e4:5e:9d:d7:49:db:b5:60:be:10:c2:a0:1d:be:46: e7:40:e4:a9:21:24:31:6d:e2:cd:ab:d1:ed:f8:43:da:cd:c7: 64:38:ef:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9Gtm6jmPFEQJvfnmdY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi OTVmMzEwHhcNMjYwMTI1MTUwMDM2WhcNMjYwMTI2MTUwMDM2WjAzMTEwLwYDVQQD EyhlMmFlYmM3NTZhZGU1ZGY5ZjIwNmQ4ZTQ5YmZlNGNkYjJmN2ZlNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlh2z/AjnJuRC2RQaId1k3GISdzC 5kzwuyQQKMlW9IvOKnF1ik0WlncbisOBXYJZ1wYUiGu5b/jxCNukWWXJQSye0CyG RSvFquVaUfZFA9/N93BlVYvpqOuJ4sRv+N4F06Kza56a5b2wxdO4KLtn7bpin4XC FYfp+zzKYxzW2Ebnv6Z3kI1NizuDjwjwQEwjHpxFWT9CmVCFK4W3EZkADLgsf+KM CKiWjNsYfrol/WEOQGKR9zdN89nbLBzlEmXgWkeKz4+g+tZXwPtzYj1prQFSWVJU 863LfNydQhNGR0e274FTWPTFIOmmksDfY6L61WEbRSI/jLeeNqkaXdyoiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKuvHVq3l358gbY5Jv+TNsvf+TWMB8GA1UdIwQY MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwWteF1k lOCaXCe09aneoYlBOvk73MTk2eJG3FQtOIXWSedxuPxUbTeHsWWfsCfSaAhPArM7 qQVVa2mezPJL6WRFRc6KDrElOCiQgZxH1rqxfqypdEQezoicCq+K+M79Yi7fs1HM 7ZYAzb6rRXN9pDf1F6B3aWgDW8hK4okmuHD4S1hTrSK9dBM4A4sfpuhhR1NsOWg8 5YlC4ijP/YZntjuuRynJu23HweDVjPIzW/vju0J+kYjt+dfTJNP0EdOFw9lnMMRA +4uedkbd6nfYs2EJIwHVzuySN1wN5F6d10nbtWC+EMKgHb5G50DkqSEkMW3izavR 7fhD2s3HZDjvJA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:21 2026 by rpki-client