This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json) Hash identifier: kBV5t3Xte2Im/0cn+fMDEkAm3ZytO0if11Q5y4lwxYs= Subject key identifier: 2F:97:AE:FB:93:F0:19:B8:F4:E0:B8:93:25:67:D7:58:AC:04:03:AB Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019BF91BF52CFFC57F4E1AAF873A32F982E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft Manifest number: 0F9C Signing time: Mon 26 Jan 2026 07:01:57 +0000 Manifest this update: Mon 26 Jan 2026 07:01:57 +0000 Manifest next update: Tue 27 Jan 2026 07:01:57 +0000 Files and hashes: 1: m5cCxh_PhsabAGIRJfH-lY0-6rI.roa (hash: sPrlMxEkxZrDcF6KQs3latR2l78VhegB/Bdy2kmEXaw=) 2: seVR3O1dae1fOLAeXT1ZaF261rk.roa (hash: JmrPbibwTZTU1bBXfvUDUkidxKjk9p3hVn5swMWj1a4=) 3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: EKvVwdXKI3AJsVfMf0QAILI7vBjyj4dy4VQzMYUrBkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:f5:2c:ff:c5:7f:4e:1a:af:87:3a:32:f9:82:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Jan 26 07:01:57 2026 GMT Not After : Jan 27 07:01:57 2026 GMT Subject: CN=2f97aefb93f019b8f4e0b8932567d758ac0403ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:21:d2:84:75:20:2b:b0:75:a4:80:f4:df:0a: 30:90:76:97:e1:a9:df:d6:ee:00:c6:16:5e:a2:ae: 58:97:9b:e1:21:c2:b1:22:91:28:93:84:bb:b3:e6: 08:1f:37:fa:42:1f:5f:f4:81:a3:c0:a6:d3:4a:1a: 98:62:a0:4b:c1:e3:1c:6e:70:1f:5d:44:3a:4b:88: f5:74:92:4b:f6:7d:99:13:90:10:f4:fb:2d:3c:37: 79:9c:1a:72:13:cb:25:09:a1:8b:ad:3b:a4:d8:17: ae:4c:94:44:ed:34:76:b3:bf:c7:0b:13:ae:c1:e4: 33:85:fc:e8:8b:c0:1d:33:59:f3:4c:f9:36:fa:6a: 77:23:12:a1:78:00:3e:14:f0:85:53:ce:95:a8:9b: 69:bf:5f:93:d6:64:06:45:9a:97:5f:1e:07:4d:55: 8b:16:43:95:a9:50:a2:4b:3e:e7:17:cf:22:04:2c: 89:8d:93:18:d4:c4:fb:a2:7d:83:3d:1a:09:86:b0: c5:11:da:b2:10:9c:20:1b:8c:9a:59:d9:07:64:72: 0b:c0:f7:94:6c:39:38:37:ab:05:e3:d8:09:c8:31: f1:07:c7:89:b9:f7:e3:c4:8a:e1:43:3c:23:ec:0c: 80:9c:cc:ee:82:61:9b:18:28:3a:08:c5:55:46:00: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:97:AE:FB:93:F0:19:B8:F4:E0:B8:93:25:67:D7:58:AC:04:03:AB X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6a:0b:a0:22:54:0c:ae:7a:3f:ef:85:3c:f5:92:c0:e7:ed: be:d4:d8:aa:0e:ca:cb:eb:14:75:e5:d5:c5:98:a3:27:c4:ca: 44:cf:4e:ec:d8:a5:4c:8c:88:ce:79:cd:cf:fe:f2:8f:32:56: b8:dd:b0:74:be:e9:28:2c:2a:75:4e:d8:07:38:64:c0:2d:e6: 05:72:c3:30:28:58:d1:3e:09:9f:2a:d3:d2:f6:b5:8a:28:fc: f3:d6:41:44:71:2b:b2:55:96:63:c1:75:13:f9:62:7e:a4:a4: 07:e2:6e:43:db:fb:fd:83:8a:4b:08:5c:23:17:a4:0b:17:fd: 32:c1:62:a0:0a:92:80:7c:e2:c4:db:d5:ad:fc:c2:52:2a:7c: 53:c1:70:23:c1:19:21:d6:bf:5d:74:02:00:a4:f9:18:2d:36: 50:d6:93:b7:4a:22:61:03:4c:cf:88:4a:dc:20:15:15:38:c7: ed:9e:fd:8f:29:69:1a:c6:93:be:0f:57:c7:c7:b7:ab:48:b4: 1d:0f:d0:4b:0f:13:70:a5:e1:25:01:35:7e:6a:e3:c6:5c:52: 41:26:58:e0:d0:53:1f:6f:88:86:39:73:ae:78:ce:3b:ef:52: 9e:48:cd:1a:80:2c:13:92:90:9b:09:28:34:b0:55:51:1d:65: 68:cd:97:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G/Us/8V/Thqvhzoy+YLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjYwMTI2MDcwMTU3WhcNMjYwMTI3MDcwMTU3WjAzMTEwLwYDVQQD EygyZjk3YWVmYjkzZjAxOWI4ZjRlMGI4OTMyNTY3ZDc1OGFjMDQwM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyHShHUgK7B1pID03wowkHaX4anf 1u4AxhZeoq5Yl5vhIcKxIpEok4S7s+YIHzf6Qh9f9IGjwKbTShqYYqBLweMcbnAf XUQ6S4j1dJJL9n2ZE5AQ9PstPDd5nBpyE8slCaGLrTuk2BeuTJRE7TR2s7/HCxOu weQzhfzoi8AdM1nzTPk2+mp3IxKheAA+FPCFU86VqJtpv1+T1mQGRZqXXx4HTVWL FkOVqVCiSz7nF88iBCyJjZMY1MT7on2DPRoJhrDFEdqyEJwgG4yaWdkHZHILwPeU bDk4N6sF49gJyDHxB8eJuffjxIrhQzwj7AyAnMzugmGbGCg6CMVVRgAoAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+XrvuT8Bm49OC4kyVn11isBAOrMB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2oLoCJU DK56P++FPPWSwOftvtTYqg7Ky+sUdeXVxZijJ8TKRM9O7NilTIyIznnNz/7yjzJW uN2wdL7pKCwqdU7YBzhkwC3mBXLDMChY0T4JnyrT0va1iij889ZBRHErslWWY8F1 E/lifqSkB+JuQ9v7/YOKSwhcIxekCxf9MsFioAqSgHzixNvVrfzCUip8U8FwI8EZ Ida/XXQCAKT5GC02UNaTt0oiYQNMz4hK3CAVFTjH7Z79jylpGsaTvg9Xx8e3q0i0 HQ/QSw8TcKXhJQE1fmrjxlxSQSZY4NBTH2+IhjlzrnjOO+9SnkjNGoAsE5KQmwko NLBVUR1laM2Xxw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:44 2026 by rpki-client