This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: OPRhSTTtUaDegSm+M7pn7dGQtbWscjhrTgvWiszJ2TU= Subject key identifier: D0:40:A1:9D:3A:A2:8B:9E:9B:8A:7C:2F:BC:AB:81:38:7C:D6:37:93 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019BF687A6DC3F140E29EE01CEEAD2B5B495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 19:00:43 +0000 Manifest this update: Sun 25 Jan 2026 19:00:43 +0000 Manifest next update: Mon 26 Jan 2026 19:00:43 +0000 Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=) 2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=) 3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=) 4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=) 5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=) 6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=) 7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=) 8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=) 9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: POxJUQcCuW9P2BLvraNe4xwpsFUDb2QMR+hJnz6mivU=) 10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=) 11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=) 12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:a6:dc:3f:14:0e:29:ee:01:ce:ea:d2:b5:b4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 25 19:00:43 2026 GMT Not After : Jan 26 19:00:43 2026 GMT Subject: CN=d040a19d3aa28b9e9b8a7c2fbcab81387cd63793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:1d:95:13:5d:6c:a6:ed:85:f9:20:2a:d1: f8:36:fd:1a:2b:bb:48:d9:eb:c7:89:ca:b7:4a:1a: 58:0b:94:ea:71:00:34:71:1e:46:e8:09:44:65:7d: a2:08:91:85:56:e6:9e:49:a8:a2:0f:6f:2f:ea:47: 32:eb:a8:3d:4e:33:b4:26:40:78:18:99:c4:a8:aa: 13:4e:1a:de:5e:7c:ba:25:7a:0d:21:9a:46:73:4d: 85:19:17:1a:10:e9:bd:b7:fd:58:7e:b3:ac:43:22: 6e:77:70:af:e5:4f:fb:df:b8:e7:61:d3:7c:55:03: b9:4b:d0:3f:13:41:86:8c:f0:1c:73:26:75:89:d0: a8:98:5d:59:0c:94:03:28:78:14:60:ce:e7:b7:9e: e6:c9:16:b5:cd:36:16:b3:f9:1a:8d:60:c7:3e:a9: d5:ea:63:bf:7b:27:2a:09:0b:30:ed:c5:af:3e:c1: 6f:c8:4d:fd:52:b6:d3:b2:17:a1:03:d8:35:ef:da: a1:fc:5f:6a:21:13:a7:06:cf:30:44:a0:37:34:15: 99:c4:2a:bb:dd:02:9a:2d:77:f8:cb:a7:68:95:f1: 43:a1:6f:cd:bd:b5:a4:0b:2c:b2:10:8f:6a:78:fe: f7:97:a6:e7:b5:90:56:e5:d3:12:a4:f1:6c:8f:4a: 29:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:40:A1:9D:3A:A2:8B:9E:9B:8A:7C:2F:BC:AB:81:38:7C:D6:37:93 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:34:14:a8:ee:c8:57:06:54:d1:5a:7b:bb:c0:2f:b8:20:53: 6d:83:3e:e2:f2:90:35:e5:62:76:fe:7d:41:25:b7:75:23:b1: be:a4:02:d8:23:9c:5a:5f:f3:2a:30:e7:31:c2:3b:b3:15:7a: f3:50:8d:fe:7f:9b:d4:24:50:39:57:87:43:7b:98:cb:be:35: ef:34:bb:b3:e7:1e:cd:12:e2:31:12:70:1d:80:12:6f:a1:b0: 83:58:0e:85:08:d0:d0:1f:f8:3b:7e:74:18:f2:70:1f:05:df: ef:2e:d3:70:e5:d6:66:34:99:36:1b:ab:e7:3f:06:80:d4:61: 3b:2e:ee:e9:23:c0:52:f0:6e:5a:da:89:8a:7e:77:1b:22:c1: 73:be:6c:44:41:ef:dd:32:e6:b4:96:35:a2:b6:c9:cf:b3:fd: e8:0c:75:18:e8:cb:65:81:c2:bc:3f:65:ac:88:67:ee:36:89: fb:ad:f0:b7:41:d8:b9:ff:56:f1:e0:4d:e5:2d:bc:ec:de:1c: c7:6b:79:cc:8b:8b:d5:90:97:67:98:d5:11:a4:0c:ef:84:95: 6f:03:78:35:d3:ed:4e:95:22:c4:4b:37:ef:9c:c5:82:14:e0: b2:2c:f2:15:ae:78:41:45:24:65:af:9f:c2:85:ce:52:5b:2e: 53:7e:70:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6bcPxQOKe4BzurStbSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTI1MTkwMDQzWhcNMjYwMTI2MTkwMDQzWjAzMTEwLwYDVQQD EyhkMDQwYTE5ZDNhYTI4YjllOWI4YTdjMmZiY2FiODEzODdjZDYzNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAwdlRNdbKbthfkgKtH4Nv0aK7tI 2evHicq3ShpYC5TqcQA0cR5G6AlEZX2iCJGFVuaeSaiiD28v6kcy66g9TjO0JkB4 GJnEqKoTThreXny6JXoNIZpGc02FGRcaEOm9t/1YfrOsQyJud3Cv5U/737jnYdN8 VQO5S9A/E0GGjPAccyZ1idComF1ZDJQDKHgUYM7nt57myRa1zTYWs/kajWDHPqnV 6mO/eycqCQsw7cWvPsFvyE39UrbTshehA9g179qh/F9qIROnBs8wRKA3NBWZxCq7 3QKaLXf4y6dolfFDoW/NvbWkCyyyEI9qeP73l6bntZBW5dMSpPFsj0opPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBAoZ06oouem4p8L7yrgTh81jeTMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTQUqO7I VwZU0Vp7u8AvuCBTbYM+4vKQNeVidv59QSW3dSOxvqQC2COcWl/zKjDnMcI7sxV6 81CN/n+b1CRQOVeHQ3uYy7417zS7s+cezRLiMRJwHYASb6Gwg1gOhQjQ0B/4O350 GPJwHwXf7y7TcOXWZjSZNhur5z8GgNRhOy7u6SPAUvBuWtqJin53GyLBc75sREHv 3TLmtJY1orbJz7P96Ax1GOjLZYHCvD9lrIhn7jaJ+63wt0HYuf9W8eBN5S287N4c x2t5zIuL1ZCXZ5jVEaQM74SVbwN4NdPtTpUixEs375zFghTgsizyFa54QUUkZa+f woXOUlsuU35wyg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:14 2026 by rpki-client