This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json) Hash identifier: kNp8Dh/jq112QXdbmkZNUbGpvq3MM4wciROjtnRX6Zw= Subject key identifier: D8:BA:C9:9C:30:E1:99:34:1E:49:2D:2F:56:6B:02:F3:30:46:3A:01 Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019BF318F54D3E7E90797A3C54BB03026D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft Manifest number: 0807 Signing time: Sun 25 Jan 2026 03:00:57 +0000 Manifest this update: Sun 25 Jan 2026 03:00:57 +0000 Manifest next update: Mon 26 Jan 2026 03:00:57 +0000 Files and hashes: 1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=) 2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=) 3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=) 4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=) 5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=) 6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: MWI1FPRc5icz020FdrFYSboT136Vu2LngttLY9RFnH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:f5:4d:3e:7e:90:79:7a:3c:54:bb:03:02:6d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Jan 25 03:00:57 2026 GMT Not After : Jan 26 03:00:57 2026 GMT Subject: CN=d8bac99c30e199341e492d2f566b02f330463a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:21:99:73:59:d0:94:b7:19:f4:76:b7:ec: 98:82:6a:c2:7b:69:2a:f2:2d:42:06:f8:70:b1:37: 03:e9:ba:87:ee:95:da:b4:21:02:15:6b:05:79:68: bd:4c:d8:31:7c:06:a6:02:dd:8f:6b:3b:e4:0e:a7: 2b:f7:dc:dc:de:9d:d5:6e:66:c9:4d:2e:9f:f7:7f: 7b:89:54:72:1d:93:04:24:47:9b:c0:9e:eb:19:59: 05:b7:4f:79:60:24:f2:89:f4:33:b6:72:d1:44:e8: 04:82:ac:85:1c:a6:9e:d7:31:21:d4:dc:43:78:67: b8:cd:90:3d:1f:5a:49:48:93:b2:16:e6:dc:0f:c0: 5a:23:d1:c7:6a:8a:13:bf:1a:c5:56:a2:5d:03:1f: 8b:f8:41:9b:a7:e5:9f:10:21:be:c1:eb:1f:2a:c7: 11:fe:ac:d0:c1:ce:b4:54:7c:a4:31:42:b0:f7:b6: 4f:d5:e1:61:e7:6c:d7:da:fb:e0:d4:54:32:c1:7c: 3f:1c:4f:31:e6:da:b7:e5:a4:52:7d:bc:25:80:1d: de:5c:30:c9:75:5d:b9:de:85:ef:02:51:64:f4:3e: 90:96:c6:d7:16:25:a6:d1:93:1c:4b:bc:ce:90:7d: b4:f6:0d:47:92:b7:db:d7:bd:69:4e:b8:17:3e:48: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BA:C9:9C:30:E1:99:34:1E:49:2D:2F:56:6B:02:F3:30:46:3A:01 X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2e:96:3d:6c:fc:ab:6b:db:08:0c:0a:9e:06:e8:ff:e4:88: ca:34:90:09:6a:d8:cb:e7:91:a6:73:91:3a:a3:0a:0a:02:9e: c2:d9:c6:b8:46:bd:43:33:b9:f0:44:5e:8c:ec:85:64:75:cc: 41:b6:de:7c:a0:2a:31:63:f7:10:b8:c8:4f:7e:a7:b6:36:5e: c1:2d:d1:9e:60:91:94:6a:0f:3d:34:31:5a:fb:58:0d:72:a5: 4c:f1:bf:31:d5:26:52:ae:70:c3:b1:82:b3:3b:b7:ab:7a:d5: 84:f7:ac:75:08:68:6e:c9:d0:ed:54:82:d5:97:e8:9e:de:54: f2:66:a5:00:9c:83:a7:7b:59:87:77:4e:ba:0f:5d:80:95:7e: ea:0e:86:65:6f:42:c8:56:43:79:46:19:9e:69:c9:41:6d:a8: 93:78:40:ad:09:e5:87:c6:85:09:40:46:9f:a5:12:f9:95:1f: e6:ab:0a:4e:71:ae:09:4c:b4:93:9a:df:cb:c2:c7:2e:ec:b1: a4:a5:d3:85:81:ae:88:7f:e5:3d:23:4c:cd:5c:52:6f:10:1c: 58:04:05:5b:61:4e:f9:2d:cb:25:7d:e5:b4:90:aa:13:0e:5b: 6b:7a:86:5a:86:32:1e:03:6d:d9:bb:aa:b2:77:ff:2c:25:16: d8:4e:07:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGPVNPn6QeXo8VLsDAm0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjYwMTI1MDMwMDU3WhcNMjYwMTI2MDMwMDU3WjAzMTEwLwYDVQQD EyhkOGJhYzk5YzMwZTE5OTM0MWU0OTJkMmY1NjZiMDJmMzMwNDYzYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cYhmXNZ0JS3GfR2t+yYgmrCe2kq 8i1CBvhwsTcD6bqH7pXatCECFWsFeWi9TNgxfAamAt2PazvkDqcr99zc3p3VbmbJ TS6f9397iVRyHZMEJEebwJ7rGVkFt095YCTyifQztnLRROgEgqyFHKae1zEh1NxD eGe4zZA9H1pJSJOyFubcD8BaI9HHaooTvxrFVqJdAx+L+EGbp+WfECG+wesfKscR /qzQwc60VHykMUKw97ZP1eFh52zX2vvg1FQywXw/HE8x5tq35aRSfbwlgB3eXDDJ dV253oXvAlFk9D6QlsbXFiWm0ZMcS7zOkH209g1Hkrfb171pTrgXPkinLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi6yZww4Zk0HkktL1ZrAvMwRjoBMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnS6WPWz8 q2vbCAwKngbo/+SIyjSQCWrYy+eRpnOROqMKCgKewtnGuEa9QzO58ERejOyFZHXM QbbefKAqMWP3ELjIT36ntjZewS3RnmCRlGoPPTQxWvtYDXKlTPG/MdUmUq5ww7GC szu3q3rVhPesdQhobsnQ7VSC1Zfont5U8malAJyDp3tZh3dOug9dgJV+6g6GZW9C yFZDeUYZnmnJQW2ok3hArQnlh8aFCUBGn6US+ZUf5qsKTnGuCUy0k5rfy8LHLuyx pKXThYGuiH/lPSNMzVxSbxAcWAQFW2FO+S3LJX3ltJCqEw5ba3qGWoYyHgNt2buq snf/LCUW2E4Hzw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:01 2026 by rpki-client