This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json) Hash identifier: Nu74RD/1KeId8rufEPB9cE5/wheKrlEWdfbUgbauaG8= Subject key identifier: 91:54:E6:E6:22:99:00:1D:8F:52:95:A5:4C:CA:E3:59:2D:8B:BE:86 Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c Certificate serial: 019BF7D268F55A78B6924321E13261B999BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft Manifest number: 0101 Signing time: Mon 26 Jan 2026 01:02:00 +0000 Manifest this update: Mon 26 Jan 2026 01:02:00 +0000 Manifest next update: Tue 27 Jan 2026 01:02:00 +0000 Files and hashes: 1: NYFzGtm8BIz6b2XOW1Sb4PG6mXY.roa (hash: MnwVKtKeam24p8pGTsLZgxlqqHL4bg/4LSoL94hQTRA=) 2: QN7dmkDvoiUVbRmtbs4ksoJXTM0.roa (hash: aJSRTzEAE733XK1a9bU/vkTGlWCBV/QtJ/qcXmWO7iQ=) 3: k7WMCllWar9Vb7fMD-FNqAGjq8g.roa (hash: +rvK4SmRtwZUO3WvDMk+eBGnMNZJ7s4dXyPjupF/zCo=) 4: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: UCJFyzxo95wJGkcCYNFfpN4OLQLy9hGwvdDBE5CzC/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:68:f5:5a:78:b6:92:43:21:e1:32:61:b9:99:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c Validity Not Before: Jan 26 01:02:00 2026 GMT Not After : Jan 27 01:02:00 2026 GMT Subject: CN=9154e6e62299001d8f5295a54ccae3592d8bbe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:f7:46:8f:04:c2:d1:6f:e0:73:b0:15:c2: 5c:ee:01:04:72:c5:b1:4f:e9:39:ac:61:7d:77:d2: 61:2f:a5:9e:49:e4:6a:3f:10:ba:3f:b4:a7:60:2e: a5:89:3a:16:71:04:5e:b4:87:4d:2c:13:ea:bb:0a: 5d:3b:3b:9f:4e:3c:fa:df:36:58:10:5c:2b:f4:bf: b9:8e:3c:c9:9a:ac:7b:da:29:17:2b:72:b1:5e:f3: da:81:95:05:ba:5f:31:ab:a9:28:4b:2a:d1:04:32: 67:20:37:e7:f0:be:0f:09:66:ba:9e:f5:d3:5d:d7: 20:09:69:81:13:8f:62:a0:37:00:81:39:63:86:71: 4e:b5:95:cd:2c:c6:39:34:9e:7b:72:74:26:fc:40: b2:4a:2d:87:f5:0b:5d:80:1b:94:c7:3c:03:76:ac: b2:45:d9:7e:10:f4:7f:95:13:89:16:25:7a:e0:dc: 07:d3:aa:75:ee:6f:6e:cb:d0:e3:4f:3b:c7:44:e0: d3:01:44:db:88:ef:e6:c2:60:e1:37:0d:e8:5f:9e: 90:0e:95:08:c4:97:76:e7:0a:8a:d9:e2:00:88:20: 93:7e:88:07:0e:3d:7d:87:73:ba:b9:8f:76:be:2b: 77:fa:a6:d9:57:69:7d:a3:1c:aa:1f:9e:4e:2d:ba: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:54:E6:E6:22:99:00:1D:8F:52:95:A5:4C:CA:E3:59:2D:8B:BE:86 X509v3 Authority Key Identifier: keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:31:53:93:1c:5a:1a:b0:4d:b1:30:27:1d:9b:d2:75:37:58: 24:73:35:5c:4c:56:e0:4e:42:c6:dc:d7:48:ff:ce:ba:74:5f: c9:50:a3:0a:ee:55:f9:7a:2f:5f:0e:b1:8c:8f:c7:c8:b0:14: d2:0b:c9:94:72:30:03:d1:b7:72:2c:3b:11:65:d0:20:61:2c: 8d:2d:ba:a7:9d:a7:92:f2:57:58:a0:50:63:03:8e:a2:9d:76: f3:db:c6:23:c2:d4:84:f4:b5:93:d7:4d:f1:4c:f3:d4:09:d6: 48:e1:cb:f4:b5:37:11:0c:94:ca:a9:72:a1:b1:cd:b3:e5:4f: 45:41:68:4d:87:3f:f8:27:31:79:fe:4d:95:e9:03:12:bb:37: 83:35:93:81:a9:41:72:55:a4:2f:ab:87:26:d1:c4:2e:b2:0b: ce:c5:2e:a3:52:e1:cb:3f:da:04:6f:fb:ce:e8:4a:c6:c6:c1: 6d:56:ed:2f:db:fd:af:9f:89:f8:80:19:ff:48:9f:10:49:9c: 82:d7:11:91:f1:63:10:da:b7:0b:60:e8:79:f7:d1:4e:66:ea: ca:d6:b4:ee:eb:bb:c3:1a:76:92:c4:37:37:c8:91:bf:ba:b6: 2c:2e:49:39:b7:8f:28:13:fe:e9:8d:aa:bb:8e:dc:2d:b8:67: bd:73:e4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30mj1Wni2kkMh4TJhuZm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDAxODVmNTUyY2Q5NzUyNzZjMDM0NjRmNTBjN2E1ZDM1 MTU2NGMwHhcNMjYwMTI2MDEwMjAwWhcNMjYwMTI3MDEwMjAwWjAzMTEwLwYDVQQD Eyg5MTU0ZTZlNjIyOTkwMDFkOGY1Mjk1YTU0Y2NhZTM1OTJkOGJiZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0X3Ro8EwtFv4HOwFcJc7gEEcsWx T+k5rGF9d9JhL6WeSeRqPxC6P7SnYC6liToWcQRetIdNLBPquwpdOzufTjz63zZY EFwr9L+5jjzJmqx72ikXK3KxXvPagZUFul8xq6koSyrRBDJnIDfn8L4PCWa6nvXT XdcgCWmBE49ioDcAgTljhnFOtZXNLMY5NJ57cnQm/ECySi2H9QtdgBuUxzwDdqyy Rdl+EPR/lROJFiV64NwH06p17m9uy9DjTzvHRODTAUTbiO/mwmDhNw3oX56QDpUI xJd25wqK2eIAiCCTfogHDj19h3O6uY92vit3+qbZV2l9oxyqH55OLbpeJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFU5uYimQAdj1KVpUzK41kti76GMB8GA1UdIwQY MBaAFM9AGF9VLNl1J2wDRk9Qx6XTUVZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzct OTE5ZWVmYmE0OGI1LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzctOTE5ZWVmYmE0OGI1 LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczFTkxxa GrBNsTAnHZvSdTdYJHM1XExW4E5CxtzXSP/OunRfyVCjCu5V+XovXw6xjI/HyLAU 0gvJlHIwA9G3ciw7EWXQIGEsjS26p52nkvJXWKBQYwOOop1289vGI8LUhPS1k9dN 8Uzz1AnWSOHL9LU3EQyUyqlyobHNs+VPRUFoTYc/+Ccxef5NlekDErs3gzWTgalB clWkL6uHJtHELrILzsUuo1Lhyz/aBG/7zuhKxsbBbVbtL9v9r5+J+IAZ/0ifEEmc gtcRkfFjENq3C2DoeffRTmbqyta07uu7wxp2ksQ3N8iRv7q2LC5JObePKBP+6Y2q u47cLbhnvXPkgw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:21 2026 by rpki-client