This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json) Hash identifier: okTNktxJIwh4XbQCVzvNJlxQViiAi4aWBfccYtgQ2oo= Subject key identifier: D0:D8:35:69:8F:42:FF:1D:E8:23:40:E7:75:67:FD:E0:06:2E:FF:7A Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82 Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582 Certificate serial: 019BF462CF0404AA6A98A71BDED822DCC98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft Manifest number: 05DA Signing time: Sun 25 Jan 2026 09:01:14 +0000 Manifest this update: Sun 25 Jan 2026 09:01:14 +0000 Manifest next update: Mon 26 Jan 2026 09:01:14 +0000 Files and hashes: 1: IhEvB4N-VAEJVtPp1rJJN2vO7tU.roa (hash: ws4SVSte6HwCIH1AtJuZwDfB9L0r1q7+uigzwqB/PDc=) 2: Ukx2pX6eNsn9qNUR2nCL2LPZvjA.roa (hash: au3fqQ6RcZ2zMdL3gn35FM2inTn32yGF3JxGQGNFq+U=) 3: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: Cz0LusO1JDQd7sAUWfDWdYcD7zsR3NW7W3MBuU1s+jE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:cf:04:04:aa:6a:98:a7:1b:de:d8:22:dc:c9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582 Validity Not Before: Jan 25 09:01:14 2026 GMT Not After : Jan 26 09:01:14 2026 GMT Subject: CN=d0d835698f42ff1de82340e77567fde0062eff7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:1e:00:c0:35:70:c3:a8:dd:98:ca:7e:f6: c6:16:2b:e2:2c:25:b3:14:71:24:04:0d:4a:00:bb: 42:11:f5:1b:90:ad:c3:b3:d1:50:78:42:96:88:0b: b8:4d:16:b6:f1:22:75:9f:3e:0a:d7:b3:1f:e1:9c: e4:d0:3b:29:a1:35:c0:85:33:51:8b:af:72:75:e4: 04:b9:8c:8b:5c:7f:bb:06:84:af:a3:7d:f3:d9:62: 12:63:9b:8e:2b:fe:25:41:e6:8d:fe:b9:8a:05:21: 13:74:90:f6:af:d3:7e:3f:f0:ac:7d:16:31:68:64: 6d:13:b2:94:c0:8e:94:23:e3:b2:1a:81:53:94:33: 28:e2:fc:8a:e9:5e:37:c9:6a:a5:db:b6:42:71:1f: 30:aa:fa:c1:34:93:7e:63:24:db:52:b7:a0:bd:f4: a2:cd:ea:d4:c8:50:9d:f6:f6:8d:4a:76:51:2b:aa: 00:c1:69:2b:8f:60:d3:46:0b:e0:2e:d7:26:15:a3: f9:da:5d:14:de:bc:89:60:1f:5a:cd:6f:6d:b4:4b: f8:16:7d:de:18:79:14:03:1a:f2:9a:7d:67:47:a3: d2:5b:e9:72:c4:97:1a:f4:b7:2c:85:41:70:8e:bd: 39:7d:49:02:41:85:bb:e0:c3:5b:39:03:32:a3:a2: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:35:69:8F:42:FF:1D:E8:23:40:E7:75:67:FD:E0:06:2E:FF:7A X509v3 Authority Key Identifier: keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:db:16:4f:6d:6d:4c:04:c0:6d:62:9d:9c:a2:7a:f5:ae:43: 5e:de:d5:e9:c4:25:c3:a0:cf:9d:95:28:bc:43:35:ec:df:ba: 21:9f:66:5e:3a:3a:15:3e:86:b6:37:6b:e0:5b:00:17:74:4c: dc:f4:36:78:af:ad:e7:7c:9c:e9:5f:06:7f:22:ad:2d:cc:b1: 0f:23:18:7d:6c:d0:26:d5:d2:c1:c8:37:96:4b:0a:c2:9c:18: ad:37:be:ad:df:a6:72:d9:4a:d4:bf:3b:1a:99:45:ed:04:2d: aa:6a:e0:c2:40:a3:2b:91:8d:37:10:ab:29:d1:af:c3:c6:d2: 20:1c:53:1a:f2:e3:e8:61:52:74:3d:fb:fb:82:6d:e0:54:f8: 4b:1a:7d:de:84:37:4a:99:b9:d9:ec:8d:0b:0e:88:f2:b6:31: ca:b0:19:39:f1:64:3d:4e:20:75:15:f8:8b:ed:74:30:64:35: 66:70:7d:ee:44:85:9d:69:02:57:a8:18:e7:4b:9d:40:2a:d3: 2f:39:6b:6c:f0:39:35:dd:2b:af:ef:59:a8:25:e4:0f:d7:dd: a7:15:c2:e6:ee:a1:9c:bd:e4:49:9d:71:71:b0:d8:74:c4:3e: 91:5d:d7:19:82:39:70:14:a0:71:60:1f:b0:a4:0b:60:cc:66: 46:ff:0f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Ys8EBKpqmKcb3tgi3MmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux ZTQ1ODIwHhcNMjYwMTI1MDkwMTE0WhcNMjYwMTI2MDkwMTE0WjAzMTEwLwYDVQQD EyhkMGQ4MzU2OThmNDJmZjFkZTgyMzQwZTc3NTY3ZmRlMDA2MmVmZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2EeAMA1cMOo3ZjKfvbGFiviLCWz FHEkBA1KALtCEfUbkK3Ds9FQeEKWiAu4TRa28SJ1nz4K17Mf4Zzk0DspoTXAhTNR i69ydeQEuYyLXH+7BoSvo33z2WISY5uOK/4lQeaN/rmKBSETdJD2r9N+P/CsfRYx aGRtE7KUwI6UI+OyGoFTlDMo4vyK6V43yWql27ZCcR8wqvrBNJN+YyTbUregvfSi zerUyFCd9vaNSnZRK6oAwWkrj2DTRgvgLtcmFaP52l0U3ryJYB9azW9ttEv4Fn3e GHkUAxrymn1nR6PSW+lyxJca9LcshUFwjr05fUkCQYW74MNbOQMyo6K3zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDYNWmPQv8d6CNA53Vn/eAGLv96MB8GA1UdIwQY MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt MmIwMGVhMzI5MzdiLzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdsWT21t TATAbWKdnKJ69a5DXt7V6cQlw6DPnZUovEM17N+6IZ9mXjo6FT6Gtjdr4FsAF3RM 3PQ2eK+t53yc6V8GfyKtLcyxDyMYfWzQJtXSwcg3lksKwpwYrTe+rd+mctlK1L87 GplF7QQtqmrgwkCjK5GNNxCrKdGvw8bSIBxTGvLj6GFSdD37+4Jt4FT4Sxp93oQ3 Spm52eyNCw6I8rYxyrAZOfFkPU4gdRX4i+10MGQ1ZnB97kSFnWkCV6gY50udQCrT LzlrbPA5Nd0rr+9ZqCXkD9fdpxXC5u6hnL3kSZ1xcbDYdMQ+kV3XGYI5cBSgcWAf sKQLYMxmRv8PwA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:36 2026 by rpki-client