This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json) Hash identifier: PbMX0pUDYsYFKwoPeH5OKLk37YBLr1aDRbuhe8cUnnc= Subject key identifier: C0:A3:D5:50:99:96:F3:E7:5E:97:02:98:84:9A:CE:A4:91:A6:14:1D Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456 Certificate serial: 019BF4D0B420880F6647EEF0801ED9517F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft Manifest number: 12E7 Signing time: Sun 25 Jan 2026 11:01:16 +0000 Manifest this update: Sun 25 Jan 2026 11:01:16 +0000 Manifest next update: Mon 26 Jan 2026 11:01:16 +0000 Files and hashes: 1: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (hash: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI=) 2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=) 3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: ogNqGzWoVJenOPDLBFk+mkT+wIbkxCjznHD3uEGbakw=) 4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:b4:20:88:0f:66:47:ee:f0:80:1e:d9:51:7f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456 Validity Not Before: Jan 25 11:01:16 2026 GMT Not After : Jan 26 11:01:16 2026 GMT Subject: CN=c0a3d5509996f3e75e970298849acea491a6141d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:1e:89:1e:16:f4:8b:7f:79:5d:d1:0e:52: be:ae:eb:9b:11:d4:a5:d2:2b:9b:39:ef:81:cf:63: 76:ed:30:bc:bc:ce:76:ab:36:18:a9:65:28:e7:8e: 70:db:57:25:a2:0b:2d:e5:b9:5f:bd:3f:33:97:3b: 0e:c8:f8:02:a5:2f:f4:e1:99:21:1a:22:a2:11:bc: d0:b0:e2:a8:76:63:63:6e:d9:31:5c:f3:b9:72:79: 8d:2f:18:f7:c9:22:f0:b0:ae:09:2b:77:66:68:db: 14:89:99:fe:d3:e1:6a:c9:05:f0:0f:39:ef:b5:8b: 96:14:ec:45:ee:0f:8b:91:d4:7e:43:3d:54:ca:0a: c4:85:aa:a5:3e:94:97:c8:75:34:e6:29:54:81:0f: 1c:be:08:28:da:95:ea:c1:80:9b:c7:a8:8b:d8:fe: 93:62:a7:03:bf:03:72:98:52:80:28:80:c3:31:a7: 4e:84:c5:08:28:a2:62:5c:35:29:80:5a:86:0b:d5: fc:46:f6:bf:0c:b9:01:fb:75:d4:86:24:83:a2:ef: ab:74:e4:be:71:b2:35:aa:e3:b4:83:f7:51:f3:fc: 85:43:18:50:2b:70:b8:25:e2:c1:70:b0:4f:0d:d9: 11:35:14:c1:c6:90:da:2c:c1:25:46:0e:fa:91:06: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A3:D5:50:99:96:F3:E7:5E:97:02:98:84:9A:CE:A4:91:A6:14:1D X509v3 Authority Key Identifier: keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2d:ab:a6:94:aa:4b:09:4a:80:a0:e6:59:53:78:e2:32:ac: 8b:e4:b3:a9:bf:85:04:56:d3:96:09:c6:2f:2b:6a:78:eb:4d: c2:85:ec:8b:9f:14:a7:db:fa:e8:91:61:5d:b1:33:81:22:8f: db:27:d3:59:42:b1:24:4f:54:42:d5:52:2f:76:ae:01:5f:00: 3c:1b:de:9d:90:f0:73:d3:94:32:81:3b:8d:e6:40:7b:42:c6: 77:80:71:ad:26:c2:f6:3e:45:20:90:fa:95:11:7d:34:cf:e6: 90:a7:e8:a6:87:94:a0:d9:23:91:10:9c:80:e2:e0:39:55:fa: 12:aa:9b:ba:07:3e:b5:d1:17:a6:4e:41:37:40:0c:43:66:60: 36:4e:f2:db:87:a1:24:39:44:b7:3f:2c:2d:58:f5:c7:45:70: 09:d3:a0:b7:90:1c:d6:c9:31:b8:46:79:65:75:80:cd:52:1c: 59:ae:7e:0f:70:ae:59:48:f4:b6:ab:51:f9:0c:63:3f:ad:30: 6f:20:62:f6:8c:35:3f:ab:5c:78:4b:53:05:96:20:8d:e5:6c: 03:da:1e:43:f8:ba:22:89:70:86:53:28:fb:77:26:6b:e1:ff: 52:8e:93:fa:7d:a0:6c:44:bb:28:64:64:df:85:48:4f:19:f8: d5:4e:a4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00LQgiA9mR+7wgB7ZUX9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh NTk0NTYwHhcNMjYwMTI1MTEwMTE2WhcNMjYwMTI2MTEwMTE2WjAzMTEwLwYDVQQD EyhjMGEzZDU1MDk5OTZmM2U3NWU5NzAyOTg4NDlhY2VhNDkxYTYxNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRgeiR4W9It/eV3RDlK+ruubEdSl 0iubOe+Bz2N27TC8vM52qzYYqWUo545w21clogst5blfvT8zlzsOyPgCpS/04Zkh GiKiEbzQsOKodmNjbtkxXPO5cnmNLxj3ySLwsK4JK3dmaNsUiZn+0+FqyQXwDznv tYuWFOxF7g+LkdR+Qz1UygrEhaqlPpSXyHU05ilUgQ8cvggo2pXqwYCbx6iL2P6T YqcDvwNymFKAKIDDMadOhMUIKKJiXDUpgFqGC9X8Rva/DLkB+3XUhiSDou+rdOS+ cbI1quO0g/dR8/yFQxhQK3C4JeLBcLBPDdkRNRTBxpDaLMElRg76kQZaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCj1VCZlvPnXpcCmISazqSRphQdMB8GA1UdIwQY MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArS2rppSq SwlKgKDmWVN44jKsi+Szqb+FBFbTlgnGLytqeOtNwoXsi58Up9v66JFhXbEzgSKP 2yfTWUKxJE9UQtVSL3auAV8APBvenZDwc9OUMoE7jeZAe0LGd4BxrSbC9j5FIJD6 lRF9NM/mkKfopoeUoNkjkRCcgOLgOVX6Eqqbugc+tdEXpk5BN0AMQ2ZgNk7y24eh JDlEtz8sLVj1x0VwCdOgt5Ac1skxuEZ5ZXWAzVIcWa5+D3CuWUj0tqtR+QxjP60w byBi9ow1P6tceEtTBZYgjeVsA9oeQ/i6IolwhlMo+3cma+H/Uo6T+n2gbES7KGRk 34VITxn41U6k2w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:26 2026 by rpki-client