This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json) Hash identifier: ZY8sZK2TODov2ihlv6t8qmSR7X2QoovXozTN7pnsWxE= Subject key identifier: 96:77:82:D8:50:CF:31:89:CA:55:23:A2:9E:88:32:95:BA:97:07:E3 Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019BF65168BCC42470817F24E8893745199F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft Manifest number: 10D7 Signing time: Sun 25 Jan 2026 18:01:28 +0000 Manifest this update: Sun 25 Jan 2026 18:01:28 +0000 Manifest next update: Mon 26 Jan 2026 18:01:28 +0000 Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: mtBmpim94izN5ZQ/OsqvToJnL7/imDiGtjJ4EjjHcn0=) 2: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (hash: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0=) 3: Z03CvgZnFdZytl33-YciJtYTgkU.roa (hash: QAeqd5R10qGg/87fO27tsqGhGaG/xmcTXnHVP0UeCmo=) 4: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (hash: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:68:bc:c4:24:70:81:7f:24:e8:89:37:45:19:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Jan 25 18:01:28 2026 GMT Not After : Jan 26 18:01:28 2026 GMT Subject: CN=967782d850cf3189ca5523a29e883295ba9707e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e7:d1:26:ea:53:15:c3:9e:88:58:a3:ca:4d: ea:b0:96:3b:83:ea:69:4d:d0:36:25:5c:0f:f6:6d: c6:04:1e:a0:72:02:35:7a:7a:a9:42:8d:ec:33:72: c2:4b:aa:fc:c7:49:ba:c6:b7:27:de:fc:7b:19:be: fe:27:d8:03:ce:46:a2:18:4d:18:d9:5c:68:95:75: c1:4d:27:2a:52:75:9e:46:d6:53:c3:81:e9:e3:0a: e1:f3:49:b5:9e:7f:40:47:9c:e6:72:e4:1f:5d:77: 4b:d3:c8:eb:00:4c:95:94:3b:e2:22:6a:61:7c:b9: 28:ce:86:e6:12:1f:36:2a:38:c1:c9:b8:72:c1:f4: a0:4b:ed:8b:6b:4e:89:55:55:92:c8:65:03:4a:26: 6c:ba:37:25:93:77:ea:1a:02:52:21:c8:1d:a0:9b: 19:6f:d6:31:b1:32:d3:a6:50:86:e2:1a:01:e9:81: c5:d4:e6:cb:19:59:f4:50:86:e8:e9:46:4b:fa:e2: 78:76:76:da:3c:76:38:32:36:96:fc:7e:3b:92:9e: a4:4c:81:09:2f:d2:cd:68:cd:3b:3c:45:a9:b2:b9: ee:58:c1:39:bb:be:0d:53:c2:ad:3e:ea:3c:ed:f0: ba:ea:76:ff:f6:24:70:63:cb:d7:62:30:3c:0b:be: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:77:82:D8:50:CF:31:89:CA:55:23:A2:9E:88:32:95:BA:97:07:E3 X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:62:22:40:24:eb:52:c1:31:27:28:54:4c:03:64:59:74:59: cc:ba:5e:da:3a:0f:45:88:fd:0c:2c:aa:ac:62:0c:69:a4:50: 9b:86:26:9f:e4:0b:b4:ca:60:15:6e:40:84:7e:f6:0b:1d:34: fe:c0:39:aa:b9:8a:8d:b3:b4:15:f6:30:6d:8a:7a:f5:26:ab: 34:32:ed:ef:df:2f:f3:be:7a:73:1a:62:70:b8:62:c6:0f:87: b8:c7:03:28:e9:c9:d9:05:06:75:94:54:13:4a:e4:84:a0:bb: fc:44:b3:1e:fe:4e:e5:49:d5:91:0f:83:4e:3c:cc:2b:b2:79: 0c:65:4c:98:af:bf:78:38:ce:81:36:1a:8a:13:45:16:68:95: 19:2e:2b:4c:89:da:c7:54:8f:66:71:c8:b4:b1:fb:08:45:a7: 8c:b4:9b:63:72:00:69:27:0d:12:16:57:50:bc:0f:38:75:1f: c2:ee:47:39:d0:f7:cd:71:9c:aa:d2:80:6e:51:d2:a5:11:33: 3f:2e:e6:6a:06:3d:f9:5a:1f:95:41:d9:be:34:04:a5:29:5b: d6:20:c0:59:44:06:99:38:ff:69:97:9d:40:8c:72:f6:ed:52: 91:1f:bc:77:6d:5c:9a:28:3c:ec:e3:07:32:35:4d:a5:82:5d: d4:2b:5b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UWi8xCRwgX8k6Ik3RRmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjYwMTI1MTgwMTI4WhcNMjYwMTI2MTgwMTI4WjAzMTEwLwYDVQQD Eyg5Njc3ODJkODUwY2YzMTg5Y2E1NTIzYTI5ZTg4MzI5NWJhOTcwN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1efRJupTFcOeiFijyk3qsJY7g+pp TdA2JVwP9m3GBB6gcgI1enqpQo3sM3LCS6r8x0m6xrcn3vx7Gb7+J9gDzkaiGE0Y 2VxolXXBTScqUnWeRtZTw4Hp4wrh80m1nn9AR5zmcuQfXXdL08jrAEyVlDviImph fLkozobmEh82KjjBybhywfSgS+2La06JVVWSyGUDSiZsujclk3fqGgJSIcgdoJsZ b9YxsTLTplCG4hoB6YHF1ObLGVn0UIbo6UZL+uJ4dnbaPHY4MjaW/H47kp6kTIEJ L9LNaM07PEWpsrnuWME5u74NU8KtPuo87fC66nb/9iRwY8vXYjA8C76jJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ3gthQzzGJylUjop6IMpW6lwfjMB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGIiQCTr UsExJyhUTANkWXRZzLpe2joPRYj9DCyqrGIMaaRQm4Ymn+QLtMpgFW5AhH72Cx00 /sA5qrmKjbO0FfYwbYp69SarNDLt798v8756cxpicLhixg+HuMcDKOnJ2QUGdZRU E0rkhKC7/ESzHv5O5UnVkQ+DTjzMK7J5DGVMmK+/eDjOgTYaihNFFmiVGS4rTIna x1SPZnHItLH7CEWnjLSbY3IAaScNEhZXULwPOHUfwu5HOdD3zXGcqtKAblHSpREz Py7magY9+VoflUHZvjQEpSlb1iDAWUQGmTj/aZedQIxy9u1SkR+8d21cmig87OMH MjVNpYJd1CtbiA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:38 2026 by rpki-client