This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json) Hash identifier: MwRs9/bKKgAUNijRRvk5t512O+ZKUnTFl7xKjv6O0co= Subject key identifier: 96:9D:F4:3E:3D:13:E7:04:88:3D:24:D7:6C:31:EC:42:73:7D:96:D3 Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Certificate serial: 019BF53EAE92D213652652FCC1774671CEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft Manifest number: 121F Signing time: Sun 25 Jan 2026 13:01:24 +0000 Manifest this update: Sun 25 Jan 2026 13:01:24 +0000 Manifest next update: Mon 26 Jan 2026 13:01:24 +0000 Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=) 2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: zBqFadE5aSc5mLf2H/QXe9sE4iJkYWHlz5kvsCrgZKI=) 3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:ae:92:d2:13:65:26:52:fc:c1:77:46:71:ce:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Validity Not Before: Jan 25 13:01:24 2026 GMT Not After : Jan 26 13:01:24 2026 GMT Subject: CN=969df43e3d13e704883d24d76c31ec42737d96d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:08:2b:41:65:80:2d:a8:08:3a:2f:c2:ed: 86:7f:79:e9:11:1e:74:3d:19:94:3a:ba:cc:9b:b2: 98:00:da:2a:45:7d:59:03:d7:7b:ae:1b:c9:86:2e: 75:f3:f7:46:24:ef:65:96:ef:ea:89:4b:12:10:06: c5:f2:83:84:45:28:b2:a8:63:f1:79:e3:a1:2d:49: 9e:93:81:d8:2e:38:47:23:3f:b6:64:78:c3:fd:ea: 2b:9e:49:51:0e:25:36:98:28:7c:85:b7:2d:db:94: 89:be:1f:ce:64:a2:bc:48:fa:ee:ed:d6:b4:8e:85: 28:58:b4:1a:1d:e5:a1:d3:41:38:65:0e:38:ab:37: 96:22:9a:85:93:13:42:bb:53:53:fc:53:9c:4d:a3: 85:bb:78:66:78:f8:26:70:f1:e6:b3:10:65:21:ed: 8e:6f:09:89:4d:8b:e5:22:f4:29:2e:6f:14:d6:94: 91:d4:b6:44:01:55:55:cf:23:0b:ca:58:ca:1e:45: 65:62:ca:03:0e:4a:4b:46:dc:a1:2c:87:c4:01:3d: f1:d6:e2:39:0a:18:71:cb:03:cb:ce:41:c2:ff:aa: 66:a6:44:fb:2a:7a:4c:0b:83:68:55:b6:c1:b4:3f: fd:c2:7a:22:c8:5c:87:b2:6a:16:86:bd:cd:53:58: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9D:F4:3E:3D:13:E7:04:88:3D:24:D7:6C:31:EC:42:73:7D:96:D3 X509v3 Authority Key Identifier: keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:b2:81:47:f3:0e:99:55:d2:71:2c:14:28:f2:72:86:24: d4:77:3e:6b:53:a5:78:71:9c:e8:7d:55:ff:77:27:8f:ac:09: 24:57:55:08:7c:6f:6b:24:f2:4c:a3:f4:ac:65:85:a9:4a:77: 3e:cf:bb:6c:ed:0f:37:87:42:7d:83:14:7f:95:c2:ab:f4:22: bc:73:8a:22:51:5b:57:ed:9c:ff:1a:b5:0d:af:46:8c:39:10: f4:f8:e9:18:ce:07:2b:a4:e5:22:c8:e7:b3:f9:18:7b:4e:0a: f7:7c:11:33:50:f8:e4:e9:b8:33:be:37:d5:d1:83:8c:a6:22: bd:d1:46:b2:93:36:f7:a0:f8:33:37:08:29:1c:c6:2c:84:b5: b6:b7:ce:8e:28:d8:b3:93:82:e0:6b:98:bf:0b:4b:f3:ac:22: 74:19:27:98:ed:19:cf:d0:06:49:b4:1d:83:ac:a5:77:9b:85: 45:1d:b9:fc:0f:21:ce:a6:f0:6f:ed:2b:be:5f:8e:14:73:eb: a1:3a:0c:11:bf:20:8e:6e:50:af:88:1e:3c:3d:bf:0e:ad:3b: 2a:20:60:20:a6:1d:f0:e8:28:0f:ea:49:0e:36:ed:db:1b:b9: 3f:5e:99:96:1e:4e:1a:0b:f7:e3:21:6d:db:58:dd:14:14:94: 9b:e3:9d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pq6S0hNlJlL8wXdGcc64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2 YThkMmUwHhcNMjYwMTI1MTMwMTI0WhcNMjYwMTI2MTMwMTI0WjAzMTEwLwYDVQQD Eyg5NjlkZjQzZTNkMTNlNzA0ODgzZDI0ZDc2YzMxZWM0MjczN2Q5NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MIIK0FlgC2oCDovwu2Gf3npER50 PRmUOrrMm7KYANoqRX1ZA9d7rhvJhi518/dGJO9llu/qiUsSEAbF8oOERSiyqGPx eeOhLUmek4HYLjhHIz+2ZHjD/eornklRDiU2mCh8hbct25SJvh/OZKK8SPru7da0 joUoWLQaHeWh00E4ZQ44qzeWIpqFkxNCu1NT/FOcTaOFu3hmePgmcPHmsxBlIe2O bwmJTYvlIvQpLm8U1pSR1LZEAVVVzyMLyljKHkVlYsoDDkpLRtyhLIfEAT3x1uI5 ChhxywPLzkHC/6pmpkT7KnpMC4NoVbbBtD/9wnoiyFyHsmoWhr3NU1j6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJad9D49E+cEiD0k12wx7EJzfZbTMB8GA1UdIwQY MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlu2ygUfz DplV0nEsFCjycoYk1Hc+a1OleHGc6H1V/3cnj6wJJFdVCHxvayTyTKP0rGWFqUp3 Ps+7bO0PN4dCfYMUf5XCq/QivHOKIlFbV+2c/xq1Da9GjDkQ9PjpGM4HK6TlIsjn s/kYe04K93wRM1D45Om4M7431dGDjKYivdFGspM296D4MzcIKRzGLIS1trfOjijY s5OC4GuYvwtL86widBknmO0Zz9AGSbQdg6yld5uFRR25/A8hzqbwb+0rvl+OFHPr oToMEb8gjm5Qr4gePD2/Dq07KiBgIKYd8OgoD+pJDjbt2xu5P16Zlh5OGgv34yFt 21jdFBSUm+Od+A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:47:25 2026 by rpki-client