This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json) Hash identifier: QEPRN2x7LDr8DCaN6EO3W2zatvPVuCD1IxXMh6u8o7Q= Subject key identifier: 59:E5:12:26:B4:AF:C4:BD:0A:24:3F:8F:E1:21:40:46:2E:0A:FA:49 Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019BF5E40CFCCEE69A05AE334F02DD5A7DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft Manifest number: 0189 Signing time: Sun 25 Jan 2026 16:02:01 +0000 Manifest this update: Sun 25 Jan 2026 16:02:01 +0000 Manifest next update: Mon 26 Jan 2026 16:02:01 +0000 Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: aF+By5dugj6RYCubS7Quc5QjX7Kweg6gICbeu72yVAA=) 2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:0c:fc:ce:e6:9a:05:ae:33:4f:02:dd:5a:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Jan 25 16:02:01 2026 GMT Not After : Jan 26 16:02:01 2026 GMT Subject: CN=59e51226b4afc4bd0a243f8fe12140462e0afa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:6e:6e:c2:46:36:d8:de:c4:bc:46:4a:de: 29:9d:4c:69:5b:df:c1:03:87:1d:af:c2:1b:76:d5: 8d:bf:75:20:b5:04:1e:67:be:80:2c:19:0f:bd:67: e4:29:2d:65:0e:f9:1a:4c:a4:f3:cf:31:c4:08:d6: f8:92:30:ca:ab:9b:11:4e:1c:14:25:4c:d5:22:50: ea:62:fe:96:14:59:11:c5:9d:fa:e7:05:d0:aa:ac: 62:23:2f:d6:44:92:83:bf:6a:5b:52:48:5c:66:46: 69:c6:e2:85:55:b4:64:10:80:0b:4b:2f:cc:ee:f0: 9e:fe:f1:9f:5e:06:10:3b:40:c0:39:d8:ac:ec:2d: 23:c6:0c:21:1c:17:27:13:08:49:0f:2e:65:94:16: ea:71:8a:bc:ec:c1:7a:92:81:f1:f1:fc:df:5b:b0: a9:d4:13:7a:e1:da:be:d3:ec:63:ef:39:2e:4a:6d: dd:38:67:ad:52:88:8f:c9:82:d6:cb:d4:79:04:dc: 5d:4a:7a:16:42:18:1b:6b:b5:c5:76:87:83:fc:95: b4:76:74:f3:69:72:49:85:44:53:a3:61:6a:02:67: ee:0b:d9:dc:df:26:eb:88:02:60:cb:87:0e:99:5c: ec:5e:d0:cf:fc:ca:39:7f:a4:8e:99:96:c0:26:bb: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E5:12:26:B4:AF:C4:BD:0A:24:3F:8F:E1:21:40:46:2E:0A:FA:49 X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:fb:63:c9:4a:51:2c:cc:ae:cd:35:0d:d4:b3:bc:df:86:09: dd:4a:d5:c5:e2:c7:86:b8:a8:1c:24:26:8d:dd:68:5d:a0:ae: ec:5e:22:88:0c:a5:dc:37:13:14:5a:5a:e7:e1:67:9d:df:fd: 95:4a:f1:62:ca:34:5a:8d:97:22:db:0b:5b:d9:2f:14:18:af: 2b:f1:58:38:c8:d0:17:5c:23:f8:9f:a4:74:06:72:7f:9f:a6: 17:90:44:c0:d7:79:53:2a:9d:40:22:98:f3:db:90:ec:66:4d: c7:cb:cf:9c:23:b9:c0:82:7f:a5:20:a6:26:91:8a:8c:3f:2d: 41:7c:25:13:1c:2c:73:a8:8e:5e:3a:50:66:24:2d:b5:84:c0: e0:4d:69:c4:3a:1a:c9:c1:13:62:fc:13:57:77:86:77:5f:50: a5:ea:55:da:49:5f:d9:58:ae:6b:88:6a:58:76:58:c4:95:3b: 47:10:d4:65:3d:7e:af:1f:38:7a:cb:47:a9:fd:ae:cc:bc:b8: e1:5b:ed:d8:41:cf:fd:33:69:09:9a:7b:ae:2f:2e:22:c9:d6: 7d:e9:b5:41:70:e1:5b:b8:4d:a2:26:c9:67:46:ef:3b:ba:63: 61:dd:5a:55:84:ec:57:c7:cb:53:23:77:b7:6a:c2:17:1e:c1: 2e:1e:91:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15Az8zuaaBa4zTwLdWn3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjYwMTI1MTYwMjAxWhcNMjYwMTI2MTYwMjAxWjAzMTEwLwYDVQQD Eyg1OWU1MTIyNmI0YWZjNGJkMGEyNDNmOGZlMTIxNDA0NjJlMGFmYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BJubsJGNtjexLxGSt4pnUxpW9/B A4cdr8IbdtWNv3UgtQQeZ76ALBkPvWfkKS1lDvkaTKTzzzHECNb4kjDKq5sRThwU JUzVIlDqYv6WFFkRxZ365wXQqqxiIy/WRJKDv2pbUkhcZkZpxuKFVbRkEIALSy/M 7vCe/vGfXgYQO0DAOdis7C0jxgwhHBcnEwhJDy5llBbqcYq87MF6koHx8fzfW7Cp 1BN64dq+0+xj7zkuSm3dOGetUoiPyYLWy9R5BNxdSnoWQhgba7XFdoeD/JW0dnTz aXJJhURTo2FqAmfuC9nc3ybriAJgy4cOmVzsXtDP/Mo5f6SOmZbAJruZRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnlEia0r8S9CiQ/j+EhQEYuCvpJMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtftjyUpR LMyuzTUN1LO834YJ3UrVxeLHhrioHCQmjd1oXaCu7F4iiAyl3DcTFFpa5+Fnnd/9 lUrxYso0Wo2XItsLW9kvFBivK/FYOMjQF1wj+J+kdAZyf5+mF5BEwNd5UyqdQCKY 89uQ7GZNx8vPnCO5wIJ/pSCmJpGKjD8tQXwlExwsc6iOXjpQZiQttYTA4E1pxDoa ycETYvwTV3eGd19QpepV2klf2Viua4hqWHZYxJU7RxDUZT1+rx84estHqf2uzLy4 4Vvt2EHP/TNpCZp7ri8uIsnWfem1QXDhW7hNoibJZ0bvO7pjYd1aVYTsV8fLUyN3 t2rCFx7BLh6RTA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:05 2026 by rpki-client