This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json) Hash identifier: g8CuGgls6XTSUZWLGMnH0BR/wTSj85MweYkKGtlJFBE= Subject key identifier: B0:2C:32:F6:BC:66:A7:8D:C5:CE:0D:40:E5:82:C2:F8:10:9E:19:42 Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5 Certificate serial: 019BF34F7FBAF316576167773027CFC03F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft Manifest number: 1346 Signing time: Sun 25 Jan 2026 04:00:32 +0000 Manifest this update: Sun 25 Jan 2026 04:00:32 +0000 Manifest next update: Mon 26 Jan 2026 04:00:32 +0000 Files and hashes: 1: FfiuZ4qgAFR5I7ZuBPwJ0BVaFsw.roa (hash: GvjZw9nEQ7ntl097NhqlfzDmkYqbr0EsC+xmUPNAPpU=) 2: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=) 3: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=) 4: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=) 5: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=) 6: tK7aGwsWXQ5Rdap_-wxkvvfxiF8.roa (hash: 3GlFqrtc0oVSDla+MN40U6l/NhCSaw7M/Uwru63GXMw=) 7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: F1d03J11CwU+KYZzaY+R7xYKr2b9A1H9mEdjKQGYt1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:7f:ba:f3:16:57:61:67:77:30:27:cf:c0:3f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5 Validity Not Before: Jan 25 04:00:32 2026 GMT Not After : Jan 26 04:00:32 2026 GMT Subject: CN=b02c32f6bc66a78dc5ce0d40e582c2f8109e1942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:c6:01:82:15:52:05:db:e0:7a:5f:5e:dc: a1:ab:0a:f2:5b:0b:ca:03:0d:40:43:c2:fd:6c:65: 8b:a8:69:c7:b1:d9:19:ec:34:20:d4:97:1d:30:37: a4:f0:2a:7a:5e:92:b3:b4:98:6d:02:2c:fc:42:12: c7:56:bc:cb:60:c4:6d:2e:82:63:a8:e2:c3:82:82: 87:2d:cb:b0:df:91:0d:fe:98:c8:6b:25:35:4e:3e: ac:66:15:4a:68:ef:54:90:31:43:6a:3a:41:28:1b: 71:62:09:06:ae:68:96:ce:bf:52:44:c3:49:24:07: 24:32:bc:c4:4e:f4:37:22:70:ad:0a:15:32:c9:9f: d3:f5:e8:65:11:48:ad:29:c0:bd:28:89:9d:2b:c1: 45:8a:a4:db:6f:42:96:60:b7:14:53:d9:db:5d:9f: 71:87:8c:21:85:d6:44:79:9f:d9:48:9c:63:11:7c: da:32:8c:a5:f2:98:93:2c:c1:f3:1e:e2:7c:59:47: ca:5a:54:14:29:60:cc:1e:8c:fc:c0:f5:a9:38:2b: af:10:01:fc:5b:a2:0c:3e:75:86:e1:a1:7b:de:90: 8e:8f:ca:24:6a:25:05:fa:d6:c3:42:5f:3b:77:35: 36:db:d5:15:c6:a0:7d:bc:c2:36:4d:50:1e:34:eb: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2C:32:F6:BC:66:A7:8D:C5:CE:0D:40:E5:82:C2:F8:10:9E:19:42 X509v3 Authority Key Identifier: keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:35:4b:a1:7a:a5:a3:31:60:13:da:66:75:15:31:43:ee:67: 6f:c1:8e:e9:b2:a4:22:53:65:5c:39:80:6d:47:78:7a:32:a3: 97:3a:fe:83:13:f1:f5:e3:d6:ff:fc:28:96:e7:ca:79:01:15: 3b:da:07:0f:04:a1:4d:9b:2f:c9:79:91:eb:a3:7b:8f:03:7c: 9a:5f:32:29:21:3d:10:6c:f9:22:a2:52:7d:75:0f:1e:15:a1: b1:72:4c:18:96:91:ce:39:2d:06:fc:06:d2:1f:72:40:c7:54: 0a:05:ce:25:27:dd:df:07:09:f3:62:23:09:af:c0:dd:57:74: c1:9d:65:19:38:1e:d0:53:a6:4e:50:c8:7f:46:7d:fb:66:7b: 98:f4:f3:f8:f2:e8:68:b6:26:eb:3b:a4:07:71:5d:44:77:a5: 27:75:ad:0c:32:79:ef:07:c1:85:5e:6c:a2:7f:08:76:54:92: de:4a:5f:f6:6b:14:17:3f:cf:e6:5b:d8:c6:3c:62:79:5e:1c: 98:fa:60:ff:a1:ef:50:41:db:4c:90:0a:63:32:d7:89:5e:74: cc:d6:6a:a8:64:48:b7:18:3a:46:ae:b1:86:9e:91:f9:1b:8f: 0e:25:f6:e3:cd:ac:61:d4:46:86:3d:0d:82:3e:ec:d1:41:ef: ba:64:5a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT3+68xZXYWd3MCfPwD98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj NDE1ZDUwHhcNMjYwMTI1MDQwMDMyWhcNMjYwMTI2MDQwMDMyWjAzMTEwLwYDVQQD EyhiMDJjMzJmNmJjNjZhNzhkYzVjZTBkNDBlNTgyYzJmODEwOWUxOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2DGAYIVUgXb4HpfXtyhqwryWwvK Aw1AQ8L9bGWLqGnHsdkZ7DQg1JcdMDek8Cp6XpKztJhtAiz8QhLHVrzLYMRtLoJj qOLDgoKHLcuw35EN/pjIayU1Tj6sZhVKaO9UkDFDajpBKBtxYgkGrmiWzr9SRMNJ JAckMrzETvQ3InCtChUyyZ/T9ehlEUitKcC9KImdK8FFiqTbb0KWYLcUU9nbXZ9x h4whhdZEeZ/ZSJxjEXzaMoyl8piTLMHzHuJ8WUfKWlQUKWDMHoz8wPWpOCuvEAH8 W6IMPnWG4aF73pCOj8okaiUF+tbDQl87dzU229UVxqB9vMI2TVAeNOuf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAsMva8ZqeNxc4NQOWCwvgQnhlCMB8GA1UdIwQY MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDVLoXql ozFgE9pmdRUxQ+5nb8GO6bKkIlNlXDmAbUd4ejKjlzr+gxPx9ePW//wolufKeQEV O9oHDwShTZsvyXmR66N7jwN8ml8yKSE9EGz5IqJSfXUPHhWhsXJMGJaRzjktBvwG 0h9yQMdUCgXOJSfd3wcJ82IjCa/A3Vd0wZ1lGTge0FOmTlDIf0Z9+2Z7mPTz+PLo aLYm6zukB3FdRHelJ3WtDDJ57wfBhV5son8IdlSS3kpf9msUFz/P5lvYxjxieV4c mPpg/6HvUEHbTJAKYzLXiV50zNZqqGRItxg6Rq6xhp6R+RuPDiX2482sYdRGhj0N gj7s0UHvumRaDw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:39 2026 by rpki-client