This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft File: k-zM3oXECxVPkZuvZO8DLscNdR4.mft (raw, json) Hash identifier: a10VN8bZXcN83sfBS+sB1DBjW5FXPjAg59u+ofb59YY= Subject key identifier: 51:B8:6D:34:8F:86:C6:BE:CC:E0:0B:DF:9E:02:10:AE:FB:77:7C:9B Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E Certificate issuer: /CN=93ecccde85c40b154f919baf64ef032ec70d751e Certificate serial: 019BFA64E6BC004DB096BD2A2A5A6B6C6DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 13:01:15 +0000 Manifest this update: Mon 26 Jan 2026 13:01:15 +0000 Manifest next update: Tue 27 Jan 2026 13:01:15 +0000 Files and hashes: 1: ea-vywNHOW21DX1J0UWlRSQDW38.roa (hash: OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=) 2: k-zM3oXECxVPkZuvZO8DLscNdR4.crl (hash: HG7rMzNy5LDk8Il60ewP+tBJV2jGHB5ZQEP+swl3ZCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:e6:bc:00:4d:b0:96:bd:2a:2a:5a:6b:6c:6d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e Validity Not Before: Jan 26 13:01:15 2026 GMT Not After : Jan 27 13:01:15 2026 GMT Subject: CN=51b86d348f86c6becce00bdf9e0210aefb777c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:ec:e6:08:66:c9:58:6c:e9:dc:8f:c2:f3: 78:fc:58:61:9b:8d:8c:92:2e:bf:53:5b:98:e9:94: 4a:e3:d8:fe:3a:63:19:33:65:f3:66:e9:7e:b5:13: 41:fb:5c:4f:68:0b:29:f7:74:50:97:94:72:5b:34: fd:28:3e:1d:b0:74:bc:20:62:31:6b:d3:87:f3:8b: 15:e9:6d:c6:f4:0e:20:fd:e6:dc:cb:b9:35:e1:c5: d8:36:6f:15:99:5e:7b:9b:b9:e6:41:bd:36:3a:71: 63:00:d2:f2:a0:3b:7c:b5:56:c1:1f:42:1f:ee:f0: 18:42:d0:dd:2e:19:30:42:fa:b7:3c:e8:61:4b:c5: 30:fa:fc:a6:ee:8c:b9:d5:1c:00:18:d4:d3:72:ac: db:c9:5a:74:2b:4f:4e:80:f1:91:84:d2:d0:0d:f5: 4a:79:c0:53:8b:2d:64:e1:e7:31:a8:04:7e:78:4c: c0:e9:37:b1:22:07:eb:ca:03:5e:7b:58:79:9d:90: e1:07:09:17:6a:b5:6b:99:f1:cc:2e:17:90:9e:62: 7f:62:6f:39:60:ad:9f:af:ad:ab:cc:11:5c:57:52: 72:98:02:50:9b:93:85:d1:00:68:a1:7c:e2:03:70: a2:52:1b:ac:f1:8f:5c:a6:5a:55:6b:59:90:c7:1c: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B8:6D:34:8F:86:C6:BE:CC:E0:0B:DF:9E:02:10:AE:FB:77:7C:9B X509v3 Authority Key Identifier: keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:36:46:e6:27:7b:46:f9:bf:6a:53:87:e2:c1:58:97:b4:f4: 6a:24:ab:03:93:18:a1:b6:2f:66:59:a0:66:08:16:9c:a4:da: e7:9c:6e:4f:46:24:d9:5f:67:02:7d:34:63:f6:f8:96:29:06: 14:e6:e3:19:ff:f8:04:9f:c1:52:e3:72:fb:76:60:eb:41:1c: 10:aa:27:ae:72:cd:6e:2f:81:7b:9e:ae:5a:c5:ec:74:39:c7: 3e:06:cc:1a:78:36:63:75:0c:65:24:7d:ba:dc:8e:e9:47:79: 32:a6:be:87:2e:14:f4:0c:9a:65:96:58:13:8e:7d:90:db:fc: a5:d4:2b:8f:5c:49:92:36:0a:d3:38:65:6e:da:6d:1a:63:f5: 26:84:eb:e1:5a:df:89:d5:af:ca:80:09:63:8a:dd:6b:e1:e5: 65:8d:83:6a:e9:4d:cd:c6:8d:b3:7c:6a:b8:7f:b2:63:2f:f4: f9:ac:0a:ab:90:f3:06:3f:73:3e:bc:10:b6:83:4d:53:dd:1a: 93:34:8d:0d:ec:7b:1d:51:f7:53:f7:e8:d1:fe:a5:c5:14:9b: 95:46:d5:a3:25:18:02:bd:65:d6:87:0f:01:bd:1e:6b:71:0a: 35:b6:5e:d4:e2:2b:36:be:c1:51:56:59:cb:a0:f3:fd:df:f1: ce:80:40:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZOa8AE2wlr0qKlprbG3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWNjY2RlODVjNDBiMTU0ZjkxOWJhZjY0ZWYwMzJlYzcw ZDc1MWUwHhcNMjYwMTI2MTMwMTE1WhcNMjYwMTI3MTMwMTE1WjAzMTEwLwYDVQQD Eyg1MWI4NmQzNDhmODZjNmJlY2NlMDBiZGY5ZTAyMTBhZWZiNzc3YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10/s5ghmyVhs6dyPwvN4/Fhhm42M ki6/U1uY6ZRK49j+OmMZM2XzZul+tRNB+1xPaAsp93RQl5RyWzT9KD4dsHS8IGIx a9OH84sV6W3G9A4g/ebcy7k14cXYNm8VmV57m7nmQb02OnFjANLyoDt8tVbBH0If 7vAYQtDdLhkwQvq3POhhS8Uw+vym7oy51RwAGNTTcqzbyVp0K09OgPGRhNLQDfVK ecBTiy1k4ecxqAR+eEzA6TexIgfrygNee1h5nZDhBwkXarVrmfHMLheQnmJ/Ym85 YK2fr62rzBFcV1JymAJQm5OF0QBooXziA3CiUhus8Y9cplpVa1mQxxzNcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG4bTSPhsa+zOAL354CEK77d3ybMB8GA1UdIwQY MBaAFJPszN6FxAsVT5Gbr2TvAy7HDXUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMt MmMzMDI4ZmNlY2U5LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NjU1ODAtODczNi00MTczLWJkZTMtMmMzMDI4ZmNlY2U5 LzEvay16TTNvWEVDeFZQa1p1dlpPOERMc2NOZFI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezZG5id7 Rvm/alOH4sFYl7T0aiSrA5MYobYvZlmgZggWnKTa55xuT0Yk2V9nAn00Y/b4likG FObjGf/4BJ/BUuNy+3Zg60EcEKonrnLNbi+Be56uWsXsdDnHPgbMGng2Y3UMZSR9 utyO6Ud5Mqa+hy4U9AyaZZZYE459kNv8pdQrj1xJkjYK0zhlbtptGmP1JoTr4Vrf idWvyoAJY4rda+HlZY2DaulNzcaNs3xquH+yYy/0+awKq5DzBj9zPrwQtoNNU90a kzSNDex7HVH3U/fo0f6lxRSblUbVoyUYAr1l1ocPAb0ea3EKNbZe1OIrNr7BUVZZ y6Dz/d/xzoBAlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:46 2026 by rpki-client