This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json) Hash identifier: 1+EtSUpGbYvEXp7uHct3nFhQabvawsjqASuHEg2aR2o= Subject key identifier: E6:20:92:97:59:5C:82:4A:72:1A:FF:85:BE:63:9F:6F:43:BA:C2:CE Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b Certificate serial: 019BF5E2FEF634DE5B7ECC6ACC2D2BA02845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft Manifest number: 06D9 Signing time: Sun 25 Jan 2026 16:00:52 +0000 Manifest this update: Sun 25 Jan 2026 16:00:52 +0000 Manifest next update: Mon 26 Jan 2026 16:00:52 +0000 Files and hashes: 1: T0Q1-_qD3Ki2609r9NZI0IvfjS4.roa (hash: +nPlRWGkeYoja770vj9LfCl9js/SDYPB/SeIBGkWDVM=) 2: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: a+R5iRficuAYIgFCcn4K56VNidLIdaoCruFOaKj0/do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:fe:f6:34:de:5b:7e:cc:6a:cc:2d:2b:a0:28:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b Validity Not Before: Jan 25 16:00:52 2026 GMT Not After : Jan 26 16:00:52 2026 GMT Subject: CN=e6209297595c824a721aff85be639f6f43bac2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:82:b5:84:0d:fb:46:52:39:f6:18:ae:32: 5e:60:eb:b4:54:c8:c4:f5:57:c7:81:40:ad:fb:e3: 51:26:d0:c3:d7:7d:cd:27:3f:e7:65:1d:c3:13:9b: b5:17:87:c3:fe:61:38:7c:70:b9:d3:ab:27:0b:bf: 65:e6:be:dd:f6:67:5b:28:fc:a7:7a:66:41:7d:11: 2c:20:64:19:ed:63:fa:1a:8e:48:42:e3:a7:36:70: 72:19:7b:34:2a:a9:31:66:7f:2f:d4:f5:5f:44:fd: 04:68:8a:8b:e2:01:00:19:67:32:60:3b:7a:79:32: cf:b8:24:ba:16:08:ae:30:2d:a1:a9:52:4e:8c:9a: d9:05:81:a6:6c:6d:eb:af:89:78:4c:01:37:71:4b: e4:c0:8f:72:10:70:75:28:c5:6f:3e:2a:fd:86:42: 0a:dc:82:f3:a2:c4:01:eb:d2:99:98:71:89:ef:98: cf:ab:45:54:5b:c4:25:45:16:e6:a1:5a:10:c5:8d: 51:13:2b:46:b8:3c:5d:19:aa:0f:cf:67:b7:16:78: 77:01:d8:34:fa:88:5d:0b:af:56:d4:69:a9:e6:b0: 9e:8d:56:95:80:c3:5f:5c:92:29:40:fd:9c:85:f9: 1d:38:cf:ca:6b:fe:88:59:27:92:69:6b:88:3a:b4: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:20:92:97:59:5C:82:4A:72:1A:FF:85:BE:63:9F:6F:43:BA:C2:CE X509v3 Authority Key Identifier: keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:56:a0:d8:ed:63:84:f7:23:85:19:a4:f0:47:1a:af:a9:4c: 3d:85:64:63:65:92:3c:f3:a9:bb:cf:90:ad:b7:09:ed:36:90: 07:5e:12:2e:0a:9a:cf:ee:91:d2:e4:2a:0e:26:85:ec:19:76: 91:45:1e:77:bc:99:6e:0d:ce:be:2a:3b:0e:37:a5:fd:d3:bc: 1a:59:3a:aa:78:dd:7c:2f:67:ae:e7:c6:e8:41:12:ee:14:03: ce:9d:a1:fc:9e:78:9d:13:f6:65:4a:f6:0e:82:12:93:e8:27: a0:29:d2:5a:0e:21:61:43:8e:1d:7d:02:f6:04:5b:1e:0a:03: ff:af:47:39:fa:e2:60:dd:d9:71:1a:76:f6:4a:3e:9a:eb:2e: 32:6d:2a:40:0e:51:87:af:05:89:f6:78:78:12:be:f1:7c:47: 66:04:f2:d8:40:4d:1d:9f:96:2b:e6:27:d6:1b:8e:37:7f:66: c5:9b:03:5b:57:4d:e8:3b:85:7f:36:99:ae:3a:15:3b:36:8f: 44:1e:c5:c8:bd:b5:a2:12:a2:dd:5e:6c:c7:62:fd:a6:7c:36: b4:d3:f8:37:00:fc:0d:e6:1f:ce:3b:97:a5:fb:f7:79:a1:99: 23:58:1f:7d:a7:b8:30:2a:00:53:55:94:3a:72:4f:1c:59:0c: 77:a3:5e:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14v72NN5bfsxqzC0roChFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl NWU3MmIwHhcNMjYwMTI1MTYwMDUyWhcNMjYwMTI2MTYwMDUyWjAzMTEwLwYDVQQD EyhlNjIwOTI5NzU5NWM4MjRhNzIxYWZmODViZTYzOWY2ZjQzYmFjMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsiCtYQN+0ZSOfYYrjJeYOu0VMjE 9VfHgUCt++NRJtDD133NJz/nZR3DE5u1F4fD/mE4fHC506snC79l5r7d9mdbKPyn emZBfREsIGQZ7WP6Go5IQuOnNnByGXs0KqkxZn8v1PVfRP0EaIqL4gEAGWcyYDt6 eTLPuCS6FgiuMC2hqVJOjJrZBYGmbG3rr4l4TAE3cUvkwI9yEHB1KMVvPir9hkIK 3ILzosQB69KZmHGJ75jPq0VUW8QlRRbmoVoQxY1REytGuDxdGaoPz2e3Fnh3Adg0 +ohdC69W1Gmp5rCejVaVgMNfXJIpQP2chfkdOM/Ka/6IWSeSaWuIOrSwCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYgkpdZXIJKchr/hb5jn29DusLOMB8GA1UdIwQY MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt MDQ2NTA3MmU0MWEzLzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlag2O1j hPcjhRmk8Ecar6lMPYVkY2WSPPOpu8+QrbcJ7TaQB14SLgqaz+6R0uQqDiaF7Bl2 kUUed7yZbg3Ovio7Djel/dO8Glk6qnjdfC9nrufG6EES7hQDzp2h/J54nRP2ZUr2 DoISk+gnoCnSWg4hYUOOHX0C9gRbHgoD/69HOfriYN3ZcRp29ko+musuMm0qQA5R h68FifZ4eBK+8XxHZgTy2EBNHZ+WK+Yn1huON39mxZsDW1dN6DuFfzaZrjoVOzaP RB7FyL21ohKi3V5sx2L9pnw2tNP4NwD8DeYfzjuXpfv3eaGZI1gffae4MCoAU1WU OnJPHFkMd6NeOA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:01 2026 by rpki-client