This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json) Hash identifier: 6/Gpj65dOEcJMOjIzIA1/WsiNtU8xfW9IV4EJSqPItI= Subject key identifier: 99:8B:85:F5:79:82:B8:B9:3B:07:4C:2E:FC:FD:D4:39:05:AA:6C:FC Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540 Certificate serial: 019BF5076CA393955DBEDC5D6921F2AAE3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft Manifest number: 0D9B Signing time: Sun 25 Jan 2026 12:01:03 +0000 Manifest this update: Sun 25 Jan 2026 12:01:03 +0000 Manifest next update: Mon 26 Jan 2026 12:01:03 +0000 Files and hashes: 1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=) 2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=) 3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=) 4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: IhC9nkD5r+DUZmCLqwIcx+dcc7mLbX/KlJgJB93xpWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:6c:a3:93:95:5d:be:dc:5d:69:21:f2:aa:e3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540 Validity Not Before: Jan 25 12:01:03 2026 GMT Not After : Jan 26 12:01:03 2026 GMT Subject: CN=998b85f57982b8b93b074c2efcfdd43905aa6cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:5e:5e:05:be:8f:7c:c0:a0:aa:fd:93:9d: d1:b8:3a:21:ab:8e:4a:e4:bb:83:fb:44:07:f6:59: a7:d7:bd:9f:33:b8:85:d6:f8:22:4e:6c:e7:ce:69: 79:d4:36:99:d2:d4:75:cc:64:53:31:17:e8:14:d1: 1e:9f:54:bf:65:50:ca:90:46:50:14:64:49:8e:43: e1:25:8d:51:45:58:43:72:73:2d:4c:55:bc:ea:7f: 30:1e:36:09:b8:16:fa:d1:8b:88:79:31:58:e5:44: ed:76:41:d2:0e:63:03:d5:e4:6d:27:ca:cd:86:f6: f1:15:14:44:85:1e:4e:f0:90:6b:40:e3:84:33:53: 3e:ad:4c:b7:43:bd:e0:cb:a1:31:e9:88:8e:bb:d5: d7:4c:f6:2d:7a:fe:49:94:13:d6:33:a3:27:dd:b2: c6:53:e6:f7:b8:d8:30:a0:b6:1e:e7:ee:4b:a6:22: 97:6a:ba:b7:d3:46:86:e4:2f:e6:1c:ac:f7:39:3a: c1:41:08:58:4e:9f:cf:a8:ff:6b:c1:b5:5b:96:13: 21:98:f0:05:dc:83:af:6c:03:7b:ea:3f:c9:b4:c7: 6a:7f:1f:48:0b:17:bb:00:9d:e7:6f:78:89:8e:aa: f7:28:73:ee:65:9c:ad:ed:47:1d:f6:98:9d:d9:28: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:85:F5:79:82:B8:B9:3B:07:4C:2E:FC:FD:D4:39:05:AA:6C:FC X509v3 Authority Key Identifier: keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d5:3d:1b:bd:04:ea:ce:ff:ca:8b:e1:d3:a6:a6:75:19:31: 2b:bd:1f:83:2b:c2:b4:d9:8c:d1:fc:20:c4:73:77:d7:8f:66: 1c:75:32:32:52:ce:df:56:fb:bc:07:9f:47:4d:de:39:bc:eb: f4:de:2a:91:73:d7:f8:b7:e8:d2:1c:4b:01:d9:9d:78:19:40: c2:36:67:23:57:e7:14:c7:2d:c6:7f:da:d0:1b:60:b7:b1:51: 84:33:eb:5a:3c:bc:3a:d6:e1:95:01:9d:8d:af:35:26:69:a7: 4c:b8:37:ee:37:c5:15:c6:55:2c:95:23:c2:d6:0c:13:84:31: 05:43:ce:7e:4d:f3:6d:71:d2:20:c1:d0:98:05:26:f7:01:45: db:e3:19:84:fe:59:2b:65:c4:db:38:01:ef:56:cc:93:ff:d6: 99:e8:00:ba:36:88:e5:1b:16:39:37:36:69:24:64:1e:f7:a0: 40:9e:7e:3b:57:c8:8d:c3:e8:a7:26:e2:82:c3:2f:24:32:6f: 17:0b:9c:59:0c:8f:26:30:95:d2:75:70:1d:c7:1f:57:83:a2: 72:bd:49:94:f9:80:77:5e:53:9c:e0:f4:56:ba:dd:7b:d8:bf: 49:b0:a0:3b:06:19:d0:7c:c1:7e:08:fc:d8:c4:09:b8:de:61: bc:42:9c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2yjk5VdvtxdaSHyquPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw N2M1NDAwHhcNMjYwMTI1MTIwMTAzWhcNMjYwMTI2MTIwMTAzWjAzMTEwLwYDVQQD Eyg5OThiODVmNTc5ODJiOGI5M2IwNzRjMmVmY2ZkZDQzOTA1YWE2Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+1eXgW+j3zAoKr9k53RuDohq45K 5LuD+0QH9lmn172fM7iF1vgiTmznzml51DaZ0tR1zGRTMRfoFNEen1S/ZVDKkEZQ FGRJjkPhJY1RRVhDcnMtTFW86n8wHjYJuBb60YuIeTFY5UTtdkHSDmMD1eRtJ8rN hvbxFRREhR5O8JBrQOOEM1M+rUy3Q73gy6Ex6YiOu9XXTPYtev5JlBPWM6Mn3bLG U+b3uNgwoLYe5+5LpiKXarq300aG5C/mHKz3OTrBQQhYTp/PqP9rwbVblhMhmPAF 3IOvbAN76j/JtMdqfx9ICxe7AJ3nb3iJjqr3KHPuZZyt7Ucd9pid2SgXWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmLhfV5gri5OwdMLvz91DkFqmz8MB8GA1UdIwQY MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt ZjQ2ZjlkNjc0ZjZjLzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9U9G70E 6s7/yovh06amdRkxK70fgyvCtNmM0fwgxHN3149mHHUyMlLO31b7vAefR03eObzr 9N4qkXPX+Lfo0hxLAdmdeBlAwjZnI1fnFMctxn/a0Btgt7FRhDPrWjy8OtbhlQGd ja81JmmnTLg37jfFFcZVLJUjwtYME4QxBUPOfk3zbXHSIMHQmAUm9wFF2+MZhP5Z K2XE2zgB71bMk//WmegAujaI5RsWOTc2aSRkHvegQJ5+O1fIjcPopybigsMvJDJv FwucWQyPJjCV0nVwHccfV4Oicr1JlPmAd15TnOD0Vrrde9i/SbCgOwYZ0HzBfgj8 2MQJuN5hvEKcNA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:58 2026 by rpki-client