This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json) Hash identifier: cIb/KiXXm3bE6+Tn3tPeRiyMivOXt1szHSrR+pBFlms= Subject key identifier: BF:D8:13:93:C4:7F:9C:99:FA:55:98:A2:89:F5:FC:5C:9F:A1:B0:FB Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586 Certificate serial: 019BF53E01B4CD7913B7099A142F6AC0C5E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft Manifest number: 0D49 Signing time: Sun 25 Jan 2026 13:00:40 +0000 Manifest this update: Sun 25 Jan 2026 13:00:40 +0000 Manifest next update: Mon 26 Jan 2026 13:00:40 +0000 Files and hashes: 1: PKYw-eZEzQNrOovkMIOID6kPu5g.roa (hash: CAOXiOcVk96zpJFNWaRrMbvyB0Kjprfs/tXqbC7lysk=) 2: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: dWKBhPT0PYLTfL/BtYJkDvLRqVoCk+ghpneiqGJMnEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:01:b4:cd:79:13:b7:09:9a:14:2f:6a:c0:c5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9656d5867b43ce506445290bba705722260586 Validity Not Before: Jan 25 13:00:40 2026 GMT Not After : Jan 26 13:00:40 2026 GMT Subject: CN=bfd81393c47f9c99fa5598a289f5fc5c9fa1b0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:03:51:96:61:d6:23:15:f7:dd:b2:e3:5c:8c: 92:7d:34:ba:b3:4a:b5:68:95:3b:60:2b:b6:7e:ea: 68:7f:f7:62:ea:00:d7:44:15:39:ac:60:ff:63:fc: e5:bc:83:25:bb:ee:c4:90:b7:02:6c:f1:e7:61:f8: 51:7f:6c:ad:dd:d9:f7:de:11:a8:90:ee:43:b9:3f: 03:d3:aa:10:db:5d:b0:f2:8f:03:de:f4:be:0c:9f: 93:00:21:ed:e6:42:c0:f8:c5:24:ba:6a:19:03:b3: c0:b1:31:76:3b:76:d9:88:b8:8c:b4:6e:d0:93:93: 29:d3:7c:27:0b:09:18:68:87:fa:3a:e9:ef:5c:cf: 62:78:5a:4b:7a:3e:f3:46:a2:f3:89:62:16:15:89: 0f:55:ac:5d:96:22:6b:46:7e:03:9a:24:32:59:1d: 12:f8:c6:bd:07:5b:7b:91:c6:00:dc:9a:d4:3a:2e: df:8f:66:74:d3:12:bf:a2:ab:55:86:b6:6a:ca:3c: 02:14:17:3f:80:5e:89:53:0b:a9:38:25:5d:b1:56: d8:15:5a:ca:df:7b:30:02:e9:1a:44:5a:b5:58:73: 9a:88:31:c2:b2:3f:ce:82:bb:35:4b:3d:ba:18:83: 24:67:95:d4:67:5b:5d:c7:ff:fe:d0:4e:54:78:91: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:13:93:C4:7F:9C:99:FA:55:98:A2:89:F5:FC:5C:9F:A1:B0:FB X509v3 Authority Key Identifier: keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4d:e7:2b:9a:56:bd:96:11:80:93:2e:c3:f8:9b:39:e6:35: df:44:82:dd:44:e3:3f:37:2e:85:69:c5:1e:8d:35:de:a7:ac: c4:cb:71:cc:e7:01:8d:0f:54:63:10:18:f7:2d:6b:0e:16:f9: 05:66:6e:a0:82:b5:66:43:16:64:9b:94:bb:b6:9c:a9:c7:a4: 70:df:53:4f:dc:78:1b:e6:1d:96:d4:17:a7:63:c6:ea:5f:cc: 2a:a1:f3:e8:a3:6e:c7:be:f3:67:52:5c:51:0a:e4:b1:f3:d6: ee:76:91:27:33:45:d9:ab:cc:38:2c:13:3b:ff:3a:5e:59:9e: 68:43:97:c3:b6:a6:bb:d3:73:e5:44:14:98:e8:04:01:76:c1: 83:d1:eb:64:eb:83:cd:45:e2:db:a1:c2:76:dd:f5:f8:80:34: 86:0a:d6:49:2e:d3:9a:2e:22:34:44:6d:f3:60:49:c8:17:41: 1e:ef:40:b0:a3:d8:b7:6b:4c:88:fd:56:ee:ce:94:df:73:74: d3:5c:49:8e:ad:a8:3e:9d:2a:35:db:17:fb:d4:2d:14:ba:a1: 86:ea:88:ab:ba:5b:41:1d:e6:23:91:1e:28:27:f1:e7:46:24: 2f:52:cd:fb:11:87:6b:c3:7b:c9:24:a0:9c:8b:35:d3:5e:3a: 5a:19:e2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgG0zXkTtwmaFC9qwMXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTY1NmQ1ODY3YjQzY2U1MDY0NDUyOTBiYmE3MDU3MjIy NjA1ODYwHhcNMjYwMTI1MTMwMDQwWhcNMjYwMTI2MTMwMDQwWjAzMTEwLwYDVQQD EyhiZmQ4MTM5M2M0N2Y5Yzk5ZmE1NTk4YTI4OWY1ZmM1YzlmYTFiMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QNRlmHWIxX33bLjXIySfTS6s0q1 aJU7YCu2fupof/di6gDXRBU5rGD/Y/zlvIMlu+7EkLcCbPHnYfhRf2yt3dn33hGo kO5DuT8D06oQ212w8o8D3vS+DJ+TACHt5kLA+MUkumoZA7PAsTF2O3bZiLiMtG7Q k5Mp03wnCwkYaIf6OunvXM9ieFpLej7zRqLziWIWFYkPVaxdliJrRn4DmiQyWR0S +Ma9B1t7kcYA3JrUOi7fj2Z00xK/oqtVhrZqyjwCFBc/gF6JUwupOCVdsVbYFVrK 33swAukaRFq1WHOaiDHCsj/Ogrs1Sz26GIMkZ5XUZ1tdx//+0E5UeJEiiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/YE5PEf5yZ+lWYoon1/FyfobD7MB8GA1UdIwQY MBaAFH2WVtWGe0POUGRFKQu6cFciJgWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2Qt MGE2YjUzNmM0Mzk0LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2QtMGE2YjUzNmM0Mzk0 LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk3nK5pW vZYRgJMuw/ibOeY130SC3UTjPzcuhWnFHo013qesxMtxzOcBjQ9UYxAY9y1rDhb5 BWZuoIK1ZkMWZJuUu7acqcekcN9TT9x4G+YdltQXp2PG6l/MKqHz6KNux77zZ1Jc UQrksfPW7naRJzNF2avMOCwTO/86XlmeaEOXw7amu9Nz5UQUmOgEAXbBg9HrZOuD zUXi26HCdt31+IA0hgrWSS7Tmi4iNERt82BJyBdBHu9AsKPYt2tMiP1W7s6U33N0 01xJjq2oPp0qNdsX+9QtFLqhhuqIq7pbQR3mI5EeKCfx50YkL1LN+xGHa8N7ySSg nIs10146Whni0A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:36 2026 by rpki-client