This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json) Hash identifier: a39zHBm+4+X2wSrARvLNElMX6tlacfH4udO+8dFd7Gg= Subject key identifier: EE:60:B2:F2:54:4C:CB:8A:01:D2:14:E1:04:1A:09:E1:F2:81:33:27 Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Certificate serial: 019BF91BCC905E03FE75BB2113127C7396DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft Manifest number: 0A4F Signing time: Mon 26 Jan 2026 07:01:47 +0000 Manifest this update: Mon 26 Jan 2026 07:01:47 +0000 Manifest next update: Tue 27 Jan 2026 07:01:47 +0000 Files and hashes: 1: R1cZjQFvpzSoNjH57RozbKUytBQ.roa (hash: 5gILAzn1X9eg8JIPVx1JXogFciolZAFabqgiEM14sEI=) 2: bYw-qOY-Tl_DEhveCvoMVunD4fY.roa (hash: fvRin3P+GY7qd3E2JNYZzaXL08cwepa5Y3k4CFb6SB4=) 3: sGwYaMG-fGMANWLmphJR-vDIlT8.roa (hash: 4R34todPrry2ZxDJUBpJW6x1mLbY9FyCK7wsgXPjuTo=) 4: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: 9v+jvDiTSZ9g+6bFEddlgDEFkyongmRVbY+eCE2Wmp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:cc:90:5e:03:fe:75:bb:21:13:12:7c:73:96:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b Validity Not Before: Jan 26 07:01:47 2026 GMT Not After : Jan 27 07:01:47 2026 GMT Subject: CN=ee60b2f2544ccb8a01d214e1041a09e1f2813327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:37:2f:18:b0:ff:2d:59:32:f1:f0:7c:da: e4:92:45:f9:2a:26:63:23:2f:e3:d0:b4:60:50:b4: af:d6:fa:b8:14:27:3d:d0:f1:b6:b4:58:a2:d3:eb: 0c:b0:f8:4e:c4:11:d4:b9:b3:e6:bb:31:99:df:ce: 5c:8f:49:37:ca:d2:c0:b5:65:e2:48:42:ca:60:37: c7:a4:ff:49:77:c8:99:c7:27:85:1e:b6:bd:a8:8e: cb:0c:bd:6a:9b:6c:88:30:7e:ef:63:5a:fc:36:28: a9:e9:04:28:90:3a:51:c9:cd:5b:66:12:aa:a3:df: 08:06:77:49:f7:7b:00:2d:3f:dc:67:8a:0b:f6:05: 0d:0c:1c:ab:b5:2d:5c:c3:c9:88:5f:54:66:38:5d: dd:b2:d9:bd:b4:f7:3f:11:ba:61:9e:06:ab:2a:2c: fc:8d:29:f1:a1:dd:d5:c6:f5:46:0f:d7:03:c1:9a: 69:49:8e:d2:d4:6b:8e:34:e5:25:82:14:5a:2c:2b: 40:08:ad:76:5c:db:3a:66:6e:d8:c5:75:b6:8a:10: ac:e9:ee:53:04:a9:c4:87:53:7d:ae:b3:4b:d5:b2: 47:e9:26:d3:cf:13:7e:c7:ed:da:9e:dd:a6:71:50: 6c:55:09:3d:eb:e8:4f:aa:27:20:4a:84:71:bc:48: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:B2:F2:54:4C:CB:8A:01:D2:14:E1:04:1A:09:E1:F2:81:33:27 X509v3 Authority Key Identifier: keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:64:91:50:38:f9:04:34:2f:91:50:c4:09:56:98:4c:cb:87: 73:2f:be:d7:2f:54:85:58:8c:70:e3:e6:6e:e6:e6:1b:fa:55: c2:b6:89:62:f5:cc:a8:75:a2:07:df:ea:7f:d2:38:10:38:33: ba:82:c9:f4:b1:80:f5:21:16:3d:fd:ff:66:16:30:29:87:12: 29:9c:dc:92:8a:71:01:13:db:c2:38:49:55:c2:ba:ff:d4:6a: 2d:ea:c1:04:02:0b:b5:5d:e5:1f:d2:6e:02:43:9b:e8:3b:68: ff:96:68:f5:70:27:78:88:a8:7c:88:e1:a2:f6:0c:7c:21:1c: ea:1f:48:16:42:36:2a:45:ea:8f:3d:23:49:ae:60:40:15:25: 15:4b:9f:0a:62:9a:4f:68:66:ae:4a:fc:b0:96:09:b0:6a:6b: 58:ca:e0:f0:e5:fc:19:1b:7e:3c:1c:1c:12:74:fb:cb:d1:c9: b5:b3:3d:8c:5e:fe:ea:fd:a5:be:23:12:61:76:f5:56:c4:9d: d8:56:3b:ba:58:c0:a0:ca:f7:eb:53:b3:f6:4e:e3:c7:54:99: 5b:17:f3:9b:eb:1c:3e:d0:5b:48:5a:58:36:90:8c:cd:36:0c: 8d:6e:02:8c:76:60:5b:1d:39:66:d7:aa:a4:6a:e6:0a:1e:0f: 71:98:e1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G8yQXgP+dbshExJ8c5beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy ZDBmM2IwHhcNMjYwMTI2MDcwMTQ3WhcNMjYwMTI3MDcwMTQ3WjAzMTEwLwYDVQQD EyhlZTYwYjJmMjU0NGNjYjhhMDFkMjE0ZTEwNDFhMDllMWYyODEzMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOk3Lxiw/y1ZMvHwfNrkkkX5KiZj Iy/j0LRgULSv1vq4FCc90PG2tFii0+sMsPhOxBHUubPmuzGZ385cj0k3ytLAtWXi SELKYDfHpP9Jd8iZxyeFHra9qI7LDL1qm2yIMH7vY1r8Niip6QQokDpRyc1bZhKq o98IBndJ93sALT/cZ4oL9gUNDByrtS1cw8mIX1RmOF3dstm9tPc/EbphngarKiz8 jSnxod3VxvVGD9cDwZppSY7S1GuONOUlghRaLCtACK12XNs6Zm7YxXW2ihCs6e5T BKnEh1N9rrNL1bJH6SbTzxN+x+3ant2mcVBsVQk96+hPqicgSoRxvEjp3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5gsvJUTMuKAdIU4QQaCeHygTMnMB8GA1UdIwQY MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGSRUDj5 BDQvkVDECVaYTMuHcy++1y9UhViMcOPmbubmG/pVwraJYvXMqHWiB9/qf9I4EDgz uoLJ9LGA9SEWPf3/ZhYwKYcSKZzckopxARPbwjhJVcK6/9RqLerBBAILtV3lH9Ju AkOb6Dto/5Zo9XAneIiofIjhovYMfCEc6h9IFkI2KkXqjz0jSa5gQBUlFUufCmKa T2hmrkr8sJYJsGprWMrg8OX8GRt+PBwcEnT7y9HJtbM9jF7+6v2lviMSYXb1VsSd 2FY7uljAoMr361Oz9k7jx1SZWxfzm+scPtBbSFpYNpCMzTYMjW4CjHZgWx05Zteq pGrmCh4PcZjhQw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:30:15 2026 by rpki-client