This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json) Hash identifier: iey/aBmKVW1Cag2JVdHzv/DiH34QKlwrjddEJVkP9F0= Subject key identifier: A8:E9:EC:B3:DE:3A:31:44:0E:8E:D8:87:7A:04:72:23:82:94:10:CD Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019BF687F8D716AEDFE6165F4F056B7EB385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft Manifest number: 105A Signing time: Sun 25 Jan 2026 19:01:04 +0000 Manifest this update: Sun 25 Jan 2026 19:01:04 +0000 Manifest next update: Mon 26 Jan 2026 19:01:04 +0000 Files and hashes: 1: ABjUtAr6F5T9eON0Qozl-Ssio-4.roa (hash: /+Fm6ag2Bip2wlQrf9R39pMECxtJgKwQlKX+U4z0ou4=) 2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: bB8xChsPPv17Fqv0gvKsl7aWFxU8/XwaiIAJEthtvn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f8:d7:16:ae:df:e6:16:5f:4f:05:6b:7e:b3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Jan 25 19:01:04 2026 GMT Not After : Jan 26 19:01:04 2026 GMT Subject: CN=a8e9ecb3de3a31440e8ed8877a047223829410cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8b:35:81:8f:25:d1:8e:65:52:a6:b9:5b:eb: e8:17:0f:70:4b:c7:b2:61:15:85:43:59:81:30:01: 9d:e3:bb:0f:39:6e:21:be:c9:f8:21:0f:6a:07:99: 29:bd:86:bb:30:f3:ea:72:1d:b9:2e:46:1c:1b:91: 78:b4:27:af:0c:6b:8b:8a:cc:d2:f6:92:87:e5:d6: b1:27:b8:d7:44:34:18:db:c7:24:54:b3:93:18:ec: b1:09:c2:96:e1:15:dc:6d:5b:14:99:ed:f7:66:bd: cb:0f:d2:67:39:a6:f2:81:8c:22:11:02:ac:25:32: a8:aa:f2:93:cc:8a:ff:32:0e:1e:62:ab:03:8b:b0: 52:48:14:4b:9a:d2:fd:ed:79:8c:22:75:a6:bc:72: e4:20:4b:21:d2:48:30:05:7f:29:37:43:99:9a:95: 40:66:ab:a3:51:76:3e:c7:75:35:e1:03:6a:f8:70: 53:fb:f4:c8:e1:00:fa:d6:06:fe:8b:9c:9a:a3:46: 87:ee:fd:a9:48:52:71:8b:74:ee:74:a0:9d:5b:3f: fd:85:5e:a6:30:43:8f:10:a8:03:4d:58:02:30:22: 43:a4:89:25:f9:73:25:8e:8c:32:43:aa:bb:fb:2a: 4d:fb:8e:47:f1:6a:a7:a0:76:c9:de:8d:47:06:14: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E9:EC:B3:DE:3A:31:44:0E:8E:D8:87:7A:04:72:23:82:94:10:CD X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6e:63:f9:46:f1:2f:02:af:d1:7a:97:cd:9e:db:7f:44:f0: 0d:bc:d7:2c:3d:4d:50:31:65:c7:3d:e6:02:19:12:ff:55:4d: ff:7d:79:b8:32:35:ac:f1:c8:91:d9:b9:8e:cf:7a:c8:8b:1a: f9:e8:c0:fd:6b:09:41:bf:eb:a8:fd:1c:52:5c:f6:b7:a4:22: 48:cd:e5:99:6d:25:ca:c7:3e:4b:0c:85:62:01:69:16:43:ea: 71:00:2a:73:43:bb:ff:23:2d:be:f4:2a:d5:83:d3:f1:85:f0: f1:a4:33:b5:56:bb:7c:1d:96:1f:30:3d:b8:e1:b8:57:d0:66: ba:63:05:d9:d5:9e:c1:a9:07:6f:6c:46:e0:de:22:94:77:71: 8a:bf:39:05:12:ed:8c:ee:b3:a5:3d:55:c4:13:13:24:4d:ef: 4f:62:ec:9b:92:4e:73:07:72:91:96:24:a4:fd:b9:6f:e3:fb: 5e:38:90:4f:77:f8:04:ed:5b:a0:53:29:9f:6e:ef:f1:4f:1e: 59:04:e4:d2:47:17:a1:95:97:79:a2:02:b5:51:d5:ab:2d:07: df:bd:89:ae:bd:b8:1d:58:e0:27:e4:44:f0:b4:fa:36:87:d6: f8:6d:26:0c:b9:e4:92:4a:43:06:f5:5a:ac:7d:79:51:98:68: f8:b5:a7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/jXFq7f5hZfTwVrfrOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjYwMTI1MTkwMTA0WhcNMjYwMTI2MTkwMTA0WjAzMTEwLwYDVQQD EyhhOGU5ZWNiM2RlM2EzMTQ0MGU4ZWQ4ODc3YTA0NzIyMzgyOTQxMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIs1gY8l0Y5lUqa5W+voFw9wS8ey YRWFQ1mBMAGd47sPOW4hvsn4IQ9qB5kpvYa7MPPqch25LkYcG5F4tCevDGuLiszS 9pKH5daxJ7jXRDQY28ckVLOTGOyxCcKW4RXcbVsUme33Zr3LD9JnOabygYwiEQKs JTKoqvKTzIr/Mg4eYqsDi7BSSBRLmtL97XmMInWmvHLkIEsh0kgwBX8pN0OZmpVA ZqujUXY+x3U14QNq+HBT+/TI4QD61gb+i5yao0aH7v2pSFJxi3TudKCdWz/9hV6m MEOPEKgDTVgCMCJDpIkl+XMljowyQ6q7+ypN+45H8WqnoHbJ3o1HBhSqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjp7LPeOjFEDo7Yh3oEciOClBDNMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW5j+Ubx LwKv0XqXzZ7bf0TwDbzXLD1NUDFlxz3mAhkS/1VN/315uDI1rPHIkdm5js96yIsa +ejA/WsJQb/rqP0cUlz2t6QiSM3lmW0lysc+SwyFYgFpFkPqcQAqc0O7/yMtvvQq 1YPT8YXw8aQztVa7fB2WHzA9uOG4V9BmumMF2dWewakHb2xG4N4ilHdxir85BRLt jO6zpT1VxBMTJE3vT2Lsm5JOcwdykZYkpP25b+P7XjiQT3f4BO1boFMpn27v8U8e WQTk0kcXoZWXeaICtVHVqy0H372Jrr24HVjgJ+RE8LT6NofW+G0mDLnkkkpDBvVa rH15UZho+LWnOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:55 2026 by rpki-client