This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json) Hash identifier: PoFLYiM6AmEObjBayeDWnOqBgpXyi6nmPtRFKuh5KTQ= Subject key identifier: 85:F6:94:C4:CA:52:72:76:2D:FF:09:3A:45:B8:96:B7:01:98:DD:56 Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac Certificate serial: 019BF50703766CA1A69D89CAC28F30D04A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 12:00:36 +0000 Manifest this update: Sun 25 Jan 2026 12:00:36 +0000 Manifest next update: Mon 26 Jan 2026 12:00:36 +0000 Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=) 2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: cMLUwZf03VJvGoHk0OsJxbZEBI/hB+OfwPNxLEKsTPs=) 3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:03:76:6c:a1:a6:9d:89:ca:c2:8f:30:d0:4a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac Validity Not Before: Jan 25 12:00:36 2026 GMT Not After : Jan 26 12:00:36 2026 GMT Subject: CN=85f694c4ca5272762dff093a45b896b70198dd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:fe:17:ab:12:dc:e5:70:c3:c8:31:6c:cd: 48:27:35:19:61:3a:d3:eb:fd:00:91:1e:f8:43:16: 18:86:2b:5e:69:b7:0b:43:fa:93:bc:7a:20:e0:d2: fd:9a:3e:78:26:74:49:09:7f:d7:26:68:b3:b7:de: c0:9d:40:fd:4a:8c:04:d5:6d:86:69:77:b1:55:94: 39:b7:fd:a9:25:86:e0:76:19:9a:8e:db:04:65:30: 7f:83:e4:f6:07:e4:65:e7:59:ea:4f:47:ff:ab:d6: fb:e2:d4:fe:33:7b:3d:d6:87:21:7f:96:ce:ec:3a: 02:52:d4:79:21:25:70:07:a7:29:60:33:ab:ab:50: 81:94:3d:37:78:bc:59:d8:af:cd:3f:70:62:31:60: d4:4b:a5:79:e4:8b:9c:43:54:44:45:2c:c0:58:a1: b2:0b:76:5c:65:8f:15:0b:1c:77:6d:cd:24:74:b2: 7f:f1:ea:ce:e3:f6:8f:1c:b0:42:13:0a:77:95:12: 45:c0:5f:c3:89:fb:47:b5:a4:83:17:5e:cb:0b:a9: 40:74:87:3f:12:89:1c:d8:f7:fd:24:67:bf:d9:52: 49:86:2b:cb:f4:d4:cf:0d:7a:fd:14:16:c1:6d:69: 1c:d1:77:47:43:56:12:50:0e:7c:d3:5e:c4:81:1d: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:94:C4:CA:52:72:76:2D:FF:09:3A:45:B8:96:B7:01:98:DD:56 X509v3 Authority Key Identifier: keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:59:72:e0:05:6b:da:be:98:06:92:b7:8a:5a:b2:ba:04:06: 48:d3:d1:13:1a:e2:2e:e4:69:01:88:94:ec:a1:80:da:62:99: 80:58:65:2e:7a:b8:e3:d9:04:b0:35:fc:64:27:e2:b9:4c:cc: f3:ce:3f:28:61:f6:b1:4b:48:a3:ca:59:6e:8e:01:b4:5d:66: 71:4c:a3:49:c4:19:f9:fe:5e:ff:75:a1:0e:57:2e:59:cc:31: f7:53:a2:38:12:49:a9:8b:7d:1f:96:6f:30:6a:ab:13:e7:7e: 27:3f:7a:44:33:b2:d5:63:a6:32:17:ba:0d:2e:d3:a8:a8:6d: c8:82:52:db:7f:74:44:d2:0a:af:69:c8:0e:4d:ee:ee:7b:ab: be:c3:eb:a6:f1:38:0d:ef:c7:da:9b:14:66:c7:82:29:bd:cd: 0f:64:a1:51:b0:30:5d:c3:31:b5:02:84:c5:47:26:eb:46:69: 48:26:24:91:6e:8f:f4:60:97:87:b7:5f:eb:86:5e:d1:bf:9c: bc:37:4e:27:d0:0e:57:26:2f:16:04:ea:17:1d:ec:d8:e2:8f: 78:8a:18:4f:5c:84:f7:51:08:d6:15:70:1b:c9:74:e3:df:16: b8:05:ef:ba:dc:32:1f:b7:52:6e:5b:9e:2f:a5:ec:d0:cb:9e: e1:96:8a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwN2bKGmnYnKwo8w0EoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl ODZhYWMwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD Eyg4NWY2OTRjNGNhNTI3Mjc2MmRmZjA5M2E0NWI4OTZiNzAxOThkZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDz+F6sS3OVww8gxbM1IJzUZYTrT 6/0AkR74QxYYhiteabcLQ/qTvHog4NL9mj54JnRJCX/XJmizt97AnUD9SowE1W2G aXexVZQ5t/2pJYbgdhmajtsEZTB/g+T2B+Rl51nqT0f/q9b74tT+M3s91ochf5bO 7DoCUtR5ISVwB6cpYDOrq1CBlD03eLxZ2K/NP3BiMWDUS6V55IucQ1RERSzAWKGy C3ZcZY8VCxx3bc0kdLJ/8erO4/aPHLBCEwp3lRJFwF/DiftHtaSDF17LC6lAdIc/ Eokc2Pf9JGe/2VJJhivL9NTPDXr9FBbBbWkc0XdHQ1YSUA58017EgR2/zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIX2lMTKUnJ2Lf8JOkW4lrcBmN1WMB8GA1UdIwQY MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFly4AVr 2r6YBpK3ilqyugQGSNPRExriLuRpAYiU7KGA2mKZgFhlLnq449kEsDX8ZCfiuUzM 884/KGH2sUtIo8pZbo4BtF1mcUyjScQZ+f5e/3WhDlcuWcwx91OiOBJJqYt9H5Zv MGqrE+d+Jz96RDOy1WOmMhe6DS7TqKhtyIJS2390RNIKr2nIDk3u7nurvsPrpvE4 De/H2psUZseCKb3ND2ShUbAwXcMxtQKExUcm60ZpSCYkkW6P9GCXh7df64Ze0b+c vDdOJ9AOVyYvFgTqFx3s2OKPeIoYT1yE91EI1hVwG8l0498WuAXvutwyH7dSblue L6Xs0Mue4ZaK4g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:29 2026 by rpki-client