This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json) Hash identifier: HPz4G3W5BF++aHJNSS/lSX1o5u6CfkEV5LxwND/6L+0= Subject key identifier: 9C:DC:4E:EE:1C:16:EC:82:89:2A:93:5E:83:CE:09:14:72:A2:E4:B4 Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019BF763741160C1CD9394BFF7A1C4F8BC56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft Manifest number: 1481 Signing time: Sun 25 Jan 2026 23:00:48 +0000 Manifest this update: Sun 25 Jan 2026 23:00:48 +0000 Manifest next update: Mon 26 Jan 2026 23:00:48 +0000 Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=) 2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: 8qLBBO6ryK+qZpkWWPmpkE4p3HY3hLN2gTqBwScxxCc=) 3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=) 4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:74:11:60:c1:cd:93:94:bf:f7:a1:c4:f8:bc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Jan 25 23:00:48 2026 GMT Not After : Jan 26 23:00:48 2026 GMT Subject: CN=9cdc4eee1c16ec82892a935e83ce091472a2e4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:56:a2:c9:b2:76:df:3e:f6:f0:a2:5f:c4: 13:14:88:ea:99:5e:de:e9:2b:a4:a3:58:31:2a:c0: 92:2b:02:f3:6b:d8:c2:ab:53:12:71:cc:71:56:b1: 91:5d:c2:40:2d:05:cc:c7:8a:cf:ad:28:6a:95:86: 00:9c:30:66:d5:34:7b:45:75:69:14:c8:06:e6:8f: d9:57:6e:0f:a5:97:25:bc:07:fc:8b:22:76:4c:33: 5d:d4:dc:29:4f:69:39:fb:2f:5d:9c:d6:43:33:99: cf:dc:a5:7f:f3:3f:3d:2e:b5:88:6c:3a:92:45:10: 0d:e6:a8:4b:b8:37:ef:ae:5f:ae:1f:c6:5e:21:2f: 40:3b:3a:c3:63:a2:67:ed:7b:e0:d5:58:d8:ef:3b: 32:a1:eb:99:5d:89:9c:e5:3c:02:f3:15:5d:20:dc: c8:81:05:1b:7b:8b:f9:92:40:4f:c4:86:ce:c9:de: 13:5d:f0:6f:d0:22:3f:dd:a0:bb:89:c4:57:87:9c: 95:68:91:ee:39:72:d4:58:d5:8e:9d:da:79:0e:40: 62:36:29:31:88:00:5d:71:54:a9:cc:c5:80:14:55: f7:31:24:00:f9:36:fb:f0:92:ed:88:7c:a0:f9:d2: 73:f1:99:9d:89:f7:74:eb:6a:7b:61:bc:52:ff:a7: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DC:4E:EE:1C:16:EC:82:89:2A:93:5E:83:CE:09:14:72:A2:E4:B4 X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2f:aa:e7:aa:19:8b:9b:1c:e2:b8:be:01:7d:83:85:82:21: 67:2f:56:6f:00:10:14:6c:f5:91:db:f4:48:cb:d0:75:e0:07: ad:3c:eb:a9:f6:7a:87:13:56:87:e7:2d:13:8c:a4:ce:f7:fc: 7f:8e:4a:eb:17:b0:d4:f4:bb:b1:66:85:f6:4a:ba:14:1a:b5: fd:f2:e7:69:b3:7b:e7:75:13:51:c4:59:7a:0b:10:91:9e:28: d2:94:3e:03:9e:6f:28:ab:b1:3b:be:10:16:18:f8:0c:bb:fe: b6:48:e1:a9:68:b3:73:b6:91:3c:2a:3e:db:c7:cd:6a:5e:88: 60:d7:7e:22:90:87:16:37:f4:64:2f:b8:7b:cc:d8:a4:a1:26: a6:8d:a3:23:90:07:04:b6:19:56:8a:60:28:44:dc:b5:18:84: bf:ee:98:0c:34:34:3d:20:83:34:fa:86:11:1d:e6:46:e4:70: 1d:ad:76:9b:7e:cd:53:11:56:fd:71:01:b0:8b:5a:3e:ba:31: d2:de:2a:63:d4:9d:cc:f3:67:3b:cf:ab:9c:47:ef:cb:df:c8: ed:07:e9:25:6d:8f:1e:43:63:8d:65:51:74:98:bc:7d:13:2d: ae:48:a0:f6:0b:2e:fa:01:35:3f:d8:f2:af:7a:a7:68:55:f5: 42:49:ae:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3QRYMHNk5S/96HE+LxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjYwMTI1MjMwMDQ4WhcNMjYwMTI2MjMwMDQ4WjAzMTEwLwYDVQQD Eyg5Y2RjNGVlZTFjMTZlYzgyODkyYTkzNWU4M2NlMDkxNDcyYTJlNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBJWosmydt8+9vCiX8QTFIjqmV7e 6Suko1gxKsCSKwLza9jCq1MSccxxVrGRXcJALQXMx4rPrShqlYYAnDBm1TR7RXVp FMgG5o/ZV24PpZclvAf8iyJ2TDNd1NwpT2k5+y9dnNZDM5nP3KV/8z89LrWIbDqS RRAN5qhLuDfvrl+uH8ZeIS9AOzrDY6Jn7Xvg1VjY7zsyoeuZXYmc5TwC8xVdINzI gQUbe4v5kkBPxIbOyd4TXfBv0CI/3aC7icRXh5yVaJHuOXLUWNWOndp5DkBiNikx iABdcVSpzMWAFFX3MSQA+Tb78JLtiHyg+dJz8Zmdifd062p7YbxS/6d4UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzcTu4cFuyCiSqTXoPOCRRyouS0MB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS+q56oZ i5sc4ri+AX2DhYIhZy9WbwAQFGz1kdv0SMvQdeAHrTzrqfZ6hxNWh+ctE4ykzvf8 f45K6xew1PS7sWaF9kq6FBq1/fLnabN753UTUcRZegsQkZ4o0pQ+A55vKKuxO74Q Fhj4DLv+tkjhqWizc7aRPCo+28fNal6IYNd+IpCHFjf0ZC+4e8zYpKEmpo2jI5AH BLYZVopgKETctRiEv+6YDDQ0PSCDNPqGER3mRuRwHa12m37NUxFW/XEBsItaProx 0t4qY9SdzPNnO8+rnEfvy9/I7QfpJW2PHkNjjWVRdJi8fRMtrkig9gsu+gE1P9jy r3qnaFX1Qkmujg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:22 2026 by rpki-client