This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: TFkRF0IBWJNmyP/xN7VG/GMF0Af4rlTLF++2nWnhQWU= Subject key identifier: E7:27:54:42:B2:AB:B2:E1:DC:2A:60:0F:15:4E:C4:7B:5B:8F:D5:65 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019BF76374FE3039B4D4F93C636E816780AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 17B1 Signing time: Sun 25 Jan 2026 23:00:48 +0000 Manifest this update: Sun 25 Jan 2026 23:00:48 +0000 Manifest next update: Mon 26 Jan 2026 23:00:48 +0000 Files and hashes: 1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=) 2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=) 3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=) 5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=) 6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=) 7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=) 8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=) 9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=) 10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: gKEwXmRsnyKVMI0a5pxIQQV6jWhSoZBsm5L/xkhcX8I=) 11: dbO5CKnLQTTJh3eDR9I8bGXedlY.roa (hash: tPxsmGUbFFDCPaVcd/ukZ/6WBXMPRTeyul9lkIVarMA=) 12: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:74:fe:30:39:b4:d4:f9:3c:63:6e:81:67:80:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jan 25 23:00:48 2026 GMT Not After : Jan 26 23:00:48 2026 GMT Subject: CN=e7275442b2abb2e1dc2a600f154ec47b5b8fd565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:19:63:03:44:d4:03:28:54:13:14:fb:ea: 3c:d7:95:7e:71:23:24:fc:20:00:22:ae:d2:be:58: 90:c6:e3:81:68:26:fb:ae:03:02:e6:6c:f8:37:82: 9c:62:30:66:10:c9:f2:41:8f:3c:f4:9c:04:25:b9: 1f:e1:a3:91:60:c3:2e:8c:a6:af:61:a1:9e:4b:80: d1:f8:cb:e9:7a:87:45:b5:cd:f0:01:be:2e:4c:ec: 4b:b6:29:c7:56:2e:28:b3:ed:8c:30:6c:bd:62:80: 50:5d:04:e9:2b:3b:73:8c:a3:ec:5d:72:c8:09:28: 84:17:59:dc:49:ba:05:90:53:34:89:91:8d:c3:04: c4:54:0c:ed:34:1c:21:fb:86:30:95:b9:4a:20:07: b6:4b:9c:9d:ba:43:30:22:20:9f:c0:f9:5b:02:32: a2:4e:7d:c9:75:0c:e8:a4:53:1b:76:25:82:16:d3: 8e:c4:68:56:ef:57:bd:af:9d:a2:00:f7:8c:89:03: 75:f2:f5:ce:26:2e:bf:cd:1d:ab:c6:ff:d3:49:f0: de:d8:07:66:63:03:46:a1:66:72:9b:35:42:4e:ec: b2:cb:5d:df:e8:2c:5e:ca:50:8b:df:bc:a4:6a:9a: 61:07:0d:ea:34:ae:4c:23:f0:cc:aa:7f:a5:71:86: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:54:42:B2:AB:B2:E1:DC:2A:60:0F:15:4E:C4:7B:5B:8F:D5:65 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:a1:2f:5c:dd:93:af:00:4e:a3:65:6f:9b:12:c9:bf:6b: 88:db:f0:0a:1c:d8:c7:62:e6:9a:53:22:f7:aa:9f:42:5a:60: 97:f7:fc:b7:c3:52:b2:c2:12:43:ce:59:c3:4e:3e:9a:d4:43: 4b:42:d7:5c:34:a7:65:28:de:66:09:a6:e1:a8:4d:76:01:68: 3f:78:2b:2d:9e:4a:c8:f9:1b:13:76:3c:4c:40:60:f4:73:e5: 84:80:ba:16:b3:09:d5:ab:17:4e:be:9f:02:35:f8:df:d9:2d: c2:49:5f:9d:f5:99:1d:67:eb:29:a0:a7:2d:43:2e:72:06:ed: 87:ca:c4:8f:fc:91:da:fc:89:2f:2e:f3:bf:1b:9e:d3:73:5d: 40:8b:d2:47:3e:11:68:37:e8:c1:0f:27:fb:47:b5:3b:90:ad: 4b:7b:ea:e8:bc:c8:4d:cd:7b:b2:32:f8:6f:56:e6:d9:b4:30: 49:ac:48:04:4c:e0:6c:a3:3b:86:33:dd:af:33:e4:b7:17:70: ea:08:30:14:55:d2:83:a4:13:d0:26:69:ac:6b:2d:a1:fd:4f: f6:0b:32:93:b2:c8:7d:ea:c4:1b:d6:82:b3:8e:3b:17:b5:21: 23:3b:96:47:53:f4:cc:4b:52:2b:80:cc:f2:be:a4:13:64:f6: 04:f9:6c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3T+MDm01Pk8Y26BZ4CqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMTI1MjMwMDQ4WhcNMjYwMTI2MjMwMDQ4WjAzMTEwLwYDVQQD EyhlNzI3NTQ0MmIyYWJiMmUxZGMyYTYwMGYxNTRlYzQ3YjViOGZkNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqoZYwNE1AMoVBMU++o815V+cSMk /CAAIq7SvliQxuOBaCb7rgMC5mz4N4KcYjBmEMnyQY889JwEJbkf4aORYMMujKav YaGeS4DR+MvpeodFtc3wAb4uTOxLtinHVi4os+2MMGy9YoBQXQTpKztzjKPsXXLI CSiEF1ncSboFkFM0iZGNwwTEVAztNBwh+4YwlblKIAe2S5ydukMwIiCfwPlbAjKi Tn3JdQzopFMbdiWCFtOOxGhW71e9r52iAPeMiQN18vXOJi6/zR2rxv/TSfDe2Adm YwNGoWZymzVCTuyyy13f6CxeylCL37ykapphBw3qNK5MI/DMqn+lcYZljQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcnVEKyq7Lh3CpgDxVOxHtbj9VlMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxahL1zd k68ATqNlb5sSyb9riNvwChzYx2LmmlMi96qfQlpgl/f8t8NSssISQ85Zw04+mtRD S0LXXDSnZSjeZgmm4ahNdgFoP3grLZ5KyPkbE3Y8TEBg9HPlhIC6FrMJ1asXTr6f AjX439ktwklfnfWZHWfrKaCnLUMucgbth8rEj/yR2vyJLy7zvxue03NdQIvSRz4R aDfowQ8n+0e1O5CtS3vq6LzITc17sjL4b1bm2bQwSaxIBEzgbKM7hjPdrzPktxdw 6ggwFFXSg6QT0CZprGstof1P9gsyk7LIferEG9aCs447F7UhIzuWR1P0zEtSK4DM 8r6kE2T2BPlsig== -----END CERTIFICATE-----Generated at Mon Jan 26 07:13:00 2026 by rpki-client