This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json) Hash identifier: 5uisue+CE15OBLKVdEfhzmyLlQGmKIRrsmOcBK4aDfU= Subject key identifier: FB:0E:94:78:8F:2C:DA:48:B8:82:0A:BC:CF:E7:FE:2C:3B:A9:AA:96 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019BF1CF8CB48ADE488B843DE5E981D093D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft Manifest number: 0AB1 Signing time: Sat 24 Jan 2026 21:01:09 +0000 Manifest this update: Sat 24 Jan 2026 21:01:09 +0000 Manifest next update: Sun 25 Jan 2026 21:01:09 +0000 Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: fORCJYPafw/ahx50CjmA4gWDC58tU8i9F1v7n1gs5i4=) 2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=) 3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=) 4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:8c:b4:8a:de:48:8b:84:3d:e5:e9:81:d0:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Jan 24 21:01:09 2026 GMT Not After : Jan 25 21:01:09 2026 GMT Subject: CN=fb0e94788f2cda48b8820abccfe7fe2c3ba9aa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:a4:d2:a9:86:a5:b4:dd:59:a1:77:92:6c: d6:9d:68:12:f6:d4:25:b3:f4:c0:58:aa:f3:8a:9b: 1c:de:08:11:fb:77:b7:9c:36:3a:ac:2a:6c:6a:57: 97:56:0b:89:4f:cf:28:36:d4:b0:72:5f:47:6a:7a: 6a:3c:39:ea:61:11:57:45:df:b4:d9:44:61:8d:7f: ae:6c:1c:a5:39:24:c8:77:a7:cb:dc:2e:1d:cf:4c: 65:5a:5f:51:4b:fa:cd:b2:22:4e:6c:e8:09:a9:4f: a6:32:c4:cf:09:12:b9:b6:3c:3e:da:18:ac:f6:30: db:50:9c:e9:50:2a:8d:74:3e:70:72:05:c9:e5:42: 41:95:b4:22:21:a9:dc:ac:ee:ad:dc:83:a4:24:c8: 98:6b:50:c5:fb:ab:47:ba:f6:42:5e:6e:f9:ac:7a: ac:4e:f0:74:f3:60:08:75:7c:f1:c8:66:e7:82:b3: 0d:01:2a:58:c3:55:9e:0d:3e:49:e3:29:96:e2:b7: c3:d9:9c:a7:66:54:00:a2:ba:8b:5c:d3:70:91:c3: c8:87:f6:95:3f:78:06:95:d8:fd:9f:e0:3d:40:86: e1:cd:ff:7c:ec:28:94:a9:c5:5f:cd:13:ea:3b:c1: 85:0e:df:6b:41:bf:0c:b5:7a:33:13:be:d6:89:7b: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0E:94:78:8F:2C:DA:48:B8:82:0A:BC:CF:E7:FE:2C:3B:A9:AA:96 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:da:4e:67:ed:5b:3f:f4:95:3a:4e:a3:21:a4:94:79:05:e6: c9:1a:7e:75:e8:bf:d1:3f:9d:09:92:84:12:e4:a1:eb:dd:86: ce:90:c8:c9:7c:e6:be:dd:62:cb:3c:9e:fb:a5:8c:93:80:70: 7d:4a:fc:c0:c2:6a:42:fb:22:9f:7e:3d:94:1b:f1:e1:93:c8: f1:38:17:44:b0:d3:4b:b1:15:a8:aa:57:5b:3c:b2:0c:e9:5f: 6b:56:0c:65:16:4b:3f:3c:88:0d:7a:8e:cc:51:53:5a:4c:2a: bc:53:0d:83:43:bb:6c:d8:c6:68:f0:53:b9:42:1a:59:98:64: d5:8c:44:18:74:e8:a5:bc:94:7c:83:2c:2b:4c:f1:f7:85:8c: 82:df:7a:f1:10:9a:c9:18:f5:f0:ed:e9:cd:2e:64:8c:0e:55: 45:18:f3:c9:5a:b7:8a:09:22:f2:5a:bc:a5:d1:c4:75:ac:5c: 12:be:17:49:ab:1e:4f:2b:53:17:27:4d:33:09:a8:60:c9:a6: ed:9d:f8:cc:82:91:09:3e:8f:52:12:f0:0e:f1:a3:72:2d:ea: 9b:5f:43:78:f1:c9:31:9d:18:77:6c:ab:86:82:d8:5f:07:08: 32:2a:3e:39:f3:6b:22:b9:02:9f:53:5c:ec:f7:da:72:15:20: bd:7d:ee:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz4y0it5Ii4Q95emB0JPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjYwMTI0MjEwMTA5WhcNMjYwMTI1MjEwMTA5WjAzMTEwLwYDVQQD EyhmYjBlOTQ3ODhmMmNkYTQ4Yjg4MjBhYmNjZmU3ZmUyYzNiYTlhYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH+k0qmGpbTdWaF3kmzWnWgS9tQl s/TAWKrzipsc3ggR+3e3nDY6rCpsaleXVguJT88oNtSwcl9HanpqPDnqYRFXRd+0 2URhjX+ubBylOSTId6fL3C4dz0xlWl9RS/rNsiJObOgJqU+mMsTPCRK5tjw+2his 9jDbUJzpUCqNdD5wcgXJ5UJBlbQiIancrO6t3IOkJMiYa1DF+6tHuvZCXm75rHqs TvB082AIdXzxyGbngrMNASpYw1WeDT5J4ymW4rfD2ZynZlQAorqLXNNwkcPIh/aV P3gGldj9n+A9QIbhzf987CiUqcVfzRPqO8GFDt9rQb8MtXozE77WiXscVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsOlHiPLNpIuIIKvM/n/iw7qaqWMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9pOZ+1b P/SVOk6jIaSUeQXmyRp+dei/0T+dCZKEEuSh692GzpDIyXzmvt1iyzye+6WMk4Bw fUr8wMJqQvsin349lBvx4ZPI8TgXRLDTS7EVqKpXWzyyDOlfa1YMZRZLPzyIDXqO zFFTWkwqvFMNg0O7bNjGaPBTuUIaWZhk1YxEGHTopbyUfIMsK0zx94WMgt968RCa yRj18O3pzS5kjA5VRRjzyVq3igki8lq8pdHEdaxcEr4XSaseTytTFydNMwmoYMmm 7Z34zIKRCT6PUhLwDvGjci3qm19DePHJMZ0Yd2yrhoLYXwcIMio+OfNrIrkCn1Nc 7PfachUgvX3ubw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:38 2026 by rpki-client