This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json) Hash identifier: 3BcYSGfupEV2mVqlXBe6TawQqU4jC9cTBRaUBecsr2g= Subject key identifier: C3:D0:00:CE:1F:BF:62:80:40:38:4D:EB:45:4D:CE:9B:89:26:96:42 Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019BF6BED4F29E02F74359F3A4439A7B5C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft Manifest number: 1834 Signing time: Sun 25 Jan 2026 20:00:59 +0000 Manifest this update: Sun 25 Jan 2026 20:00:59 +0000 Manifest next update: Mon 26 Jan 2026 20:00:59 +0000 Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=) 2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=) 3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=) 4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: G5N7S4EV55oxLF/UN0XIAqxXMcOiBb5obI971QbVJgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:d4:f2:9e:02:f7:43:59:f3:a4:43:9a:7b:5c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Jan 25 20:00:59 2026 GMT Not After : Jan 26 20:00:59 2026 GMT Subject: CN=c3d000ce1fbf628040384deb454dce9b89269642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:f7:84:7d:cb:a1:93:f5:ed:f1:a3:56:e9: 53:81:48:81:cc:26:31:24:5d:90:7c:06:4e:5c:a4: 6d:e3:0f:ab:0a:c6:b5:84:b3:f5:6a:57:34:ea:83: b5:7d:d2:57:15:26:15:be:59:5c:18:e7:42:b7:29: 97:e2:fc:16:5b:e4:54:e1:a5:78:64:4a:02:a7:5d: ac:98:76:02:ee:dc:65:df:ff:a2:fd:5e:58:48:53: ab:b6:ad:e3:9f:31:27:7b:88:d1:f1:eb:ad:12:cc: 2d:5c:b1:c9:1f:1d:3f:ee:58:6a:58:65:22:96:2e: db:46:8e:10:3f:75:11:d2:7a:1d:81:00:32:7e:73: 86:97:a7:db:f3:d5:31:4f:fc:64:5c:30:bf:8c:9c: 02:b5:f0:a8:35:3a:7d:74:5f:a4:67:ea:12:c9:4d: 0c:2f:bf:cb:a6:78:57:ab:09:41:99:97:36:c7:99: 37:21:cd:22:8e:2b:90:e1:68:3a:f2:d0:c3:77:c1: 2f:0e:88:0d:33:54:a2:0d:87:94:80:29:43:16:48: b7:72:e3:26:7b:d5:49:28:09:48:fd:04:38:1a:3a: 91:84:bc:69:84:e8:dc:fb:49:7f:a9:c9:3a:9d:99: a7:08:63:2f:38:70:45:39:81:c7:a7:a3:29:81:ce: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:00:CE:1F:BF:62:80:40:38:4D:EB:45:4D:CE:9B:89:26:96:42 X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:be:55:30:d0:bb:95:52:e5:09:d8:5d:e9:47:48:2d:ad:1b: c5:58:c5:79:44:09:8e:68:8d:a3:63:e4:03:f5:d2:9e:6f:13: 6f:40:d1:f2:87:52:28:83:57:04:24:57:2d:0e:f4:d7:43:49: 05:44:23:60:55:70:de:19:b4:42:10:ae:63:0d:05:4f:61:ff: 33:12:65:da:52:6e:e4:af:df:6c:f2:0c:c6:9a:29:85:d0:9c: e5:3e:94:22:52:01:1d:94:f5:0a:58:e0:35:08:1f:02:b2:54: 18:84:63:9c:eb:35:0d:3e:c2:c9:75:1c:cf:8a:b8:1a:9f:79: 80:7c:07:d4:95:39:60:89:21:3b:40:53:a7:fc:e5:4f:54:d4: 60:a9:58:08:bc:ce:88:39:c9:19:5d:37:4f:d0:3d:3f:01:74: 02:4a:10:5c:37:5d:e9:54:57:cd:ad:45:37:54:58:b2:d1:ce: 60:4e:f9:33:f1:3f:0d:c3:0c:b4:be:e4:12:88:a2:68:af:1d: 82:98:36:da:8a:c3:3d:8a:4d:b1:33:2c:92:9e:ac:9e:99:f4: 5c:64:f2:dd:b7:bf:26:85:fb:e8:77:10:4e:bf:58:3a:e5:bb: 33:35:01:e5:5a:ae:6e:33:fa:5a:3f:99:61:60:36:01:87:ae: dc:3b:56:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vtTyngL3Q1nzpEOae1x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjYwMTI1MjAwMDU5WhcNMjYwMTI2MjAwMDU5WjAzMTEwLwYDVQQD EyhjM2QwMDBjZTFmYmY2MjgwNDAzODRkZWI0NTRkY2U5Yjg5MjY5NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4j3hH3LoZP17fGjVulTgUiBzCYx JF2QfAZOXKRt4w+rCsa1hLP1alc06oO1fdJXFSYVvllcGOdCtymX4vwWW+RU4aV4 ZEoCp12smHYC7txl3/+i/V5YSFOrtq3jnzEne4jR8eutEswtXLHJHx0/7lhqWGUi li7bRo4QP3UR0nodgQAyfnOGl6fb89UxT/xkXDC/jJwCtfCoNTp9dF+kZ+oSyU0M L7/LpnhXqwlBmZc2x5k3Ic0ijiuQ4Wg68tDDd8EvDogNM1SiDYeUgClDFki3cuMm e9VJKAlI/QQ4GjqRhLxphOjc+0l/qck6nZmnCGMvOHBFOYHHp6Mpgc6AcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPQAM4fv2KAQDhN60VNzpuJJpZCMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB75VMNC7 lVLlCdhd6UdILa0bxVjFeUQJjmiNo2PkA/XSnm8Tb0DR8odSKINXBCRXLQ7010NJ BUQjYFVw3hm0QhCuYw0FT2H/MxJl2lJu5K/fbPIMxpophdCc5T6UIlIBHZT1Cljg NQgfArJUGIRjnOs1DT7CyXUcz4q4Gp95gHwH1JU5YIkhO0BTp/zlT1TUYKlYCLzO iDnJGV03T9A9PwF0AkoQXDdd6VRXza1FN1RYstHOYE75M/E/DcMMtL7kEoiiaK8d gpg22orDPYpNsTMskp6snpn0XGTy3be/JoX76HcQTr9YOuW7MzUB5VqubjP6Wj+Z YWA2AYeu3DtWvw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:22 2026 by rpki-client