This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json) Hash identifier: HC8i7trBFnlXkB6f5+/XGcbEKQUrfNpuEgYPAcG/T9c= Subject key identifier: 0A:E3:85:37:DC:12:29:E6:77:51:D0:B3:4F:5F:7E:B1:9B:D2:61:7E Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb Certificate serial: 019BF6F5A1130A775D168B4D2B33983C50FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft Manifest number: 0727 Signing time: Sun 25 Jan 2026 21:00:51 +0000 Manifest this update: Sun 25 Jan 2026 21:00:51 +0000 Manifest next update: Mon 26 Jan 2026 21:00:51 +0000 Files and hashes: 1: 6jji6GeuDi-28zZLjTZ0rqsVQ5g.roa (hash: jhgAVRcRyQTR4kfw/aMMXP8njp+EzzXJbfCtIYZkQOE=) 2: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: 9iC7MSFscTa4A7cwNgi5XwURMHP4GQ1GX9SVzN2iOV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a1:13:0a:77:5d:16:8b:4d:2b:33:98:3c:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb Validity Not Before: Jan 25 21:00:51 2026 GMT Not After : Jan 26 21:00:51 2026 GMT Subject: CN=0ae38537dc1229e67751d0b34f5f7eb19bd2617e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:49:a2:7c:a9:5b:98:c8:f9:12:18:be:b7: b9:d1:d0:a4:e5:af:9f:97:8c:a7:a1:09:46:d9:42: e3:9d:2e:cc:ba:44:86:1a:90:27:98:d5:5c:4d:ef: 66:16:36:80:92:71:2c:1a:22:7e:58:cc:14:ea:49: 84:a5:39:97:85:01:73:5c:5e:4d:76:04:4c:18:b0: f6:bf:b7:19:d5:97:66:cc:ca:3c:e4:0a:58:e6:df: 8e:e5:b5:50:d7:ec:88:30:7f:93:39:61:32:f7:55: 4d:32:07:85:22:fc:35:5c:9e:8f:e9:b7:25:b9:a6: df:f0:ce:0c:15:f7:2d:52:05:67:64:21:4e:33:64: f9:ad:fd:1d:59:8c:4f:f8:18:95:8a:c4:98:3f:c2: e3:3d:7b:db:6f:75:c0:b5:72:c6:97:63:66:17:68: db:c9:a3:23:ae:71:05:36:ab:03:ce:db:06:16:67: 1a:6d:bf:ba:fd:bb:d8:eb:b0:5a:1f:97:c5:44:d2: b5:7c:c8:ec:7b:b7:d0:ba:31:a6:8a:45:2c:c2:c4: 1a:df:94:00:a1:ea:7d:ef:36:ce:81:5d:80:7a:02: 69:46:d6:8d:0e:f9:4f:ff:ed:55:02:de:28:66:dc: b8:77:8d:5e:a2:2b:02:84:2d:13:82:f3:34:13:f1: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:85:37:DC:12:29:E6:77:51:D0:B3:4F:5F:7E:B1:9B:D2:61:7E X509v3 Authority Key Identifier: keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:59:b9:37:20:ef:47:25:f2:ce:73:cd:3f:83:77:28:b2:bb: f4:bf:3e:8c:f9:84:ff:c5:00:6b:ae:4c:cd:9b:5d:f9:1a:56: 70:11:77:fe:93:c1:bb:2a:14:3e:c7:27:25:0f:4a:c5:db:17: 95:a1:5d:e4:27:14:49:5b:82:7b:76:8c:59:a4:c1:dd:a6:a6: 35:b3:b8:59:f1:d0:5b:4d:25:8a:7f:56:c7:08:a8:1d:4d:65: 31:af:c5:c1:dd:c0:b9:02:ba:f4:dc:84:bf:5d:9a:1b:37:86: a9:eb:9b:bf:d1:0f:34:16:a5:e5:80:8b:75:b3:e2:89:3f:73: 87:43:81:ab:17:21:09:23:43:04:8b:44:b3:a8:a8:2c:89:4e: a7:e9:47:27:5f:1a:a7:86:04:a9:57:20:1a:5f:cf:1d:f2:58: df:4e:56:23:d3:2e:e9:23:87:ba:07:a1:2d:7a:ba:d6:36:1d: 36:51:09:a5:35:73:66:b8:e7:63:90:ed:b6:da:2b:4e:fc:a9: 07:a2:aa:1b:62:7e:9f:8e:47:d0:52:a4:c2:0f:14:30:8a:e7: fb:b1:6c:31:8d:d7:b0:dd:71:6a:f2:0c:27:5f:60:b2:23:de: 15:8e:1e:70:f1:ee:a3:ac:68:16:f7:5b:1c:53:0a:2b:a8:f8: 9c:d0:f6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aETCnddFotNKzOYPFD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWNjZWFhOTc0YjI5MDVhY2IyNjJhZjQ1MmMwMjI4MDMx NmFhYmIwHhcNMjYwMTI1MjEwMDUxWhcNMjYwMTI2MjEwMDUxWjAzMTEwLwYDVQQD EygwYWUzODUzN2RjMTIyOWU2Nzc1MWQwYjM0ZjVmN2ViMTliZDI2MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4JJonypW5jI+RIYvre50dCk5a+f l4ynoQlG2ULjnS7MukSGGpAnmNVcTe9mFjaAknEsGiJ+WMwU6kmEpTmXhQFzXF5N dgRMGLD2v7cZ1ZdmzMo85ApY5t+O5bVQ1+yIMH+TOWEy91VNMgeFIvw1XJ6P6bcl uabf8M4MFfctUgVnZCFOM2T5rf0dWYxP+BiVisSYP8LjPXvbb3XAtXLGl2NmF2jb yaMjrnEFNqsDztsGFmcabb+6/bvY67BaH5fFRNK1fMjse7fQujGmikUswsQa35QA oep97zbOgV2AegJpRtaNDvlP/+1VAt4oZty4d41eoisChC0TgvM0E/FxFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArjhTfcEinmd1HQs09ffrGb0mF+MB8GA1UdIwQY MBaAFGtczqqXSykFrLJir0UsAigDFqq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMt OGIwN2FjZDA3Yzk0LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zOWYxZTAtMzYyNy00OTJmLWFlOTMtOGIwN2FjZDA3Yzk0 LzEvYTF6T3FwZExLUVdzc21LdlJTd0NLQU1XcXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVm5NyDv RyXyznPNP4N3KLK79L8+jPmE/8UAa65MzZtd+RpWcBF3/pPBuyoUPscnJQ9KxdsX laFd5CcUSVuCe3aMWaTB3aamNbO4WfHQW00lin9WxwioHU1lMa/Fwd3AuQK69NyE v12aGzeGqeubv9EPNBal5YCLdbPiiT9zh0OBqxchCSNDBItEs6ioLIlOp+lHJ18a p4YEqVcgGl/PHfJY305WI9Mu6SOHugehLXq61jYdNlEJpTVzZrjnY5DtttorTvyp B6KqG2J+n45H0FKkwg8UMIrn+7FsMY3XsN1xavIMJ19gsiPeFY4ecPHuo6xoFvdb HFMKK6j4nND26g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:58 2026 by rpki-client