This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json) Hash identifier: i8DLRO0DAIjPX1kwcBKT0k0Q96GjojIVSG1VSFWwzqA= Subject key identifier: 99:E0:D5:4C:C6:C3:2B:B3:82:CF:F8:51:2E:62:7B:E0:4A:26:D9:60 Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019BF5E399DDD5235ED090FE44D4E8214BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 16:01:32 +0000 Manifest this update: Sun 25 Jan 2026 16:01:32 +0000 Manifest next update: Mon 26 Jan 2026 16:01:32 +0000 Files and hashes: 1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=) 2: F09300GwdMIta1lj7Ul3pmpo6e8.roa (hash: ajcgZbaCsRlZup9MjYbC/n7SyiZtpZ4+r47ylzeWUgk=) 3: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=) 4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=) 5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 7/5WIy8Kk5nkfmt6vyRSyCR60rXN/YKkCTGFWoo2qWM=) 6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:99:dd:d5:23:5e:d0:90:fe:44:d4:e8:21:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Jan 25 16:01:32 2026 GMT Not After : Jan 26 16:01:32 2026 GMT Subject: CN=99e0d54cc6c32bb382cff8512e627be04a26d960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:50:20:c7:4c:ba:20:0d:1b:0a:d1:e5:47: d3:7a:c4:8a:c6:e2:d9:6f:73:68:85:f9:30:4d:eb: 6a:7c:61:6a:f0:ed:15:d5:4a:54:6c:9d:31:96:f7: 66:49:08:cf:9d:20:d3:30:49:c6:fc:8c:a1:43:0d: 9b:59:bc:f4:59:58:b7:bd:44:1a:a6:b6:8f:77:c3: c7:7a:1c:23:1b:27:f6:f9:05:b3:ff:83:d7:c3:62: 71:61:e1:c6:f0:8a:a6:59:e9:98:81:ef:63:98:a2: 3b:aa:59:8b:fe:e1:63:38:6e:4d:30:14:50:7a:41: cd:e2:e6:41:f6:46:bf:67:46:60:88:aa:fd:42:2d: 3a:b2:00:ea:55:88:15:b3:bc:65:e1:91:ca:ff:53: 78:13:8e:34:6a:bf:64:7c:56:59:d7:05:97:13:8b: ba:8e:37:1e:69:f5:6c:54:c2:76:95:93:b9:97:fd: 2e:7f:30:c9:29:b8:ab:5a:1c:6a:85:be:de:df:2b: 99:4f:5f:a1:89:96:07:4b:6b:39:6e:6c:4e:9c:12: 63:02:dc:c8:1d:17:2c:96:58:9a:0c:8f:a6:00:70: 33:8b:c1:70:50:29:47:78:f1:74:22:a1:52:27:8c: d5:44:69:4f:67:18:fc:62:b7:e4:35:d4:4a:dd:f5: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:D5:4C:C6:C3:2B:B3:82:CF:F8:51:2E:62:7B:E0:4A:26:D9:60 X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2c:e2:3b:89:99:27:21:d6:6a:5b:bd:2c:0c:e4:48:35:81: 6c:2b:93:6c:cd:41:de:55:88:7a:f6:d4:d4:7b:24:ed:67:3c: 23:48:c5:97:b0:06:96:89:b9:a0:92:80:a8:69:e6:98:6a:d0: 5a:0b:26:2d:b4:9a:01:ce:95:c7:51:f9:f9:f4:8d:02:60:3c: 13:55:98:e0:ed:a2:dd:c9:79:b9:05:d8:c4:48:f5:33:99:0d: 51:ad:40:0b:02:48:63:5f:4e:ff:89:9e:28:d5:10:34:44:44: 56:6b:84:3b:a4:a9:ea:e2:e4:a1:1d:09:d3:95:07:9c:61:01: 14:4e:db:ad:a4:68:cc:eb:a7:a3:d8:0a:4f:13:db:98:c8:69: a4:3a:42:78:65:8a:59:47:0f:42:4c:e2:e2:96:8a:cf:d8:77: 5b:50:58:96:55:a1:1e:48:c4:33:e9:df:46:9a:18:46:5c:b8: 8e:2e:bf:46:df:53:a3:9f:c3:f3:4c:9e:ec:2d:ed:f3:b2:b4: a7:b5:5d:d1:06:a4:79:7b:66:b4:8a:86:ce:b7:06:ad:04:e2: 5e:fb:07:d0:48:0d:3b:76:52:58:09:16:11:ba:62:5e:bb:c5: 75:a4:27:d1:26:38:4c:5a:3f:0f:18:37:dc:30:56:28:14:f3: 5b:b8:69:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv145nd1SNe0JD+RNToIUv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjYwMTI1MTYwMTMyWhcNMjYwMTI2MTYwMTMyWjAzMTEwLwYDVQQD Eyg5OWUwZDU0Y2M2YzMyYmIzODJjZmY4NTEyZTYyN2JlMDRhMjZkOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxntQIMdMuiANGwrR5UfTesSKxuLZ b3NohfkwTetqfGFq8O0V1UpUbJ0xlvdmSQjPnSDTMEnG/IyhQw2bWbz0WVi3vUQa praPd8PHehwjGyf2+QWz/4PXw2JxYeHG8IqmWemYge9jmKI7qlmL/uFjOG5NMBRQ ekHN4uZB9ka/Z0ZgiKr9Qi06sgDqVYgVs7xl4ZHK/1N4E440ar9kfFZZ1wWXE4u6 jjceafVsVMJ2lZO5l/0ufzDJKbirWhxqhb7e3yuZT1+hiZYHS2s5bmxOnBJjAtzI HRcslliaDI+mAHAzi8FwUClHePF0IqFSJ4zVRGlPZxj8YrfkNdRK3fWxcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJng1UzGwyuzgs/4US5ie+BKJtlgMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCziO4mZ JyHWalu9LAzkSDWBbCuTbM1B3lWIevbU1Hsk7Wc8I0jFl7AGlom5oJKAqGnmmGrQ WgsmLbSaAc6Vx1H5+fSNAmA8E1WY4O2i3cl5uQXYxEj1M5kNUa1ACwJIY19O/4me KNUQNEREVmuEO6Sp6uLkoR0J05UHnGEBFE7braRozOuno9gKTxPbmMhppDpCeGWK WUcPQkzi4paKz9h3W1BYllWhHkjEM+nfRpoYRly4ji6/Rt9To5/D80ye7C3t87K0 p7Vd0QakeXtmtIqGzrcGrQTiXvsH0EgNO3ZSWAkWEbpiXrvFdaQn0SY4TFo/Dxg3 3DBWKBTzW7hp3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:29 2026 by rpki-client