This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json) Hash identifier: AnoNkaJQblGAs5bodK7685uQM/2D5Hmwu7CG1m1aHvU= Subject key identifier: C3:C8:14:FA:61:15:5F:6A:02:EF:D6:FE:6B:D9:8D:7E:79:C1:16:02 Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05 Certificate serial: 019BF5E374E8FEA2050BC78FCC3F8AE911CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft Manifest number: 0F9C Signing time: Sun 25 Jan 2026 16:01:23 +0000 Manifest this update: Sun 25 Jan 2026 16:01:23 +0000 Manifest next update: Mon 26 Jan 2026 16:01:23 +0000 Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: pECMEYQLgJsxWyYP/7ZGRpmx2IBNmQDIgPXgqNVEDSg=) 2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:74:e8:fe:a2:05:0b:c7:8f:cc:3f:8a:e9:11:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05 Validity Not Before: Jan 25 16:01:23 2026 GMT Not After : Jan 26 16:01:23 2026 GMT Subject: CN=c3c814fa61155f6a02efd6fe6bd98d7e79c11602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:55:c0:3e:73:e4:2e:93:73:b4:cb:5f:72: 49:68:71:ae:10:9d:46:d8:42:4a:64:7a:a8:a6:97: e7:aa:0c:cf:69:60:62:e6:88:5a:09:43:6b:5d:3e: 83:5c:37:a5:e6:2f:42:96:34:9a:a4:8b:bb:60:72: 3b:c8:e4:b2:75:71:ab:39:dc:de:73:3a:b5:b5:51: b3:fd:70:12:69:8d:c6:dc:ed:88:d0:93:5f:f6:6e: cf:8c:86:36:bd:9e:f9:37:b5:a5:ec:5b:27:26:b3: b2:01:03:e1:d8:8b:f8:13:2f:0f:18:b8:f4:ca:4b: 1d:13:51:6e:a9:66:26:ed:c9:5c:63:6b:ab:43:d5: c3:4d:93:be:ea:91:c4:3e:23:67:fa:7c:48:f6:cc: bf:bc:68:bd:2a:f2:78:a4:6a:ea:c5:16:c6:d6:de: f5:a7:43:a4:a5:ec:6b:a6:98:aa:2c:a7:c4:fa:b0: 47:33:48:8a:32:f7:fe:b2:ac:39:33:c0:97:65:0d: 3a:d9:46:7a:20:45:3c:18:6b:d1:db:d1:4e:9f:0d: df:12:a2:d6:9e:db:98:2b:26:fd:ef:fd:5e:7d:2a: b2:f7:cc:78:14:ea:41:55:72:04:86:ad:d5:c7:f7: 3e:49:05:bb:b7:31:24:fd:a3:00:9d:d0:49:83:ff: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:14:FA:61:15:5F:6A:02:EF:D6:FE:6B:D9:8D:7E:79:C1:16:02 X509v3 Authority Key Identifier: keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:8b:b9:7b:f7:6e:54:c6:2d:f1:4e:7d:05:f2:db:86:cf: fc:d4:b3:a2:e1:df:e6:b5:68:60:2d:88:fa:d3:0d:2c:77:23: a3:49:ea:ec:ad:dd:16:ef:a9:78:a3:8a:70:92:c4:e0:81:41: 3b:25:04:1f:a9:20:e8:6b:e9:3c:fb:a1:af:fd:2d:72:f8:8b: cc:24:39:76:48:a4:cd:b8:e7:ba:8a:9a:52:f4:63:bd:29:38: 84:6a:40:2a:61:b4:04:d8:f2:3b:94:8a:03:7e:92:c0:4a:0e: 9c:10:51:45:79:59:e0:05:04:9c:8f:ea:75:b0:d3:e4:91:4f: 69:4d:a1:8f:2c:8c:6f:06:9d:ff:50:39:59:c8:d2:dd:d3:c5: 32:ef:05:51:ab:4a:ea:0a:8a:55:2c:6c:6d:6e:89:ba:b6:f7: 5f:ff:fd:bc:b9:0d:bd:53:a6:0c:10:d7:22:7a:be:62:0b:45: 29:0a:88:f4:c7:a2:ad:ae:56:f9:6e:60:e1:d4:d4:b9:eb:5e: 48:5b:0d:e8:bb:e4:f9:9e:a4:fe:1a:c5:8d:2b:49:3d:53:04: 70:2b:db:9f:eb:d0:e4:e1:b1:88:7e:df:e4:6a:78:f1:2b:06: f1:88:02:0f:5c:a9:fe:fe:df:d7:dc:ba:9d:d4:be:ab:e3:7a: 32:53:1d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv143To/qIFC8ePzD+K6RHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2Iz MzNhMDUwHhcNMjYwMTI1MTYwMTIzWhcNMjYwMTI2MTYwMTIzWjAzMTEwLwYDVQQD EyhjM2M4MTRmYTYxMTU1ZjZhMDJlZmQ2ZmU2YmQ5OGQ3ZTc5YzExNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9tVwD5z5C6Tc7TLX3JJaHGuEJ1G 2EJKZHqoppfnqgzPaWBi5ohaCUNrXT6DXDel5i9CljSapIu7YHI7yOSydXGrOdze czq1tVGz/XASaY3G3O2I0JNf9m7PjIY2vZ75N7Wl7FsnJrOyAQPh2Iv4Ey8PGLj0 yksdE1FuqWYm7clcY2urQ9XDTZO+6pHEPiNn+nxI9sy/vGi9KvJ4pGrqxRbG1t71 p0OkpexrppiqLKfE+rBHM0iKMvf+sqw5M8CXZQ062UZ6IEU8GGvR29FOnw3fEqLW ntuYKyb97/1efSqy98x4FOpBVXIEhq3Vx/c+SQW7tzEk/aMAndBJg//t7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPIFPphFV9qAu/W/mvZjX55wRYCMB8GA1UdIwQY MBaAFNmWgCnxJAluq5Vd+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMt NmVlYTEyMjA1NzIwLzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIw LzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdeLuXv3 blTGLfFOfQXy24bP/NSzouHf5rVoYC2I+tMNLHcjo0nq7K3dFu+peKOKcJLE4IFB OyUEH6kg6GvpPPuhr/0tcviLzCQ5dkikzbjnuoqaUvRjvSk4hGpAKmG0BNjyO5SK A36SwEoOnBBRRXlZ4AUEnI/qdbDT5JFPaU2hjyyMbwad/1A5WcjS3dPFMu8FUatK 6gqKVSxsbW6Jurb3X//9vLkNvVOmDBDXInq+YgtFKQqI9Meira5W+W5g4dTUuete SFsN6Lvk+Z6k/hrFjStJPVMEcCvbn+vQ5OGxiH7f5Gp48SsG8YgCD1yp/v7f19y6 ndS+q+N6MlMd7A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:06 2026 by rpki-client