This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json) Hash identifier: h4jYtjSg55pTPuv+gBeMj0mJsnYyGop1vma822p7YTo= Subject key identifier: 32:73:5E:EF:11:B9:8C:95:06:C7:6A:03:7E:45:D3:72:91:95:B5:32 Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019BF91B0208D16D1BCD4DD27E5E533AEB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft Manifest number: 180C Signing time: Mon 26 Jan 2026 07:00:55 +0000 Manifest this update: Mon 26 Jan 2026 07:00:55 +0000 Manifest next update: Tue 27 Jan 2026 07:00:55 +0000 Files and hashes: 1: 4QGNMsc5EGKo58Zw8Ral2zodI2I.roa (hash: YULKFII3+bo9JTIVj/N+lbxzQak7k1SW83B1ho5/0B8=) 2: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (hash: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI=) 3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: uHLUvzcEh0WlBZ3JD1IWtqPJxr3+L0137qf8vikSoWQ=) 4: iqsTReQX-wslFa4ZJjVVBZ1O16I.roa (hash: HHgLFIJy8JtakXSElLjUicZ/9YwRa/+1lz1+D14ujGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:02:08:d1:6d:1b:cd:4d:d2:7e:5e:53:3a:eb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Jan 26 07:00:55 2026 GMT Not After : Jan 27 07:00:55 2026 GMT Subject: CN=32735eef11b98c9506c76a037e45d3729195b532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:87:02:ab:31:9f:cb:21:72:d1:db:4b:1c: 0e:87:02:2f:66:f4:63:04:26:54:20:e3:c3:76:70: 5b:50:2c:8b:fc:f8:72:29:3d:cd:33:23:14:87:dc: 46:c0:46:95:58:22:db:f8:aa:51:20:89:98:54:69: 04:27:b8:38:d8:1e:e9:f1:24:06:7d:fb:62:68:a8: a9:ea:a5:7f:35:92:3d:07:d2:ed:c7:d8:a5:10:0d: 94:40:3f:82:98:4b:ec:49:fa:fa:8c:d7:a4:a1:a3: 74:c3:92:96:4e:c7:cb:42:3e:63:8e:f0:da:68:89: 69:87:cd:dd:b3:0e:04:e1:a4:a9:a2:c6:20:f2:d0: 72:1d:25:3d:60:b0:1c:e9:e2:dd:6c:fe:d2:6a:78: 4d:55:c0:af:3b:7e:18:da:18:fe:03:1f:db:77:43: d8:b2:c1:a6:35:93:dd:b0:11:95:6f:54:a2:06:e7: 59:c4:87:66:5e:31:c4:28:6d:92:4e:ae:53:63:9d: e6:4a:d5:a5:c4:c5:0e:a2:5b:87:5e:0a:dc:44:c1: 12:a3:20:02:02:51:8e:84:86:73:dc:a3:ce:bd:73: ed:89:59:84:70:1e:a4:47:d3:3a:6b:08:ef:e2:58: 78:43:0e:49:4e:ef:dc:b8:f1:df:b0:bc:46:9f:aa: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:5E:EF:11:B9:8C:95:06:C7:6A:03:7E:45:D3:72:91:95:B5:32 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d4:be:48:40:e5:51:c3:16:09:d4:44:99:03:16:58:2e:62: 4b:94:c4:a3:5b:e2:b7:83:c7:d6:1b:c4:3e:b0:08:40:a8:53: 28:55:ae:e2:41:50:56:11:7d:f3:d2:d8:6a:5f:d2:3d:39:73: 43:05:d4:da:7d:ca:39:e4:47:a8:38:59:d0:20:3e:3f:c6:e9: 6b:d9:1b:dd:d3:7f:6f:60:9e:91:61:09:88:0d:98:8c:bf:9a: 09:b2:2d:18:58:1e:35:59:21:0a:73:f7:75:d8:60:a3:aa:f1: 2a:67:3a:dc:06:37:7d:4e:09:a8:7a:01:40:37:ea:a8:c3:0f: e9:bc:5b:58:5e:62:78:5e:63:f6:22:d8:aa:4f:ea:6b:e1:cc: 86:89:6e:9e:1b:cf:b6:69:c2:0d:f8:2e:60:c6:cf:ad:50:e2: ea:e9:0a:c9:06:00:2f:e2:e0:8c:a8:da:ef:c3:68:54:ac:77: 2d:48:8c:8b:99:cd:8e:54:50:39:27:bd:14:8a:97:46:3b:df: 34:94:77:d9:0c:22:bf:db:69:6c:f1:3a:01:0a:37:66:c2:a9: 54:9b:74:5c:7f:f1:f6:cd:42:51:33:39:c4:67:d8:c7:fd:dd: 5a:7f:07:b2:e3:cd:33:de:e8:7c:d0:20:00:10:86:8d:d1:02: 42:a7:bd:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GwII0W0bzU3Sfl5TOusIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjYwMTI2MDcwMDU1WhcNMjYwMTI3MDcwMDU1WjAzMTEwLwYDVQQD EygzMjczNWVlZjExYjk4Yzk1MDZjNzZhMDM3ZTQ1ZDM3MjkxOTViNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbuHAqsxn8shctHbSxwOhwIvZvRj BCZUIOPDdnBbUCyL/PhyKT3NMyMUh9xGwEaVWCLb+KpRIImYVGkEJ7g42B7p8SQG fftiaKip6qV/NZI9B9Ltx9ilEA2UQD+CmEvsSfr6jNekoaN0w5KWTsfLQj5jjvDa aIlph83dsw4E4aSposYg8tByHSU9YLAc6eLdbP7SanhNVcCvO34Y2hj+Ax/bd0PY ssGmNZPdsBGVb1SiBudZxIdmXjHEKG2STq5TY53mStWlxMUOoluHXgrcRMESoyAC AlGOhIZz3KPOvXPtiVmEcB6kR9M6awjv4lh4Qw5JTu/cuPHfsLxGn6qsywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJzXu8RuYyVBsdqA35F03KRlbUyMB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9S+SEDl UcMWCdREmQMWWC5iS5TEo1vit4PH1hvEPrAIQKhTKFWu4kFQVhF989LYal/SPTlz QwXU2n3KOeRHqDhZ0CA+P8bpa9kb3dN/b2CekWEJiA2YjL+aCbItGFgeNVkhCnP3 ddhgo6rxKmc63AY3fU4JqHoBQDfqqMMP6bxbWF5ieF5j9iLYqk/qa+HMholunhvP tmnCDfguYMbPrVDi6ukKyQYAL+LgjKja78NoVKx3LUiMi5nNjlRQOSe9FIqXRjvf NJR32Qwiv9tpbPE6AQo3ZsKpVJt0XH/x9s1CUTM5xGfYx/3dWn8HsuPNM97ofNAg ABCGjdECQqe9oQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:03 2026 by rpki-client