This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft File: zB5zEzN12VcrjPylyLXx-7vcm7Y.mft (raw, json) Hash identifier: a+znPw9mtbQpEj8c/lPRel2qR2Ozjkmd41jnyUZSNFk= Subject key identifier: BE:94:5F:EB:28:E8:5A:7C:7B:FE:45:88:1F:62:3A:E1:6E:A0:78:D8 Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Certificate serial: 019BFA64527CB5A1E0D2DA1030C9DDD0AEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft Manifest number: 095B Signing time: Mon 26 Jan 2026 13:00:37 +0000 Manifest this update: Mon 26 Jan 2026 13:00:37 +0000 Manifest next update: Tue 27 Jan 2026 13:00:37 +0000 Files and hashes: 1: VO_sy6lKNExx4MzaK89ZPuk6eio.roa (hash: ECDK2vLnh8ZsV57MTxVkPJ7GlNwC4JIO9uqNonE5Yrs=) 2: zB5zEzN12VcrjPylyLXx-7vcm7Y.crl (hash: DgvldSCoD07iHwX1NWfCf/4n9XC8R8ulBVduOUk/FVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:52:7c:b5:a1:e0:d2:da:10:30:c9:dd:d0:ae:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6 Validity Not Before: Jan 26 13:00:37 2026 GMT Not After : Jan 27 13:00:37 2026 GMT Subject: CN=be945feb28e85a7c7bfe45881f623ae16ea078d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6d:8d:45:ab:ea:ae:eb:0a:6f:d6:03:3a:ea: 05:94:d9:17:0c:c6:ea:4b:87:30:5a:a3:d5:e8:3b: 3f:9a:5f:e4:7a:78:ff:b7:5a:bc:8a:99:f5:cc:35: 06:d2:f2:77:79:4a:b1:a5:2b:84:6a:6e:54:14:76: 52:47:52:e3:7b:00:88:cc:42:9e:50:ce:8c:ab:b5: 31:db:ed:62:13:56:91:83:35:cf:7f:01:48:7e:dd: e7:8b:7e:61:c5:f0:76:2a:95:ae:72:54:3e:9e:3f: 21:cf:7e:32:e8:b5:43:f8:fe:db:03:93:35:5c:9b: 22:80:53:3e:a9:e2:04:bd:60:90:99:c8:d3:8e:2e: d5:0a:3b:58:bb:b7:98:9c:be:9b:7d:64:16:7c:a8: 32:1c:1d:26:a7:65:17:ec:71:c0:d2:48:d6:0c:27: 7c:48:0e:72:b3:96:f8:d1:58:8f:40:d3:1d:38:af: ab:3f:18:70:45:a3:c5:89:95:27:36:e1:36:9a:6a: 9d:6c:e2:5c:19:b3:f3:c1:87:fa:06:6a:cb:f9:b5: 96:39:00:45:03:a0:59:c6:c3:b8:49:ac:c2:6c:ae: c4:e5:4a:7a:78:39:c3:bf:8f:22:54:79:ed:db:60: a7:90:71:02:83:5c:6a:e0:97:11:71:84:f5:45:e7: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:94:5F:EB:28:E8:5A:7C:7B:FE:45:88:1F:62:3A:E1:6E:A0:78:D8 X509v3 Authority Key Identifier: keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2b:ae:d8:25:69:31:59:15:f3:86:96:c5:c0:9a:f2:19:1e: 03:2b:70:24:f0:48:a3:f6:42:9a:9e:4f:6b:f3:e9:43:15:0a: 15:19:36:68:0a:cd:3a:be:dd:5b:4c:c6:82:45:41:89:c3:a7: 11:4e:2a:91:81:e0:66:c8:23:2d:89:08:65:ae:79:10:2c:d9: 66:35:c3:f7:7d:5d:e7:75:10:c3:76:09:f4:de:44:21:81:6e: d8:4d:fd:8f:d1:c9:82:4f:ca:bd:84:db:21:2a:13:bb:d3:6a: 7a:04:44:0c:46:90:e7:c3:48:70:6d:36:b6:a2:4d:5c:71:30: 60:84:6e:51:37:f9:cd:1d:7f:83:0d:91:98:de:cf:53:f5:55: 5b:e6:39:94:4c:c5:fc:a7:91:7b:bb:6c:78:97:4b:da:7d:bd: 73:39:cb:4f:8b:bb:41:72:10:49:72:a8:87:b7:a5:ac:2e:73: a8:fa:cd:df:e5:32:11:2c:06:bb:43:c2:6b:50:94:a7:b2:5f: 31:38:1e:81:73:e1:b0:ab:8b:fc:a4:15:ba:06:fc:d9:c1:96: ae:6c:cf:01:ec:26:38:b9:85:b4:f0:0e:dd:fd:15:71:ff:7e: 4c:99:c1:40:81:f7:a3:9e:c0:47:3b:12:6b:81:bb:fc:c1:9f: da:25:37:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZFJ8taHg0toQMMnd0K7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk YzliYjYwHhcNMjYwMTI2MTMwMDM3WhcNMjYwMTI3MTMwMDM3WjAzMTEwLwYDVQQD EyhiZTk0NWZlYjI4ZTg1YTdjN2JmZTQ1ODgxZjYyM2FlMTZlYTA3OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W2NRavqrusKb9YDOuoFlNkXDMbq S4cwWqPV6Ds/ml/kenj/t1q8ipn1zDUG0vJ3eUqxpSuEam5UFHZSR1LjewCIzEKe UM6Mq7Ux2+1iE1aRgzXPfwFIft3ni35hxfB2KpWuclQ+nj8hz34y6LVD+P7bA5M1 XJsigFM+qeIEvWCQmcjTji7VCjtYu7eYnL6bfWQWfKgyHB0mp2UX7HHA0kjWDCd8 SA5ys5b40ViPQNMdOK+rPxhwRaPFiZUnNuE2mmqdbOJcGbPzwYf6BmrL+bWWOQBF A6BZxsO4SazCbK7E5Up6eDnDv48iVHnt22CnkHECg1xq4JcRcYT1RefwswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6UX+so6Fp8e/5FiB9iOuFuoHjYMB8GA1UdIwQY MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt Mjk4MzhmNGFjNjBlLzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyuu2CVp MVkV84aWxcCa8hkeAytwJPBIo/ZCmp5Pa/PpQxUKFRk2aArNOr7dW0zGgkVBicOn EU4qkYHgZsgjLYkIZa55ECzZZjXD931d53UQw3YJ9N5EIYFu2E39j9HJgk/KvYTb ISoTu9NqegREDEaQ58NIcG02tqJNXHEwYIRuUTf5zR1/gw2RmN7PU/VVW+Y5lEzF /KeRe7tseJdL2n29cznLT4u7QXIQSXKoh7elrC5zqPrN3+UyESwGu0PCa1CUp7Jf MTgegXPhsKuL/KQVugb82cGWrmzPAewmOLmFtPAO3f0Vcf9+TJnBQIH3o57ARzsS a4G7/MGf2iU30A== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:21 2026 by rpki-client