This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json) Hash identifier: z5dPMiSECcT5y24qBs0GRJvELTtiJ78mFHXdDsXrcpM= Subject key identifier: A8:4F:E7:E9:1C:6A:47:27:83:88:68:F3:85:22:9E:AB:15:29:60:43 Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Certificate serial: 019BDF5BA395DE3C1C0C3B5E0EB5635AAD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft Manifest number: 14EA Signing time: Wed 21 Jan 2026 07:01:23 +0000 Manifest this update: Wed 21 Jan 2026 07:01:23 +0000 Manifest next update: Thu 22 Jan 2026 07:01:23 +0000 Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=) 2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: HXdl0nili/hGAfBqYx8n3s4toburimrdHLjsAzfTTpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:5b:a3:95:de:3c:1c:0c:3b:5e:0e:b5:63:5a:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Validity Not Before: Jan 21 07:01:23 2026 GMT Not After : Jan 22 07:01:23 2026 GMT Subject: CN=a84fe7e91c6a4727838868f385229eab15296043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:74:93:e7:ba:63:a9:dd:c1:89:5f:61:dd: 1a:a7:1d:ba:92:24:0b:f2:91:7b:26:4f:0c:cb:c0: 21:69:6d:dc:40:1d:89:75:96:93:3a:fe:58:b3:5d: d0:06:e6:35:79:aa:48:7a:c2:69:df:c0:3a:cc:f1: bd:f4:c8:9e:c0:ab:a0:fe:57:d0:f9:01:1c:17:85: f5:72:b6:55:44:a1:92:05:55:04:d8:0e:cf:a8:e6: 72:54:06:04:00:ea:97:3f:e3:1f:10:99:66:3b:53: fc:9d:62:0d:a1:4d:5a:f6:57:2d:7f:31:31:a6:05: e3:a0:4e:72:48:b9:06:65:99:78:c6:03:20:2d:e6: f7:00:f0:b2:a9:98:20:69:f1:d5:df:49:eb:da:ac: 64:0d:14:52:97:c2:dd:29:40:7a:43:14:15:5f:21: a9:6c:3c:23:96:48:2d:4b:81:0a:4b:82:34:9a:de: 99:1a:14:f2:f9:7d:19:f2:7e:d2:65:18:ed:b9:a1: cf:9c:7a:9e:38:23:10:da:8a:7e:29:22:95:bc:de: 5e:26:76:90:11:df:3d:c0:59:0a:cb:7c:02:3e:71: bd:5e:33:24:1b:97:62:80:90:c5:f3:b1:45:7c:17: 05:c8:69:2d:14:bb:73:6c:25:50:b4:77:6b:e3:8c: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4F:E7:E9:1C:6A:47:27:83:88:68:F3:85:22:9E:AB:15:29:60:43 X509v3 Authority Key Identifier: keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8d:e4:61:90:e8:fa:fa:89:51:63:95:0c:b3:c3:35:bb:91: 22:f6:6a:ef:42:ff:48:b8:30:9d:1a:a1:fc:e1:8a:b4:d2:4b: b4:e4:00:e5:0c:d5:88:a4:fe:1b:23:1e:c8:1f:8a:4a:2b:72: 6a:6d:bc:98:6e:00:b0:4c:cd:6d:4c:19:7a:a7:26:86:e3:cb: 15:75:94:59:76:4f:89:bf:9d:33:4e:ae:49:90:03:ab:5a:84: c6:66:c0:fe:f0:d2:b2:1f:f8:fa:1d:87:1e:3d:79:39:d6:d8: ea:b1:72:b4:2f:f0:42:55:77:ce:c7:de:89:07:ea:c6:fe:89: fa:d9:b8:f6:9d:c5:fc:59:af:92:0f:21:d7:b0:cb:26:2f:57: 64:83:3d:a7:38:42:f7:04:90:5b:ed:1c:b7:30:3f:a5:66:17: b2:21:1c:b8:36:f8:21:2d:95:b1:58:41:20:98:0a:0d:b1:70: aa:bf:3d:c2:5e:8f:8f:88:b5:dc:dc:7b:24:ac:ac:18:9e:62: 8c:af:1f:01:23:9d:5c:7e:76:89:8c:47:5e:99:45:d4:8a:e0: 9b:21:38:6a:8a:8e:f2:d7:a0:15:53:e7:46:84:33:3d:ba:c0: 6d:91:87:a8:44:a7:5d:c6:0a:ef:aa:39:15:a7:41:75:b1:f7: 93:37:ab:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfW6OV3jwcDDteDrVjWq2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk OGIxOTEwHhcNMjYwMTIxMDcwMTIzWhcNMjYwMTIyMDcwMTIzWjAzMTEwLwYDVQQD EyhhODRmZTdlOTFjNmE0NzI3ODM4ODY4ZjM4NTIyOWVhYjE1Mjk2MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HR0k+e6Y6ndwYlfYd0apx26kiQL 8pF7Jk8My8AhaW3cQB2JdZaTOv5Ys13QBuY1eapIesJp38A6zPG99MiewKug/lfQ +QEcF4X1crZVRKGSBVUE2A7PqOZyVAYEAOqXP+MfEJlmO1P8nWINoU1a9lctfzEx pgXjoE5ySLkGZZl4xgMgLeb3APCyqZggafHV30nr2qxkDRRSl8LdKUB6QxQVXyGp bDwjlkgtS4EKS4I0mt6ZGhTy+X0Z8n7SZRjtuaHPnHqeOCMQ2op+KSKVvN5eJnaQ Ed89wFkKy3wCPnG9XjMkG5digJDF87FFfBcFyGktFLtzbCVQtHdr44wnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhP5+kcakcng4ho84UinqsVKWBDMB8GA1UdIwQY MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY3kYZDo +vqJUWOVDLPDNbuRIvZq70L/SLgwnRqh/OGKtNJLtOQA5QzViKT+GyMeyB+KSity am28mG4AsEzNbUwZeqcmhuPLFXWUWXZPib+dM06uSZADq1qExmbA/vDSsh/4+h2H Hj15OdbY6rFytC/wQlV3zsfeiQfqxv6J+tm49p3F/Fmvkg8h17DLJi9XZIM9pzhC 9wSQW+0ctzA/pWYXsiEcuDb4IS2VsVhBIJgKDbFwqr89wl6Pj4i13Nx7JKysGJ5i jK8fASOdXH52iYxHXplF1IrgmyE4aoqO8tegFVPnRoQzPbrAbZGHqESnXcYK76o5 FadBdbH3kzerqg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:53:52 2026 by rpki-client