This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json) Hash identifier: 77bG0clXyRC7+iPD1fqKhHIiGtYkriKa/vVNj9mpmYE= Subject key identifier: B9:41:19:CB:40:43:19:9B:D5:37:0F:26:3D:4D:13:71:6F:BB:01:49 Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Certificate serial: 019BFA9C438E57C69BF14CE81D5D25F42E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 14:01:43 +0000 Manifest this update: Mon 26 Jan 2026 14:01:43 +0000 Manifest next update: Tue 27 Jan 2026 14:01:43 +0000 Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=) 2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=) 3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: ukwZZZknwevDNWC7hWCZ2J0YSQpk1cHHCcrHLtfZXnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:43:8e:57:c6:9b:f1:4c:e8:1d:5d:25:f4:2e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Validity Not Before: Jan 26 14:01:43 2026 GMT Not After : Jan 27 14:01:43 2026 GMT Subject: CN=b94119cb4043199bd5370f263d4d13716fbb0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:5b:b0:87:66:df:d3:2e:26:56:ae:09:b1: fd:8f:b4:0e:4b:d3:ef:23:d4:be:72:54:fc:0b:ab: f6:4a:fc:46:dc:f3:90:d6:c0:16:e3:e5:10:1c:32: da:de:70:2b:e8:12:92:f1:fc:52:4e:f5:ad:ea:c1: 64:25:a3:85:9a:86:e2:4e:b0:10:3d:37:81:6b:b5: 2d:0b:51:5e:0d:cf:4e:d5:cf:ea:be:fb:b5:53:21: 76:c1:8f:da:ff:43:3c:43:f7:4e:e1:87:0b:7c:4a: 40:3a:f2:dd:53:5b:bd:f2:ba:9d:ff:b0:c1:3a:b3: 57:6f:ae:8b:2f:2e:74:32:5b:1c:ec:09:8e:a8:c6: 92:95:c7:0e:54:ac:4a:a0:0e:28:6a:7b:ed:6c:48: c9:38:77:2b:1a:f3:80:6e:2e:56:af:db:12:a5:07: e7:9c:99:53:ae:4e:74:63:bc:74:1e:39:f9:dd:3f: 7a:11:2e:86:6b:67:eb:b5:cb:43:3c:5f:a7:dc:72: d0:0e:f3:c8:d3:0c:05:65:d4:7d:02:bf:bb:32:1e: 46:e0:39:04:ec:23:b4:21:ca:b7:01:1b:e5:99:d3: 5a:22:44:d2:92:1d:4c:ec:2e:9b:30:1a:6c:09:68: d1:4d:11:f5:51:d9:2d:3b:0c:e7:76:2a:e6:92:e4: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:19:CB:40:43:19:9B:D5:37:0F:26:3D:4D:13:71:6F:BB:01:49 X509v3 Authority Key Identifier: keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c1:f3:64:4f:b0:a8:45:6a:00:c5:a7:20:3e:47:25:f9:f6: d8:02:9c:9c:c8:1d:c8:91:10:95:ae:d0:22:4a:32:27:6e:3c: 7c:b8:1f:0c:37:99:14:49:de:ff:50:d9:27:e4:af:5a:6c:24: a9:ec:07:b1:8b:03:14:25:66:93:f4:74:63:7e:bf:72:5d:d5: 32:b6:e3:1d:8e:3b:79:57:52:ec:63:dc:91:33:c4:56:22:51: 45:39:27:d5:b7:f3:5b:7c:57:53:b9:6e:9d:13:21:62:9c:b2: ae:23:0f:be:91:2a:20:bd:2d:f7:dd:03:90:6c:67:fd:8c:8d: a3:ce:ad:92:c2:40:49:54:d6:00:6d:4e:34:0a:f9:eb:71:97: 02:e6:61:9a:eb:b4:1b:f1:b8:4e:7e:6d:16:c9:93:62:20:ee: 0a:92:72:1e:da:d4:6e:d7:0f:88:07:5d:25:02:39:c3:2c:1d: 2a:a4:18:7b:fb:f3:00:83:45:32:b6:5d:e9:45:34:a9:de:cc: 9f:5f:29:06:3d:8c:18:20:98:7d:5d:00:69:62:b0:2c:e1:2e: 09:2c:94:64:3c:9f:96:21:54:df:41:4e:15:a8:17:02:e8:70: 25:7f:b9:f0:40:fe:68:63:cf:8c:00:79:7b:fa:07:4a:32:94: 75:4a:80:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nEOOV8ab8UzoHV0l9C5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj MzMyNTAwHhcNMjYwMTI2MTQwMTQzWhcNMjYwMTI3MTQwMTQzWjAzMTEwLwYDVQQD EyhiOTQxMTljYjQwNDMxOTliZDUzNzBmMjYzZDRkMTM3MTZmYmIwMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNpbsIdm39MuJlauCbH9j7QOS9Pv I9S+clT8C6v2SvxG3POQ1sAW4+UQHDLa3nAr6BKS8fxSTvWt6sFkJaOFmobiTrAQ PTeBa7UtC1FeDc9O1c/qvvu1UyF2wY/a/0M8Q/dO4YcLfEpAOvLdU1u98rqd/7DB OrNXb66LLy50Mlsc7AmOqMaSlccOVKxKoA4oanvtbEjJOHcrGvOAbi5Wr9sSpQfn nJlTrk50Y7x0Hjn53T96ES6Ga2frtctDPF+n3HLQDvPI0wwFZdR9Ar+7Mh5G4DkE 7CO0Icq3ARvlmdNaIkTSkh1M7C6bMBpsCWjRTRH1UdktOwzndirmkuQPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlBGctAQxmb1TcPJj1NE3FvuwFJMB8GA1UdIwQY MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct ZTA4YmUwZWRhZjc2LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2 LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMHzZE+w qEVqAMWnID5HJfn22AKcnMgdyJEQla7QIkoyJ248fLgfDDeZFEne/1DZJ+SvWmwk qewHsYsDFCVmk/R0Y36/cl3VMrbjHY47eVdS7GPckTPEViJRRTkn1bfzW3xXU7lu nRMhYpyyriMPvpEqIL0t990DkGxn/YyNo86tksJASVTWAG1ONAr563GXAuZhmuu0 G/G4Tn5tFsmTYiDuCpJyHtrUbtcPiAddJQI5wywdKqQYe/vzAINFMrZd6UU0qd7M n18pBj2MGCCYfV0AaWKwLOEuCSyUZDyfliFU30FOFagXAuhwJX+58ED+aGPPjAB5 e/oHSjKUdUqAfA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:34 2026 by rpki-client