This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: Bds6ycFX8eZLGR8ZqzoaXUw5tcJYezwuObJTQLc/l8g= Subject key identifier: 61:7A:AC:18:D2:43:D0:AB:5F:2D:ED:78:4B:5E:45:07:DE:D7:1A:70 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019BFCF8769D130EF3F8541585AB9322109D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 1049 Signing time: Tue 27 Jan 2026 01:01:40 +0000 Manifest this update: Tue 27 Jan 2026 01:01:40 +0000 Manifest next update: Wed 28 Jan 2026 01:01:40 +0000 Files and hashes: 1: 1rQSpSq9n0go-1sqt7J-jro-onw.roa (hash: A170zOdDKUFR8OjpxSyTeADzDSsnK0kS+5cwO4467+4=) 2: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (hash: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M=) 3: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (hash: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=) 4: Md6a-KQcbUfuxvWxKDr3cty5184.roa (hash: 0QYUuqR4NLEQ4pSl7SpM+UKRlpQJFGB4BeS1z7xH1dA=) 5: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (hash: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8=) 6: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (hash: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc=) 7: SvwSo6WRjOoGhM5BcNP9E7M7iDQ.roa (hash: 8h6EiTcPQ+f6ADvauTqpBDw5pOHgH7YO/aoHwMnqpio=) 8: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (hash: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE=) 9: W1K4BULbO2S6d1dBbrhnUa5rsZc.roa (hash: etCHZn/KTTLewWLJtVE8dVh2RZR6CliQzpqIzdYsBYc=) 10: euynJTb4DQRxhsqGUuIVKvMePvE.roa (hash: ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=) 11: kjMi6obHpt9UHAnYG2JDcUbRz4I.roa (hash: eeNQkVMpQhVfJx2+o+C0G3gVG9NOsH6OImPcge0a9H8=) 12: ogYawkz_gBDjl6zl_q1fMXZNBvo.roa (hash: x588DAczbjPIl3pK5n5K7VZpFPPA1ral0L6/o6+ORO8=) 13: qBZkx98C2FyrYyHkdEdcNmhea-k.roa (hash: sIVCOdJ2FafZ1gXZEe6wh1i0aQqPT1MJAdBuWY+Cbzc=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: 8PVGlvBGaV879B5GgyA47Al4tW8mJZF/9abUEh+0LRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:76:9d:13:0e:f3:f8:54:15:85:ab:93:22:10:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 27 01:01:40 2026 GMT Not After : Jan 28 01:01:40 2026 GMT Subject: CN=617aac18d243d0ab5f2ded784b5e4507ded71a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:35:63:ed:82:b8:86:01:82:1e:8e:4b:e0: 62:b6:bd:e2:d0:cc:22:07:16:8f:f1:ac:28:f6:2b: 23:e9:bd:9c:75:8a:cb:c4:ad:e2:34:7a:18:b5:12: 09:c4:a4:76:d1:d2:eb:fa:9a:71:3c:ff:7f:8a:ba: fa:01:31:f4:c4:f3:d4:e2:d9:02:89:dc:30:a9:e0: 44:ca:0a:c0:99:3b:8e:bc:f4:4c:13:9b:7c:78:fe: 7e:76:8d:60:7c:c3:c3:54:11:92:9d:ca:cc:f6:0a: 43:b3:1e:ae:40:60:5f:9e:77:5d:df:a0:76:dc:51: 3d:d5:43:b1:b2:86:f4:7d:88:97:91:f2:d8:16:9f: 4b:15:08:1f:2d:51:89:bd:24:d6:c3:65:18:9a:37: 51:f9:b3:2e:ba:0e:3f:67:94:51:45:cf:3e:46:59: e7:82:57:c2:3c:cc:13:d9:a9:10:21:bc:1d:2a:dc: 27:ff:d3:c4:bb:4b:84:e8:be:f0:98:d9:82:2b:ce: a2:16:f7:da:f4:01:59:21:29:f0:c3:72:6e:ec:ff: 28:52:af:6a:46:bb:de:73:91:11:ce:76:47:ce:1d: 81:0d:6d:6c:97:5a:29:02:3a:48:e2:55:28:5f:7f: f4:1c:d2:96:ee:69:1c:56:47:7c:77:57:e0:38:51: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:AC:18:D2:43:D0:AB:5F:2D:ED:78:4B:5E:45:07:DE:D7:1A:70 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e5:23:1c:9e:ca:0a:cc:29:eb:d5:a7:ce:3c:73:3b:c7:36: 99:33:23:61:b9:29:3d:c8:db:18:4f:3b:fa:ae:d2:ad:66:a9: 39:0a:87:e9:e7:fc:a1:6a:8a:e2:7c:bb:6e:b9:4d:82:45:11: 5f:32:91:79:d5:97:4c:f4:f1:9f:30:af:95:d0:b7:41:4a:57: 1c:e1:18:8c:18:2f:44:94:5e:95:e1:0d:e4:cb:70:25:43:b7: c1:d5:45:47:d7:a5:94:54:34:98:55:63:d6:12:05:48:67:9a: 81:37:d4:12:57:f2:9a:d0:91:0b:88:01:ee:c8:ef:d5:7b:a1: 7b:d7:92:93:59:5e:68:b0:78:fd:95:fb:85:b3:0a:88:4e:ff: db:13:46:41:10:3b:09:02:c8:59:e3:ee:d9:9f:3d:55:6c:55: fd:7c:49:d8:56:b5:58:90:be:57:61:1b:8b:1c:07:ff:3d:62: 19:b9:6d:88:0e:41:a5:d9:69:03:74:dc:5a:86:dc:70:fd:3f: b6:53:45:78:3d:47:8d:3c:18:8b:ca:12:90:52:b9:b2:2c:b3: c1:b8:2a:de:70:fb:68:dc:03:0f:26:6c:f4:7a:3c:3f:13:7d: 21:3c:e5:4f:d1:ed:f2:42:21:41:f6:2e:92:fc:84:e3:8f:99: b5:cc:71:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+HadEw7z+FQVhauTIhCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTI3MDEwMTQwWhcNMjYwMTI4MDEwMTQwWjAzMTEwLwYDVQQD Eyg2MTdhYWMxOGQyNDNkMGFiNWYyZGVkNzg0YjVlNDUwN2RlZDcxYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YY1Y+2CuIYBgh6OS+Bitr3i0Mwi BxaP8awo9isj6b2cdYrLxK3iNHoYtRIJxKR20dLr+ppxPP9/irr6ATH0xPPU4tkC idwwqeBEygrAmTuOvPRME5t8eP5+do1gfMPDVBGSncrM9gpDsx6uQGBfnndd36B2 3FE91UOxsob0fYiXkfLYFp9LFQgfLVGJvSTWw2UYmjdR+bMuug4/Z5RRRc8+Rlnn glfCPMwT2akQIbwdKtwn/9PEu0uE6L7wmNmCK86iFvfa9AFZISnww3Ju7P8oUq9q Rrvec5ERznZHzh2BDW1sl1opAjpI4lUoX3/0HNKW7mkcVkd8d1fgOFGXsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF6rBjSQ9CrXy3teEteRQfe1xpwMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+UjHJ7K Cswp69WnzjxzO8c2mTMjYbkpPcjbGE87+q7SrWapOQqH6ef8oWqK4ny7brlNgkUR XzKRedWXTPTxnzCvldC3QUpXHOEYjBgvRJReleEN5MtwJUO3wdVFR9ellFQ0mFVj 1hIFSGeagTfUElfymtCRC4gB7sjv1Xuhe9eSk1leaLB4/ZX7hbMKiE7/2xNGQRA7 CQLIWePu2Z89VWxV/XxJ2Fa1WJC+V2EbixwH/z1iGbltiA5BpdlpA3TcWobccP0/ tlNFeD1HjTwYi8oSkFK5siyzwbgq3nD7aNwDDyZs9Ho8PxN9ITzlT9Ht8kIhQfYu kvyE44+ZtcxxEA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:22 2026 by rpki-client